Edit tour

Windows Analysis Report
https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/

Overview

General Information

Sample URL:	https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/
Analysis ID:	1431841
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Executes massive DNS lookups (> 100)

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2024,i,7729929623886751453,8304509775835665209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=jupm4lHzGCVTtIdQIQpvPd%2FdFOroABDbSTViiM8F9lhqmwPm3GeiMCUeAGrzuGS%2B7eRwNbhIgXiBDdzPAcnnfP%2BA6ffS5PIE0jBpTGIxagV7pAUyKkXooZM9JQnAwaWKQAg%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 498Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: Microsoft-Azure-Application-Gateway/v2Date: Thu, 25 Apr 2024 19:25:49 GMTContent-Type: text/htmlContent-Length: 581Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 19:26:05 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 19:26:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 87a0b9347f554533-ATLCF-Cache-Status: DYNAMICCache-Control: no-cache, must-revalidate, max-age=0, no-storeExpires: Wed, 11 Jan 1984 05:00:00 GMTLink: <https://earnandexcel.com/wp-json/>; rel="https://api.w.org/"Vary: Accept-Encoding, sec-ch-ua-mobileaccept-ch: Sec-CH-UA-Mobilecontent-security-policy: block-all-mixed-contentki-cache-type: NoneKi-CF-Cache-Status: BYPASSki-edge: v=20.2.7;mv=3.0.6ki-origin: g1ppragma: no-cacheX-Content-Type-Options: nosniffX-Edge-Location-Klb: 1x-kinsta-cache: BYPASSx-nitro-cache: MISSx-nitro-disabled: 1x-nitro-disabled-reason: 404Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DplyxXRQEuO9UorPB4xDBeumq8KHVhkfldqzP9lQnJqGBx8oN6anr0kCan0cxmK1ncEdiwFwx9081BhJ9Xlizd520kDvxP1L%2Fk%2FLna1bpNs5cNdWvhhZ1D3F3muTyF4uUlI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflarealt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 25 Apr 2024 19:26:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 25 Apr 2024 19:26:35 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 87a0b9604f20677f-ATL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 19:26:27 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 19:26:28 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 19:26:28 GMTContent-Type: text/html; charset=utf-8Content-Length: 150Connection: closeVary: Origin, Accept-EncodingAccess-Control-Allow-Credentials: trueContent-Security-Policy: default-src 'none'X-Content-Type-Options: nosniff

Source: chromecache_515.2.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_571.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_478.2.dr	String found in binary or memory: http://blog.alexmaccaw.com/css-transitions
Source: chromecache_392.2.dr	String found in binary or memory: http://brm.io/jquery-match-height/
Source: chromecache_642.2.dr	String found in binary or memory: http://createjs.com/
Source: chromecache_478.2.dr	String found in binary or memory: http://jamesroberts.name/blog/2010/02/22/string-functions-for-javascript-trim-to-camel-case-to-dashe
Source: chromecache_347.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_759.2.dr, chromecache_651.2.dr, chromecache_816.2.dr, chromecache_571.2.dr, chromecache_610.2.dr, chromecache_770.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_571.2.dr, chromecache_610.2.dr, chromecache_770.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_384.2.dr	String found in binary or memory: http://packery.metafizzy.co
Source: chromecache_469.2.dr	String found in binary or memory: http://sachinchoolur.github.io/lightGallery/
Source: chromecache_384.2.dr	String found in binary or memory: http://stackoverflow.com/a/306332
Source: chromecache_810.2.dr	String found in binary or memory: http://stevenbenner.com/).
Source: chromecache_533.2.dr, chromecache_386.2.dr	String found in binary or memory: http://swiperjs.com
Source: chromecache_771.2.dr, chromecache_690.2.dr, chromecache_618.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_771.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_472.2.dr	String found in binary or memory: http://www.codylindley.com)
Source: chromecache_632.2.dr	String found in binary or memory: http://www.google.com
Source: chromecache_642.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.html
Source: chromecache_472.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_475.2.dr	String found in binary or memory: http://www.smartmenus.org/
Source: chromecache_439.2.dr	String found in binary or memory: http://www.w3schools.com/css/css_syntax.asp
Source: chromecache_439.2.dr	String found in binary or memory: https://147.45.47.87/scripts/theme.js
Source: chromecache_790.2.dr	String found in binary or memory: https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%
Source: chromecache_435.2.dr	String found in binary or memory: https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EA
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_435.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7
Source: chromecache_545.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212314908&puid=08f85459-1b3b-0e42-24ec-8f7be8ecdf61
Source: chromecache_712.2.dr, chromecache_462.2.dr, chromecache_418.2.dr	String found in binary or memory: https://aax-us-east.amazon-adsystem.com
Source: chromecache_565.2.dr	String found in binary or memory: https://acdn.adnxs.com/dmp/async_usersync.html
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_471.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_725.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_596.2.dr	String found in binary or memory: https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCeVUiR64qZt_aLqWKqMwPkZmJ0AmjprHLbIXIn6mtEMCN
Source: chromecache_565.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&
Source: chromecache_385.2.dr, chromecache_406.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_565.2.dr	String found in binary or memory: https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchang
Source: chromecache_664.2.dr, chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr, chromecache_343.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_664.2.dr, chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr, chromecache_343.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_488.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_629.2.dr	String found in binary or memory: https://aorta.clickagy.com/pixel.gif?ch=4&cm=0bf480c2-068d-099d-383b-98b08c184376&redir=https%3A%2F%
Source: chromecache_565.2.dr	String found in binary or memory: https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702
Source: chromecache_680.2.dr, chromecache_523.2.dr	String found in binary or memory: https://api.grow.me
Source: chromecache_439.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_385.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=&gdpr_c
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7/gdpr=0/gdpr_
Source: chromecache_471.2.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode
Source: chromecache_385.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_478.2.dr	String found in binary or memory: https://bit.ly/getsizebug1
Source: chromecache_382.2.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=20909&user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_co
Source: chromecache_545.2.dr	String found in binary or memory: https://bpi.rtactivate.com/tag/?id=50019&user_id=8a559fd8-8b7f-07af-2805-2cf89ad22896
Source: chromecache_478.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=548397
Source: chromecache_385.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=&gdpr_consent=
Source: chromecache_528.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_503.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=22
Source: chromecache_503.2.dr	String found in binary or memory: https://capi.connatix.com/us/pixel?puid=d840c480-fd6b-083c-00bf-a0cdfca12639&pId=8&gdpr=0
Source: chromecache_804.2.dr, chromecache_664.2.dr, chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr, chromecache_343.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_742.2.dr	String found in binary or memory: https://cdn.mediago.io
Source: chromecache_742.2.dr	String found in binary or memory: https://cdn.mediago.io/js/test/empty.js
Source: chromecache_656.2.dr	String found in binary or memory: https://ce.lijit.com/beacon?informer=
Source: chromecache_545.2.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=78946ae7-be43-0fde-0912-b557109b7215&gdpr=0&gdpr_consent=
Source: chromecache_471.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_746.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_hm=OqbkO_di3EqUaXhCJqCf&google_push=AXcoOmRWxGCrYRZ1Lv
Source: chromecache_460.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago
Source: chromecache_385.2.dr, chromecache_406.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyN
Source: chromecache_725.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_725.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MzgxNTY3ZWQtOWQ4MC02Yjc3LTViNGUtNTk0OG
Source: chromecache_521.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=D3tf72mtRsaB8qJg1lHq1w%3D%3
Source: chromecache_521.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_521.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MEY3QjVGRUYtNjlBRC00NkM2LTgxRjItQTI
Source: chromecache_503.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-25CIknq_eSg16.gif?idmatch=0&gdpr=0
Source: chromecache_471.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_664.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_503.2.dr	String found in binary or memory: https://contextual.media.net/cksync.php?type=opx&ovsid=dc56ddb8-fff7-0f33-2de1-7d9fdac5df9b
Source: chromecache_382.2.dr	String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_439.2.dr	String found in binary or memory: https://courses.earnandexcel.com/buy-excel-course-2023
Source: chromecache_471.2.dr	String found in binary or memory: https://crb.kargo.com/api/v1/dsync/Martin?exid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_cons
Source: chromecache_385.2.dr, chromecache_406.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_746.2.dr	String found in binary or memory: https://cs.admanmedia.com/sync/partner?redir=https%3A%2F%2Fsync.inmobi.com%2Fsetuid%3FbidderID%3D149
Source: chromecache_382.2.dr	String found in binary or memory: https://cs.iqzone.com/e6130557b1b000792deef390abb43b4f.gif?puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_746.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=9724&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fsync.inmo
Source: chromecache_415.2.dr, chromecache_654.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_742.2.dr	String found in binary or memory: https://developer.chrome.com/docs/privacy-sandbox/fledge-api/ad-auction/
Source: chromecache_742.2.dr	String found in binary or memory: https://developer.chrome.com/docs/privacy-sandbox/fledge-api/interest-groups/
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_790.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.sm
Source: chromecache_587.2.dr, chromecache_565.2.dr	String found in binary or memory: https://earnandexcel.com
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/#website
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/?s=
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/access-all-courses/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/access-course-2/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/advanced-power-bi/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/analyst-event/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/beginner-to-intermediate-course/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/a-guide-on-how-to-add-scroll-bar-in-excel-to-enhance-data-visualizatio
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/fix-filter-in-excel-not-working-properly/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-add-a-comma-to-every-cell-in-excel-simplifying-data-presentatio
Source: chromecache_768.2.dr, chromecache_593.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-add-a-percentage-increase-in-excel-boost-your-data-analysis-ski
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-change-all-caps-to-lowercase-in-excel-a-step-by-step-guide/
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-clear-data-validation-in-excel-a-comprehensive-guide/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-convert-notepad-to-excel-a-step-by-step-guide/
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-create-a-bubble-chart-in-excel-a-comprehensive-guide/
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-create-a-rule-in-excel-3-hacks-to-creating-rules/
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-create-a-scatter-plot-in-excel-with-2-variables-a-comprehensive
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-create-a-sensitivity-table-in-excel-a-comprehensive-guide/
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-find-the-p-value-in-excel-understanding-p-value/
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-fix-spill-error-in-excel-top-3-hacks-and-why-it-matters/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-hit-enter-in-excel-without-changing-cells/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-make-an-attendance-sheet-in-excel-with-formula-basic-attendance
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-make-every-other-line-shaded-in-excel-a-step-by-step-guide/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/how-to-use-an-if-function-with-3-conditions-in-excel/
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/mastering-data-analysis-how-to-create-a-control-chart-in-excel/
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/mastering-excel-efficiency-how-to-make-arrow-keys-move-cells-in-excel/
Source: chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/mastering-excel-how-to-copy-numbers-in-excel-without-formulas-like-a-p
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/simplifying-work-organization-how-to-create-a-rotating-schedule-in-exc
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/unlocking-excels-power-a-comprehensive-guide-on-how-to-create-a-lookup
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/blog/unlocking-the-power-of-live-excel-sheets-how-to-create-a-live-excel-sh
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/category/blog/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/category/blog/#breadcrumb
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/category/blog/#webpage
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/category/blog/feed/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/category/blog/page/115/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/category/blog/page/2/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/comments/feed/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/accounting/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/career/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/career/?tutor-course-filter-category=16696
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-analysis-bi/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-analysis-bi/?tutor-course-filter-category=16701
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-science/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/data-science/?tutor-course-filter-category=16700
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/digital-marketing/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/digital-marketing/?tutor-course-filter-category=16697
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/microsoft-excel/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/microsoft-excel/?tutor-course-filter-category=16702
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/microsoft-office/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-category/microsoft-office/?tutor-course-filter-category=16699
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/course-list/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/courses/excel-mi-and-dashboards/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/excel-expert-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/excel-tools-and-templates-2/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/excel-vbacourse/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/facebook-ads-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/feed/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/google-analytics-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/introduction-google-ads-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/linkedin-mastery-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/machine-learning-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/marketing-analytics-in-google-data-studio/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/microsoft-excel-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/microsoft-excel-online-courses-classes-training-tutorials-tips-tricks-blog/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/microsoft-onenote-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/microsoft-powerapps/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/outlook-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/pivot-tables-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/power-bi-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/power-pivot-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/power-query-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/powerpoint-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/privacy-policy/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/project-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/python-programming-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/quickbooks-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/quiz-what-are-your-excel-skills-worth/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/rprogramming-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/sharepoint-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/sql-server-course-2/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/success-mindset-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/teams-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/the-analyst-program/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/visio-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/win-your-next-job-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/word-advanced/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/word-course-2/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/cookie-notice/css/front.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/cookie-notice/js/front.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/js/ecs.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.mi
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/css/frontend.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/js/dist/no-campaign.min.js?v=3.25
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/tcb-bridge/assets/css/placeholders.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.m
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/tutor-elementor.mi
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/slick.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor-pro/assets/css/front.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-front.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-icon.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/js/tutor-front.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/plugins/tutor/assets/js/tutor.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall-child/style.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/edumi/font-edumi.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/grid-layout.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/headroom.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/login.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/main.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/nice-select.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/swiper-wrapper.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/js/tutor/general.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/growl/css/jquery.growl.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/growl/js/jquery.growl.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/isotope/js/isotope.pkgd.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/css/lightgallery.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/js/lightgallery-all.min.
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/matchHeight/jquery.matchHeight-min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/packery-mode/packery-mode.pkgd.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.cs
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/perfect-scrollb
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/js/perfect-scrollba
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/polyfill/intersection-observer.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/powertip/js/jquery.powertip.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/smooth-scroll-for-web/SmoothScroll.mi
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/smooth-scroll/jquery.smooth-scroll.mi
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/css/swiper.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/js/swiper.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/assets/libs/validate/jquery.validate.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/style.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/themes/edumall/tutor-lms.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Excel-filter-not-working.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Add-Scroll-Bar-in-Excel.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Add-a-Comma-to-Every-Cell-in-Excel.png
Source: chromecache_768.2.dr, chromecache_593.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Add-a-Legend-in-Excel.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Add-a-Percentage-Increase-in-Excel-.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Change-All-Caps-to-Lowercase-in-Excel-1-480x260.p
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Change-All-Caps-to-Lowercase-in-Excel-1.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Clear-Data-Validation-in-Excel-480x260.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Clear-Data-Validation-in-Excel.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Convert-Notepad-to-Excel.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Copy-Numbers-in-Excel-Without-Formulas-480x260.pn
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Copy-Numbers-in-Excel-Without-Formulas.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-Frequency-Table-in-Excel.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Bubble-Chart-in-Excel-480x260.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Bubble-Chart-in-Excel.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel-480x260.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Control-Chart-in-Excel.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Live-Excel-Sheet.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Lookup-Table-in-Excel.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rotating-Schedule-in-Excel.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rule-in-Excel-480x260.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rule-in-Excel.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Scatter-Plot-in-Excel-with-2-Variables-4
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Scatter-Plot-in-Excel-with-2-Variables.p
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Find-the-P-Value-in-Excel-480x260.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Find-the-P-Value-in-Excel.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Fix-Spill-Error-in-Excel-480x260.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Fix-Spill-Error-in-Excel.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Hit-Enter-in-Excel-Without-Changing-Cells.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Make-Arrow-Keys-Move-Cells-in-Excel.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-480x260.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/How-to-Make-an-Attendance-Sheet-in-Excel-with-Formula.pn
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/QUIZ-PIC-1536x838.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/QUIZ-PIC-2048x1117.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/QUIZ-PIC-480x262.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/QUIZ-PIC-768x419.png
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/Red-Cooking-Tutorial-Youtube-Thumbnail-1.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-180x180.jpg
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-192x192.jpg
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-270x270.jpg
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-32x32.jpg
Source: chromecache_734.2.dr, chromecache_615.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/edumall-shape-01.png
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/global.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/post-27785.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-content/uploads/elementor/css/post-32613.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/css/dist/block-library/style.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/css/dist/block-library/theme.min.css
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/hooks.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/i18n.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-dom-rect.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-element-closest.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-fetch.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-formdata.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-node-contains.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-object-fit.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill-url.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/imagesloaded.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/jquery-migrate.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/jquery.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/jquery.ui.touch-punch.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/core.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/datepicker.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/mouse.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/jquery/ui/sortable.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/js/quicktags.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-includes/wlwmanifest.xml
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-json/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/wp-json/wp/v2/categories/1
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/xero-course/
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.com/xmlrpc.php?rsd
Source: chromecache_439.2.dr	String found in binary or memory: https://earnandexcel.thinkific.com/users/sign_in
Source: chromecache_565.2.dr	String found in binary or memory: https://eb2.3lift.com/getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.co
Source: chromecache_521.2.dr	String found in binary or memory: https://eb2.3lift.com/xuid?mid=7976&xuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&dongle=u6nf&gdpr=0&gdp
Source: chromecache_821.2.dr	String found in binary or memory: https://edumall.thememove.com
Source: chromecache_390.2.dr	String found in binary or memory: https://edumall.thememove.com/
Source: chromecache_827.2.dr	String found in binary or memory: https://esp.rtbhouse.com/encrypt
Source: chromecache_385.2.dr	String found in binary or memory: https://exchange.mediavine.com/usersync/redirect?partner=gumgum&uuid=9c050a90-0339-11ef-8f5d-8719b2a
Source: chromecache_725.2.dr, chromecache_503.2.dr	String found in binary or memory: https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab
Source: chromecache_453.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_453.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_439.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic
Source: chromecache_652.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwaPGR_p.woff2)
Source: chromecache_652.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh50XSwiPGQ.woff2)
Source: chromecache_652.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_652.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_652.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_652.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz4dL_nz.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz8dL_nz.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzAdLw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc-CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc0CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc1CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc2CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc3CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc5CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc6CsQ.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc1CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_736.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_780.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_662.2.dr	String found in binary or memory: https://github.com/kswedberg/jquery-smooth-scroll
Source: chromecache_439.2.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_382.2.dr	String found in binary or memory: https://gocm.c.appier.net/pubmatic
Source: chromecache_343.2.dr	String found in binary or memory: https://google.com
Source: chromecache_343.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_439.2.dr	String found in binary or memory: https://hu-manity.co/
Source: chromecache_545.2.dr	String found in binary or memory: https://i.liadm.com/s/57424?bidder_id=206088&bidder_uuid=14cc68a3-632d-0fa2-0c28-fff7e2bc8ca8
Source: chromecache_521.2.dr	String found in binary or memory: https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7
Source: chromecache_503.2.dr	String found in binary or memory: https://i.w55c.net/ping_match.gif?ei=OPENX&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D5
Source: chromecache_521.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_725.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_545.2.dr	String found in binary or memory: https://id.rlcdn.com/709996.gif
Source: chromecache_545.2.dr	String found in binary or memory: https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=b8d721ad-4c6f
Source: chromecache_528.2.dr	String found in binary or memory: https://idsync.rlcdn.com/420486.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://idsync.rlcdn.com/712188.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_con
Source: chromecache_596.2.dr	String found in binary or memory: https://images.mediago.io/ML/1dc59ba9d9073497010293a464f4ba32__scv1__300x175.png)
Source: chromecache_382.2.dr	String found in binary or memory: https://io.narrative.io/?companyId=673&id=pubmatic_id:0F7B5FEF-69AD-46C6-81F2-A260D651EAD7
Source: chromecache_382.2.dr	String found in binary or memory: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR
Source: chromecache_478.2.dr	String found in binary or memory: https://isotope.metafizzy.co
Source: chromecache_568.2.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_478.2.dr	String found in binary or memory: https://masonry.desandro.com
Source: chromecache_382.2.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_385.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent=
Source: chromecache_521.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_725.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=147ab427-54f7-35d3-4eae-03f1682a4d47&gdpr=0
Source: chromecache_521.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/141?gdpr=0&gdpr_consent=
Source: chromecache_385.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_503.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/ox
Source: chromecache_521.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_382.2.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_439.2.dr	String found in binary or memory: https://nitroscripts.com/pduMCfIcykwhScUJcEDohxbyURefMehM
Source: chromecache_503.2.dr	String found in binary or memory: https://oxp.mxptint.net/OpenX.ashx
Source: chromecache_471.2.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_503.2.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=25&in=1
Source: chromecache_343.2.dr, chromecache_501.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_476.2.dr, chromecache_589.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_690.2.dr, chromecache_618.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_690.2.dr, chromecache_618.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_690.2.dr, chromecache_618.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_618.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_690.2.dr, chromecache_618.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_601.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_589.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_476.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_804.2.dr, chromecache_664.2.dr, chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr, chromecache_343.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_685.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_443.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_589.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_476.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_471.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_629.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0
Source: chromecache_435.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_co
Source: chromecache_629.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=1204c7db-0ff0-0854-044f-
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=0F7B5FEF-69AD-46C6-81F2-
Source: chromecache_382.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=0F7B5FEF-69AD-46C6-81F2-
Source: chromecache_471.2.dr	String found in binary or memory: https://pm.w55c.net/ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=
Source: chromecache_471.2.dr	String found in binary or memory: https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent=
Source: chromecache_385.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=&gdpr_consent=
Source: chromecache_406.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_725.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/80bdd263-c45b-a79a-7f79-1504977d800e?gdpr=0
Source: chromecache_521.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/0F7B5FEF-69AD-46C6-81F2-A260D651EAD7?gdpr=0&gdpr_consent=
Source: chromecache_471.2.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=0F7B5FEF-69AD-
Source: chromecache_382.2.dr	String found in binary or memory: https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN
Source: chromecache_810.2.dr	String found in binary or memory: https://raw.github.com/stevenbenner/jquery-powertip/master/LICENSE.txt
Source: chromecache_790.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%
Source: chromecache_471.2.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncPubMatic&gdpr=0&gdpr_consent=
Source: chromecache_629.2.dr	String found in binary or memory: https://rtb.openx.net/sync/dds
Source: chromecache_746.2.dr	String found in binary or memory: https://s.ad.smaato.net/c/?adExInit=inmobi&gdpr=&gdpr_consent=
Source: chromecache_521.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=0F7B5FEF-69AD-46C6-81F
Source: chromecache_725.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4cacc85a-485d-8e29-8ea
Source: chromecache_406.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/ecm3?ex=gg.com&id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
Source: chromecache_564.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg
Source: chromecache_712.2.dr, chromecache_418.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5
Source: chromecache_664.2.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_654.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.1b7f3d0e.js
Source: chromecache_632.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/studio/cached_libs/createjs_2019.11.15_min.js
Source: chromecache_664.2.dr, chromecache_779.2.dr	String found in binary or memory: https://sc-static.net/scevent.min.js
Source: chromecache_439.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_439.2.dr	String found in binary or memory: https://scripts.mediavine.com/tags/earn-and-excel.js
Source: chromecache_565.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=17404&endpoint=us-east
Source: chromecache_385.2.dr, chromecache_406.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_385.2.dr, chromecache_406.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_439.2.dr	String found in binary or memory: https://secure.gravatar.com/avatar/bb7ce9654cea897a6cafb03144a45ec5?s=256&d=mm&r=g);--tcb-background
Source: chromecache_685.2.dr, chromecache_780.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_439.2.dr	String found in binary or memory: https://slotogate.com/casinos/sloto-stars-casino/
Source: chromecache_680.2.dr, chromecache_523.2.dr	String found in binary or memory: https://some.growplow.events/com.snowplowanalytics.snowplow/tp2
Source: chromecache_385.2.dr, chromecache_406.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_545.2.dr	String found in binary or memory: https://stags.bluekai.com/site/37274?limit=1&id=336eec81-6180-0852-3459-9cd5f37a2df4
Source: chromecache_439.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_488.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_810.2.dr, chromecache_821.2.dr	String found in binary or memory: https://stevenbenner.github.io/jquery-powertip/
Source: chromecache_521.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_725.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3
Source: chromecache_746.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/inmobi&gdpr=&gdpr_consent=
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_746.2.dr	String found in binary or memory: https://sync.adkernel.com/user-sync?zone=147857&t=image&gdpr=&gdpr_consent=&r=https%
Source: chromecache_382.2.dr	String found in binary or memory: https://sync.adkernel.com/user-sync?zone=218872&t=image&r=https://image2.pubmatic.com/AdServer/Pug?v
Source: chromecache_471.2.dr	String found in binary or memory: https://sync.bfmio.com/sync?pid=187&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=
Source: chromecache_565.2.dr	String found in binary or memory: https://sync.colossusssp.com/ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredire
Source: chromecache_382.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_
Source: chromecache_521.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_629.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=
Source: chromecache_385.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmati
Source: chromecache_385.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=
Source: chromecache_471.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&part
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912
Source: chromecache_488.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_804.2.dr, chromecache_664.2.dr, chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr, chromecache_343.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_385.2.dr, chromecache_406.2.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_821.2.dr	String found in binary or memory: https://thememove.com
Source: chromecache_390.2.dr	String found in binary or memory: https://thememove.com/
Source: chromecache_471.2.dr	String found in binary or memory: https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_
Source: chromecache_476.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_476.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_746.2.dr	String found in binary or memory: https://tr.blismedia.com/v1/api/sync/inmobi?gdpr_consent=&gdpr=
Source: chromecache_596.2.dr	String found in binary or memory: https://trace.mediago.io/ju/ic?tn=41b6e88a2b85b0e731ef8e73e5558712&trackingid=8c58b1b530c5cb3796d481
Source: chromecache_742.2.dr	String found in binary or memory: https://trace.mediago.io/ju/log/c
Source: chromecache_565.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc
Source: chromecache_435.2.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=0F7B5FEF-69AD-46C6-81F2-A260D651
Source: chromecache_503.2.dr	String found in binary or memory: https://um.simpli.fi/ox_match
Source: chromecache_382.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_521.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_340.2.dr, chromecache_764.2.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=6
Source: chromecache_521.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&re
Source: chromecache_725.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=3abe37ae-8c9d-0f9a-1d89-c2fbff89b92e
Source: chromecache_768.2.dr, chromecache_593.2.dr	String found in binary or memory: https://urls.grow.me/xrudCrh_Pq
Source: chromecache_385.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_725.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_471.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/sd?id=540245193&val=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_co
Source: chromecache_521.2.dr	String found in binary or memory: https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4B
Source: chromecache_790.2.dr	String found in binary or memory: https://visitor.omnitagjs.com/visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&
Source: chromecache_482.2.dr	String found in binary or memory: https://widget.wickedreports.com/widget.js
Source: chromecache_799.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_737.2.dr	String found in binary or memory: https://www.dudaster.com
Source: chromecache_821.2.dr	String found in binary or memory: https://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_439.2.dr, chromecache_664.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_488.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_488.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_488.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_343.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_488.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_514.2.dr, chromecache_585.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/416707819/?random
Source: chromecache_476.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_343.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_690.2.dr, chromecache_618.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_804.2.dr, chromecache_664.2.dr, chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr, chromecache_343.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_488.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_439.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-37L88V1J5W
Source: chromecache_439.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-NLTTYMX3TH
Source: chromecache_439.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_439.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5QW6V5F
Source: chromecache_439.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WP3CMPSG
Source: chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_427.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_827.2.dr	String found in binary or memory: https://www.rtbhouse.com/
Source: chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_565.2.dr	String found in binary or memory: https://x.bidswitch.net/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpart
Source: chromecache_746.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=aerserv&user_id=ID5-248f60d7-849a-4217-8f5e-76a1bd238764&gd
Source: chromecache_385.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=&gdpr_c
Source: chromecache_406.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=0&gdpr_
Source: chromecache_503.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=openx
Source: chromecache_471.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY
Source: chromecache_565.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=9c050a90-
Source: chromecache_439.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 51376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 50656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 51327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 51303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 51339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 51119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112

Source: unknown	HTTPS traffic detected: 23.54.200.130:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.130:443 -> 192.168.2.5:49737 version: TLS 1.2

Source: classification engine

Classification label: sus21.troj.win@88/861@648/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2024,i,7729929623886751453,8304509775835665209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2024,i,7729929623886751453,8304509775835665209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://oa.openxcdn.net/esp.js	0%	URL Reputation	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://pixel.onaudience.com/?partner=214&mapped=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://earnandexcel.com/blog/how-to-use-an-if-function-with-3-conditions-in-excel/	0%	Avira URL Cloud	safe
https://earnandexcel.com/course-category/career/	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?ssp=sekindo&r=https%3A%2F%2Fsync.intentiq.com%2Fprofiles_engine%2FProfilesEngineServlet%3Fat%3D20%26dpi%3D1267919208%26mi%3D10%26csh%3D793790479%3B1709765917%26rnd%3D1674561391%26pcid%3D	0%	Avira URL Cloud	safe
https://earnandexcel.com/category/blog/page/2/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js	0%	Avira URL Cloud	safe
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=1402230080&mi=10&csh=793790479&rnd=591334041&pcid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	0%	Avira URL Cloud	safe
https://earnandexcel.com/blog/how-to-clear-data-validation-in-excel-a-comprehensive-guide/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.cs	0%	Avira URL Cloud	safe
https://earnandexcel.com/blog/how-to-clear-data-validation-in-excel-a-comprehensive-guide/	0%	Virustotal		Browse
https://earnandexcel.com/course-category/career/	0%	Virustotal		Browse
https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.cs	0%	Virustotal		Browse
https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js	0%	Virustotal		Browse
https://earnandexcel.com/wp-includes/js/tinymce/plugins/compat3x/plugin.min.js	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js	0%	Virustotal		Browse
https://earnandexcel.com/blog/how-to-add-a-comma-to-every-cell-in-excel-simplifying-data-presentatio	0%	Avira URL Cloud	safe
https://earnandexcel.com/blog/how-to-find-the-p-value-in-excel-understanding-p-value/	0%	Avira URL Cloud	safe
https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698	0%	Avira URL Cloud	safe
https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698	0%	Virustotal		Browse
https://earnandexcel.com/power-pivot-course/	0%	Avira URL Cloud	safe
https://prebid.a-mo.net/setuid/magnite?uid=LVFMWCG3-S-CYEQ	0%	Avira URL Cloud	safe
https://earnandexcel.com/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://earnandexcel.com/the-analyst-program/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/uploads/How-to-Fix-Spill-Error-in-Excel-240x142.png	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-includes/js/shortcode.min.js	0%	Avira URL Cloud	safe
https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=5382283141381983659&gdpr=0&gdpr_consent=&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AABL7E7MVVwAABRpRLTzpA&pid=558502&do=add&gdpr=0	0%	Avira URL Cloud	safe
https://earnandexcel.com/the-analyst-program/	0%	Virustotal		Browse
https://earnandexcel.com/xmlrpc.php?rsd	0%	Virustotal		Browse
https://earnandexcel.com/wp-content/uploads/How-to-Fix-Spill-Error-in-Excel-240x142.png	1%	Virustotal		Browse
https://earnandexcel.com/blog/how-to-find-the-p-value-in-excel-understanding-p-value/	0%	Virustotal		Browse
https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rotating-Schedule-in-Excel.png	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?dsp_id=452&ssp=themediagrid&user_id=	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css	0%	Avira URL Cloud	safe
https://ums.acuityplatform.com/tum?umid=27&uid=IjUNALZH0EzpouOqQka7fQWl&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=&gdpr_c	0%	Avira URL Cloud	safe
https://earnandexcel.com/#website	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css	0%	Virustotal		Browse
https://earnandexcel.com/#website	1%	Virustotal		Browse
https://earnandexcel.com/power-pivot-course/	0%	Virustotal		Browse
https://x.bidswitch.net/sync?dsp_id=452&ssp=themediagrid&user_id=	1%	Virustotal		Browse
https://earnandexcel.com/machine-learning-course/	0%	Avira URL Cloud	safe
https://earnandexcel.com/course-category/microsoft-excel/?tutor-course-filter-category=16702	0%	Avira URL Cloud	safe
https://earnandexcel.com/feed/	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-includes/css/buttons.min.css	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css	0%	Avira URL Cloud	safe
https://earnandexcel.com/course-category/microsoft-excel/?tutor-course-filter-category=16702	0%	Virustotal		Browse
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LVFMWCG3-S-CYEQ	0%	Avira URL Cloud	safe
https://earnandexcel.com/feed/	0%	Virustotal		Browse
https://earnandexcel.com/wp-includes/css/buttons.min.css	0%	Virustotal		Browse
https://earnandexcel.com/wp-content/uploads/How-to-Copy-Numbers-in-Excel-Without-Formulas-480x260.pn	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-includes/js/dist/hooks.min.js	0%	Avira URL Cloud	safe
https://pixel.onaudience.com/?partner=104&icm&cver&mapped=6efb576f370522a24883b5b8d45a1e39&gdpr=0	0%	Avira URL Cloud	safe
https://earnandexcel.com/machine-learning-course/	0%	Virustotal		Browse
https://earnandexcel.com/wp-includes/js/shortcode.min.js	0%	Virustotal		Browse
https://vc.hotjar.io/sessions/2832943?s=0.25&r=0.06561110012468774	0%	Avira URL Cloud	safe
https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EA	0%	Avira URL Cloud	safe
https://earnandexcel.com/wp-includes/js/dist/hooks.min.js	0%	Virustotal		Browse
https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	34.150.170.96	true	false	high
rtb-csync-use1.smartadserver.com	216.22.16.8	true	false	high
e.chicoryapp.com	34.36.130.12	true	false	unknown
ny5-prebid.a-mx.net	147.75.198.144	true	false	unknown
global.px.quantserve.com	192.184.67.70	true	false	high
us-east-eb2.3lift.com	35.71.139.29	true	false	high
metrics.getrockerbox.com	104.26.8.177	true	false	unknown
live.rezync.com	3.161.136.103	true	false	high
rtb.openx.net	35.186.253.211	true	false	high
1.cpm.ak-is2.net	174.137.133.32	true	false	unknown
stats.g.doubleclick.net	172.217.215.155	true	false	high
cdn.w55c.net	54.166.33.239	true	false	high
serve-va.acuityplatform.com	69.90.254.72	true	false	unknown
pandg.tapad.com	34.102.243.38	true	false	high
crb.kargo.com	44.196.185.99	true	false	high
us-east-tlx.3lift.com	3.226.121.246	true	false	high
mwzeom.zeotap.com	104.22.50.98	true	false	high
lga-direct-bgp.contextweb.com	198.148.27.131	true	false	high
www.google.com	64.233.185.106	true	false	high
sync.intentiq.com	3.163.101.59	true	false	unknown
static.us5.vip.prod.criteo.net	74.119.117.4	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
dta23xhexutk5.cloudfront.net	108.139.15.100	true	false	high
idaas6.cph.liveintent.com	34.193.32.57	true	false	high
bcp.crwdcntrl.net	52.20.151.97	true	false	high
sync1.intentiq.com	18.160.18.79	true	false	unknown
match.adsrvr.org	35.71.131.137	true	false	high
router.infolinks.com	172.66.41.9	true	false	high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	54.242.78.179	true	false	high
match.prod.bidr.io	54.147.231.117	true	false	unknown
chidc2.outbrain.org	64.74.236.31	true	false	unknown
creativecdn.com	185.184.8.90	true	false	high
pagead-googlehosted.l.google.com	173.194.219.132	true	false	high
www.gravatar.com	192.0.73.2	true	false	high
m.deepintent.com	8.18.47.7	true	false	unknown
events-ssc.33across.com	34.117.239.71	true	false	high
esp.rtbhouse.com	35.190.39.111	true	false	high
nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com	34.235.38.62	true	false	high
pixel-sync.sitescout.com	34.36.216.150	true	false	high
pixel.onaudience.com	141.94.170.77	true	false	unknown
d1ykf07e75w7ss.cloudfront.net	18.160.83.5	true	false	high
gtrace.mediago.io	35.208.249.213	true	false	unknown
to.getnitropack.com	172.64.150.163	true	false	unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false	high
oajs.openx.net	34.120.135.53	true	false	high
oxp.mxptint.net	165.254.203.172	true	false	unknown
googleads.g.doubleclick.net	172.253.124.157	true	false	high
dualstack.pinterest.map.fastly.net	151.101.12.84	true	false	unknown
exchange.journeymv.com	34.204.143.41	true	false	unknown
match-us-east-1-ecs.sharethrough.com	44.209.20.160	true	false	high
config.aps.amazon-adsystem.com	13.33.4.68	true	false	high
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	high
rtb.adstanding.com	3.213.119.72	true	false	unknown
hb.yahoo.net	96.7.224.83	true	false	high
cdn.acuityplatform.com	69.90.254.75	true	false	unknown
sda.fyi	172.67.164.44	true	false	unknown
oa.openxcdn.net	34.102.146.192	true	false	unknown
pdmp.dcapi.dmp.3lift.com	3.218.216.11	true	false	high
de.tynt.com	67.202.105.33	true	false	high
spug-nje1pb.pubmnet.com	207.65.37.182	true	false	unknown
gum.da1.vip.prod.criteo.com	74.119.118.149	true	false	high
hde.tynt.com	67.202.105.31	true	false	high
pghub.io	35.241.45.217	true	false	unknown
contextual.media.net	23.54.200.27	true	false	high
core.iprom.net	195.5.165.20	true	false	unknown
scontent.xx.fbcdn.net	31.13.88.13	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
script.hotjar.com	18.64.236.18	true	false	high
presentation-iad1.turn.com	69.194.242.12	true	false	high
some.growplow.events	172.67.175.48	true	false	unknown
api.rlcdn.com	34.107.165.188	true	false	high
earnandexcel.com	162.159.135.42	true	false	unknown
rtb.adentifi.com	3.214.176.164	true	false	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	unknown
sync.srv.stackadapt.com	54.211.105.244	true	false	high
synchroscript.deliveryengine.adswizz.com	18.160.10.47	true	false	high
nitroscripts.com	172.64.154.248	true	false	unknown
thrtle.com	34.225.69.173	true	false	unknown
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.21.82.215	true	false	high
pugm-nje1.pubmnet.com	207.65.37.181	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
pippio.com	107.178.254.65	true	false	high
sync.ipredictive.com	52.7.87.144	true	false	unknown
gob-pairb-nje1.pubmnet.com	207.65.37.179	true	false	unknown
s.amazon-adsystem.com	52.46.143.56	true	false	high
papi-public.us-east-1.us.tagger.opecloud.com	3.226.156.1	true	false	unknown
aax-eu.amazon-adsystem.com	54.239.38.253	true	false	high
raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	174.129.112.91	true	false	high
ipac.ctnsnet.com	35.186.193.173	true	false	high
trace.mediago.io	35.208.249.213	true	false	unknown
d27c6x3b3mm9so.cloudfront.net	108.139.47.38	true	false	high
outspot2-ams.adx.opera.com	82.145.213.8	true	false	high
nje1pugpairb.pubmatic.com	207.65.37.184	true	false	high
images.mediago.io	34.111.60.239	true	false	unknown
sync.colossusssp.com	172.240.155.108	true	false	high
match.adsby.bidtheatre.com	134.122.57.34	true	false	unknown
analytics.google.com	64.233.176.139	true	false	high
feed.pghub.io	34.102.243.38	true	false	unknown
ib.anycast.adnxs.com	68.67.179.164	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=1---	false		high
https://x.bidswitch.net/sync?ssp=sekindo&r=https%3A%2F%2Fsync.intentiq.com%2Fprofiles_engine%2FProfilesEngineServlet%3Fat%3D20%26dpi%3D1267919208%26mi%3D10%26csh%3D793790479%3B1709765917%26rnd%3D1674561391%26pcid%3D	false	Avira URL Cloud: safe	unknown
https://pixel.onaudience.com/?partner=214&mapped=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://ce.lijit.com/merge?pid=84&3pid=ZiquQXeRy6jM9IHPeZYNrP2I	false		high
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MEY3QjVGRUYtNjlBRC00NkM2LTgxRjItQTI2MEQ2NTFFQUQ3&gdpr=0&gdpr_consent=	false		high
https://aorta.clickagy.com/pixel.gif?ch=185&cm=IjUNALZH0EzpouOqQka7fQWl&redir=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D84%263pid%3D%7Bvisitor_id%7D&gdpr=0&gdpr_consent=	false		high
https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=967008825	false		high
https://ads.yieldmo.com/pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID	false		high
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=	false		high
https://sync.adkernel.com/user-sync?zone=218872&t=image&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MjgmdGw9MjE2MDA=&piggybackCookie={UID}&gdpr=0&gdpr_consent=&us_privacy=	false		high
about:blank	false	Avira URL Cloud: safe	low
https://s.amazon-adsystem.com/x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=1072080661979746722290	false		high
https://s.amazon-adsystem.com/v3/pr?exlist=gg_an-db5&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0	false		high
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://sync.ipredictive.com/d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://id.rlcdn.com/709996.gif	false		high
https://match.sharethrough.com/sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LVFMWCG3-S-CYEQ	false		high
https://exchange.mediavine.com/usersync/redirect?partner=thirty_three_across&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=212578338838864	false		high
https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---	false		high
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&dpi=1402230080&mi=10&csh=793790479&rnd=591334041&pcid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-includes/js/tinymce/plugins/compat3x/plugin.min.js	false	Avira URL Cloud: safe	unknown
https://script.hotjar.com/modules.25f289cf2c430c5f1dfb.js	false		high
https://eb2.3lift.com/xuid?mid=3335&xuid=3473854422107831099&dongle=4d58&gdpr=0&gdpr_consent=	false		high
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false		high
https://oa.openxcdn.net/esp.js	false	URL Reputation: safe	unknown
https://ce.lijit.com/merge?pid=49&3pid=UQf1GlI5tayx&ev=1&pid=558511&gdpr_consent=&gdpr=0	false		high
https://aa.agkn.com/adscores/g.pixel?sid=9212314908&puid=08f85459-1b3b-0e42-24ec-8f7be8ecdf61	false		high
https://sync.srv.stackadapt.com/sync?nid=50&gdpr=&gdpr_consent=&gdpr_pd=&ssp=liveintent	false		high
https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	false		high
https://prebid.a-mo.net/setuid/magnite?uid=LVFMWCG3-S-CYEQ	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=41bccb41-99b0-03b3-11d7-830251b12c9f	false		high
https://earnandexcel.com/wp-content/uploads/How-to-Fix-Spill-Error-in-Excel-240x142.png	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm	false		high
https://us-u.openx.net/w/1.0/sd?id=537073062&val=1978557987846830937	false		high
https://earnandexcel.com/wp-includes/js/shortcode.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ce.lijit.com/merge?pid=71&3pid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	false		high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8019790904257964151&gdpr=0&gdpr_consent=&us_privacy=	false		high
https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=1e60a9b0-536b-a93f-f083-0aaee2f2f842&s2sVersion=production&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc	false		high
https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=5382283141381983659&gdpr=0&gdpr_consent=&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AABL7E7MVVwAABRpRLTzpA&pid=558502&do=add&gdpr=0	false	Avira URL Cloud: safe	unknown
https://t.adx.opera.com/pub/sync?pubid=pub10014056052800&gdpr=0&gdpr_consent=	false		high
https://ap.lijit.com/dsp/google/pixelmatch?google_gid=CAESEAGNrQOzXJIphjtqJABB8Yo&google_cver=1&google_push=AXcoOmTvB-Y6ooBCuGLQyIwoGRBnrtjjr9a9YK0a-0nGxteVWxN2PZI3_hVk2I1dR2Y25gvIVAAAjAqm9TzFYvEtGvP2nbWerUmK	false		high
https://x.bidswitch.net/sync?dsp_id=452&ssp=themediagrid&user_id=	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ums.acuityplatform.com/tum?umid=27&uid=IjUNALZH0EzpouOqQka7fQWl&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false		high
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://exchange.mediavine.com/usersync/sync?origin=https://earnandexcel.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22centro%22%3Atrue%7D	false		high
https://ups.analytics.yahoo.com/ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA&verify=true	false		high
https://us-u.openx.net/w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916	false		high
https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702	false		high
https://eb2.3lift.com/xuid?mid=2662&xuid=y-TgsrWNpE2oTazxz5yrMaadmBl26dNhqiG4IVkrS0sw--~A&dongle=0883	false		high
https://idsync.rlcdn.com/420486.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	false		high
https://exchange.mediavine.com/usersync.min.js?s2sVersion=production	false		high
https://earnandexcel.com/wp-includes/css/buttons.min.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ssum-sec.casalemedia.com/usermatchredir?s=193478&cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D	false		high
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LVFMWCG3-S-CYEQ	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-includes/js/dist/hooks.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://td.doubleclick.net/td/ga/rul?tid=G-8Y0K4MPJV5&gacid=1040263935.1714073125&gtm=45je44o0v884867978z8835174253za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=1057499289	false		high
https://exchange.mediavine.com/usersync/redirect?partner=sovrn&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=IjUNALZH0EzpouOqQka7fQWl	false		high
https://sync.1rx.io/usersync2/rmpssp?sub=sovrn&gdpr=0&gdpr_consent=	false		high
https://pixel.onaudience.com/?partner=104&icm&cver&mapped=6efb576f370522a24883b5b8d45a1e39&gdpr=0	false	Avira URL Cloud: safe	unknown
https://pr-bh.ybp.yahoo.com/sync/rubicon/Fn5nKwpD0tTRlqm-hfHrbQ?csrc=	false		high
https://vc.hotjar.io/sessions/2832943?s=0.25&r=0.06561110012468774	false	Avira URL Cloud: safe	unknown
https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	false		high
https://sync.1rx.io/usersync2/pubmatic?zcc=1&cb=1714073160082	false		high
https://ssc-cms.33across.com/ps/?_=1714073147833.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X	false		high
https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&partner_url=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D16%263pid%3D20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553%26gdpr%3D0%26gdpr_consent%3D	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://earnandexcel.com/course-category/career/	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://px.owneriq.net/epm?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwN	chromecache_382.2.dr	false		high
http://www.smartmenus.org/	chromecache_475.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_488.2.dr	false		high
https://earnandexcel.com/blog/how-to-use-an-if-function-with-3-conditions-in-excel/	chromecache_734.2.dr, chromecache_615.2.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/category/blog/page/2/	chromecache_439.2.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/blog/how-to-clear-data-validation-in-excel-a-comprehensive-guide/	chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.cs	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=540245193&val=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_co	chromecache_471.2.dr	false		high
https://earnandexcel.com/blog/how-to-add-a-comma-to-every-cell-in-excel-simplifying-data-presentatio	chromecache_734.2.dr, chromecache_615.2.dr	false	Avira URL Cloud: safe	unknown
https://cs.iqzone.com/e6130557b1b000792deef390abb43b4f.gif?puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	chromecache_382.2.dr	false		high
https://earnandexcel.com/blog/how-to-find-the-p-value-in-excel-understanding-p-value/	chromecache_439.2.dr, chromecache_734.2.dr, chromecache_615.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://c1.adform.net/serving/cookie/match?party=14&cid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&	chromecache_528.2.dr	false		high
https://earnandexcel.com/power-pivot-course/	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://earnandexcel.com/xmlrpc.php?rsd	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://earnandexcel.com/the-analyst-program/	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_799.2.dr	false		high
https://earnandexcel.com/wp-content/uploads/How-to-Create-a-Rotating-Schedule-in-Excel.png	chromecache_734.2.dr, chromecache_615.2.dr	false	Avira URL Cloud: safe	unknown
https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=&gdpr_c	chromecache_385.2.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.com/#website	chromecache_439.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MEY3QjVGRUYtNjlBRC00NkM2LTgxRjItQTI	chromecache_521.2.dr	false		high
https://earnandexcel.com/machine-learning-course/	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://earnandexcel.com/course-category/microsoft-excel/?tutor-course-filter-category=16702	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/google/safevalues/issues	chromecache_780.2.dr	false		high
https://thememove.com	chromecache_821.2.dr	false		high
https://earnandexcel.com/feed/	chromecache_439.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://earnandexcel.com/wp-content/uploads/How-to-Copy-Numbers-in-Excel-Without-Formulas-480x260.pn	chromecache_439.2.dr	false	Avira URL Cloud: safe	unknown
https://earnandexcel.thinkific.com/users/sign_in	chromecache_439.2.dr	false		high
https://visitor.omnitagjs.com/visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&	chromecache_790.2.dr	false		high
https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EA	chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
147.75.198.144	ny5-prebid.a-mx.net	Switzerland	54825	PACKETUS	false
151.101.0.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
141.94.170.77	pixel.onaudience.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
34.192.42.219	unknown	United States	14618	AMAZON-AESUS	false
104.18.24.173	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
52.215.143.51	a.audrte.com	United States	16509	AMAZON-02US	false
23.54.200.27	contextual.media.net	United States	16625	AKAMAI-ASUS	false
173.194.219.155	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
173.194.219.156	unknown	United States	15169	GOOGLEUS	false
216.22.16.8	rtb-csync-use1.smartadserver.com	United States	30633	LEASEWEB-USA-WDCUS	false
52.72.24.92	unknown	United States	14618	AMAZON-AESUS	false
151.101.128.84	unknown	United States	54113	FASTLYUS	false
13.33.4.68	config.aps.amazon-adsystem.com	United States	7018	ATT-INTERNET4US	false
18.160.83.5	d1ykf07e75w7ss.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
3.226.156.1	papi-public.us-east-1.us.tagger.opecloud.com	United States	14618	AMAZON-AESUS	false
18.160.83.122	d1jvc9b8z3vcjs.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.71.131.137	match.adsrvr.org	United States	237	MERIT-AS-14US	false
107.22.223.223	unknown	United States	14618	AMAZON-AESUS	false
69.90.254.72	serve-va.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
69.90.254.75	cdn.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
69.90.254.78	ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
3.214.176.164	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
52.20.207.59	unknown	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
134.122.57.34	match.adsby.bidtheatre.com	United States	14061	DIGITALOCEAN-ASNUS	false
23.88.86.2	matching.truffle.bid	United States	18978	ENZUINC-US	false
193.122.130.38	adserver.technoratimedia.com	United States	31898	ORACLE-BMC-31898US	false
34.229.3.43	load-use1.exelator.com	United States	14618	AMAZON-AESUS	false
3.218.216.11	pdmp.dcapi.dmp.3lift.com	United States	14618	AMAZON-AESUS	false
174.137.133.32	1.cpm.ak-is2.net	United States	27257	WEBAIR-INTERNETUS	false
173.194.219.132	pagead-googlehosted.l.google.com	United States	15169	GOOGLEUS	false
38.98.69.175	unknown	United States	174	COGENT-174US	false
3.213.119.72	rtb.adstanding.com	United States	14618	AMAZON-AESUS	false
3.226.121.246	us-east-tlx.3lift.com	United States	14618	AMAZON-AESUS	false
34.200.65.202	unknown	United States	14618	AMAZON-AESUS	false
34.236.60.188	ds-pr-bh.ybp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
3.226.98.213	track.wickedreports.com	United States	14618	AMAZON-AESUS	false
34.230.229.237	unknown	United States	14618	AMAZON-AESUS	false
35.190.43.134	gcp.api.sc-gw.com	United States	15169	GOOGLEUS	false
216.22.16.56	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
204.237.133.120	pug-sv3c.pubmnet.com	United States	62713	AS-PUBMATICUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
142.251.15.132	unknown	United States	15169	GOOGLEUS	false
3.163.101.59	sync.intentiq.com	United States	16509	AMAZON-02US	false
104.22.50.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
211.120.53.204	tg.dr.socdm.com	Japan	4694	IDCFIDCFrontierIncJP	false
54.239.38.253	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
107.20.103.201	unknown	United States	14618	AMAZON-AESUS	false
23.105.12.142	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
34.102.243.38	pandg.tapad.com	United States	15169	GOOGLEUS	false
3.161.188.46	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
18.64.153.203	unknown	United States	3	MIT-GATEWAYSUS	false
104.26.8.177	metrics.getrockerbox.com	United States	13335	CLOUDFLARENETUS	false
52.20.151.97	bcp.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
151.101.193.108	prod.appnexus.map.fastly.net	United States	54113	FASTLYUS	false
184.25.164.23	unknown	United States	9498	BBIL-APBHARTIAirtelLtdIN	false
8.18.47.7	m.deepintent.com	United States	32662	GMCRUS	false
3.162.125.35	cdn.mediago.io	United States	16509	AMAZON-02US	false
172.67.71.65	unknown	United States	13335	CLOUDFLARENETUS	false
54.242.78.179	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
64.233.176.139	analytics.google.com	United States	15169	GOOGLEUS	false
18.160.78.75	sb.scorecardresearch.com	United States	3	MIT-GATEWAYSUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
44.210.158.2	io.narrative.io	United States	14618	AMAZON-AESUS	false
207.65.37.179	gob-pairb-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
3.131.125.53	unknown	United States	16509	AMAZON-02US	false
74.119.118.149	gum.da1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
202.233.84.1	aid.send.microad.jp	Japan	131957	MICROADMicroAdIncJP	false
207.65.37.182	spug-nje1pb.pubmnet.com	United States	6203	ISDN-NETUS	false
207.65.37.181	pugm-nje1.pubmnet.com	United States	6203	ISDN-NETUS	false
147.45.47.87	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
151.101.12.84	dualstack.pinterest.map.fastly.net	United States	54113	FASTLYUS	false
172.67.164.44	sda.fyi	United States	13335	CLOUDFLARENETUS	false
34.120.135.53	oajs.openx.net	United States	15169	GOOGLEUS	false
172.240.155.108	sync.colossusssp.com	United States	7979	SERVERS-COMUS	false
18.160.18.79	sync1.intentiq.com	United States	3	MIT-GATEWAYSUS	false
207.65.37.184	nje1pugpairb.pubmatic.com	United States	6203	ISDN-NETUS	false
216.219.92.22	inv-nets.admixer.net	United States	19318	IS-AS-1US	false
74.119.117.4	static.us5.vip.prod.criteo.net	United States	19750	AS-CRITEOUS	false
52.3.114.66	unknown	United States	14618	AMAZON-AESUS	false
64.233.185.106	www.google.com	United States	15169	GOOGLEUS	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom	39832	NO-OPERANO	false
34.117.239.71	events-ssc.33across.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
52.95.126.160	unknown	United States	16509	AMAZON-02US	false
172.64.151.101	ssum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
195.5.165.20	core.iprom.net	Slovenia	44968	IPROM-ASSI	false
67.202.105.33	de.tynt.com	United States	32748	STEADFASTUS	false
108.177.122.155	securepubads46.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.4.157.85	unknown	United States	14618	AMAZON-AESUS	false
67.202.105.31	hde.tynt.com	United States	32748	STEADFASTUS	false
35.208.249.213	gtrace.mediago.io	United States	19527	GOOGLE-2US	false
173.223.239.154	unknown	United States	20940	AKAMAI-ASN1EU	false
54.147.231.117	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
172.66.41.9	router.infolinks.com	United States	13335	CLOUDFLARENETUS	false
165.254.203.172	oxp.mxptint.net	United States	54038	CALLIDUS-SOFTWAREUS	false
35.186.253.211	rtb.openx.net	United States	15169	GOOGLEUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
108.139.47.38	d27c6x3b3mm9so.cloudfront.net	United States	16509	AMAZON-02US	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431841
Start date and time:	2024-04-25 21:24:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus21.troj.win@88/861@648/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://earnandexcel.com/ Browse: https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 142.250.105.100, 142.250.105.138, 142.250.105.113, 142.250.105.139, 142.250.105.101, 142.250.105.102, 64.233.176.84, 34.104.35.123, 151.101.193.181, 151.101.65.181, 151.101.1.181, 151.101.129.181, 64.233.185.95, 64.233.177.94, 142.250.105.97, 40.68.123.157, 199.232.210.172, 199.232.214.172, 192.229.211.108, 13.95.31.18, 173.194.219.102, 173.194.219.138, 173.194.219.101, 173.194.219.113, 173.194.219.139, 173.194.219.100, 142.251.15.95, 108.177.122.95, 64.233.177.95, 172.253.124.95, 173.194.219.95, 172.217.215.95, 74.125.138.95, 142.250.9.95, 74.125.136.95, 142.250.105.95, 64.233.176.95, 23.15.60.245, 64.233.177.101, 64.233.177.100, 64.233.177.139, 64.233.177.102, 64.233.177.113, 64.233.177.138, 23.194.236.236, 23.48.105.202, 23.48.105.199, 23.48.105.214, 23.48.105.203, 23.48.105.218, 23.48.105.210, 23.48.105.209, 23.48.105.201, 23.48.105.213, 151.101.130.49, 151.101.194.49, 151.101.66.49, 151.101.2.49, 104.76.210.84, 104.76.210.81, 104.76.210.78, 104.76
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, uipglob.trafficmanager.net, slscr.update.microsoft.com, a-us-west.rfihub.com.akadns.net, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, 9e5c0a37566effe5d8c63fe4504aeef3.safeframe.googlesyndication.com, e9126.x.akamaiedge.net, l-0005.l-msedge.net, 5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com, gocm-geo.c.appier.net.akadns.net, clients2.google.com, ocsp.digicert.com, a2047.w185.akamai.net, update.googleapis.com, dual-a-0034.dc-msedge.net, rtb-csync-geo.usersync-prod-sas.akadns.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, pixel-us-east.rubiconproject.net.akadns.net, pixel-sync.trafficmanager.net, e12627.g.akamaiedge.net, pagead2.googlesyndication.com, www.pinterest.com.edgekey.net, edgedl.me.gvt1.com, c.bing.com, rtb.adgrx.com.tech.akadns.net, e6603.g.akamaiedge.net,
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:25:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9827842775071134
Encrypted:	false
SSDEEP:	48:8cpd8TAE0HvidAKZdA19ehwiZUklqehLy+3:8nvYky
MD5:	98CD58A66D87BBC289B7317F3D23FDDC
SHA1:	8555C288E2861F0D890B4040FA5AAA52A8C39AAB
SHA-256:	83BCAAB82C4E32822869CC6445E57EBE6892B4E44F5F483AAD98C74D5EC6CADF
SHA-512:	D12194ABE91BA35B4DC4EFF0D4ADD5A0A620AEDC595435836BB25480E9EC4F75A9EB3EC1746A78B0C593AC0A6C6F70473158A628A80FAB1BD987D8F9032FC2C1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....N..KF...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X%.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X%.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X%.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X%............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X'............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:25:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9984472650005034
Encrypted:	false
SSDEEP:	48:8fd8TAE0HvidAKZdA1weh/iZUkAQkqehUy+2:8qvy9QBy
MD5:	0C008BD267F208913E0FFA9DE31CFF91
SHA1:	089C8B92B14986EF9ED99D461E665FF82DFDEF24
SHA-256:	DC41B1F4B573250F7611C589A23F988FDDB41F22587FE0644E2B116506D7792F
SHA-512:	6779B2488A2DE8AE5634871BF0E1D12A80CA51488854C6BAC29CC187F2253F2DCCAFE41B8D647F9F0B6D84C74082632BCFC3A71AB795550BDDFD08E657599A4A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....L.vKF...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X%.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X%.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X%.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X%............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X'............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00858981600002
Encrypted:	false
SSDEEP:	48:8xFd8TAEsHvidAKZdA14tseh7sFiZUkmgqeh7sSy+BX:8x0vinoy
MD5:	98440E33A0A66DFEC89A00880CA42935
SHA1:	4888EEDC18D8F0B2BD1A02398463B42EBB6A4A3B
SHA-256:	5365AFF1F314B865546E4CAA45CB506C38A30FCE7FF6D671F97E4BEC2AE3E2C3
SHA-512:	E2DE0307BCFEE66F97EEC55A01B1A2B80A714DD79AB7DA5088A5B23C1621D858A85C93D0DF5256C49B71CCB52B8C63AB49F4EF4F04CD510FC0EFD9A728BDF85D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X%.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X%.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X%.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X%............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:25:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.992131855107103
Encrypted:	false
SSDEEP:	48:8ad8TAE0HvidAKZdA1vehDiZUkwqehAy+R:89vZKy
MD5:	1188B8E5F5E89030776C5210FFF03F34
SHA1:	16ECA948A6A9B827455C45BD3C265D1C0FF2F959
SHA-256:	5EAF9D62A456D48791875FA85D80E185A44A3C22C242047C64466E0C9E5DC4E8
SHA-512:	79372697D3BEF86C8A399EC95A4D0B3959243BAE2AD59263A903328A242BBACE91E70AB4D58440F93808D352960A4F8BB2388DDF6379776D71C3389BE5AD1D2E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....e.oKF...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X%.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X%.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X%.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X%............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X'............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:25:13 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.986254531018352
Encrypted:	false
SSDEEP:	48:8Bd8TAE0HvidAKZdA1hehBiZUk1W1qehWy+C:8ovp92y
MD5:	FC8D140D5125C0DB198F84BBB7843A3F
SHA1:	DABCB46BAD4035AF3595A50EEF0CBD8F139657FD
SHA-256:	6B6C15B1F8EF22E3ACB784DA55DB4A26D24FBE68917476EED701B222EF31995E
SHA-512:	0C204A8C3589CD8F084BB7C78B5431610510D99389FC717AED814778D7DD5F9B66D68F7BBD0C2C408B688A6208A9A72230AD2D18D031CEAE223C7FDF947F76E2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......{KF...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X%.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X%.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X%.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X%............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X'............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 18:25:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9968819132305784
Encrypted:	false
SSDEEP:	48:80Fd8TAE0HvidAKZdA1duT+ehOuTbbiZUk5OjqehOuTboy+yT+:800v1T/TbxWOvTboy7T
MD5:	CC1853E6A4318E82CF34EA11FB07CA4B
SHA1:	15BD44FB59788E2FFA2AB14C288B67A0325461CA
SHA-256:	F912E641778393B8FA9ED58AD94B3A712AB2B5F200A111DA25852511D945A25C
SHA-512:	AA28E71AF8AF4A4E4B76A608AD6B9CF0A29BEC4A8BD2BDA4CCA51F45ABF2C92AB82D5E4618A675F39D3F1AD8686E97CF98067086E77DF03DA69B9A1496511A26
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....dKF...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X%.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X%.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X%.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X%............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X'............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2356), with no line terminators
Category:	downloaded
Size (bytes):	2356
Entropy (8bit):	5.659321978221673
Encrypted:	false
SSDEEP:	48:CF8O38aQhsP8agrsGJdTgjN2mAeSsT77+C8t5nNa0BBTjq:CF8Y8aQhsP83syMN2xg7R8tW0q
MD5:	EC4A7103064D42BB387E07A3E4B2EF18
SHA1:	9A89D67E5825808F997A047E471F5236D1BB474E
SHA-256:	674A1FB06A23F9E0D22FADDCC8C03475683076DF234F7EBC5610A7AD082C3C8D
SHA-512:	7BF498968663094FCD3D5D5392723544ACEB207C910FAC353B5E616FD0CADFBE199081BC3B29D480BE6F886D16D9E37153EF045C52FA26CABD1DBFEDF04146D0
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=24186430&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]&gdpr=0&gdpr_consent=');P

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073061&val=8019790904257964151&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	134
Entropy (8bit):	5.637750784087631
Encrypted:	false
SSDEEP:	3:YW/aErnUpcRO10qHmQp0QjHJhfiReATNoQtwYjA2UC+fHO8P2Yn:YWSEkgkmQppjHJMtqQtwYMW+N3
MD5:	5A8CFE72F8EE8348194C33DB4567A18B
SHA1:	B4C97C238E319FE0FCD2C3013D344A0B5B7B99DE
SHA-256:	D31888C87A9D5189D7EE63560A0775ED71F0C284695B16FE4BA64C9522D48948
SHA-512:	80C5CFBE3B3EE3F5554720C94E32E727F1FE32C574C29E083AE0C8A6B0A99DE3CE046800CF30AED9E98509DA670D18C7D52FCD1BF13E2C6B823B6F936310F72D
Malicious:	false
Reputation:	low
Preview:	{"s":"XahynOW3M9FAthJesf0QDqPCc1L9tkHUSQgGYb5hH59ecue6kQ5F","t":"gbEGVJsIdlvjioL67T5hSjuIp1UiKeU3N+MYJK12wbWhsA==","kid":2,"ttl_s":76}

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386)
Category:	downloaded
Size (bytes):	219470
Entropy (8bit):	5.5353053884219765
Encrypted:	false
SSDEEP:	3072:6SQaf5qZ3fhO+Avcb8HG1LceF2/ea8LR9Wk9AR6UOQPGA2STnXDL9btIMPriL:1QX5NAhYLceF+v9TnXP9RIMzs
MD5:	F450FF01E30F03A0CDCB6D05BF3E1034
SHA1:	333D604B0D466611A41DC85A8D686523E2D3BE2A
SHA-256:	76EF4A1838BB7D6CA0FE1EDCE473E58F71F1F22F34079B50C5B6F891BA09137E
SHA-512:	B607705A5ECBB4628ADB45E05FAA8B2E8316A65C9C04CF78D97C24C708443E275262884D852699EFA556B4C2809546A374700100392BC2391B43090B1570EBD8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-416707819&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-416707819","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_pre_auto_pii","vtp_instanceDestinationId":"AW-416707819","tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__ccd_pre_auto_pii",[46,"a"],[50,"q",[46,"s"],[52,"t",[16,[15,"s"],"userData"]],[52,"u",[30,[18,[2,[15,"t"],"indexOf",[7,"@gmail."]],[27,1]],[18,[2,[15,"t"],"indexOf",[7,"@googlemail."]],[27,1]]]],[36,[0,[0,[0,[0,[0,[0,[16,[15,"s"],"tagName"],":"],[16,[15,"s"],"isVisible"]],":"],[17,[15,"t"],"length"]],":"],[15,"u"]]]],[52,"b",[13,[41,"$0"],[3,"$0",["require","internal.getFlags"]],["$0"]]],[52,"c",["require","internal.setPr

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	1152
Entropy (8bit):	5.2223725139649
Encrypted:	false
SSDEEP:	24:Q77ui16S+JLvByxZARRtvfQJXDaaoHzHECbMsCsm1hKBM1XK1u5uf+gPc97Xrn:Q7F6d1Jyx6hvfQE3TECU04UWgW77
MD5:	3980359F2EC1A134F3D49DC1101ECE9E
SHA1:	62B93CB0F40B5DCE2A1D3ADDC5F0E2083A840B05
SHA-256:	79BA51C41761B59DFE845CFF9612057F041A63B757214C9B35BB11EA79BC3830
SHA-512:	78FD3E82F6732F13DDA52D1EA7527021DF15515739F21CCB63EAAC345222363F42C2BE0A25790D0144687AFA32C13DCB9F6E613A3AB0F8B5FE40EB09679BC1F8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-admin/js/media-upload.min.js
Preview:	/! This file is auto-generated /.window.send_to_editor=function(t){var e,i="undefined"!=typeof tinymce,n="undefined"!=typeof QTags;if(wpActiveEditor)i&&(e=tinymce.get(wpActiveEditor));else if(i&&tinymce.activeEditor)e=tinymce.activeEditor,window.wpActiveEditor=e.id;else if(!n)return!1;if(e&&!e.isHidden()?e.execCommand("mceInsertContent",!1,t):n?QTags.insertContent(t):document.getElementById(wpActiveEditor).value+=t,window.tb_remove)try{window.tb_remove()}catch(t){}},function(d){window.tb_position=function(){var t=d("#TB_window"),e=d(window).width(),i=d(window).height(),n=833<e?833:e,o=0;return d("#wpadminbar").length&&(o=parseInt(d("#wpadminbar").css("height"),10)),t.length&&(t.width(n-50).height(i-45-o),d("#TB_iframeContent").width(n-50).height(i-75-o),t.css({"margin-left":"-"+parseInt((n-50)/2,10)+"px"}),void 0!==document.body.style.maxWidth&&t.css({top:20+o+"px","margin-top":"0"})),d("a.thickbox").each(function(){var t=d(this).attr("href");t&&(t=(t=t.replace(/&width=[0-9]+/g,"")).

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	4.851706036805304
Encrypted:	false
SSDEEP:	6:9F6aiL+3CU3dc6NKwHFgrwnwlWlHCVqfLuUDh6YvwHFUw/G4WErn:9KLCCU3+6gwHMwnwlsHbqUDsYvwH+w/J
MD5:	447712F49EF92D24EDA0381882E5F00B
SHA1:	B041299AF91182F0D7A997769CD20E3A2F7EBEF4
SHA-256:	566D4C5DFEFC9C4D867E6BEF080917A4273B4228731A8700E81F1763EAE3D861
SHA-512:	2C9892DBEB279EA236973EEEE5833A0F7884AE52EB59A835EF0504005A1DD95D818CBA5799611E0FCAD4071DC2A10FACFC9B81187397506092FE0CB7CF82C224
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/js/ecs.js
Preview:	.var ECS_hooks = {};..var ECS_Columns_Count=0;..function ECS_add_action(name, func) {. if(!ECS_hooks[name]) ECS_hooks[name] = [];. ECS_hooks[name].push(func);.}..function ECS_do_action(name, ...params){. if(ECS_hooks[name]) . ECS_hooks[name].forEach(func => func(...params));.}

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 770 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	156902
Entropy (8bit):	7.99281555345765
Encrypted:	true
SSDEEP:	3072:5Vn6TdYI94JikSpIKUUpIwN2Xm7BTnq6f7OZDGgzrvbkRSH6Sf:nnUhDg9wNlBTq6a9GAvI0
MD5:	3240EC8533B48CE84346D1C68EAA4330
SHA1:	C2CCAC88679B103C98BEF53D5C128BB82CD54A57
SHA-256:	18C87AEE8B25E2645589DAF15CEA0D64C809EDE3CB7D4DF5F745EBC280E5A704
SHA-512:	B7657EAD31D39D6B8C36219802E374A588DCA428E73C33760627635545FA27B3B16C19ECB0BDF5B3E5333AAC9B112DB806254B6B866EE47523AD497E91C8A071
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx...w.$.}...+W.49.l.X.... .f....(..Le..`J..(....A.\|-[..l..H1.....ar..=.sW:....Y,H.E....?.3]U}N.s.~..I...[...I.r..5.Yf0....y.tEE...v.....^.LD.......9.....Qh.........."..%.o~.7.;.>...E/.'Np.x.E.^...!.....e..z...$!IRw.x...hR..P..p ......2.._d..K.%..]...u...O..e.6.}..~....H...@......]..n.Tu.....\|....]..aB.....F~..w3....c..]....$.c..>q..c.8......7..........................a21.@....7......)...#....C..8.?.;..E....?..._.H._>....7q....IF.e..Nr..uhJ.A2.....7.......4z..P.sS..2............r....~)..Db...uM...F...;...&....5.Yf8..\~...a\|..iG..=.h....q.....;.3..kq.4....s....^....."..............M.^eCIOkw....x!.Uy"=.^..i.f.pr..f...W..L..^\|I^.W{.w...^O]t..K....{...}.G..{>.X\|..{........3.f..n.?.o...........=.....?....?..o.........../...~...............s....H.......>..{.6LM..^w?......{............/....G....#...>....9.7.*+..;....._.m........~...Sw..].8.7..\|.W..w\|..?H...W.....?.p..Y.x..o..>...v.......~.Wy.7.n.$.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53350)
Category:	downloaded
Size (bytes):	418718
Entropy (8bit):	5.291070370720787
Encrypted:	false
SSDEEP:	3072:cPYlkbjP07kp7wPFjGPPV7e1Hz4c9CFOgh4wLVaT5T1cMouJw0jc8Q0Gzk3YVX3r:c+ILp7n3HU/Oy5TrouJR55i
MD5:	CF604B4D24F365AE6B776D418A47D523
SHA1:	A2AB48975B5035F3B2F7EA9B869E7DBA7108C7DA
SHA-256:	296500C2ABE5E999571F83815FB97251D3B12AF485430C5C46F95BF5CEC0BB56
SHA-512:	65F3645678A6AE80D8C33BBDF03C12A16BD7420BBDA35235C204B93396A4AE37CCBFF72D94A8FC76F80B632829B4B01F94EFD5383E65922CA7736F245E67D41E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/js/tutor.min.js
Preview:	(()=>{var n={1237:(e,t,r)=>{"use strict";r.r(t);r.d(t,{default:()=>c});function D(e){"@babel/helpers - typeof";return D="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},D(e)}function _(){"use strict";/! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE /_=function e(){return i};var i={},e=Object.prototype,c=e.hasOwnProperty,t="function"==typeof Symbol?Symbol:{},a=t.iterator\|\|"@@iterator",r=t.asyncIterator\|\|"@@asyncIterator",n=t.toStringTag\|\|"@@toStringTag";function o(e,t,r){return Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{o({},"")}catch(e){o=function e(t,r,n){return t[r]=n}}function u(e,t,r,n){var a=t&&t.prototype instanceof l?t:l,o=Object.create(a.prototype),i=new S(n\|\|[]);return o._invoke=functio

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5180), with no line terminators
Category:	downloaded
Size (bytes):	5180
Entropy (8bit):	5.33493580291663
Encrypted:	false
SSDEEP:	96:s/ihX+bAiYMdpMCLwttDrFkzHhjQcPrIZPB5K4LMMqj4TurAwswG8qsSC+wUyJOp:mihX+bAiYMd6CLwtdrgVzj2Z5VLMMorq
MD5:	439A8EF1682B91779B2072F7985EBE2C
SHA1:	F9082313AA09F7544D6C75879F29A8A754A7869D
SHA-256:	1BB7D7451B16800580A1B655EB1DE0B3778F62677962C99076DE16EAA79AF990
SHA-512:	4A19DF2CF773E7D09BE1F98CE952B612EBD327570A2F5300B20B8303FBA30D367676E87D14106550AEB0D0852FFC62C71DFBB3C2916FDC7C6268B9869E501B3F
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3322/69f2548d38ebd6747484.min.js
Preview:	(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3322],{8078:e=>{e.exports=function(){!function(e,t,n,a,i,s,o){function r(n,a){t[e]._Q.push([n,a])}t[e]\|\|(t[e]={init:function(){r("i",arguments)},fetchBids:function(){r("f",arguments)},setDisplayBids:function(){},_Q:[]},(s=n.createElement(a)).async=!0,s.src="//c.amazon-adsystem.com/aax2/apstag.js",(o=n.getElementsByTagName(a)[0]).parentNode.insertBefore(s,o))}("apstag",window,document,"script")}},7344:(e,t,n)=>{"use strict";n.d(t,{i:()=>a});var a=(e=>(e[e.GOOD=1]="GOOD",e[e.NO_BID=2]="NO_BID",e))(a\|\|{})},3322:(e,t,n)=>{"use strict";n.r(t),n.d(t,{AMAZON_CODE:()=>s,AmazonAdapter:()=>o});var a=n(3583),i=n(9689);const s="3229";class o extends i.AmazonBase{callBids(e,t,n){const s=this.createAmazonAdUnits(e);this._window.apstag.fetchBids({slots:s},(e=>{i.AmazonBase.AmazonTargeting={},s.forEach((n=>{var s,o;const r=e.find((e=>e.slotID===n.slotID));if(!r\|\|!this.isValidAmznp(r.amznp,r.amznbid,this.model))return;const d=n.adUnitCode,c=super.cre

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57891
Entropy (8bit):	5.3266400413750326
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYu3o2+D0Wz:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyk
MD5:	51A03AA6CA57EADC2308F19B2EB764A8
SHA1:	CBDFAB2D4DABD37F5BECBA0D29474322703495C3
SHA-256:	2F668B857733340A389E5E66DFE51CBDFE0E6DC5EBFA1F38B93DF22D0FE814D6
SHA-512:	C868053C4AA823CFCEE321EA5CFC2FEABBF882551C9EB9B0E08106FDAF046289F6EE8AA7B7EA7FF578F48BC787E013FF023B05968781D303D1CDB91B5FD82CEF
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/719379935201922?v=2.9.154&r=stable&domain=earnandexcel.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	3.7011434673082864
Encrypted:	false
SSDEEP:	3:3FFiAK/kWNuR48FIFWKQLvaSdNY:3FFi3bNuRgFWXaQY
MD5:	94678B0A04A48C4D00B00A171D54AA1B
SHA1:	6A70036494ACFC365E4D4F2718D8B7358F203600
SHA-256:	6C49A0B5F69BB7575E27E8ED2A7862C7CF597D6EB7221E5363FD66A6C6F43FF2
SHA-512:	64CA4DFBB8A83A2350730EB6AEE01304BB1C29685E5BA40CF03783FFDE96829F398C03C8C814D7FF52EB53B302F70CECC364A495A5E5E6D3D8B2B3D34A039CDB
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/flooring/countryLookup
Preview:	{.. "geo": {.. "state": "GA",.. "country_code": "US".. }.. }

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:3qw3270RR61GtEmz:1UE0hDsqJHQrFIxUYcL+Tq/HUSp1b0hIWzVGwQOqc89E3/Dlry6KYfobi0ZE4Vu+OoFyGPQOOmevge5uzAYhMYo+ZRPU&slot=adhesion_desktop&site=earn-and-excel&path=/blog/how-to-add-a-legend-in-excel-a-com&page_url=https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/&secure=1&sessiondepth=1&optout=&categories=hobbies-and-interests&generator=web&bucket=93&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=25&month=4&hour=19&wrapper_group=3.1.15-1450-SwapCMP.5-beta-control&wswy=0&sessionId=1040263935&page_view_id=0e0d1c1c0a0l170s0x0i1n0u140x0h03&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&sizeLift=adhesion_desktop_970x90_c&partnerLift=amazonE6M2&hb_bid=no_bid&slot_id=adhesion_desktop&hb_bidder=no_bidder&hb_count=0&hb_pmp=0&UR=28&URP=138&OE=0&google=1&native=1&slot_number=1&slot=adhesion_desktop&arrival=0&refresh=0&bidFloor=0.28&ccpa=1---&psa=6,12,3&timeout=adhesion_atf_d_2801&gid=0&inview=0&grow_state=4&grow_version=7.244.0&3pc=timedOut&illr=0&gpp=0-0-0&pps=&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=adhesion&device=desktop&country=US&offeringId=1&adProduct=display&oCpm=undefined"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	54792
Entropy (8bit):	4.6771570641199585
Encrypted:	false
SSDEEP:	768:hpt3RSRsWXZQEUbfi+a/1WnapSEiGLDB4cB274EuNC919U6B5ep17HlrFMH:hLUbihbK+aWgYGPKxvuUbU6B67FO
MD5:	77954D4A1D80AEC12A551AB9E07A9764
SHA1:	9C31CFA2ECDB470D653BF69203A887F64AB57510
SHA-256:	B4AC521EF057CD36E6BEFD10E02A9A307882606AC70DDC9478F5453E15B3061F
SHA-512:	9E9792E624A53E2E31C81D6469D54ADB195F0B092FE38A1A541041DA7776332B6F591F758275365812CE77412C5BF7AB4D53DC2A16C8008A3160074D66DA0DEB
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/amazon/v1/adjustments?offering=mediavine
Preview:	{"w3pr0g":{"1b83mdc":{"b":"bpjlds"},"kl6lmo":{"b":"bpjlds"},"1k3qmm8":{"b":"bpjlds"},"2twl4w":{"b":"bpjlds"},"12cgm4g":{"b":"bpjlds"},"voqcxs":{"b":"bpjlds"},"1v7adxc":{"b":"1b83mdc"},"dxgcg0":{"b":"kl6lmo"},"1dg0dfk":{"b":"kl6lmo"},"mt3cow":{"b":"1k3qmm8"},"1mbndog":{"b":"2twl4w"},"51tc74":{"b":"2twl4w"},"14kdd6o":{"b":"12cgm4g"},"r8wutc":{"b":"voqcxs"},"1qrgvsw":{"b":"voqcxs"},"9hmubk":{"b":"1v7adxc"},"1906vb4":{"b":"dxgcg0"},"id9ukg":{"b":"dxgcg0"},"1hvtvk0":{"b":"1dg0dfk"},"lzu2o":{"b":"mt3cow"},"104jv28":{"b":"mt3cow"},"z0lhj4":{"b":"1mbndog"},"1yj5iio":{"b":"51tc74"},"h9bh1c":{"b":"51tc74"},"1grvi0w":{"b":"14kdd6o"},"q4yha8":{"b":"r8wutc"},"1pnii9s":{"b":"r8wutc"},"8dogsg":{"b":"1qrgvsw"},"17w8hs0":{"b":"9hmubk"},"ukrzeo":{"b":"9hmubk"},"1u3c0e8":{"b":"1906vb4"},"cthyww":{"b":"id9ukg"},"1cc1zwg":{"b":"id9ukg"},"lp4z5s":{"b":"1hvtvk0"},"1l7p05c":{"b":"1hvtvk0"},"3xuyo0":{"b":"lzu2o"},"13geznk":{"b":"104jv28"},"wsoqgw":{"b":"104jv28"},"1wb8rgg":{"b":"z0lhj4"},"f1epz4":{"b":"1yj5iio

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.849223912390625
Encrypted:	false
SSDEEP:	3:jKC+IuJu:lGu
MD5:	2CF9C70D59CF58EA0DF1042EA8EB2CFC
SHA1:	73D3B76F00EB047E4FD3E88F6757A350DD1B4BA1
SHA-256:	E1C5C764F272B8D760C3DC6CA97FC3B22D0E3CE2BE43281CE2C6E8D89A6A8790
SHA-512:	7586B4286118F39D2D88605E0452B69E2325C3CF3687D5C11AAD0E305A049D600770D85D48530CA6D84E34C71B8C15F6CD1CEA73A8010CF19062E55D5657C71F
Malicious:	false
Reputation:	low
Preview:	Resource not available.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	100
Entropy (8bit):	5.404722159792379
Encrypted:	false
SSDEEP:	3:1rH8CGkByy4VJZ831Cnd8uVjvPmk:SCz0vX8FCd8ulvuk
MD5:	878A932BCB4D8AB4C2636EED1DD91EF0
SHA1:	E03228C17DC397E092048BBFEC42C5EF296FED0C
SHA-256:	8A60CFFDAB6B6849547D2A4AA5E70B1EBF97913E24ED4A0FAD18F6647B560145
SHA-512:	AB32EA23ACA00F9C1A2540D001B1421FEAE6BD5DC8102C5CC2ACE9425FE9C5BBC060E03944349CD03FCFD96FAF6892E9EAE1C358BFE2F02978A6CAF5969ED4DF
Malicious:	false
Reputation:	low
Preview:	V1:4sqv0pOxAYXRKqGn:bdMJzfKlAd6WXT/rZuPW2Ad9Kd9Kzmslbr+sO5YKfpjS35h624+HT1q+WYYZ8rc+Cbi6J8h185/ZlA==

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1585)
Category:	downloaded
Size (bytes):	1586
Entropy (8bit):	4.912404143831552
Encrypted:	false
SSDEEP:	24:zFzdtQbyHb05YRqnzFRSDphD0qqvqpHnMFJN0kW9FzeFAzSxX:zFzdtQbgb0WRozFRoDRHezNUMF64
MD5:	E42FD89AF95F5514BDA1C49E1286B9DA
SHA1:	267A506E1A095CFCF16222D77348C5282EBA00F8
SHA-256:	7618E8C526524F9CD167E988A98A4CD6910C3BC59759556B61049AC3FBA0B874
SHA-512:	5EA833A85EFA415F0F18B08AF826EE616AA5893CE5B98008FB8B7D5D07C077860C1DFC5C36163F486E73635A5567F101C068A7181932F3C43C3A8082CA95802B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/edumi/font-edumi.min.css
Preview:	@charset "UTF-8";@font-face{font-family:Edumallicon;src:url(Edumallicon.eot);src:url(Edumallicon.eot?#iefix) format("embedded-opentype"),url(Edumallicon.woff2) format("woff2"),url(Edumallicon.woff) format("woff"),url(Edumallicon.ttf) format("truetype"),url(Edumallicon.svg#Edumallicon) format("svg");font-weight:400;font-style:normal}@media screen and (-webkit-min-device-pixel-ratio:0){@font-face{font-family:Edumallicon;src:url(Edumallicon.svg#Edumallicon) format("svg")}}.edumi:before{display:inline-block;font-family:Edumallicon;font-style:normal;font-weight:400;font-variant:normal;line-height:1;text-decoration:inherit;text-rendering:optimizeLegibility;text-transform:none;-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;font-smoothing:antialiased}.edumi-content-writing:before{content:"\f100"}.edumi-correct:before{content:"\f101"}.edumi-streaming:before{content:"\f102"}.edumi-group:before{content:"\f103"}.edumi-coin:before{content:"\f104"}.edumi-layers:before{content:"

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2683
Entropy (8bit):	4.7524734198952325
Encrypted:	false
SSDEEP:	48:R/LwSLWjbpC6cBMwlK7yT1cotdFUjp7qIRuBM7jk:9LwSLwZ7K1c4dFS7o
MD5:	A8DBC1B16BA45F5107F86D1EE736CA0F
SHA1:	7BBF11290BD6C077BBF9A30CDAC0246A4AC6EF5F
SHA-256:	AB525C7A06C3E206B63E628B86D9766B56E7C957005718DDFD0E055439ECFEC7
SHA-512:	1CE0EDC7873FFBF816CE96E7BCE373B7232CE8F13AF98BA826085C195D6B2A4F66269307DF48AEF810E6E8D31C12C7E9FB6E7C3254BCE13C574602FE45DC10B8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css
Preview:	@charset 'UTF-8';../* Arrows */...slick-prev,..slick-next {. font-size: 0;. line-height: 0;. position: absolute;. top: 50%;. display: block;. width: 20px;. height: 20px;. padding: 0;. -webkit-transform: translate(0, -50%);. -ms-transform: translate(0, -50%);. transform: translate(0, -50%);. cursor: pointer;. color: transparent;. border: none;. outline: none;. background: transparent;.}...slick-prev:hover,..slick-prev:focus,..slick-next:hover,..slick-next:focus {. color: transparent;. outline: none;. background: transparent;.}...slick-prev:hover:before,..slick-prev:focus:before,..slick-next:hover:before,..slick-next:focus:before {. opacity: 1;.}...slick-prev.slick-disabled:before,..slick-next.slick-disabled:before {. opacity: .25;.}...slick-prev:before,..slick-next:before {. font-family: 'slick';. font-size: 20px;. line-height: 1;. opacity: .75;. color: white;. -webkit-font-smoothing: antialiased;. -moz-

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6944)
Category:	downloaded
Size (bytes):	6979
Entropy (8bit):	5.152452711185927
Encrypted:	false
SSDEEP:	96:5XAm2RL5c+VDCpu7MlDu/3+/w4XfP1RfWeru64T7mVA0fp7/Rh63E:5wmqL5c+tCpu7Mlq3qTfWeCF7KE3E
MD5:	FFF58F50D2D6243F7705185A16CBA7EA
SHA1:	144566A0887F77BF9126BD1BB46CCAD9F29A5971
SHA-256:	FCC650DABDEEF66E791D2159BDDF7E6EC415841C265E2E121BFDF8DA9F898837
SHA-512:	67A55F9A5DC39196BF8324E520E89243DECBEB180D35AC1F7ED10E90AA59617469B4B106DCEB49D314E31882AD892F6D320817E5E2872CBB5A12FBDECB5824DD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/hooks.min.js
Preview:	/! This file is auto-generated /.this.wp=this.wp\|\|{},this.wp.hooks=function(n){var t={};function r(e){if(t[e])return t[e].exports;var i=t[e]={i:e,l:!1,exports:{}};return n[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=n,r.c=t,r.d=function(n,t,e){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:e})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var i in n)r.d(e,i,function(t){return n[t]}.bind(null,i));return e},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s="gEOj")}({"1OyB":f

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=e047ce99-8b6d-400f-973c-746356c74d77&u_sclid=23642ee4-9521-4f89-8751-3f4f3aa963a9&u_scsid=07a25e7c-08f3-4e93-8f0b-aa621428331b&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&d_os=10.0.0&d_ot=Windows&huah=true&m_dcl=4073&m_pi=4070&m_pl=0&m_pv=2&m_rd=5114&m_sh=1024&m_sl=0&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2Fhttps%3A%2Fearnandexcel.com%2Fcourse-category%2Faccounting%2F%3Ftutor-course-filter-category%3D16698&trackId=53d0bc6c-262f-4645-a0e3-229919c01eef&ts=1714073176162&v=3.16.0-2404242003
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViem2:8WiIUem2
MD5:	F846EBE7331BDF57AE5B65ACB42C5F30
SHA1:	1EE6057E835C893700196579F26FDCD92B084B4F
SHA-256:	1C4777FE3A673A05492E27D08032CC91C23AC5389897C9235B09B8B0F5A74DB3
SHA-512:	9A2558F5B28D043721BCEF9D40BB419CB61A04537FF2B119B0DBCC47F245D61FACB1E521A455E1F85E9E8667A1C18EF85C0F45DEB8BDAD06DA5054CB76911920
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"3"})

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "FFTM", 68 names, Macintosh
Category:	downloaded
Size (bytes):	124648
Entropy (8bit):	5.709815787983921
Encrypted:	false
SSDEEP:	3072:wCDEGhHqT2Xl1MWozmQ8zade+7YqyyXSkY:/DEMqaXl1MWozmQ8uSt
MD5:	2AD44A41F978DC4136CA55F5E3ED876E
SHA1:	D99AEBE75F75A0F69A4C5FF4FCF56F78D4BCA260
SHA-256:	2BF71DCE4F302364E2912D12416C34704F337AC3FFE996AB007B67F22C7F232E
SHA-512:	D87A8259726D7BFB1CCDFE1656832810809B85527B53D55CCFA0CAF48519C7FF75BC734F332B78B54C3DCC16B71EA65FA02769C58AC4B20AD0C21519384BE89F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/Gordita-Bold.ttf
Preview:	............FFTM.d2.........OS/2O.n........`cmap{..?........feat@3........dgasp.......8....glyf.\.(...,....head..r........6hhea.3.!...D...$hmtx..t.........kern...w........loca[......T....maxp.4.o...h... morx4O.Y........name.F.........8post&g.........dprop].jf...@...X...........V_.<............n......j..........................(.....;...............................l.................@...................X...K...X...^.2.@................P...........UKWN. . ...(.....(.. .............. .....Z.....M.......S.J...2.L.&.....y.#...,...2...-.......&.l.+.A.3...@.:.1.2.....1......./...#.......'...2.x.....2.....P.<.U.=.z.%.y.D.z.J.(...b.1.......[.@.+.2.[...[...[.Y.+.B.[.Y.[.n.....[.\.[...[.d.[...+...[...+...[...........S...................)...Y.2.....$...(.)...6...S....H.g.(...(.s.'.......(...H.-.5.5...k.H.-.H...H...H...'...H...(...H...........C.m...}...?...c.....+.....9.Y...%.w.0.C.?.k.,...0...,...#.7.X...-.....~.-.'.D.......1...4..........@...9...0.1.....S.4.".C.5.....w.....D...4...........*...

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4242
Entropy (8bit):	4.8337775755284325
Encrypted:	false
SSDEEP:	48:zOGJBSOLgqlT4pw93ddSYw9gTdHT4pw9gEST9gMxHlkwRV:z5iYgqlJ93mD9gTBJ9qT9ggHlkwRV
MD5:	88EB413D8952BBAA79AF30875F40CA2D
SHA1:	D268665DDF0E0B4ADE60DCEA7DB243BD48380118
SHA-256:	0C570422A440B7B191BDE5FCD394EACC257D187077C9246A33D622E0519F30BE
SHA-512:	6EBE32A5D8B68CFCE29C072AB61EC031BEE4BCCDF77011B80E64600D2179C6BEF8839EA229FAC484C6795D386D324DE5B7357BCD9145984BC05C3CA433BAD39B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.css
Preview:	.ps-theme-woosw {.. -ms-touch-action: none;.. touch-action: none;.. overflow: hidden !important;.. -ms-overflow-style: none;..}....@supports (-ms-overflow-style: none) {.. .ps-theme-woosw {.. overflow: auto !important;.. }..}....@media screen and (-ms-high-contrast: active), (-ms-high-contrast: none) {.. .ps-theme-woosw {.. overflow: auto !important;.. }..}.....ps-theme-woosw.ps-active-x > .ps-scrollbar-x-rail,...ps-theme-woosw.ps-active-y > .ps-scrollbar-y-rail {.. display: block;.. background-color: transparent;..}.....ps-theme-woosw.ps-in-scrolling {.. pointer-events: none;..}.....ps-theme-woosw.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail {.. background-color: rgba(0, 0, 0, .1) !important;..}.....ps-theme-woosw.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail > .ps-scrollbar-x {.. background-color: rgba(0, 0, 0, .58);..}.....ps-theme-woosw.ps-in-scrolling.ps-y > .ps-scrollbar-y-rail {.. background-color: rgba(0, 0, 0, .1) !important

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5084), with no line terminators
Category:	downloaded
Size (bytes):	5084
Entropy (8bit):	5.320707733890434
Encrypted:	false
SSDEEP:	96:q/pkbfhjQcrrrIBnJZKBSMFij47uAwsw3s1SCjUi40osqaWasRfPIPewvxbp:4MdzrvuJZ8SMF1uAwjs1x54XCWaqPIGe
MD5:	1EDF0CEF74891E1EBEA946BE92A54A15
SHA1:	D4CEB6EBDBF816C6EDE4118AE7C9B9D9D559CB33
SHA-256:	CD446109B0EA8EEED826AD7B96538CDFF3796E5FEB8D790BA9CEBCC07567A43A
SHA-512:	49589BD7E020F84A65A064AB57EDD1CA678E1C517A7ACEBC7BEA0CCEC82D11C82670B54CA346864371F636FEC12C918D763E5586BCF3868E8C8B795F3AA208A5
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/9689/41659c81436a5726533c.min.js
Preview:	(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9689],{8078:e=>{e.exports=function(){!function(e,t,n,i,a,s,o){function r(n,i){t[e]._Q.push([n,i])}t[e]\|\|(t[e]={init:function(){r("i",arguments)},fetchBids:function(){r("f",arguments)},setDisplayBids:function(){},_Q:[]},(s=n.createElement(i)).async=!0,s.src="//c.amazon-adsystem.com/aax2/apstag.js",(o=n.getElementsByTagName(i)[0]).parentNode.insertBefore(s,o))}("apstag",window,document,"script")}},7344:(e,t,n)=>{"use strict";n.d(t,{i:()=>i});var i=(e=>(e[e.GOOD=1]="GOOD",e[e.NO_BID=2]="NO_BID",e))(i\|\|{})},9689:(e,t,n)=>{"use strict";n.r(t),n.d(t,{AMAZON_CODE:()=>I,AmazonBase:()=>C});var i=n(8078),a=n(6921),s=n(2845),o=n(5077),r=n(8622),d=n(700),c=n(8152),l=n(6091),u=n(7344),p=n(8084),m=Object.defineProperty,g=Object.defineProperties,f=Object.getOwnPropertyDescriptors,h=Object.getOwnPropertySymbols,b=Object.prototype.hasOwnProperty,v=Object.prototype.propertyIsEnumerable,y=(e,t,n)=>t in e?m(e,t,{enumerable:!0,configurable:!0,writable:!0

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072960&val=02le04knpnk5t
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	2.5857114762260935
Encrypted:	false
SSDEEP:	24:JGY7peHU2k7N7DRhoZNtwNKzbEqNpdGY7peHU2k7N7DRhoZNtwNKzbEqNp+:uHU2k7N7YtG8EqNEHU2k7N7YtG8EqNM
MD5:	5C98B31F0E318509324A3E12D7D3F2F5
SHA1:	8011ECFD0F3BB160029CC0CC8DFE6352DF40DDF2
SHA-256:	784A81D7ABBD8E4670546720EB51F5C55607597AA5189F7674558148C08DEA21
SHA-512:	85DED69024B2943A5E2D2254EA03D2F066A5B8195AC644DFF26729396F863D9447C9E4931F16ED658CBD3E23ED9FE8356427DB241F99C2C9EDF151B5F44E64E2
Malicious:	false
Reputation:	low
URL:	https://exchange.mediavine.com/pixel.gif
Preview:	GIF89a............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f3.f33f3ff3.f3.f3.ff.ff3fffff.ff.ff.f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........3..33.3f.3..3.3..f..f3.ff.f..f.f......3..f.............3..f............3..f.............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f....3.f...........3..f.............3..f..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.................................................................................................................................,..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	4.931536576812188
Encrypted:	false
SSDEEP:	3:gH//CQLDUfMHFFjuVCbF/FOiteVwETVJUmGQBIQIyLSgEGITyMfQI9kFNBWvFX+8:iUEfIYFTeVl9GQBX1LSYu3QIEY+OvXlb
MD5:	04AB1335BAA5351DC2A6D658ED6C6C53
SHA1:	D0BF3C87994462E4B4C18380D049CC1580B99BF3
SHA-256:	CFE400827D07ADF576091493A44E367260ABC02433DFD2B7EE3BBBFEF955F6BB
SHA-512:	4DF7A8C9DB62A658FCA6F5E6EE1713792FD2329DCAC198EBBC5E25E97FE8E1E8F6A04A307E6F3F0F14D80203C7D746654FFAF87335FA33DC76B1FED059BAA786
Malicious:	false
Reputation:	low
URL:	https://exchange.journeymv.com/usersync/sync?p=[]&mv_uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&version=invalidate-verizon-pushes
Preview:	<script>. window.parent.postMessage({. message: 'syncUrls',. tokens: {"mv_uuid":"9c050a90-0339-11ef-8f5d-8719b2ab76bc","version":"invalidate-verizon-pushes"},. syncUrls: []. }, "undefined"). </script>

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "FFTM", 72 names, Macintosh
Category:	downloaded
Size (bytes):	127272
Entropy (8bit):	5.654585983236691
Encrypted:	false
SSDEEP:	1536:QVnau0KPWRp9DwwkBlx5DP2GU+1/Dbj3JbndkWVZuh7pey5YiENW54WTSrRLbjAw:QVsimeBxkdNENJWTSrR8LWQwSJbLSZ9
MD5:	C80950CDD170C18C3501A7A371C80F0E
SHA1:	8F793CFAFDA971C40EFA66112A44734F25336061
SHA-256:	1BDE7687CFC0627C32A30EAAEB08422992F6EFE5410B17C022B30495D9ADF314
SHA-512:	729D87F6CFDD531ED70B0952B8A8911B6FEACFD972B10FC13E43D730F5BE2D39068EA84A9808CD43910CBF079BD84F1566D5F395906C468E0ECCAABF7BC6E6E9
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/Gordita-Medium.ttf
Preview:	............FFTM.b.d........OS/2N.n........`cmap............feat@3.........dgasp.......x....glyf.h.....$....head...N.......6hhea.B.,...D...$hmtxw.. ........kern../.........loca..S....L....maxp.4.o...h... morx4......<....name.;.*...d....post\..........dprop].jf......X........~..l_.<...........ev......i..&.....k.................(.....%.&.&...........................l.................@...................X...K...X...^.2.@................P...........UKWN.@. ...(.....(.. .............. .....Z.....M.......8.M...8.=.'.{.'.k.%...0...8...1.......).l.-.3.>...E.$.;... ...5.......0...(.......)...5.g.....4.....9.E.=.H...&.s.H...N... .c.4.......d.B.0.-.d...d...d.U.0.A.d.B.d.O.....d.P.d...d.U.d...0...d...0...d...'.......[...................&...`.......%.k./.....%...?./...P.Y.,...+.g.,.......+.y.P...=.....D.P...P...P.y.P...+...P...+...P... .....y.J.\...o...:...d.....+.....0.`...&.{.A.'.E.Y.,...0...2...%...^...1.......2.-.J.{.$...1...9......./...F...=...........Z...$...?.,...[...".J.{.8...!... ...+...!

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 76636, version 331.524
Category:	downloaded
Size (bytes):	76636
Entropy (8bit):	7.9972186962644205
Encrypted:	true
SSDEEP:	1536:s+GiWKi22qzGIEPxHCkPE6SuyhgAa+Us9kBlV9SHnH/zY8VVS6Mu:c22qz0xLEbtuMeanLY8LSe
MD5:	A0F6B35C2B55BABC93CB9B15791A1D4C
SHA1:	BD5CEA4FA49FEB29A336EE8623B46F8EB5C235B3
SHA-256:	80C7D8D88A91688AA18A1CE39EC33E15AC5E1CAD7C7BE1C5FA3C403F34F1B53C
SHA-512:	ABBC1C2602663A2DCD597162D052D02A40E29264BBFB4C3CA92189BFC136271C055779F567A3556EA2A27449D6D6D1C45C27E86AEB6B7D1D05D524FA4202A2DF
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-brands-400.woff2
Preview:	wOF2......+\.......x..+..K......................?FFTM....`..j.....\..\|.6.$..t..\|.. .....<[..q..".~d...I...vY.....F.n...XS0.Y...0...........c.v...C......WA.e...2Y.6kY..#.vs..N...^/[.}o.mr....p.8..ac....;.....}.8....n.-...d^.....#.F...x".K.o.^2.F.d0.~2..?.....z..{"......eB^..{.[ww.IB...P...`.i).L...=.`......b.2....GJM.g..}.".J.........O....CN..R3.[...eY\|o1.\|.[D..]}.M..%...Q_..~.sg^.?.%..b.(."4F..H....b.x..z..o.~.l..[6....nI...JiI...R.@..U... ..)`....Ri.,gkg........?....b..Du... ."\}.z".....y?........V)uJP..t..w`.....5<?...........Z.. "%RQ.%"..b$F%.g..y.Yu.-....fK..g...n..~..[..#y$..5_-.....U.e.......l...!..o.l..M......b........aI.A.....{.........Y.\|..(.....0............y.F....@.1m8IH......M_. ...tvF........u.Ew....{.I..l.....G5....'0.i....%[..J..>......d%,.!X8.Wr...o.&tY.....U..o._[?o#.X.. r.]X`..%JT....%............yF.zf...;....3.JRI.J..{z...../...`.U_..z.....u.j_;Yo.C.#..`D{..0.;H.a.A..G..C....9.dju.rU.X... ....Y...?...7..Bw....U.=6.3...@..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:QlKTeci3G/VYnTQB:2iXwCbAJ8k7OhAub+u2qHR/8hvC4dxVfbYsUSTAYezkyY1h+gqckvilG+PVCnOfeeazgAulLw5ivhxrCdODMcGsOIYg+&slot=content_2_btf&site=earn-and-excel&path=/blog/how-to-add-a-legend-in-excel-a-com&page_url=https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/&secure=1&sessiondepth=1&optout=&categories=hobbies-and-interests&generator=web&bucket=93&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=25&month=4&hour=19&wrapper_group=3.1.15-1450-SwapCMP.5-beta-control&wswy=0&sessionId=1040263935&page_view_id=0e0d1c1c0a0l170s0x0i1n0u140x0h03&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&velocity=&maxVelocity=801&partnerLift=amazonE6M2&hb_bid=no_bid&slot_id=content_2_btf&hb_bidder=no_bidder&hb_count=0&hb_pmp=0&UR=28&URP=138&OE=0&google=1&native=1&slot_number=2&slot=content_btf&arrival=0&refresh=0&bidFloor=0.28&ccpa=1---&psa=6,12,3&timeout=content_lazy_d_2700&gid=0&inview=1&grow_state=4&grow_version=7.244.0&3pc=timedOut&illr=0&gpp=0-0-0&pps=&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=content&device=desktop&country=US&offeringId=1&adProduct=display&oCpm=undefined"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	5.855593623967662
Encrypted:	false
SSDEEP:	6:YVgV0d/9NNy6VOHfnE0NImXsqJGEW8J8JBMqHTLNvTu7Ld+RddpK2AFn:YKep9Og6Y5qJA8JUM8/Nv1LdpK24
MD5:	04F58B750511CB9F63AA377E4D406835
SHA1:	EDF58424718303C002F7F64D46A44183116EDFC4
SHA-256:	6065DC349710EFB7A65CA0A3831993658459CF2787E3589236BABA2738A83D32
SHA-512:	9B55C225E27DA0F85D14E14AC535FAA68A600A49425816C49A127143049C2E0DD2E2819F7831D2A9B0195A3166286CB66D903E0B76D2CD05C9979E224AF5C773
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=&cpm=0.28&adId=&sk=V1:I1Zck+2bgwMjTxVq:Bd7gZKRZk4vSGUUcBB9dpTkS/g8kn+FN6pGdc+3y4EL5VD/1dZEBee/bLqQWgRVmw8//zUnh8bDmLQ==
Preview:	{"hb":"V1:XZQxJiCbvjgD0afw:nc7IiAAg5Mdi/dpzXL7H3wG1uG8UuISCQ7v88xOPicNcrhfaOjmJpnyysdmMTyNx","adx":"V1:QlKTeci3G/VYnTQB:2iXwCbAJ8k7OhAub+u2qHR/8hvC4dxVfbYsUSTAYezkyY1h+gqckvilG+PVCnOfeeazgAulLw5ivhxrCdODMcGsOIYg+","unf":"V1:OkybaNZAzkzf5s2c:jG/3BnyPfMxqMSZ72hgmccyx889F+fE4oinsRaPngkDzxs5hXnUWeVxj20kTZn4leQ=="}

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17862)
Category:	downloaded
Size (bytes):	283828
Entropy (8bit):	4.710879400927772
Encrypted:	false
SSDEEP:	1536:JSrJVvOpoacQcN8RyfPD3DBUQQWK38zKWk0gfIbwuDzTm+2FkU9BZyxn5HnbzDnf:UVsowPogtb/atCHrNoi4AXs
MD5:	5DCB75002B4A2B548CD43F76CBF6C3F1
SHA1:	F550C2171C9B148928893FEFE7EE9E0C8597A3FC
SHA-256:	96D66A469F5C0058E56DE83E30F5528D62F7984D874D0EFE28237E923FC97DFA
SHA-512:	E526502BD26B3F7E2AE716AD1FFAB95023597526D3F118918207A768D2B27006AC3516E51F43F33AC9D0A245EF187685B8E364083AC2783C28FF07C5D7BE9763
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/dfp/120006/4861501641/1605545600158/adc_stm_space_300x250_animated.js
Preview:	(function (cjs, an) {..var p; // shortcut to reference prototypes.var lib={};var ss={};var img={};.lib.ssMetadata = [...{name:"adc_stm_space_300x250_animated_atlas_1", frames: [[0,502,505,494],[0,0,600,500]]}.];...(lib.AnMovieClip = function(){..this.currentSoundStreamInMovieclip;..this.actionFrames = [];..this.soundStreamDuration = new Map();..this.streamSoundSymbolsList = [];...this.gotoAndPlayForStreamSoundSync = function(positionOrLabel){...cjs.MovieClip.prototype.gotoAndPlay.call(this,positionOrLabel);..}..this.gotoAndPlay = function(positionOrLabel){...this.clearAllSoundStreams();...this.startStreamSoundsForTargetedFrame(positionOrLabel);...cjs.MovieClip.prototype.gotoAndPlay.call(this,positionOrLabel);..}..this.play = function(){...this.clearAllSoundStreams();...this.startStreamSoundsForTargetedFrame(this.currentFrame);...cjs.MovieClip.prototype.play.call(this);..}..this.gotoAndStop = function(positionOrLabel){...cjs.MovieClip.prototype.gotoAndStop.call(this,positionOrLabel);...

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4596), with CRLF line terminators
Category:	downloaded
Size (bytes):	4631
Entropy (8bit):	4.714850680325352
Encrypted:	false
SSDEEP:	24:H3WwfknJBSvLb4QVwanvnXAnAn+ZUuXsHmPZGbmPZGqmVGcAmVGMuGbmVGbmVGBO:lWJBSvLv3GTc7gfUGTc7gfpY9TU
MD5:	E711417ABF3D8D996E096AFC485230EE
SHA1:	516F204292C600421953D203813CAF4E5E6B89FB
SHA-256:	2ADFC5A2EE858CAF1697080460D7A98CA8EC326EEE690400188C94884DBF7790
SHA-512:	9406F47A63AE487AD4300B73113947A741F1C7FEF5FAB59886950A5C491185159F7C1BB20C56A3EC49687A85E2B31FCE53D521EBA49E07D169967EA4710997FD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/perfect-scrollbar.min.css
Preview:	/* perfect-scrollbar v0.6.14 */...ps-container{-ms-touch-action:auto;touch-action:auto;overflow:hidden !important;-ms-overflow-style:none}@supports (-ms-overflow-style: none){.ps-container{overflow:auto !important}}@media screen and (-ms-high-contrast: active), (-ms-high-contrast: none){.ps-container{overflow:auto !important}}.ps-container.ps-active-x>.ps-scrollbar-x-rail,.ps-container.ps-active-y>.ps-scrollbar-y-rail{display:block;background-color:transparent}.ps-container.ps-in-scrolling.ps-x>.ps-scrollbar-x-rail{background-color:#eee;opacity:.9}.ps-container.ps-in-scrolling.ps-x>.ps-scrollbar-x-rail>.ps-scrollbar-x{background-color:#999;height:11px}.ps-container.ps-in-scrolling.ps-y>.ps-scrollbar-y-rail{background-color:#eee;opacity:.9}.ps-container.ps-in-scrolling.ps-y>.ps-scrollbar-y-rail>.ps-scrollbar-y{background-color:#999;width:11px}.ps-container>.ps-scrollbar-x-rail{display:none;position:absolute;opacity:0;-webkit-transition:background-color .2s linear, opacity .2s linear;-o-

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/dot.gif?gdpr=0
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8957), with no line terminators
Category:	downloaded
Size (bytes):	8957
Entropy (8bit):	5.118251404648393
Encrypted:	false
SSDEEP:	192:MxNqy91jdZEKhOvslhWqfO+JlZm7OEHTZFE6GpJYhMAUC6Y7:ondKvslDLJqOm8TNY7
MD5:	D31419FBFF8359D64F78C9C544029ABE
SHA1:	18D9B9E3787E53CCE39674030C9938175AEC4233
SHA-256:	0A7B39C9E8F9D3D22D4DBA505D6FE792AA0093FBC9C0D9CDF05969275372302E
SHA-512:	0B41A1473EC1A8DA24977CD0E1B70D59EDEB1FCFB70253A8DA14853F73EF6FC8BCB5F70894F590FA496DC5FA4D7B4ED0EF9D728493D3C9672566052845B2686B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/polyfill/intersection-observer.min.js
Preview:	!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.IntersectionObserverEntry.prototype,"isIntersecting",{get:function(){return this.intersectionRatio>0}});else{var t=function(t){for(var e=window.document,o=i(e);o;)o=i(e=o.ownerDocument);return e}(),e=[],o=null,n=null;s.prototype.THROTTLE_TIMEOUT=100,s.prototype.POLL_INTERVAL=null,s.prototype.USE_MUTATION_OBSERVER=!0,s._setupCrossOriginUpdater=function(){return o\|\|(o=function(t,o){n=t&&o?l(t,o):{top:0,bottom:0,left:0,right:0,width:0,height:0},e.forEach(function(t){t._checkForIntersections()})}),o},s._resetCrossOriginUpdater=function(){o=null,n=null},s.prototype.observe=function(t){if(!this._observationTargets.some(function(e){return e.element==t})){if(!t\|\|1!=t.nodeType)throw new Error("target must be an Eleme

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	122923
Entropy (8bit):	7.959642986066825
Encrypted:	false
SSDEEP:	3072:ijaBpAnKPWO+/Fv9zJkXQY9chL19F7sfpWhaOoy2wQxRT74eHxWfKeRaQJ:iep9WHjLhLPKfW8ydGH0CeRaQJ
MD5:	2181A9B5D09CD11DC6367141AD4A8DA7
SHA1:	B9A0A335BC47EDFB59D517D2A112582F09793802
SHA-256:	3A4CCE29D32B369DE9D84BD4C26515F5B736111A6ABFEC7FFEDE730373B4B340
SHA-512:	369DF99C87CC41A308EAB1E836EC4603B3E33EB81871916C9B81131D62FF302A6B79858641C8DE4B48C25E86647B23AAE4F8718C5B09FCAFB7688854E1D33050
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/dfp/120006/4861501641/1605545600158/images/adc_stm_space_300x250_animated_atlas_1.png
Preview:	.PNG........IHDR.............H......PLTE,TT\|.Q{.u.....A@JV...1.....$GN...N_H..[rl:yxv2L:.s&U....ad.G......7T?g.....v^8Y_A=p.}.....8..........o\|}q....g..T\SBsq...Ozy...`o<...............d..A3.{.pv.b.f.......Fwr.....RSO........s.-5.......j..$!?7...diW,......\|..}.....!........dx....F..vtjW~....~.t...dw?O........!;C..^........ F]e...x...#,..)......Bnn.....\|dJ.......[.........I.b..I-.S...f2....PN&.?....h..Z]Pc.~..........r.....-.........QQ0_..Fdm...g......`.r.4..................'..2\|....w. ...xu`..y]}.......]............s2.. .....\.....(.."t.......'...v...>C..'.vp...w........t..t....'D0.......\|...........\|...z3x..\|.........'.............9=..........-9A@_....................$...............44.....t.........85%...j+@..........................................+:y.......+w.3.........4^a..yS....tRNS....B..2......T..0.y.....K.0.3.M.3................mh.................&4%..... ...N.N.)...9...._....4..!...+2..h?..8K.).Zv#..v..........8.$...U.1m.&....(...cp..>...... ..........5..

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2278), with no line terminators
Category:	downloaded
Size (bytes):	2278
Entropy (8bit):	5.673637042729034
Encrypted:	false
SSDEEP:	48:Czb8VvPu8zFnShezbzC5lqo9uWTKySMqB0QevI6beBDq:C38Vvm8z0hezbwEo93lDv1bWq
MD5:	08A1D92CD7E805752134EC410B1E20AA
SHA1:	B623475A2B368C6A29CFC340777BBF8A8E58065D
SHA-256:	67CFB6BD1AA5144B19ACE3E1E9110766D06506A06142D0067588B67DC9EB8286
SHA-512:	8AC8D980EE85A9E13929E9CC63FCE2A6BBED326A3828B679B54FBCF0E3E11BDFAA8BCE52EC64129AAD11D2E767C220081548E5BC8C69D6346D1DA3B60B919537
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=38137443&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://io.narrative.io/?companyId=673&id=pubmatic_id:0F7B5FEF-69AD-46C6-81F2-A260D651EAD7.');PubMatic.loadAsyncIframePixel('https://cs.iqzone.com/e6130557b1b000792deef390abb43b4f.gif?puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&redir=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MTgmdGw9MjAxNjA=&piggybackCookie=[UID]&gdpr=0&gdpr_consent=&ccpa=[CCPA]&coppa=[COPPA]');PubMatic.loadAsyncIframePixel('https://gocm.c.appier.net/pubmatic');PubMatic.loadAsyncIframePixel('https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://si

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 491 x 299, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	8426
Entropy (8bit):	7.652316403632196
Encrypted:	false
SSDEEP:	192:f/ZVhOlWlzkBscT0ot50B8ICsbal50Nlsn1U0N50eePNcEhJ8zJd6fgEfZcYvVaf:f/Z/OlWl4ihBhCsbxw15MJPRJmrXoaf
MD5:	FF5ED776524269720C90D4FF63ABB478
SHA1:	8AE843312341D5A05860F2138EA66D928F89C851
SHA-256:	F3EBCC91F7D20AB6421CF3042BB58D8D9EB303E9864C5521F9BD7A4C013EEA85
SHA-512:	AD6F93AD6CE0EF76B2B8EE5D2C6A6DCD23989E3536FE10B727DECC464239350A8E6A511C70D198D7CDAF21077C2D19CF644DAB2D80DDE44FC243D7C02717D841
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/5f8252c4-09fd-40a1-ae03-1d498f9dedfd.png
Preview:	.PNG........IHDR.......+.....qy<B....sRGB.........gAMA......a... .IDATx^.An.L....m].g.7}.....B.....+..)....;.<.E%^.U..BT....6RID...sT=...g...'F...?...\\|.s..w.K........q.np...\\|.s...%..k...._.g.1...~FS...<v...c.3..g7.1...7.1...7.1......?.7.1.<'..h...1..\........c..7.1...7.1...7.1...7.1...7.1...7.1...7.1...7.1...7.Y....o...................n.L.Zte..jNi.....C...y7............5..%....O.uY.w.K......."npsg......g.o<.q......U...l...h".1..A.....M1h.I...d<7_(..k..<.x.f{>...Z..\|0{.n..q<.8..'.....7w..n...b..g..d...ak.,........(..[.....M..<. .f......:g...7....i..h..>..^.7j.f).^...T...b..{.\|}.8...~.;.n..j..x.s.0..B.[... ..o_......^.%Kd.}.VYvY.T\|.G.......bm.hy:..L...g.j.......nps.npsg..V....B.l.../..6x8..{...+npsw.7x.4..f.m.UbSP+,[..[....<g..?9.J.V_....Kd...P..c......g4u....v>..V.9....q..d.....<..k.^..nm/..]~C=.-.4v....\.....s..:..1...7Cl{-....'w.-....Y.C.....q..n..O...[./..L....K.........zH.\|.7..3YyD..}....O..k)....$..k..3.BA..<...._.w..m....W.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31440
Entropy (8bit):	4.901085309661771
Encrypted:	false
SSDEEP:	768:tB5BAYdGfEGiE5iESt0vtqVZc2b4qeUPZGsGke0:tBArhvtaZcfXMMsl
MD5:	330CA57CDE4DDB9985803F8CD643A9E1
SHA1:	8FCFC9C83CE42662EC654DB7CAFD8FB12C0111F5
SHA-256:	DABA7B5CD8FBAE9172642D3CB30FD03303DD830136064DFCBA28D9C396446EDB
SHA-512:	759450592FA1C0F465234AB00A370D25B8F505A07A05C99191F040DF3A20D657B7258DA9BB4D312BA809E1F1CAD20FD8115BA706AD331D26C12F273DFB7EFEBD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/packery-mode/packery-mode.pkgd.js
Preview:	/!. Packery layout mode PACKAGED v2.0.1. * sub-classes Packery. /../. Rect. * low-level utility class for basic geometry. /..( function( window, factory ) {. // universal module definition. / jshint strict: false / / globals define, module /. if ( typeof define == 'function' && define.amd ) {. // AMD. define( 'packery/js/rect',factory );. } else if ( typeof module == 'object' && module.exports ) {. // CommonJS. module.exports = factory();. } else {. // browser global. window.Packery = window.Packery \|\| {};. window.Packery.Rect = factory();. }..}( window, function factory() {...// -------------------------- Rect -------------------------- //..function Rect( props ) {. // extend properties from defaults. for ( var prop in Rect.defaults ) {. this[ prop ] = Rect.defaults[ prop ];. }.. for ( prop in props ) {. this[ prop ] = props[ prop ];. }..}..Rect.defaults = {. x: 0,. y: 0,. width: 0,. height: 0.};..var proto = Rect.prototype;../*.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3017
Entropy (8bit):	5.413401476958645
Encrypted:	false
SSDEEP:	48:kHbL4UDmzWGO5zBkGOox1GOeandNb7GOh/gr51jGO+o260uGOUj5MueOSy9DOGO3:I4USZ2B7bxkXqDbiSbJNxUDyPYSkYA
MD5:	CBFEBFFF3F0C0E3CD297877944C5AC86
SHA1:	4A681FD0A9BA70A89D68F04D28B97CCD6C56F9AB
SHA-256:	2A53BDF7C73B53F2280A78186F3272E0CE5A139802A7AB286B4563330CBF416A
SHA-512:	5B0B4B8A0033C21B2C6B6223D7C9D16362E3E5B93B27F82FC4540B838206B53C49D62E272CE5DE1A5C2746098383E520AA1FAD3726E88554AE51C83B98C9301B
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=&gdpr_consent=&us_privacy=1---" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyNi1kMjU1YWM2NDM3ZDg=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:none;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13425)
Category:	downloaded
Size (bytes):	13676
Entropy (8bit):	5.279033562304028
Encrypted:	false
SSDEEP:	384:ZdUbeQS7Rgx9BU0m/XCcif65W/1mXA82FHpx:Zib67gbhm/XDif65W/1mXA82Fn
MD5:	AA1FB220CF781D4CC3DCC3D8CF04428D
SHA1:	15F0AED2F5869A58664A942D0EB0A62C7D1F9300
SHA-256:	BAB57596E67C24F23305BFBCF2F313F2AC1B17C8C16C722BC10F304E086D08EC
SHA-512:	35348F2F2C5525491DFB45C5C6F8DF9B95B95C35FCCCD2FDAC9B58D1BC188337A301B0755BE56713488BE54CE7D1BE0E92642970CDE724EDD52E9978950516A2
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/css/swiper.min.css
Preview:	/*. Swiper 5.4.1. * Most modern mobile touch slider and framework with hardware accelerated transitions. * http://swiperjs.com. . Copyright 2014-2020 Vladimir Kharlampidi. . Released under the MIT License. . Released on: May 20, 2020. */..@font-face{font-family:swiper-icons;src:url("data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 193 x 228, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5776
Entropy (8bit):	7.91404381500215
Encrypted:	false
SSDEEP:	96:2OG7WV0Q64aAFYrUw1OZYbCW2bAg3txWcLZhOCivWTTmQ2UeBHUBp:g7WOQ65A+rZkZu2cg/1ZhOCwWTq12
MD5:	868B4D4397961A21CFBF9DCF25D29CF4
SHA1:	33D0EDCD2AEBD6DA53B98D4C5C23601728605C46
SHA-256:	17448CF50455859A4591B8566AE9334D4A57AD4060B891B8B797A219DBE84644
SHA-512:	5D417DC89DBD95BFE4002F4D403C1A28F7DAEB47F94F5947413405B898E40AC2AD66B319C7A4580848DB33F3B2155DACD87F088FAA574495ADB2944566320B4C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............!#@.....sRGB.........gAMA......a.....pHYs...........k.....tEXtSoftware.Paint.NET v3.5.100.r.....IDATx^.......0p....I....X/p..AP.jR1..L!e.......((.K..RV/".HQ.Px)b...Q.q../XB."..e.cY......;;......S.5=...?....N..2`...s.q.!....>...z..i....s....O.>....k. .C.D.y.f5l.0g.>...!....\|......]}....U.w...=..G!Dp..1-.....v.r........}O.8...."@..dA.E@H.P..z......}.W..ub....81o.O.....?zi6..$U.'..1~p..5...8k.l.J5.;7:k.@..3....G...H..T)D.......P..z(.b=...;.$+z$.'...%d..Y.H....}M0..q...\....O......... .GO............8m....Sj..5.n.u....).:_:.V.=..g.R.....g...._...f.P..u..[^...M.S]y....8..9f..jw.^g......p]....w.U....N./.~.VlxK.......z..Jzl...........h.}#...N.[. .1a.-..y...?..>o.s..p..S.w.rb'..o.[2.2..!s.,.nfN..N.....t<2)."..........%.0...o}[..Wr..J[..C...O.<.:g....Lp.dt..;.:[..................Q..._.....?}..#.\|S/....qb.$7"H[.@J....H/.....!! .....E..D...d..;.?j/...a.w..W.u.D.._....}..-......!..W.....u%.K...A/...a:..y...hK...D.pm

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	122923
Entropy (8bit):	7.959642986066825
Encrypted:	false
SSDEEP:	3072:ijaBpAnKPWO+/Fv9zJkXQY9chL19F7sfpWhaOoy2wQxRT74eHxWfKeRaQJ:iep9WHjLhLPKfW8ydGH0CeRaQJ
MD5:	2181A9B5D09CD11DC6367141AD4A8DA7
SHA1:	B9A0A335BC47EDFB59D517D2A112582F09793802
SHA-256:	3A4CCE29D32B369DE9D84BD4C26515F5B736111A6ABFEC7FFEDE730373B4B340
SHA-512:	369DF99C87CC41A308EAB1E836EC4603B3E33EB81871916C9B81131D62FF302A6B79858641C8DE4B48C25E86647B23AAE4F8718C5B09FCAFB7688854E1D33050
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............H......PLTE,TT\|.Q{.u.....A@JV...1.....$GN...N_H..[rl:yxv2L:.s&U....ad.G......7T?g.....v^8Y_A=p.}.....8..........o\|}q....g..T\SBsq...Ozy...`o<...............d..A3.{.pv.b.f.......Fwr.....RSO........s.-5.......j..$!?7...diW,......\|..}.....!........dx....F..vtjW~....~.t...dw?O........!;C..^........ F]e...x...#,..)......Bnn.....\|dJ.......[.........I.b..I-.S...f2....PN&.?....h..Z]Pc.~..........r.....-.........QQ0_..Fdm...g......`.r.4..................'..2\|....w. ...xu`..y]}.......]............s2.. .....\.....(.."t.......'...v...>C..'.vp...w........t..t....'D0.......\|...........\|...z3x..\|.........'.............9=..........-9A@_....................$...............44.....t.........85%...j+@..........................................+:y.......+w.3.........4^a..yS....tRNS....B..2......T..0.y.....K.0.3.M.3................mh.................&4%..... ...N.N.)...9...._....4..!...+2..h?..8K.).Zv#..v..........8.$...U.1m.&....(...cp..>...... ..........5..

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	136
Entropy (8bit):	4.788950297650069
Encrypted:	false
SSDEEP:	3:YTyLSKlpn0neJpE2ZLlABqPVXDKm2HJHxlXGugTFMSuXF/Y:YWLSJkEoaB4dMLmMSuX+
MD5:	4532F617070C0101DD7D5A960D125226
SHA1:	679A96AD2F46B902DF9F187F86B48E6B53817931
SHA-256:	CDE21C6596C667A5762EC8A0A162763BFF25EB6E73AA356ACF1199631BD685E9
SHA-512:	6102D35F0E47794BF4840FDC5670C9FA506E3211F840016F49217EDD3DBF87689F1257581438F58ADC9446C9A525998887377EAA2D1F45B44FF4C43261464596
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/versions
Preview:	{"version":"7.244.0","betas":[{"growLabs":true,"startedAt":"2024-04-23T21:14:07.746Z","trafficPercentage":40,"version":"form-density"}]}

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	325
Entropy (8bit):	4.796907837111399
Encrypted:	false
SSDEEP:	6:UpfnWgOupXAF9huOrAI1wXSEQZ7GOh4dAGINzWMJhLJYkX6clRSF/kfv:Uhn8u69hdfHE+rEuzWIhXqclRS5kfv
MD5:	A180F0097A26FCB5F85A5A69AAE7A1DE
SHA1:	F979ED73D9E573FCA9D1A65C34033D3EF125A7FC
SHA-256:	C501CD7BB5FA16DFF50C2453A8FD33176896193ACD260869C35AE282183C2A82
SHA-512:	FF30AB4F8B0B0B345563780CB33B4D13823C328742FB60807DE19B8CD3B603D652F18E55597FB671D459FA0F494DF9FE95CF8126D16F5E7028C3C33979C21E73
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall-child/style.css
Preview:	/.Theme Name: Edumall Child.Theme URI: https://edumall.thememove.com/.Author: ThemeMove.Author URI: https://thememove.com/.Version: 1.0.0.Template: edumall.Text Domain: edumall-child.Tags: editor-style, featured-images, microformats, post-formats, rtl-language-support, sticky-post, threaded-comments, translation-ready./.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11114)
Category:	downloaded
Size (bytes):	11149
Entropy (8bit):	5.198585096576165
Encrypted:	false
SSDEEP:	192:UpFaJEcGiFmSyusTIFugIUDymQPWb9tb2Xm/8cZ9T8MYFS5EKinmI:uFeEdusaAnJm8cb8tS5EKinmI
MD5:	09F403772E5058BE4DC98705738E4B21
SHA1:	65D1A7709C379422F85D7D414A690D9FA9406EC3
SHA-256:	E2F864C903B353B2411D34C88B33303CC20B084312C6EE577A13062A1DA84B48
SHA-512:	C1C5B0C3DEC810E0CCCDD1A659F60B12AB8FCE0D0F1C5859D49883E148949BBAD755E5D5AB91A8A4CD2B6CE47A042C8E9C1DE9B4977F3CFC18FA18DE9286B776
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/quicktags.min.js
Preview:	/! This file is auto-generated /.window.edButtons=[],window.edAddTag=function(){},window.edCheckOpenTags=function(){},window.edCloseAllTags=function(){},window.edInsertImage=function(){},window.edInsertLink=function(){},window.edInsertTag=function(){},window.edLink=function(){},window.edQuickLink=function(){},window.edRemoveTag=function(){},window.edShowButton=function(){},window.edShowLinks=function(){},window.edSpell=function(){},window.edToolbar=function(){},function(){var t,e,u=function(t){var e,n,o,a;"undefined"!=typeof jQuery?jQuery(document).ready(t):((e=u).funcs=[],e.ready=function(){if(!e.isReady)for(e.isReady=!0,n=0;n<e.funcs.length;n++)e.funcs[n]()},e.isReady?t():e.funcs.push(t),e.eventAttached\|\|(document.addEventListener?(o=function(){document.removeEventListener("DOMContentLoaded",o,!1),e.ready()},document.addEventListener("DOMContentLoaded",o,!1),window.addEventListener("load",e.ready,!1)):document.attachEvent&&(o=function(){"complete"===document.readyState&&(document.d

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	3355
Entropy (8bit):	5.139002233010051
Encrypted:	false
SSDEEP:	96:5frWjAloia+WBo5eGu2MmQywoZOWFrsmA8ajfNB8YEH:VrMMpa+WBo5Fu2MTywkFrs38ajfNBA
MD5:	324BB5FD08DB88237FD5F4D62EC8BE55
SHA1:	B93BC1781C660C3C42E5CDF1E4CE9FFA8F83E06B
SHA-256:	A561726B0D4C7E467341E9FDBB0FA90A80F9423EDA485B5CDB1C3584B2344CED
SHA-512:	EC229F27FD2D4B017B6E48F56F4B7080BE175CF1CB1A576AEE2990265BFE7350307B27144A7CAC84375F76A944F569C82ADD18AAC7EEA908E1A498705542BC3C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/matchHeight/jquery.matchHeight-min.js
Preview:	/. jquery-match-height 0.7.0 by @liabru.* http://brm.io/jquery-match-height/.* License MIT.*/.!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):"undefined"!=typeof module&&module.exports?module.exports=t(require("jquery")):t(jQuery)}(function(t){var e=-1,o=-1,i=function(t){return parseFloat(t)\|\|0},a=function(e){var o=1,a=t(e),n=null,r=[];return a.each(function(){var e=t(this),a=e.offset().top-i(e.css("margin-top")),s=r.length>0?r[r.length-1]:null;null===s?r.push(e):Math.floor(Math.abs(n-a))<=o?r[r.length-1]=s.add(e):r.push(e),n=a}),r},n=function(e){var o={.byRow:!0,property:"height",target:null,remove:!1};return"object"==typeof e?t.extend(o,e):("boolean"==typeof e?o.byRow=e:"remove"===e&&(o.remove=!0),o)},r=t.fn.matchHeight=function(e){var o=n(e);if(o.remove){var i=this;return this.css(o.property,""),t.each(r._groups,function(t,e){e.elements=e.elements.not(i)}),this}return this.length<=1&&!o.target?this:(r._groups.push({elements:this,options:o}),r._

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4715), with no line terminators
Category:	downloaded
Size (bytes):	4715
Entropy (8bit):	5.206152047319561
Encrypted:	false
SSDEEP:	96:Il2PuGtR2RtwVTVGa8rCR2cZ+/8BEi9c3s/erc/ima9:/dtR2RUPF2Yk8d63s/er2c9
MD5:	107511EB8154151581C530D3D9391791
SHA1:	4C709DA1D4DB51DE52398B85D56F3D8A8D45185A
SHA-256:	16706413CF90E01B4E903AC74A825F9E0F2B7CFB4E0CE99C7C4A9D274A4D2EA2
SHA-512:	29BB41EE3EF2E2E77D3E95834F31D7B7D1D2526F53AF63202429C58497EF7B7235389BC754E59A4B4F8086C6B6997D62E588A668AAFCD1149387EA613675EFF2
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/swiper-wrapper.min.js
Preview:	!function(C){"use strict";C.fn.EdumallSwiper=function(a){var h,x=C.extend({},{},a);return this.each(function(){var a,e,i,s,n,t,r=C(this),d=r.children(".swiper-inner").first(),l=r.data(),o=d.children(".swiper-container").first(),p=l.lgItems\|\|1,c=l.mdItems\|\|p,u=l.smItems\|\|c,v=l.lgGutter\|\|0,w=l.mdGutter\|\|v,f=l.smGutter\|\|w,g=l.speed\|\|1e3,m="auto"!==(p="auto-fixed"===p?"auto":p)?p:1,b="auto"!==(c="auto-fixed"===c?"auto":c)?c:1,S="auto"!==(u="auto-fixed"===u?"auto":u)?u:1,m=C.extend({},{init:!1,watchSlidesVisibility:!0,slidesPerView:u,spaceBetween:f,slidesPerGroup:S,breakpoints:{767:{slidesPerView:c,spaceBetween:w,slidesPerGroup:b},1024:{slidesPerView:p,spaceBetween:v,slidesPerGroup:m}}},x);m.watchOverflow=!0,l.slideColumns&&(m.slidesPerColumn=l.slideColumns),l.initialSlide&&(m.initialSlide=l.initialSlide),l.autoHeight&&(m.autoHeight=!0),void 0===l.simulateTouch\|\|l.simulateTouch\|\|(m.simulateTouch=!1),g&&(m.speed=g),l.effect&&(m.effect=l.effect,"custom"===l.fadeEffect?m.fadeEffect={crossFade:

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65513)
Category:	downloaded
Size (bytes):	365570
Entropy (8bit):	5.257670130556994
Encrypted:	false
SSDEEP:	3072:SfCiAIilVSPMJf27yVDYRS3SHWnS254Zt/LQC79wZM1tJCHqHEQB0j:S6xIuVSEJf2wDYRS+Z5LfCZ4YHIEQ+
MD5:	586CE1E095C0F8B0CCA1439FCEFE6B6E
SHA1:	09956D2C3CA679DB87BCFA5804B2D14F5D7FDC58
SHA-256:	4A74739272C2951DC668DC3DA0DE287DF3061623DB5D04CFEEAD3214B3CFC206
SHA-512:	DED95E827A682034EFF491DCF7224EF309E4AC892AED63BB4092E2E587DA7939991EF7EB6F5B70330A93E02D0AF012C16DA891E8C3A8EFBA4B5CED7F3F3B5C2E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/tinymce/tinymce.min.js
Preview:	// 4.9.11 (2020-07-13).!function(V){"use strict";var o=function(){},H=function(n,r){return function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return n(r.apply(null,e))}},q=function(e){return function(){return e}},$=function(e){return e};function d(r){for(var o=[],e=1;e<arguments.length;e++)o[e-1]=arguments[e];return function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];var n=o.concat(e);return r.apply(null,n)}}var e,t,n,r,i,a,u,s,c,l,f,m,g,p,h,v,y=function(n){return function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return!n.apply(null,e)}},b=q(!1),C=q(!0),x=function(){return w},w=(e=function(e){return e.isNone()},r={fold:function(e,t){return e()},is:b,isSome:b,isNone:C,getOr:n=function(e){return e},getOrThunk:t=function(e){return e()},getOrDie:function(e){throw new Error(e\|\|"error: getOrDie called on none.")},getOrNull:q(null),getOrUndefined:q(undefined),or:n,orThunk:t,map:x,each:o,bind:x,exists:b,forall:C,filter:x,equals:e,equals_:e,

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1033), with no line terminators
Category:	downloaded
Size (bytes):	1033
Entropy (8bit):	4.914938004770671
Encrypted:	false
SSDEEP:	24:Yc4wWoCl6B1rXXLbOlnhPC5SviyOp1NGQ1oo30LLGZMn:H82XLICt06M
MD5:	C14E508236D4CED16AA19CFAF234961B
SHA1:	98597AC65ED47FEE37BE640AE1ED70F1962E2ACD
SHA-256:	637CB36B622567BE7413D4BB30C893DDC431F8ED98FF8A92CD5F2BFA14F914CA
SHA-512:	E4A5CC29347B7C75E99FE33FF75035E6AC004787EBAC68EB0E0A94D9F8FBE33B5E632A87471F7B9B2839F687D4D4FD11F7F7F62227516DBF375E6AC6AB3F383F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/nice-select.min.js
Preview:	!function(n){"use strict";n.fn.EdumallNiceSelect=function(e){var i="focused",c="selected";return this.each(function(){var s=n(this),e=n(this).data("select"),t="",e=e.fieldLabel?'<span class="label">'+e.fieldLabel+"</span>":"",a=n('<div class="edumall-nice-select-current">'+e+'<span class="value"></span></div>');s.children("option").each(function(){var e="item";n(this).is(":selected")&&(a.find(".value").text(n(this).text()),e+=" "+c),t+='<li class="'+e+'" data-value="'+n(this).val()+'">'+n(this).text()+"</li>"}),t='<ul class="edumall-nice-select">'+t+"</ul>";var l=n('<div class="edumall-nice-select-wrap"></div>');l.append(a).append(t),a.on("click",function(){l.addClass(i)}),l.on("click","li",function(){var e;l.removeClass(i),n(this).hasClass(c)\|\|(n(this).siblings().removeClass(c),n(this).addClass(c),e=n(this).data("value"),a.find(".value").text(n(this).text()),s.val(e),s.trigger("change"))}),n(document).on("click touchstart",function(e){0==n(e.target).closest(l).length&&l.removeClass(i)

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1162805
Entropy (8bit):	7.9448762704303455
Encrypted:	false
SSDEEP:	24576:NDCWOVJjk06sDN4FnTD7fttRds+hKIESVJEB9BHxLWD/Y4JSly:NsJjpeJv7fzLZhKJSUBRLWDd
MD5:	0279CF6E2348E2EBCE3FCA57D219C3F8
SHA1:	453FDC527BBB650C30ED4BE0754F81F99D3EDFD2
SHA-256:	952D2C420616C4CDBF85CBE7DDE65F2D36A15FDF48226BCD85FAA2E809713652
SHA-512:	1ABACCE48BE1F6C847F2290BF98307F0BC8B14F39C226B38E43472E9FC27481A9F7453C0E44B819EB62B2A8FEE547BD162E0280A023C356CF121F3C2249FE070
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............}.V...NeXIfMM..................>...........F.(.............................................g....iDOT...........h...(...h...h..^\|Y....@.IDATx..G......`...z3......3..^.0...0....L5.T].RI%.I,z..i.Lz2i.V.M&.0..6....>^D...3..9.~.EdRJJ...[\\..w.....9.~..n...g....}..wH.v[..s..o.F...oi..6.s._.m..e.Le......g.U?.o.....G...w.;.y.:....O..g...g..-.m~.._..a..f[X.)..);...^....G......M.w7...O..mf...i..n.4....S...r.S.O.O..?U..........es\..0m.v..........T/..R....D]w3..a.,......."?.h...D..O...a..6.v([RY..ui[.....;.....M..)\.lB.z>a.r.;..L......?5..-.kz.k..M............??.d.....E;..'&.j-....K..X..[.~.m....a..../7o.+..k..T.m..v..m{..M.7.x)...Vk.........f...;.....G.-=..~......?.w..njf....'p..&.?.\|...l}o.............]\|.o..E.?.E.=e.......U\|.DxJ.0~....;....\|.5."Oa...h#.i.L{K....y.3<.p....T...Qns...7.n:......c..'..w_n..ly..hW.Y.7.....MW.w.m^i.S;E....B.K;.y.......hs....\|...2.Ou....&n...#.....).xv..Us....je.j.....V.N.\.~.^O

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViem/YM:8WiIUemQM
MD5:	A825E31D18F2FF5845D245FED741E9F1
SHA1:	6E196F0B42376389AE1CC16E8F2D0C886940FAD7
SHA-256:	5D7C7D25A0DA74C0DD466120C3C09BD94CB982FC66EBC4A78675339F37323BF5
SHA-512:	3899089984B75089171A7A7DF174C75FED1E09CDB58C61BC0C4573B4716F5AE0274D0A63FAD5077E782BA4BF3EDF786102EE18EE4E4BD8DA93A0E12D85C7DA88
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"2"})

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1190)
Category:	downloaded
Size (bytes):	1225
Entropy (8bit):	5.048134393015752
Encrypted:	false
SSDEEP:	24:Q775J7w/Wbiz7vBmGa1RIYTu9cwMY3l0SSCzfIZ7kJ7YRvKe1x3:Q7z1euMY69cQiSd07kJEwe1p
MD5:	EE421825FF8609D7BB46511E65281474
SHA1:	AA84AD1EB7806CF3072B08A6BD775DDFCF011933
SHA-256:	4213EBA6C464B3CA6FC71C748E2BA99F63F7F0B624199FD44127DA67E40A3003
SHA-512:	D21E32941508BDECE1C48540CEE211CF7405D7E9BEA3DDA561EE0D4C7B9855BAD29E51DEBEA334706AC395FAA6820452E4CD9DF341734C9D5B06BB3B2B6EE3F8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/dom-ready.min.js
Preview:	/! This file is auto-generated /.this.wp=this.wp\|\|{},this.wp.domReady=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s="2oG7")}({"2oG7

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17484), with no line terminators
Category:	downloaded
Size (bytes):	17484
Entropy (8bit):	5.223369162348979
Encrypted:	false
SSDEEP:	384:8Vrn5Fru8dqCDCl8J2RfyoJaOjtofZk1kC4cSWDTkZJwkXI/:8pa8dqCDCiJ+qooOKhIkCHSWDTWp4/
MD5:	230FE9426CA729314526F167679DA3C0
SHA1:	9F438FCC78C9C2405A962A9808FC5B7E1791C7D3
SHA-256:	27961AB8C37CDDAD89230364167C048C6377A80E38542A5FFBCA600FAF4098EA
SHA-512:	9699E84143E68BEE6B8B7C6A07F25BF2188658C47AF5284607F93135331FB929CE953956D9C6236A44B1CE4DB3564A97F568D7CCA6E9F6EE5E80EB9C8470D32E
Malicious:	false
Reputation:	low
URL:	https://pghub.io/js/pandg-sdk.js
Preview:	!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(r,o,function(e){return t[e]}.bind(null,o));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=0)}([function(t,e,n){"use strict";n.r(e);var r,o,a,i,u,c=Object({name:"P&G",pixelUrl:"https:/

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=50019&user_id=8a559fd8-8b7f-07af-2805-2cf89ad22896
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=fd088d8c-f63e-4f27-85bc-7c0a8a324fab
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_hm=22210ca790f083ee2g42hg00lvfmwkrq
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1498
Entropy (8bit):	5.330973669840757
Encrypted:	false
SSDEEP:	24:kR8upbyDDRLdGQNrUcKDZ/grL10jLFBD0GOIrdXGOGOIvDxx1GOIiDedzMDblK++:kHbg5G4IgrKjhB4GO6WOGOmx1GOigv9A
MD5:	781A05E1950F9904FA89917B24A29631
SHA1:	6CE94AB82EA743A8C5B66CFAC18CA6A826DEFD02
SHA-256:	045AEFF37C67C903C31D46C4B25D9FECB0D5365EA49C0F7523789BF6EB4B8395
SHA-512:	2FFFFFD9A74C1F80BFE816EC2A6876CDA0F372AC6430311672B0E9CB5D598318858DB991A897BC1FB150CE777FB25E8ED369C098C8D3606F917DED9A5CC3C13B
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<iframe src="https://tg.socdm.com/aux/idsync?proto=gumgum" style="display:none;"></iframe>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=0&gdpr_consent=&us_privacy=" style="display:none;"/>.<iframe src="https://creativecdn.com/cm-notify?pi=gumgum" style="display:none;"></iframe>.<iframe src="https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum" style="display:none;"></iframe>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyNi1kMjU1YWM2NDM3ZDg=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:none;"></iframe>.<img src="https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 190440, version 331.524
Category:	downloaded
Size (bytes):	190440
Entropy (8bit):	7.998716181841799
Encrypted:	true
SSDEEP:	3072:pPG3damMECI+BSCT0JNnFIKey0cmAyYvSarX7RTUjicNEM3VqeuDxa7yymVSMcVM:lyhMEKStJNFpetpcvSksiQ3cbxHVSMcy
MD5:	68C2F74F76D4236722607D6EEB8B105D
SHA1:	0F2C00F00EE101D7A976241F41C2472FCD373B19
SHA-256:	9A8ED4A9AE2E4BF2AF86D128B59C0C65E4992B3181E73851FF7D9CDCA3833586
SHA-512:	E129C0FA2B11E2B41F216BDB6CEDB919B5E2722DFF59E7017BC4D4408F3636E65811C7D7A780A8A971CA048F149BD6A052C58F84C68CBE6C68697917ED1FC4FD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-light-300.woff2
Preview:	wOF2....................K......................?FFTM....`...........J.6.$..r..x.. ......'[...C../..`.m...-....R1nyt.M;.I..D........7.Y.j.........].Bd....I...VT.DPu.6MK..u.T..-...'..X.2K............h.m.5?HAGi1+"j...A.y.9.z^....S...B.A..dN.._..>_`.R..~...;".@F&IE3#".I.5IHB...$u..Z...;..[..$D...\.YQ..0....=.r."kho.](g..C.....\%.$.....Ev.S[.X.u...a.(.j..}.]...+.'...{..}g.?.K.m:...J.=F.c...I..b.K....?..p...Z......G..b.y..........yE.;.xC./..O...n.rI...KXa.1.9H...X$..N.".Lp.:.'..cW.1..l.U+j...:.rui..B<.Z...Z.@.P......,..0.6g. ...KE.I,.......),.$.Nx'..'8..W:.....H.-..-....FD..fL......4....=v....S...T..9.....$..@.1r...-[..hn."..X.....k.6`.v.F...7De&hc..@.h.a4.U.o..........#.7{.h.1..aVQ.P.u..\|..a...E#.....O....%3H.$1B)..R......v......gf......[Z.J^..D.&_0......w.@[...LP.i..g....@.......6...................)...u.M.yz.7.....Bv...Ys._.`.Z......].rx .sHD........;.......2..O.o..m.$1..:L........c.@............;@P} ...V..mVUp..nk.t;;...0v. ._.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1845
Entropy (8bit):	7.1079290432025735
Encrypted:	false
SSDEEP:	24:U8pxb/NEcalV78vlnAlObhhvmu8a7WpEG3dWFW7rZ5ZiXriZVJzljkYpeeU8n8Ja:U8TNNAMbh18fEGN97bZV92YQiCoD
MD5:	2C677C50A5B258F67A585FBB6103AE24
SHA1:	3AFAE105B2198E56F06B95AF2AB7A6CC60965367
SHA-256:	6E7EB7E6D433A6A6F77F111A8FD60F6949CEA0D6FAEA73DEA46F4F669BBF488F
SHA-512:	C2385E8AAA165C55B0C133E1FC041520806AF0FD6E299565FC4A6ACC1AAE943BD712F76ACAC6C83E681CC4399E964788C724D0D41CAF6180B319393D1EA826A9
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/cropped-Earn-And-Excel-Favicon-32x32.jpg
Preview:	......JFIF.....`.`.....C....................................................................C....................................................................... . .."......................................................................Y9<.G..@e..L.P.....u...R.........................................^...r.5q..K..v.:\..K.5......GzBL.h..A..W^y..........y.L+.....H.TI.....&..........................!..."#a...........?....5F..5....o...J.}d.YB..$.B.O2J..<'.Bu.>m.....#..M.v.. "..x.)y........{.:N.O..Y.Xb7..[.}..E.V..-.y..).>?..c....R .V.LpX.6%..A...."..............................12........?....s..s_;.d/]...w>.~C...MHk.....3...(.s.h.....>.{GO.........i...!.z.{..#=..Z!.1 .../L.y.'..px.ae.-...93.cCB.umK..Ta+^d6Z(..9..L^.........f.YP.A#F..1e...h'.J.{AA.u..[................................!.."#1.ABQ2CaR........?.....1.......3....l.O.{t..y.%..).c..wb?.Gb.......?.i...y.....F.......>z..ge..f.g......2........F{uwV...E...+.r..t..G..7..Y8.<q..gL.4..$..,f.9.6r^.....8.....

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16386
Entropy (8bit):	6.016069358255158
Encrypted:	false
SSDEEP:	384:KM9riZ91cImXsJmPvcy4wA7f7tWTfZnavJxZUMuf7+VfE7sgFO:K6091cbsgPOf7YZOZUZTU1gw
MD5:	E18A47CBA860A3DBC2174952002D5016
SHA1:	D591A364EFD6E762FD956CE723B664779BEE7918
SHA-256:	4DF21692F736EF5046166CC2880659FCAD87D2128EA5708A7BFEC2FB0F9BB83B
SHA-512:	704D276A9EA64ED87FB5A5440F242E4BBBC41653774F63AC9F88BAF560E19DFDCC375C86D6F00E3E9AEB171598D39708DFF10B7E078A56944B6E93B214F4DF5E
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"XK4qZojZG8eSur8PiquegAg","injector_basename":"sodar2","bg_hash_basename":"tXhR5WxKMkfxhPR3Ieicu84_GDeFDNUHyibK8QhzoCs","bg_binary":"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

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5098
Entropy (8bit):	4.960230956341007
Encrypted:	false
SSDEEP:	96:FykyxbFoGy2rAulTywuXhygrAulTywuX3yRJ9N39PMf9nNKnu44uGyGPSw:4k4F82rA0ju0grA0juSRLN39PMf9nNK6
MD5:	1AB61982731F68DCC64FE7212964D585
SHA1:	E349EC61F2E52494F4AE564304EADF0574EFA939
SHA-256:	9D77CE9914C43FAEE86D8E838F53D711C89F9EDE1375E91D7F2726371166BA87
SHA-512:	99F66E7C6171463FFE487060DE2003E16313E8CD657D8FCD894114569FB14781F30C0C77ADF5AA2DA46A87DB24D66F9F9EE1470D13F06389402DB28300395610
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js
Preview:	'use strict';.(function ($) {...jQuery(window).on('elementor/frontend/init', function () {....elementorFrontend.hooks.addAction('frontend/element_ready/etlms-course-thumbnail.default', function ($scope, $) {....// remove course play and spining class....if (etlmsUtility.is_editor_mode) {.....const coursePlayers = document.querySelectorAll('.course-players');.....if (coursePlayers.length) {......coursePlayers.forEach( (player) => {.......player.setAttribute('class', '');.......const spinner = player.querySelector('.loading-spinner');.......if (spinner) {........spinner.setAttribute('class', '');.......}......})......}....}...});.../*... Course Curriculum... * @since 1.0.0... */...elementorFrontend.hooks.addAction('frontend/element_ready/etlms-course-curriculum.default', function ($scope, $) {....if (etlmsUtility.is_editor_mode) {.....const accordionItemHeaders = document.querySelectorAll('.tutor-accordion-item-header');.....if (accordionItemHeaders) {......accordionItemHeaders.forEac

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	downloaded
Size (bytes):	11224
Entropy (8bit):	5.2603128465032745
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS
MD5:	79B4956B7EC478EC10244B5E2D33AC7D
SHA1:	A46025B9D05E3DF30D610A8AEF14F392C7058DC9
SHA-256:	029E0A2E809FD6B5DBE76ABE8B7A74936BE306C9A8C27C814C4D44AA54623300
SHA-512:	217F86FEE871FA36ECA4F25830E3917C7BF57A681140B135C508AA32F2A1E3EFF5A80661F3B5BA46747D0C305AF10B658D207F449550F3D417D9683216FEEA8F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21279), with no line terminators
Category:	downloaded
Size (bytes):	21279
Entropy (8bit):	4.7484336449838525
Encrypted:	false
SSDEEP:	192:P/cYmJba1bfsg1igfXJ+5FkGBoTVXJW0+Gm32e7aqPPpY5vxctth3S6RvW/T5Csd:s0CmjszmhkgVGjqfLvG8HciK2
MD5:	00E2531E966D00F4A3C0AC90C2488B1C
SHA1:	10B25A11097C0C25BC32F7424A0F69C1E7618B96
SHA-256:	50A49C4BF87EA832788AC792CFF163DBDADDE42FF0844BD93FD31C66EC9CB944
SHA-512:	56C2278B82C669FD9E9C60F18DE88F1B561B5448D4C2036F7E73939549522068B60B59047ACBD6372EC7433D20CC826463D1D9D05C60C6925E0C914744A84C0D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/tutor-elementor.min.css
Preview:	.elementor-widget-container .tutor-segment-title{font-size:20px;margin:0}.elementor-widget-container .etlms-lead-info{display:flex;align-items:center;flex-direction:row;flex-wrap:wrap}.elementor-widget-container .etlms-lead-info label{margin-bottom:0}.elementor-widget-container .tutor-single-course-segment{margin-bottom:0;margin-top:0}.elementor-widget-container .tutor-wrap{padding-top:0;margin-top:0;margin-bottom:0}.elementor-align-left .etlms-lead-info{justify-content:flex-start}.elementor-align-left .etlms-author{align-items:flex-start;justify-content:flex-start}.elementor-align-left .etlms-course-specification-items li{justify-content:flex-start}.elementor-align-right .etlms-lead-info{justify-content:flex-end}.elementor-align-right .etlms-course-price>.price>.price{justify-content:flex-start}.elementor-align-right .etlms-author{align-items:flex-end;justify-content:flex-end}.elementor-align-right .etlms-course-specification-items li{justify-content:flex-end}.elementor-align-center .

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4101), with no line terminators
Category:	downloaded
Size (bytes):	4101
Entropy (8bit):	5.560046581209393
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALwQ7a:eMilPFfmo4+7Cpi4Qm
MD5:	2A8D051ABAFD7B1D3F62592455B15F0C
SHA1:	FCF291B4E88C76A5836459AE0C59CBD8246EA0A0
SHA-256:	CA727C9D9C5D3FFA9FC01A2C57D612263A5EF4138DA8D9B8E76E354835882466
SHA-512:	4DE52A5026E9EF873633C3489978627A9C1084099EA7EE5D0874EEE6B7FA664BB98E1A1D49869F947119F0BF67131A27E7CEB2FCD552C10157B9EF12752CFAB9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/0F7B5FEF-69AD-46C6-81F2-A260D651EAD7?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	dropped
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1239)
Category:	downloaded
Size (bytes):	1258
Entropy (8bit):	5.317741040890077
Encrypted:	false
SSDEEP:	24:WDlf8vY1bT8c8lrvAxbT6p5ElrvTLxbT8GbleKO+kDltHnKbEean:WDqve0tv4AmvJ07dtDvHnCan
MD5:	87EB61AC896670CD65A78E9D57D96940
SHA1:	D1C13E7EF8051C9C338DB9A75E39572ABA2AEBFC
SHA-256:	835E9C3EC05B7E8795C19BFB0369DC2AE4B157A713AF0048D6762B909214B0F0
SHA-512:	B80EDE357F7A7DAF415D20E5C3D08632E370025495707734BE2CBACD2D701BEA5B3A4CFFB20F75FB082AC1C676B1B4DF18B00E78D3436980C0EE96DD91749720
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&pid=eWu57J4Q2sVgL&cb=1&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%2C%7B%22sd%22%3A%22content_2_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JEOdefzyjliqQnEHvqL2yQ4AAAGPFrjFigEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCJ6xpm","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"sidebar_btf","amznp":"w3pr0g","mediaType":"d","amznbid":"id9ukg"},{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JIbEOS6CHJZ5AiF0dxjoDcUAAAGPFrjFiwEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICBVx0mP","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"content_2_btf","amznp":"w3pr0g","mediaType":"d","amznbid":"id9ukg"},{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JFaizXQK2vQubSfhdL9s7_cAAAGPFrjFiwEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCT5bgK","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"content_btf","amznp":"w3pr0g",

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 728x90, components 3
Category:	downloaded
Size (bytes):	69736
Entropy (8bit):	7.765580173115764
Encrypted:	false
SSDEEP:	768:dIDqLnc3Fxs+GD8jW9gQyhxxncTbz2O4oklKZPFqrfQsMGY9Uz5Qp49TiLQKUpJ6:UxK/CQSxKnrTYrWUVtTlO6bW2AW56
MD5:	B9F98E40ACE0FE37ED691D25341977E9
SHA1:	4E8EC0002C4B73B9A28A2B36724AF923AA11E102
SHA-256:	BD4FAA4D4204104CB9098EF21B302A78EC39FB49C9007A9C8199AC5F2BFA86FF
SHA-512:	1D50338C312AC78E7D6BDD4FAC2AEE26FF4228511CFFAC8B3ED2175F373B915D37E372AF383678DF9C69373176F116AD3481F09375AF0BB3693C2FA1EC44C4D1
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/302072071653134486
Preview:	.............................................................................................................................................[....Adobe.d...........Z.....................................................................................................!."1A.Q.#2T....$aq.BD..%34b.9CRWrt......&'(8GHYdsvwx..................................!1..AQaq....."2....4RSr...#3B...$b.Cs...%&5Tt...0.http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="MediaBeacon XMP 1.0">..<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:iX="http://ns.adobe.com/iX/1.0/"><rdf:Description rdf:about="uuid:BCBF5005-18D1-4C00-AB78-524FE44E198A"><xap:MetadataDate xmlns:xap="http://ns.adobe.com/xap/1.0/">2020-06-04T20:35:21.771+02:00</xap:MetadataDate><xap:ModifyDate xmlns:xap="http://ns.adobe.com/xap/1.0/">2020-06-04</xap:ModifyDate><mbmm:rawFileSize xmlns:mbmm="http://mediabeacon.com/ns/default/1.0/">57415</mbm

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (13949), with no line terminators
Category:	downloaded
Size (bytes):	14591
Entropy (8bit):	4.609051868555089
Encrypted:	false
SSDEEP:	192:EU4+Kx7ybuiar8mkdhDIDSuVp4b8snNWnzsZqGg14haBe2GajJFVrofj13qFeJHP:8fShlypXzsZqG198tc
MD5:	FBF850256A1B25BCFF0D35240A906BD2
SHA1:	4F37A589066B538191D3C637CEAF35BA4A177776
SHA-256:	293EA56A384F7FD8BCCA2F4206059DE90BB588EDE4A51EF5781BEB012B2A98B1
SHA-512:	9F7AF55E0498C0058A2862E021D19769FC5CBA0702DC77EE42B76BE0091AB4550152CEC1B7F3B21060B4E82A3042CBF49BAD4E78D41F42A5CEE28650F6E3911B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-icon.min.css
Preview:	@font-face{font-family:"tutor";src:url("../fonts/tutor.woff") format("woff");font-weight:normal;font-style:normal;font-display:block}@font-face{font-family:"tutor";src:url("../fonts/tutor-v2.woff") format("woff");font-weight:normal;font-style:normal;font-display:block}[class^=tutor-icon-],[class*=" tutor-icon-"]{font-family:"tutor" !important;speak:never;font-style:normal;font-weight:normal;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.tutor-icon-privacy:before{content:"."}.tutor-icon-laptop:before{content:"."}.tutor-icon-desktop:before{content:"."}.tutor-icon-tablet:before{content:"."}.tutor-icon-mobile:before{content:"."}.tutor-icon-map-pin:before{content:"."}.tutor-icon-api:before{content:"."}.tutor-icon-brand-buddypress:before{content:"."}.tutor-icon-brand-google-meet:before{content:"."}.tutor-icon-brand-google-calendar:before{content:"."}.tutor-icon-ban:before{content:"."}.tutor-ico

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 262, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161785
Entropy (8bit):	7.993206011070407
Encrypted:	true
SSDEEP:	3072:cTJj/ReDN50oymz3kI794WbH7lhT6AXwzVJttJ1pvgKmDETnwIx:wxMIR2GmHZ16AXmVJtDnwIx
MD5:	50656494E6D73CCB1C580468F0338C3B
SHA1:	A75A34BECBEB8BA8A93D7D50EE8064DAE67FE789
SHA-256:	D354277A3ED433F1A308245F6BDABD492E2E21EA00298A60517A177CE2E4A996
SHA-512:	F956FB4B6D368C904C7C6EAD6A8BDFC7BC8D9492579B88A2F88CE501159ECF6C59C0BCF072929D0D7BD9DCA68034A49CFFB745216A6037D800705AE50B9481A4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............F.....IDATx...y.eYv....>.....g...!'Ed...J!!$!......MQ...AW....L]ft.X7f@C.&a...(..!.I9D......O...x.3....3.s.}."Cm...t....=..{...o}.\|.........._..>\|}.........._..>\|}.........._..>\|}...........y._..o.q..)z..t6...+.'3..q...Gp.&..IfS\..zH.....dJ...."...3....<...y.t..$).s.\|..d6.1.Nq\..`......l.`.)=..A+.. $B.B#.hm~.^Z..JSd.I2Ce.....$GJ.(..\|.!.B....A...'.~..UmOk....~.a.1..7k.9..6..S.......SA.}.a.u.msLZC......:........o....A8.!.\..u=....}.0....0..\T.2.L...2:.#....@.Q.#....Zi&.1..y....!.......\.EJ..:H!.J#.@K....0gN.d.....s)...9..>_ pDu..{.DZW../.......\ka..\|.E8.8.....-...g..3...ksZ....b.G..$+....J.+MQ.(.PJQ...B.d)...b.u.G.0..Xu.HA...Lf..1..'.Y:G*..3&.9.\...W..?..U.....T._]..dI.....B..\|.............R..h>.5Ji._..l..D!..@...!.....Q............5.:N..jM...0.....F..5.b~..4HG..\|.{S..s.Y..l[..6..{.."-.mFLv..J.[.?....U.;#.(/.2.^....DHA..1.4..j.Z.)X=.......>P...)...?/..TQ_..+.....h.;.1.NX....)P......\y......".........

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	274564
Entropy (8bit):	5.050727935371629
Encrypted:	false
SSDEEP:	6144:VixAIZyIYIgJ8SHQWtdc0Dth3vBI5hpX9i:rtdc0Zh3vBI5hpA
MD5:	2E5B5998396E830BEC6F8668EABED278
SHA1:	BF83AF1710A09CFC30E2E75C82B8E93F74A5F9B6
SHA-256:	6AC51DEF4827BAE8B1EF69D64E20DA13156BCFAD487AE9CF8073A4DF11CD98D2
SHA-512:	F0E9F7C2125862DB3CF7FCC236B7BD625C9E4D9FC18C7982792E331B00EA3EDC9A7E26A7BABC97307FB946EFDD09471A4489CB04915122DA86B44E8629A15187
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor.min.css
Preview:	[class*=tutor-screen-] #wpbody-content{box-sizing:border-box}.tutor-container,.tutor-container-fluid,.tutor-container-xxl,.tutor-container-xl,.tutor-container-lg,.tutor-container-md,.tutor-container-sm{width:100%;padding-right:var(--tutor-gutter-x, 0.75rem);padding-left:var(--tutor-gutter-x, 0.75rem);margin-right:auto;margin-left:auto}@media(min-width: 576px){.tutor-container-sm,.tutor-container{max-width:540px}}@media(min-width: 768px){.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:720px}}@media(min-width: 992px){.tutor-container-lg,.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:960px}}@media(min-width: 1200px){.tutor-container-xl,.tutor-container-lg,.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:1140px}}@media(min-width: 1400px){.tutor-container-xxl,.tutor-container-xl,.tutor-container-lg,.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:1320px}}.tutor-row{--tutor-gutter-x: 1.5rem;--tutor-gutter-y: 0;display

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	110
Entropy (8bit):	4.337536763923197
Encrypted:	false
SSDEEP:	3:YXXL9AR3AEii6x2YoFXXqHL9ARxQEz6JGQN2ETAQgGL7:Yny3AEiTxhoFX6HyxpO7N2ETcm7
MD5:	EB115BED50B2627CEE601B94CE663FF7
SHA1:	88AD9DEC7CBB0D9CC3E781E8F1FE46E8BFD3B063
SHA-256:	512AB4BF1F2DDCD8AC5888DC2CF04EE7D0444181827EF1C806698ACBFB346449
SHA-512:	1258A8B98E09702F081F512AB7A3651DC6516B6AE61F341E616A4E7EF40014A53E33BFEC62B092B4EA236642831B288BE94805739C4C6E7DD7F442504D898E9A
Malicious:	false
Reputation:	low
Preview:	{"recsInContentReadMoreLinkText":"Read More","recsInContentTitle":"Recommended","createSaveButtonText":"Save"}

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5258)
Category:	downloaded
Size (bytes):	5259
Entropy (8bit):	5.060180329787528
Encrypted:	false
SSDEEP:	96:D95qbslDCpFqImxwoD9N9JT3c5E/9CQipDwdGOddh:h5TdCpFqImxZ5NvAE/9PipDwEOddh
MD5:	FB9F7DAE39619642ED5890E40763EF2E
SHA1:	BC50FA89795E534B7E417E834C70CB674A9D30B4
SHA-256:	70712C8650FEECC46403B5801B9D5B72D5B2D6BA1D1CF0317E105603982321BF
SHA-512:	4E710BEA7BB3C8534D12D485260466B15785C6286CBEBE7BC562B9AD020A6E87A70139385FA6F1338F9048E1787ECF3FA4C48821675153F68D9BDFEA47E926DA
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js
Preview:	!function(){"use strict";function e(t){return e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e(t)}function t(e){return function(e){if(Array.isArray(e))return r(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(e){if("string"==typeof e)return r(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),"Map"===n\|\|"Set"===n?Array.from(e):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?r(e,t):void 0}}(e)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function r(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];re

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 416 x 26
Category:	downloaded
Size (bytes):	15238
Entropy (8bit):	7.949051510520624
Encrypted:	false
SSDEEP:	384:4THgxWfUWshZ7ytfidOv7xrfo1bl2nklWYvYyDjqbRGpUPsTR:4TAxWfUWsL788Ov7x0bl2kxYyDmbRGiy
MD5:	CE2268030DD2151B63CDF4FFC2F626BA
SHA1:	15280F21EB43F5FA7838DCF011F67D79E301B15F
SHA-256:	6A486BB6036EA984D293AB009566E99E522ABC19F8833C5FD49630BE7EBA0135
SHA-512:	6164DAEF98D93DC1878BD776934C013F7E750CF7EF45959C17F12C0251C89FB0BCA26FFE0D2C1DEFECC8881105A42CCA0E61459A2A57639E75F26458301C67DC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/thickbox/loadingAnimation.gif
Preview:	GIF89a.......................................................................................................!..NETSCAPE2.0.....!.......,.............DRi.h..l.p,.tm.x..\|...... ...r.l:.P'.@.0....(E .X\zl.X.i.......f..Zu.n...Yrt\|n~.Yz..d..........`w.........^...x..oE..%.............U.....~.................s..e..............s...............jF.....)........l...?...J4..a..'&.h1 D..%r...#..#.0$.0#J.#I.\|y0&.4).dY..I.6;.....L.;y.......P.J...L..X.f.3.kT.`.h.{...U!.%k..T. .jm..jZ.s..}../V.u..-.w/T.b..v+Xqa..7X\|.._.^-..\|...=.....Q.Z....[.c.^.....e.].....w...t.....}\.p..77..8.......{....?W..{....g..D....o`.#......^A}G...~..G.p..H`......}.1................v.`..\.!.....)rx.%.(!...........`..%:...D.X.A.....E..ciJ.4d.;.)V.LR..@.!..:Z.d.Y..%.S.)&.`.x&.ij.&.m..#.m.y_.:.%..).X..@....@.m......#.2......F..x..R..R.Z.j..j.)..........`.....+l..`a..........,..........F{....,..j.-..^.....,...Kl...Z...J./..K..../...K.......{.....\|K/......X 0

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://aid.send.microad.jp/g/asr?google_gid=CAESEO1iBBYLvdjKFw6_WiQGcDQ&google_cver=1&google_push=AXcoOmR4bvUILxb5EetjAo2FbE-XnoVlMmCTuBecI2oh0xPgQ1Tn0kUgtGMJFiV4GUAFP3beasgAfb7JWbPbg7cBwlwKxGSkeaUq
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	4.474942147156673
Encrypted:	false
SSDEEP:	3:C63mFq63ncVo63963TQVo63WAcJYWReBxKiFXF:C63163nP63963Tz63HcJYWReBQiv
MD5:	18CC944C83308A831A3147834FFC0220
SHA1:	56335734F34E482E002DA89F13592CC50FF80A1C
SHA-256:	AE2005E1820EF18ADB7B7B094B3BE6163AD8EB62E87C9F85470CBE0993FAC178
SHA-512:	DBE43D68C9770D43F350C6B943B3656E13726844E594A4A86D2779E6FBE35AE274C84CF9690E87B6CA6B4615FDC649B2C4244E1174C130262C724F1844BAD65B
Malicious:	false
Reputation:	low
URL:	https://keywords.mediavine.com/keyword/web.keywords.js?pageUrl=https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/
Preview:	. window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.keywords = {"status":"AWAITING"};.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.901242568978556
Encrypted:	false
SSDEEP:	6:YVgudn0dIWtB/yyJDHC0PdEU3IKdIOKquWP+WMHSghVIKIg3wY:YKPdIqB/yyNigIRhygh4g9
MD5:	FF7CA558B3F4E4350681DB315C0FEF66
SHA1:	232109F4784FC2BC923C972BC26138C708F3A131
SHA-256:	EC26164B524950DD7EA5F67472EBF10AAA0465A6965CBDFB4934B5F6DC8A644C
SHA-512:	9DB9E5BEFAE8426FFBF3D60D011116C5ACD45319EA50FB50A494F23836211DBA0BCD583ADA99E079AB8412BDE1BC7C6DD2B6A6471606BC31CA9D9F71BCB485EA
Malicious:	false
Reputation:	low
Preview:	{"hb":"V1:2S79InCItlVCBlvQ:82mgohXiU0cwcHdZRapXe30YYJLe8o1lpLVcNhJn/PJVq2VzJc/KfGjcN7e82YTA","adx":"V1:Krcl0h1pKKyrWyDz:4hy3l2wPFwB7a0PokOZcVF8ekXRJ88+nOQnkX5jPjfuAAg2p9/cvf0CTpNTKOoUjej5aBZEeWuFS9GWxfUkk9WvJfh4T","unf":"V1:U0/+xd17ErelqAsj:Hx2imY0WgptuHoNhzOV8omjXLh2ccWoFVhv4uz4NeBusUDl5H1lLPZnF0uqweURYMw=="}

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=ZiquOwAASpL9rwAi&_test=ZiquOwAASpL9rwAi
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	30692
Entropy (8bit):	7.981349781017551
Encrypted:	false
SSDEEP:	768:O003aalL0DejKkkIq4fqq3TYNhgN3tN4rM+Ae0g:XDrUqMTKgN3/oMBg
MD5:	70BC9B842F9C2877F7E606DDA8C8865D
SHA1:	E25E102824BB84293FACB1663D416E23B285CCE6
SHA-256:	42B92FEBD16C1931533E7C44B0B0A6CF1DA026E05860A6729A32020439B29C6E
SHA-512:	25724EDB4E966191F787FD61F5259B9D6E4B85311A5DCADDF83F69FF9DEC2E9D611CC535B8C59394C1617E243ABB3838F43B390CBB35219DCFBD2ECF00A41BFC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............}.#..w.IDATx..w.$gu...;...a'l.A.UDB..@$....l.....?g.0...1..$.. .....qvvr...+}.Tw....j.D.{...............6X.{.x.<vb/.e...n.K....W..C.'...UH...c,.,..Wd...].....:HE.......o\|.......?...eY~AD....;=...\...D.eY~.D.....^..MoC.. ,?.eY..%..G$Q.E.v..k_t\|....W!...S].e.Y.X.%.S...}...u..G..CV..+_.+.-z..#..}_.0..,..3.......V&..\|.../F.A.4w!K2he........Q.J.N.-....OtY..g(....(.\.j..b...GO.gAD..zdzY.eY~......eY~.}.... ..J...\.e.E.p{....E.Z..\|......,./......6_.H.7........,J.c.\........Y~..,?G.k..8\.~....0<?Y..g..6.$./H...2..y\|..-..........G.\D3..'.,.n..".e.?......T!..D..9E.D.....Q..^..../y.H...W.-....i..b..X.....Gq....r..Q..LDA..Q%.E.q.N...V.\^A/,.....'.J...s...}..3#...#.O...4.8..... .H2QW..20,.I......8d....ME.P.+h..a......f..k...,.....>...aUC.79d.iA.zY~...Kv.s..E.g. .2.IA.e.%..DA.);.8.D]A.<a.=....r........y..\|.~L3t>~....yY~.....F"...Ie6....U.- ...A..z.s....?.e*.,!n....5lhY.SVI.s<9....=...eY.".R..Z.d.(..,.".>..uM=.t

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (625), with no line terminators
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	5.4811916490893795
Encrypted:	false
SSDEEP:	12:C3HE452FV3pMG0R1jMBu2FV3hyIwCc1d+13ZFnQPkDp:C0452vaRi/vNc1d+1JxQKp
MD5:	912F4510CE382CF3B5501472485C27A0
SHA1:	BE0415BC7B9CEE7B02161F6587037B3D96C9D9BF
SHA-256:	4C662D6125B7B55859D4169927B4D2E5E5852F56B113AA9A4E72ED56D70D9BDD
SHA-512:	FDF7E6F5DC400E5B27A55726E8E9226A0AA018F5FBE6778D64A01AC0A232163F9579B9E4793804685F979FA846250F6CE5155576031D4FD88CE3FF1DBD1A3AB1
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=27194692&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7');PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	172370
Entropy (8bit):	4.923658388007798
Encrypted:	false
SSDEEP:	768:3Sg/zvAgeLCrRngGaUurSFLiBI81hQhxKZrBz0CcuvJGydhPz/UjVCAOszuEz2To:/uCHsrgKZK2vt6yS8X3l1xc
MD5:	A9FF17EDEAF050726DEF7135F2EEB979
SHA1:	973817BF13C38748CF83CC4A80297CC88CDA9AE4
SHA-256:	FD41F1110BEDADC2AFC3FC2E1DA5378D111C0074982C602D203A3930943211E8
SHA-512:	C0C6A54F664BA27A00689C93871F77FD37C225B5D9768C8273F5FA0C0B0295E49F8EC635CBB99A84E7C07B45A7D4FB25EF44C47128B4290B9B808147E67E7F5F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/tutor-lms.css
Preview:	.dashboard-action-btn i,.dashboard-header-toggle-menu,.dashboard-page .page-open-main-menu,.edumall-course-category-cards .category-icon,.edumall-course-category-cards .category-name,.edumall-course-category-cards.style-01 .category-icon svg [fill],.edumall-course-category-cards.style-01 .category-name:after,.edumall-course-category-cards.style-02 .category-name:after,.edumall-wp-widget-course-filter ul.filter-checkbox-list a:after,.edumall-wp-widget-course-filter ul.filter-checkbox-list a:before,.edumall-wp-widget-course-filter ul.filter-radio-list a:after,.edumall-wp-widget-course-filter ul.filter-radio-list a:before,.loop-instructor-name,.loop-instructor-wrapper,.popular-instructor-name,.popular-instructor-wrapper,.tutor-dashboard-inline-links ul li a:after,.tutor-lesson-sidebar-inner,.tutor-mycourses-stats .course-actions a i,.tutor-topic-inline-edit-btn,.tutor-topics-in-single-lesson .tutor-topics-title h3,.withdraw-method-select-wrap .withdraw-method-select .method-name:after,.wi

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (36173), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	196208
Entropy (8bit):	5.279833774591123
Encrypted:	false
SSDEEP:	3072:NXrG5I21Jq+CbJZni7Zl2xBvBKx/7Zl2xBvBA+XXTGQRKuFZdvvP9TtuFikdyXxU:pIv
MD5:	8E09791EB8537DC378B5ACB5623AE1A8
SHA1:	C8F2A8E63173662435A65C4EC30F32BBCD675170
SHA-256:	78AB0BC218D9981F25166CBCE0928E06C5F777600E68270B7990B3C3C79192AF
SHA-512:	4165CF684A26CA2DBFE0AD730B9DD1F09815E07A6D5F087A7EAA62C5DB11C382FA73DFAC4B982FDA8D0383370B62FB11DD78CA6A2C8A348DE33E9C0A54E90543
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/category/blog/
Preview:	<!DOCTYPE html>.<html lang="en-US" >.<head>...<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<link rel="profile" href="https://gmpg.org/xfn/11">......<script type="text/javascript">....window.flatStyles = window.flatStyles \|\| ''.....window.lightspeedOptimizeStylesheet = function () {.....const currentStylesheet = document.querySelector( '.tcb-lightspeed-style:not([data-ls-optimized])' )......if ( currentStylesheet ) {......try {.......if ( currentStylesheet.sheet && currentStylesheet.sheet.cssRules ) {........if ( window.flatStyles ) {.........if ( this.optimizing ) {..........setTimeout( window.lightspeedOptimizeStylesheet.bind( this ), 24 ).........} else {..........this.optimizing = true;...........let rulesIndex = 0;...........while ( rulesIndex < currentStylesheet.sheet.cssRules.length ) {...........const rule = currentStylesheet.sheet.cssRules[ rulesIndex ].........../* remove rules that already exist in the page */...........if ( ru

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 699 x 380, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	12051
Entropy (8bit):	7.959061330793154
Encrypted:	false
SSDEEP:	192:7/B9FIEFliiHDtcEWGa+wpz6UjdFF6n8b6MMMfSPtuys/M5rz/s13qPvKGI:nFxFligcq0z6UJq6KtJs0z0xqH3I
MD5:	1995C078342FF7BBB9AD005C8867D470
SHA1:	905962C2633A234FECB6AF76F92FFC49EF3F3C72
SHA-256:	90D32CE4157A26333201F5865B2AED36FAFAAA0C0CEBCDFC0432AE5D204F4475
SHA-512:	CC46D26F50A443479A02A0C0EE6EE3047B7CFD188D74CFD5B325A7D919EB3634EDB3EF2074861F9B80DB3C7D802A8DE177E7282BE52BAC3C6C71C9957E34C862
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/images/page-404-image.png
Preview:	.PNG........IHDR.......\|........!....PLTE..........................................H..............J..........................F.....N..L.....M.................J..I..M....................P....................D.....N..............K..K...........K.....K..L.....M.....M.....L..L........M..N...........M..............N........M..I...........M.....K../.....J.......P.......(>........#................F................9.,..-...................9.3.."....%........Q.....7.. ....;.........C........F....JH.......H.....Hh......{....G.............'y.-}..J....x....o...a........ .............H?..<.....D.....A..6..3.....1..:..8..G.......\|.(z........I....$v...,~...I......K....I.BL...;..".-...........Y.....6..b...'..........o..5..N..@...i...:....._.H...9...sL..Q..U...../N......tRNS.M@p.4ZTix........"#..:G^ea..0..&....\|:,5...l~.)..t.....S....CO...K.>G.\.e.Wa..ri...m...v@.Gw..P.\|.......-..x.#.f..U.....D4..V3x.....$D...lC...o...9.U...rp.e......R.........Y.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3DPID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.407691974837881
Encrypted:	false
SSDEEP:	24:4HksKq5/Jz2pRNrBZJuvu8goqc0ioNhc+c4+mI:2xz2bNrVENtmN+k+j
MD5:	30E768488C6D69C7C093830D5B4EC132
SHA1:	07C339FE53DE6E194F92C3CB10F7350F0A2DF577
SHA-256:	4E170D6FA9647B02CE9BE714864978D31E20D19A77D094FC349E6B5D0321F3B3
SHA-512:	DBBB27CD5C7336EF683FD9A53E6DC58CE14E1D28A6664D44FC51715B020602D8CCCC6CC70C7F9CA26966C9E3CEDD628204C9EA0F165BD2CC0FA90B64BD49388F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="AgGZo0FD4HXDgsuyb9s_UQ">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1714073181356');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7437), with no line terminators
Category:	downloaded
Size (bytes):	7437
Entropy (8bit):	5.124927329847326
Encrypted:	false
SSDEEP:	192:2jWMPLDMKXQA2Prrc/y+MMyhHrXvcyhw1MiqPKHPXeDSXf7jDH8:MWMPLDMKArjrc/y+MMyhHrXvcyheYKH8
MD5:	D0A416390BE3DB06497104D4B0A0EDB1
SHA1:	700063B78F60161FCF302B4975E1F10AF4BDE8E4
SHA-256:	B14D21B7A02DEC9782F2F61F05AE4D134BD1E204E25B1D4E6D169B626C5821EF
SHA-512:	523207456141B353BC9C8239E9FEA352BAF62210C97AB0C6DDAB8A35CACC084E5982711E69C747F2F34803AF05E4EF23E6331C3DB8DD8007A7C5898E195F9E74
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js
Preview:	(()=>{"use strict";function e(e,t){return!!e.includes(parseInt(t))\|\|!!e.includes(t.toString())}function t(e,t){return parseInt(e+t)}function n(e){let t=""+e.getMinutes();return 1===t.length&&(t="0"+t),e.getHours()+":"+t}function s(e){this.qlwapp=e,this.init(this)}s.prototype={open(e,t){let n="https://api.whatsapp.com/send";this.mobiledevice\|\|(n="https://web.whatsapp.com/send");const s=t,a=s.dataset.message\|\|"",o=s.dataset.phone\|\|"",i=s.dataset.type\|\|"phone",l=s.dataset.group\|\|"";"group"==i?s.setAttribute("href",l):s.setAttribute("href",n+"?phone="+o+"&text="+a);const p=new CustomEvent("qlwapp.click",{bubbles:!0,cancelable:!0});this.qlwapp.dispatchEvent(p)},toggle(e){e.preventDefault();const t=new CustomEvent("qlwapp.toggle");this.qlwapp.dispatchEvent(t)},chat(e,t){e.preventDefault();const n=t.closest(".qlwapp-box"),s=n.querySelector(".qlwapp-reply"),a=n.querySelector(".qlwapp-header"),o=t.querySelector(".qlwapp-avatar img")?.getAttribute("src"),i=t.querySelector(".qlwapp-name")?.textCo

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/80bdd263-c45b-a79a-7f79-1504977d800e?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89496
Entropy (8bit):	5.289738088208255
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE
MD5:	B6F7093369A0E8B83703914CE731B13C
SHA1:	D1889F5C173C2A4B20288F1F84758599AFD346EF
SHA-256:	60240D5A27EDE94FD35FEA44BD110B88C7D8CFC08127F032D13B0C622B8BE827
SHA-512:	D6AA7835D7B256B94DDD2F9D8DB84484F0413EBC502762C1BA21CBA7A392C6F550DB2418CDC8BD6D1DA6ED2CEA55BF22473C778493D416B1A1C38E6FFDB8C79D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyNi1kMjU1YWM2NDM3ZDg=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7943), with no line terminators
Category:	downloaded
Size (bytes):	7943
Entropy (8bit):	5.468451559139699
Encrypted:	false
SSDEEP:	192:DUr5rPH+0zl6yXhXyI2GMKjrOofZIqr/p3/EQBrAxI:QF/+WTdyflKjrZm4ixe
MD5:	47ABE89E9AA618F2F433AA879B233A86
SHA1:	FB5AD16AB3741C38A75289D51D6C512F481EB479
SHA-256:	6670102087432DD6A3E2533911C72662390B4D78740E4B0586EB48DCBAB83575
SHA-512:	77482D86216A204E15F33204DBCD2A84F53FE2C54E9BED47E4E01D504874F04980769A7E0188416641C328D81D35FC0B9B767BE89E7250B271F78946655B2166
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/iiqMatch/6f4af1983d1129049f94.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[4904],{4023:(t,e,i)=>{i.r(e),i.d(e,{IIQMatch:()=>n});var n,r=i(6135);i(6460),(n\|\|(n={})).init=()=>{try{new window.IntentIqSyncObject({partner:r.Cf})}catch(t){}}},6460:()=>{window.IntentIqSyncObject=window.IntentIqSyncObject\|\|n;var t=e;function e(t,i){var n=r();return(e=function(t,e){return n[t-=119]})(t,i)}!function(t,i){for(var n=e,r=t();;)try{if(656237===-parseInt(n(194))/1+-parseInt(n(158))/2(-parseInt(n(157))/3)+parseInt(n(156))/4(-parseInt(n(227))/5)+parseInt(n(190))/6(parseInt(n(125))/7)+-parseInt(n(149))/8(-parseInt(n(123))/9)+parseInt(n(191))/10+-parseInt(n(219))/11*(-parseInt(n(139))/12))break;r.push(r.shift())}catch(t){r.push(r.shift())}}(r);const i={brands:0,mobile:1,platform:2,architecture:3,bitness:4,model:5,platformVersion:6,wow64:7,fullVersionList:8};function n(t){var i=e;this[i(224)]=5.086,this.wasDebugCheck=!1,this[i(151)]=!1,this[i(160)]=void 0,this.metadataConstant=256,this.syncRefreshMillis=432e5,

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.86469832616696
Encrypted:	false
SSDEEP:	3:YBAvZNQaY:YwZNQaY
MD5:	2D7D30EA1C6F925302D2C3ABED382951
SHA1:	5BA6BBC5670C4AF1125CF9AC0AA1CA2811E744D1
SHA-256:	83C09BA9A8DAEDB136F90B17A294CAA90AD471A016E430DF6E229ACB5A81E100
SHA-512:	BCC7AAA8A6A27ADCBD1B3E0FCA73FC1BD727FECEAB34734E99863503D1D50936A8830C0A12D75D187614F318F46B1E67F046E89F5EB6CE727D8433A722E2C525
Malicious:	false
Reputation:	low
Preview:	{"detail":"Method Not Allowed"}

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (673)
Category:	downloaded
Size (bytes):	674
Entropy (8bit):	5.081635170175952
Encrypted:	false
SSDEEP:	12:mivlGsMN2euE5mBUppLRLDFkKRE6Ii4KRHOiHv:HvEPN2euE57pp9LDGKd4KvHv
MD5:	306106BF21AECCBE6382BC0D432DBD5A
SHA1:	976ABCC64AE53D9530C83A2836EAA5CC0657FAED
SHA-256:	3BEA686583447DEE330BD22636405ABD05D65CFF499AB3E8F8FA4B6326EFACAF
SHA-512:	890BC23ECDBB83CD7B1C80DB72CE5FE6DBE2A2A5AC7A095E260B8203378AF0657AAAE095B73BE4A4114DE5FE450EB5F289787446B5E6DB825806F3F9A7A581A7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/tcb-bridge/assets/css/placeholders.css
Preview:	.tve-ult-preload-form{min-height:var(--tu-placeholder-height-d);position:relative;display:block;background:rgba(153,162,165,.1);overflow:hidden}@keyframes shimmer{100%{transform:translateX(100%)}}.tve-ult-preload-form::after{position:absolute;top:0;right:0;bottom:0;left:0;transform:translateX(-100%);background-image:linear-gradient(90deg, rgba(255, 255, 255, 0) 0, rgba(255, 255, 255, 0.2) 20%, rgba(255, 255, 255, 0.5) 60%, rgba(255, 255, 255, 0));animation:shimmer 2s infinite;content:""}@media(max-width: 1023px){.tve-ult-preload-form{min-height:var(--tu-placeholder-height-t)}}@media(max-width: 767px){.tve-ult-preload-form{min-height:var(--tu-placeholder-height-m)}}.

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65393)
Category:	downloaded
Size (bytes):	173629
Entropy (8bit):	4.7092633142853675
Encrypted:	false
SSDEEP:	1536:nL/1EAqIkt7YuHo0DJP/t3uqTty5dWGFIibZbWu8IEiy6BRAXSCo1U+MFO3kAmFl:L1EdIkhYZCJPF3VslbaAAXf3
MD5:	E889F00C68CEB105B6680CA5C96B3EAE
SHA1:	F0FBA7DC5417C76D13F0761568E2AACA5EF19487
SHA-256:	0E36D48C48AE338B5CCCEF7DEDC545D736DFF75042F4ECF272C7061A4FD92A4B
SHA-512:	56103408B843932996FBDD701CDEBC59F0DFF6F6E16E4FF8F14F69ADB9C53117879FCEBF5936824EEAD9FDB6D3762660DC73CEC34961EE0D88A502D5FF18A9EF
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css
Preview:	/!. Font Awesome Pro 5.13.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). */..fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:left}.fa-pull-right{float:rig

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (34729), with NEL line terminators
Category:	downloaded
Size (bytes):	99310
Entropy (8bit):	5.421650493683898
Encrypted:	false
SSDEEP:	1536:U9md82NBTxJ/afhwnpkwp/Y6yR2WtomNfHgcqucErHTefW6BC1dJIphOPI:Uj2NBfxWwBVTWgUzefzC1dKII
MD5:	5090BAE2C114802440412E301BDF5174
SHA1:	3850AFD52816EE686ECCD881DF06764B426CD86A
SHA-256:	D36E5D7328268D21C6941039A7B6A15C7ED7414F60DBEE72D2231D11AC9BDAF3
SHA-512:	A60C7E838FB2ACD1BF0E1504A2C37BA27B6C9E4D966B27D2B8AD459B2D86AEA362F24B54A48953A4A8FCD1D08BCA81042C0E9CEA6E68B563FD44CFE5AB951342
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/vendor/wp-polyfill.min.js
Preview:	!function r(c,a,f){function o(n,t){if(!a[n]){if(!c[n]){var e="function"==typeof require&&require;if(!t&&e)return e(n,!0);if(s)return s(n,!0);var i=new Error("Cannot find module '"+n+"'");throw i.code="MODULE_NOT_FOUND",i}var u=a[n]={exports:{}};c[n][0].call(u.exports,function(t){return o(c[n][1][t]\|\|t)},u,u.exports,r,c,a,f)}return a[n].exports}for(var s="function"==typeof require&&require,t=0;t<f.length;t++)o(f[t]);return o}({1:[function(t,n,r){"use strict";t(2);var e=function _interopRequireDefault(t){return t&&t.__esModule?t:{default:t}}(t(15));e.default._babelPolyfill&&"undefined"!=typeof console&&console.warn&&console.warn("@babel/polyfill is loaded more than once on this page. This is probably not desirable/intended and may have consequences if different versions of the polyfills are applied sequentially. If you do need to load the polyfill more than once, use @babel/polyfill/noConflict instead to bypass the warning."),e.default._babelPolyfill=!0},{15:15,2:2}],2:[function(t,n,r){"

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViem2:8WiIUem2
MD5:	F846EBE7331BDF57AE5B65ACB42C5F30
SHA1:	1EE6057E835C893700196579F26FDCD92B084B4F
SHA-256:	1C4777FE3A673A05492E27D08032CC91C23AC5389897C9235B09B8B0F5A74DB3
SHA-512:	9A2558F5B28D043721BCEF9D40BB419CB61A04537FF2B119B0DBCC47F245D61FACB1E521A455E1F85E9E8667A1C18EF85C0F45DEB8BDAD06DA5054CB76911920
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&pid=eWu57J4Q2sVgL&cb=3&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1
Preview:	apstag.punt({"cb":"3"})

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42433), with no line terminators
Category:	downloaded
Size (bytes):	42433
Entropy (8bit):	5.259079994020187
Encrypted:	false
SSDEEP:	768:3gk8LizPQrDEYH68mRkR7vObgIxgL8xExChmmGzq+2ARi:IvObgIxgL8xAmmmf+2ARi
MD5:	0AB4E955C478B1FFF4FC8801A94BF4E4
SHA1:	22ABA186710F946D21AE19C617D7EB2651965AC6
SHA-256:	16EEF82325D88BCCB3F09D34D6155A3EE890EDFDB479D44264212B5D5ECA1AF9
SHA-512:	FC8C34DE88F2173B3C388D1713F10F4B0E6BFEBF481AEBB2BE5556AA55E0269D810780797F653CF6BC85F69345B363C64390B9D9F091F94EC80BB2EC4E1C5A7B
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.ids.js
Preview:	!function(){"use strict";(R=r=r\|\|{})[R.Error=0]="Error",R[R.Warning=1]="Warning",R[R.Debug=2]="Debug";var r,L=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),d=(n.Log=function(e,t){var o;n.LOGLEVEL<e\|\|(e=r[e].toUpperCase(),o=0<(o=window.navigator.userAgent).indexOf("MSIE ")\|\|0<o.indexOf("Trident/"),window.console&&(o?console.log("[PubTag] ".concat(e,": ").concat(t)):console.log("%cPubTag",L,"".concat(e,": ").concat(t))))},n.Debug=function(e){n.Log(r.Debug,e)},n.Warning=function(e){n.Log(r.Warning,e)},n.Error=function(e){n.Log(r.Error,e)},n.LOGLEVEL=r.Error,n);function n(){}e.getHighestAccessibleWindow=function(e){var t=e,o=!1;try{for(;t.parent.document!==t.document;){if(!t.parent.document){o=!0;break}t=t.parent}}catch(e){o=!0}return{topFrame:t,err:o}},e.getHighestAccessibleUrl=function(e){var t,o=e.topFrame;if(!e.err)return o.location.href;try{var n=null==(t=o.top)?void 0:t.location.href;if(n)return n}catch(e){}try{va

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5064), with no line terminators
Category:	downloaded
Size (bytes):	5064
Entropy (8bit):	4.893189910695674
Encrypted:	false
SSDEEP:	96:57osUc17WlOajf4mYC8DdLdTJk93ik8oLrWrzrsrT0:571eYC8ZLz
MD5:	216D791E61641ACE57D8D11A12BDE01E
SHA1:	28BDE6D98D1C689A712EFE037A9592E9FA103B09
SHA-256:	029DEDF319BC4536D9C663AE9C0B10C95D1E9F5DD1DE0AA73172E9E89AE254CC
SHA-512:	CD31993E3719A13C971386CBCA73AE88CB95E0833F2E8D9CD8FF9E0D070CEE43589A4DC34FD973A9E2001AEEEB0EA9CF44E96B7536F85F2A31A47F33E6C9FAC8
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/cookie-notice/css/front.min.css
Preview:	#cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto;z-index:100000;letter-spacing:0;line-height:20px;left:0}#cookie-notice,#cookie-notice *{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#cookie-notice.cn-animated{-webkit-animation-duration:.5s!important;animation-duration:.5s!important;-webkit-animation-fill-mode:both;animation-fill-mode:both}#cookie-notice.cn-animated.cn-effect-none{-webkit-animation-duration:1ms!important;animation-duration:1ms!important}#cookie-notice .cookie-notice-container,#cookie-notice .cookie-revoke-container{display:block}#cookie-notice.cookie-notice-hidden .cookie-notice-container,#cookie-notice.cookie-revoke-hidden .cookie-revoke-container{display:none}.cn-position-top{top:0}.cn-position-bottom{bottom:0}.cookie-notice-contai

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEC8ps8Pv3-KJUhIjF_YDojg&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (602), with no line terminators
Category:	downloaded
Size (bytes):	602
Entropy (8bit):	5.144819130856658
Encrypted:	false
SSDEEP:	12:2JqxH0TBm4pM86VVC05Zs5ohgwML9cVvHGNZtYETL51V6/kVodQXvloub:2JZNfm8uVCxwgxkHEZ1V6/Oflok
MD5:	462427501E08842639B53D3F5B33B133
SHA1:	66804B15EFAFF86C20C370A4A8E0756B0B0B33B4
SHA-256:	130D606A15389A5AE2B7D37478BA03EB981228FC31E64C041973282AB3DED699
SHA-512:	2DF62D7F21095C3E572438114C2A512ED81C30AF92D7CED217A56EC0B7EDFC8D7F61DBFC547D0A42542C5EF92B2CDDD2437DAAFFF35D81A34378FC6D2EC2F6BB
Malicious:	false
Reputation:	low
URL:	https://config.aps.amazon-adsystem.com/configs/38918095-8e45-4332-88bf-226b3514cb64
Preview:	(function () {try {const accountId = "38918095-8e45-4332-88bf-226b3514cb64";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId).queue.push(new CustomEvent(name, { detail: detail }));}} catch (e) {console.error(e);}try {record("_config/requestViewerCountry/define", {"code": "US"});record("analytics/sampling/set", {"rates": {"error": 0.001, "status": 0.0001}});record("google/secureSignals/set", {});record("_config/config/didLoad", {});} catch (e) {console.error(e);} })();

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	5.17661556681666
Encrypted:	false
SSDEEP:	3:1B6LIbdzccVGCEAJAHN8VLCL8SOGJMB5MdsJA0qEAQ9iwtEvVaNE6mG:/6UbdwcVNzJ9UL8SYSds2REAQ9L+qp
MD5:	D50BBD5741EB684C8B081F51416E962A
SHA1:	FBA37F0209F60EB6134186D6198AF8FAB9F55827
SHA-256:	11EFC57E876075E548544ED13ED5C32A314A5E42B400E034950C2430D3381AA0
SHA-512:	DFE6C58235681DC303B5B54CA5F27A1CC29A8C3308A778E1072ECFEB53A4321FDD33034C873A138A089F88429498C47DCE6B16E9247B06A34704B7F5667A99B9
Malicious:	false
Reputation:	low
URL:	https://gtrace.mediago.io/ju/cs/eplist?tn=41b6e88a2b85b0e731ef8e73e5558712&dm=https%253A%252F%252Fcdn.mediago.io&mcb=mmgg_1714073162990_990
Preview:	mmgg_1714073162990_990({"data":{"list":["https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago\u0026google_hm=22210ca790f083ee2g42hg00lvfmwkrq"]}})

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (820)
Category:	dropped
Size (bytes):	839
Entropy (8bit):	5.2533727306180635
Encrypted:	false
SSDEEP:	24:WDlf8vn2bT88tElrv3/TbTQznbleKO+kFlb:WDqv208yv3LqEdtFR
MD5:	A1C83B5E060319F8EF93F9893390261D
SHA1:	DBA0E916738579C351FFAD151D3C3284F0C75B9C
SHA-256:	9121DAC84CA790145EBC7681C5ACCEFB69E3D4A38BB59EDC6AE7CFBCBB58D8FA
SHA-512:	50064FD4F5A0AB7F8831C856916B83FE683C70BE5E8EB8D3E27FE8D978F006367BC02999B4C966C841EA75AF2B1CD3BB78FD6C548598EBD5B457521F9C553880
Malicious:	false
Reputation:	low
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JODpPcemt--sFVXEPRwP_joAAAGPFrjlIAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCa1VOJ","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"content_2_btf","amznp":"w3pr0g","mediaType":"d","amznbid":"id9ukg"},{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JAUt08d3Qdu2cr9OneeDlNcAAAGPFrjlHwEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICD1JKxE","size":"300x250","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"300x250","slotID":"content_btf","amznp":"w3pr0g","mediaType":"d","amznbid":"id9ukg"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"1"})

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3787
Entropy (8bit):	4.939975689512093
Encrypted:	false
SSDEEP:	96:TtY/nW9IgFyxB62ygeQK9yArlo8hLo2neYCkh:TmfW2ZBCg5K9yArK8hLo2eUh
MD5:	6A414B257267A883C6DD13B3C66B8596
SHA1:	23139E09437311E7BBF70B9E372C1E4CCAA31F65
SHA-256:	95AF163892829A3EF249441B70B2C8281B845EDEA4B24680D3326486861D6082
SHA-512:	399FDED31D714FCF9F81399E2D9774E0A6A33FB0298E446E1FC755BF423D90BB1C22ED246F6928ED375F33EB89A66854541CFC645BF05360E3C0544525471E70
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js
Preview:	jQuery( document ).ready(function() {. jQuery( ".ecs-load-more-button" ).each(function() {. widget=jQuery(this);. settings = widget.attr("data-settings");. args = JSON.parse(settings);. widget.children( ".elementor-button" ).attr("href", "javascript:ECS_load_next_page('"+ args.widget_id +"');");. });.});.var canBeLoaded = true; // this param allows to initiate the AJAX call only if necessary...function ECS_load_next_page(id){.. widget = jQuery(".elementor-element[data-id='" + id + "'] .ecs-posts");. settings = widget.attr("data-settings");. args = JSON.parse(settings);. . posts = jQuery(".elementor-element[data-id='" + args.widget_id + "'] .ecs-posts");. . if(args.load_method == 'loadmore'){. button_text = jQuery(".elementor-element[data-id='" + args.widget_id + "'] .ecs-load-more-button .elementor-button");// add this .elementor-element[data-id='" + args.widget_id + "']. button = jQuery(".elementor-element[data-id='" + args.widget_id + "'] .ecs-load-more-but

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:lv1PVjuivp34b2b/:r4tkIWhMhNxS7ruF9jVs09NR06+N8mZheY5tTpkZgTHoao7dK7FDO428eoHvWgA66ZRTZcyxZTFO9/8rm8gt/53s9vTv&slot=content_btf&site=earn-and-excel&path=/blog/how-to-add-a-legend-in-excel-a-com&page_url=https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/&secure=1&sessiondepth=1&optout=&categories=hobbies-and-interests&generator=web&bucket=93&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=25&month=4&hour=19&wrapper_group=3.1.15-1450-SwapCMP.5-beta-control&wswy=0&sessionId=1040263935&page_view_id=0e0d1c1c0a0l170s0x0i1n0u140x0h03&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&velocity=&maxVelocity=801&partnerLift=amazonE6M2&hb_bid=no_bid&slot_id=content_btf&hb_bidder=no_bidder&hb_count=0&hb_pmp=0&UR=28&URP=138&OE=0&google=1&native=1&slot_number=1&slot=content_btf&arrival=0&refresh=0&bidFloor=0.28&ccpa=1---&psa=6,12,3&timeout=content_lazy_d_2801&gid=0&inview=1&grow_state=4&grow_version=7.244.0&3pc=timedOut&illr=0&gpp=0-0-0&pps=&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=content&device=desktop&country=US&offeringId=1&adProduct=display&oCpm=undefined"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13534), with no line terminators
Category:	downloaded
Size (bytes):	13534
Entropy (8bit):	5.26908483350061
Encrypted:	false
SSDEEP:	384:GXYeO76PHBXiHc49GVnWCaKX0TulQxaLJW48D:UYeO6PFiHcZVWBg0TulQxUJW48D
MD5:	ABB142824B55F4ACB7BCC829E62DC8A2
SHA1:	2E92B5D24A7F97C6851CBC5607E247230366B560
SHA-256:	6FEEDEE0B3FF656231324E97F80EAC7FEB981BA46B89187F0DAAA9E058E6F6B9
SHA-512:	617BA34CC086259D2DF9683A8347ECF262E3F0A3E7517B9FDCBEBCC02CB9AB6AE8D9CAC6052428A77D63346D31BB76AF037454CD12E59B75B374DCE29753995F
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/6409/9a4878ce647526870d8c.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[6409],{8001:(e,t,n)=>{n.d(t,{G:()=>i});var i=(e=>(e.title="title",e.body="body",e.sponsoredBy="sponsoredBy",e.displayurl="displayurl",e.icon="icon",e.image="image",e.clickUrl="clickUrl",e.cta="cta",e.video="video",e))(i\|\|{})},6409:(e,t,n)=>{n.r(t),n.d(t,{getTemplate:()=>Oe,getTemplateName:()=>We});var i=n(5595),a=n(3528),r=n(6039),o=n(2978),l=n(8001);const d={"grid-area":"content",margin:0,display:"grid","grid-template-areas":"'icon content'","font-size":"12px !important","line-height":"1.2 !important","column-gap":"4px","align-items":"center"},p={"font-size":"12px","font-weight":300,margin:0,"text-decoration":"none",color:"#555"},s={margin:0,"font-style":"italic"},c={"grid-area":"icon",overflow:"hidden",height:"32px",width:"32px","border-radius":"1000px",margin:0},g=()=>`\n <div style="${(0,o.W)(d)}">\n <div style="${(0,o.W)(c)}">\n <img data-native-min-size="[100, 100]" data-native-type="${l.G.icon}" /> \n

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?google_gid=CAESEMNXEk3jHNLjesVOdZ047j8&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=5932202d-6785-488c-59c0-3d7ce08ee802&reqId=9779a744-8b0c-4657-709c-6a9bea05dc14&zcluid=198b624e2ecca676&zdid=1332
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31915)
Category:	downloaded
Size (bytes):	49799
Entropy (8bit):	5.254170167447835
Encrypted:	false
SSDEEP:	768:5dzeOOvKSjy1Z0L9JejEWaEG10GzhK8OiovJhLMiVj13cKZqYuo3YNuAN7W67Q0B:5DrGzK0yMiV9cKZqYuoe14txOf
MD5:	1937FF810AB2BCC71B35A944C55324EA
SHA1:	4127E32329C42E0228E2FBAB3C195DD7ED521FEC
SHA-256:	C35E10149AF13989149C5D216FCA551424A061CB05D213082ABA866FC03B27C0
SHA-512:	D4EEEB300CFC98710E5D13F30CA9BF6AD8611E9FC3A2D94AE44CD9D6A960D9B7DEE5B0534B4AE058CD9BBD5DED756A1D4DD5FD1DCB6F820ABDE70CC5A208BDC1
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/js/lightgallery-all.min.js
Preview:	/! lightgallery - v1.6.12 - 2019-02-19. http://sachinchoolur.github.io/lightGallery/.* Copyright (c) 2019 Sachin N; Licensed GPLv3 */.!function(a,b){"function"==typeof define&&define.amd?define(["jquery"],function(a){return b(a)}):"object"==typeof module&&module.exports?module.exports=b(require("jquery")):b(a.jQuery)}(this,function(a){!function(){"use strict";function b(b,d){if(this.el=b,this.$el=a(b),this.s=a.extend({},c,d),this.s.dynamic&&"undefined"!==this.s.dynamicEl&&this.s.dynamicEl.constructor===Array&&!this.s.dynamicEl.length)throw"When using dynamic mode, you must also define dynamicEl as an Array.";return this.modules={},this.lGalleryOn=!1,this.lgBusy=!1,this.hideBartimeout=!1,this.isTouch="ontouchstart"in document.documentElement,this.s.slideEndAnimatoin&&(this.s.hideControlOnEnd=!1),this.s.dynamic?this.$items=this.s.dynamicEl:"this"===this.s.selector?this.$items=this.$el:""!==this.s.selector?this.s.selectWithin?this.$items=a(this.s.selectWithin).find(this.s.selector):this

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 80x80, components 3
Category:	dropped
Size (bytes):	2637
Entropy (8bit):	7.785501497404626
Encrypted:	false
SSDEEP:	48:UfIFuERACi13EkzcGdYxY4gBNZLkP8cZkEHGC6/PAOk5IK2bK7:BMEOBEFGdYKzNVGZCEHHaTYubK7
MD5:	9DE8C28C6028DE09355431E6435015A5
SHA1:	976111D30D212E8A177BFC0EA613CAF3E14EB5D7
SHA-256:	991B89E27049FDB8D2DB1C46DB95B9809E5F5A7D2AFC3377634144CFEA680F70
SHA-512:	D520A19362C57DCE9AC0612651F88B7D1E9A3A8461D4EFFF95C22CB36B36522A288FEC8854107E50658429A8DC55384F964273E969435C80730741894F3EA67C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(.........(.....f.....s.j...7....`.<.2..m... d.....{...........;.y..^.$......y..UtjOU....>.......J....+...^..O.......C5..1.zDyf...F...._s...x.9..V.&...d....................9B.+...d_.P.T..c.."m.IC..#...H..}C9\.....5....V..<]xP....k...bm+[...>!..L..%...W.G..<.Hm..(#..I......u.>.....O:.Ni...De.*..

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2238), with no line terminators
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	5.593012057246229
Encrypted:	false
SSDEEP:	48:Cc+8jC8o8GhfTAD8IuwpGBlntr53kiMJOB0edCKAHdq:CL8G8o8GuD8ITQrJUsdCbdq
MD5:	48C7DC0616D27B82DE5C84902681EE09
SHA1:	70346BA2D603EF270D8CEA822A778802825786EE
SHA-256:	C8F19FDA25B8F9D87A52171149C1C04593D9F776947E7E6499A8B3BF62BC9199
SHA-512:	19DD8C76DE10B4859FBFC7DB772240248A66635B9225177CF3BB954F273E53C2409D37AA512FFDD0F8E1D88ADB0A17DEBF7A853D19FE9A77D49DC3B6AF7089B6
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=98485457&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://crb.kargo.com/api/v1/dsync/Martin?exid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.bfmio.com/sync?pid=187&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pmp.mxptint.net/sn.ashx?&gdpr=0&gdpr_consent

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	13194
Entropy (8bit):	5.484992651927204
Encrypted:	false
SSDEEP:	384:JPyLUzQQ1dVd3o1yiX+tt4qym+Y/IO/of:JPCrxO/+
MD5:	D2DA7C7DCA1A638925D3EE396AA4E7A8
SHA1:	20D519AB0944C866B0E5C72D077B49F6F1485B2E
SHA-256:	77A38EBEE5730B70E36E9D5DDAA61456B06E905D98C5AF6B86D7B7CA214583A4
SHA-512:	AB6A50BF54204F1CDF290A59D14A31B0B298FCEB0375D4568EA52C4975F21BBD929523573580257BA41AB1657392BE3EFCB03CADB2C8E4771381B128B0DB3E68
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/thickbox/thickbox.js
Preview:	/. Thickbox 3.1 - One Box To Rule Them All.. * By Cody Lindley (http://www.codylindley.com). * Copyright (c) 2007 cody lindley. * Licensed under the MIT License: http://www.opensource.org/licenses/mit-license.php./..if ( typeof tb_pathToImage != 'string' ) {..var tb_pathToImage = thickboxL10n.loadingAnimation;.}../!!!!!!!!!!!!!!!!! edit below this line at your own risk !!!!!!!!!!!!!!!!!!!!!!!/..//on page load call tb_init.jQuery(document).ready(function(){..tb_init('a.thickbox, area.thickbox, input.thickbox');//pass where to apply thickbox..imgLoader = new Image();// preload image..imgLoader.src = tb_pathToImage;.});../. * Add thickbox to href & area elements that have a class of .thickbox.. * Remove the loading indicator when content in an iframe has loaded.. */.function tb_init(domChunk){..jQuery( 'body' )....on( 'click', domChunk, tb_click )....on( 'thickbox:iframe:loaded', function() {....jQuery( '#TB_window' ).removeClass( 'thickbox-loading' );...});.}..function tb_click(){

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12198), with no line terminators
Category:	downloaded
Size (bytes):	12198
Entropy (8bit):	5.031745242580206
Encrypted:	false
SSDEEP:	192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz
MD5:	3819C3569DA71DAEC283A75483735F7E
SHA1:	ECD40A5CC6F0B76200C454CA880210DC301CFAB8
SHA-256:	214674CC77ABA35AB3567B88E2739FD08E8E96C61D279559AD61874069683EA0
SHA-512:	2710655DFF46653DAEB3A6E3F6D36F885E51D5B375738EE353ACA40C6F66AE1A7DECE57039D58747012ED9EA2822191143C06F270123B8CC580F6A41B8E8AEF4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js
Preview:	!function(){"use strict";function Waypoint(options){if(!options)throw new Error("No options passed to Waypoint constructor");if(!options.element)throw new Error("No element option passed to Waypoint constructor");if(!options.handler)throw new Error("No handler option passed to Waypoint constructor");this.key="waypoint-"+keyCounter,this.options=Waypoint.Adapter.extend({},Waypoint.defaults,options),this.element=this.options.element,this.adapter=new Waypoint.Adapter(this.element),this.callback=options.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=Waypoint.Group.findOrCreate({name:this.options.group,axis:this.axis}),this.context=Waypoint.Context.findOrCreateByElement(this.options.context),Waypoint.offsetAliases[this.options.offset]&&(this.options.offset=Waypoint.offsetAliases[this.options.offset]),this.group.add(this),this.context.add(this),allWaypoints[this.key]=this,keyCounter+=1}var keyCounter=0,allW

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2637), with no line terminators
Category:	downloaded
Size (bytes):	2637
Entropy (8bit):	4.956440446821181
Encrypted:	false
SSDEEP:	48:wGRyDAIusZuPGGbyyaiOuLdmadLd2z3Yd2TcLyP4GxAJfIabBhJGRM:mZ+buuzwz82TcC5AJAabM6
MD5:	58B75C38A77E2EE48BB02750FD654A0B
SHA1:	1EF18AA7EB66D234C484551411DB212CD084CFD3
SHA-256:	CE103D7FF2FB466932D05E36056F48697B25861FD923E7DA830A32EDD22DDB63
SHA-512:	DB617A5D594DAA7ED6A9DC7A93FACA32583F77FA278DA0169D61EE42A109B2A009265A63CA67231A90AEC682463B3D9A4C9EBB343B555FDE67C12808D69CC303
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/tutor/general.min.js
Preview:	!function(n){"use strict";var t=n("body");function e(){1200<=window.innerWidth?(t.addClass("dashboard-nav-fixed"),t.removeClass("dashboard-nav-opened")):t.removeClass("dashboard-nav-fixed");var e=window.innerHeight-n(".dashboard-nav-header").outerHeight()-50;n(".dashboard-nav-content-inner").height(e).perfectScrollbar({suppressScrollX:!0})}n(document).ready(function(){n(document).on("click",".edumall-course-wishlist-btn",function(e){var a;e.preventDefault(),n("body").hasClass("logged-in")&&(e=(a=n(this)).attr("data-course-id"),n.ajax({url:$edumall.ajaxurl,type:"POST",data:{course_id:e,action:"tutor_course_add_to_wishlist"},beforeSend:function(){a.children(".button-content-wrapper").addClass("updating-icon")},success:function(e){var t;e.success?(t=a.parent(".tm-button-wrapper"),"added"===e.data.status?(t.attr("aria-label",$edumallCourseWishlist.addedText),t.addClass("added"),a.addClass("has-wish-listed"),a.find(".button-text").text($edumallCourseWishlist.addedText)):(t.attr("aria-label"

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25115)
Category:	downloaded
Size (bytes):	25202
Entropy (8bit):	5.20645807060685
Encrypted:	false
SSDEEP:	768:e44yLMNvgnDwYB+IlnHB9/bNlJyI3G7OaXiQx9kpETpUwnOQdZMvUtVo0uKHp+3:Ir6pyYG7OH2pHZMvUtzO3
MD5:	046405DE007FF73E52D17DAB2AF75258
SHA1:	887CFB8A9DE27005875F6E1C1D1EAD43BD0865C8
SHA-256:	533E264CC615EE4601DA8D2C1DEE4A8987319E53D4D7162272F067FBBF250020
SHA-512:	280FF860A90CCFFBEF838F17A64C02ABFF9A806FD359A8E110E5D3E44B5A4961FD38637E242E431A7593D8CED74946BBF1450B6202341483BF89AB70D07660EB
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js
Preview:	/! SmartMenus jQuery Plugin - v1.0.1 - November 1, 2016. http://www.smartmenus.org/. * Copyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com; Licensed MIT */(function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof module&&"object"==typeof module.exports?module.exports=t(require("jquery")):t(jQuery)})(function($){function initMouseDetection(t){var e=".smartmenus_mouse";if(mouseDetectionEnabled\|\|t)mouseDetectionEnabled&&t&&($(document).unbind(e),mouseDetectionEnabled=!1);else{var i=!0,s=null;$(document).bind(getEventsNS([["mousemove",function(t){var e={x:t.pageX,y:t.pageY,timeStamp:(new Date).getTime()};if(s){var o=Math.abs(s.x-e.x),a=Math.abs(s.y-e.y);if((o>0\|\|a>0)&&2>=o&&2>=a&&300>=e.timeStamp-s.timeStamp&&(mouse=!0,i)){var n=$(t.target).closest("a");n.is("a")&&$.each(menuTrees,function(){return $.contains(this.$root[0],n[0])?(this.itemEnter({currentTarget:n[0]}),!1):void 0}),i=!1}}s=e}],[touchEvents?"touchstart":"pointerover pointermove pointer

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	89803
Entropy (8bit):	5.049986899289801
Encrypted:	false
SSDEEP:	1536:E0ZO0BzYgaJmvOMa1Mrdnb81SScY9eunJ/JA/Dv+PLCC9lgXLhd6ZL3BEh0G3BCq:EsYgaAsFpCiL3BEh0G3BtGvuDLtWTJER
MD5:	C992E93F4B5AD1A97032DB5D427114E3
SHA1:	4E76D0C7A8FFFC869F28CD9DF511ADE0A2F889BD
SHA-256:	F836D8837F59A598F940905F2D9EED2D040C98C0A911D3AD3840E3C9E60E5057
SHA-512:	D793BE93C51EFB38B57FC56628EF2D500CC5E02F7D9F885DB712795662157C6F82A7A8E2BFC7FDBA97956B8961A1FBFC12B3DD751C1587147D8140ADA735CDC1
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/isotope/js/isotope.pkgd.js
Preview:	/!. Isotope PACKAGED v3.0.6. . Licensed GPLv3 for open source use. * or Isotope Commercial License for commercial use. . https://isotope.metafizzy.co. * Copyright 2010-2018 Metafizzy. /../. Bridget makes jQuery widgets. * v2.0.1. * MIT license. /../ jshint browser: true, strict: true, undef: true, unused: true /..( function( window, factory ) {..// universal module definition../jshint strict: false / / globals define, module, require */..if ( typeof define == 'function' && define.amd ) {...// AMD...define( 'jquery-bridget/jquery-bridget',[ 'jquery' ], function( jQuery ) {....return factory( window, jQuery );...});..} else if ( typeof module == 'object' && module.exports ) {...// CommonJS...module.exports = factory(....window,....require('jquery')...);..} else {...// browser global...window.jQueryBridget = factory(....window,....window.jQuery...);..}..}( window, function factory( window, jQuery ) {..'use strict';..// ----- utils ----- //...var arraySlice = Array.prot

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (471), with no line terminators
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	5.177794597523353
Encrypted:	false
SSDEEP:	12:YWaEAaWENK6dOpzxCA9UGGLQZHe18eOfODRWju38imKkNaZHV:ZHNDGxyGjHgDOfWRWjuXCNc1
MD5:	B20499F439A2F3DD4F591AABF183C0D6
SHA1:	6792F610B344F4ABD1930400B340A1D8516CF6BD
SHA-256:	6191D764AF55397B917A161DF2692FD9DBDB527E360C94E98E6753EDF20C06AD
SHA-512:	27A7512B1232FDA5C83FFBFDAC2196C0A1536B9920B07A138F00896A0677709FD74C9B14C6A7918D1795F367ED023D6A8C7D0833CBEC9BAB8E7304CBCB054E1F
Malicious:	false
Reputation:	low
URL:	https://widget.wickedreports.com/v2/3819/wr-4d84483e4ddfd7d3afb00685f0750c13.js
Preview:	;window.wrWidgetSettings=window.wrWidgetSettings\|\|{'clickbank':!1,'hubspot':!1,'legacyBrowsers':!1,'gClick':!0,'organic':!0,'minTimeMinutes':2880,'organicDomains':['earnandexcel.thrivecart.com','earnandexcel.com'],'paypalEC':!1,'facebookOCT':!1,'cId':3819};window.loadWR=window.loadWR\|\|function(n){var e,a=document.getElementsByTagName('head')[0];e=document.createElement('script');e.async=1;e.src=n;a.appendChild(e)};loadWR('https://widget.wickedreports.com/widget.js');

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	5.690396186419668
Encrypted:	false
SSDEEP:	3:YW/MNQ9pcYdgu0VZWrUyJvrHR+SDxyWm7rdN8gQYX8P2Yn:YWRfPg7ZWr7oStIdlQYM3
MD5:	FA9B80AE6525EED77E869F53F79C30EB
SHA1:	EAE599A326284FDEB9E8B239DA9CA48AAA088655
SHA-256:	681B7ADE11272E8AD00019CEB061EE482435990460578F747CAD52A63EE7C49F
SHA-512:	D79C4C50EB732EECDE017EABE5FA380FA47AE92BA0FE26C501CC328567993695A86408E29E2325CC0B119BE4880CB5B21AD52FAD4A3AB55A4C592562F0FB6E24
Malicious:	false
Reputation:	low
URL:	https://pdmp.papi-public.us-east-1.tagger.opecloud.com/v1/targeting?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f&tenant=b4
Preview:	{"s":"0c7XGuIcXz0CInR9j/ny7DEJ5PLSSDML0VLF3N2aqu4BOd2KSJXB","t":"c9FMheuMTW3O8yoDKqp9IZuaQg5wV8GPiqQZ9CoBTjZmzA==","kid":2,"ttl_s":76}

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	2.5857114762260935
Encrypted:	false
SSDEEP:	24:JGY7peHU2k7N7DRhoZNtwNKzbEqNpdGY7peHU2k7N7DRhoZNtwNKzbEqNp+:uHU2k7N7YtG8EqNEHU2k7N7YtG8EqNM
MD5:	5C98B31F0E318509324A3E12D7D3F2F5
SHA1:	8011ECFD0F3BB160029CC0CC8DFE6352DF40DDF2
SHA-256:	784A81D7ABBD8E4670546720EB51F5C55607597AA5189F7674558148C08DEA21
SHA-512:	85DED69024B2943A5E2D2254EA03D2F066A5B8195AC644DFF26729396F863D9447C9E4931F16ED658CBD3E23ED9FE8356427DB241F99C2C9EDF151B5F44E64E2
Malicious:	false
Reputation:	low
Preview:	GIF89a............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3..3..3..f..f.3f.ff..f..f..f3.f33f3ff3.f3.f3.ff.ff3fffff.ff.ff.f..f.3f.ff..f..f..f..f.3f.ff.f..f..f..f.3f.ff..f..f.......3..f.........3..33.3f.3..3.3..f..f3.ff.f..f.f......3..f.............3..f............3..f.............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f....3.f...........3..f.............3..f..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.................................................................................................................................,..............3..f..........3..33.3f.3..3..3..f..f3.ff.f..f..f......3..f..............3..f.............3..f.........3..3.33.f3..3..3..33.33333f33.33.33.3f.3f33ff3f.3f.3f.3..3.33.f3..3..3..3..3.33.f3.3..3..3..3.33.f3.

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	308095
Entropy (8bit):	5.600683500506183
Encrypted:	false
SSDEEP:	6144:w4fQX5NzJ4YLceF+qKXjXP9RIMx3E5Y0SE:Zf+xJNNEVE
MD5:	EC9E8E05160573787F11F37D0D84F908
SHA1:	03ABBC18DCB6C4F632AC202B959157DD72C2ADE6
SHA-256:	8B7E628E11ACE1B0367C185E572E2856A7E22B04B81A457B2C5A6EB6DFF6A491
SHA-512:	7906EB62B5813A7771547459618535631E937B568F19A532CC87AF9363849AEFC0CDA65DFB6C90C25C6A6A0034FDB7C9B44351B58CCD141F8C5B9A225D53556A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-NLTTYMX3TH
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZiquQXeRy6jM9IHPeZYNrP2I
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	67619
Entropy (8bit):	5.154899192618345
Encrypted:	false
SSDEEP:	768:+nbbA4MFx0B/cDvmApfYA8Qi3UgdSNKZXsvXAADI:ObbA4MFxnmKYhp8Nes4KI
MD5:	7C2E92BD76BC9B9A125452E6526136F7
SHA1:	A16476461D3F6933B68587AA616688BC4A228D14
SHA-256:	31AF94A7146052158B8FC939B082F74EB20C5629FBA2EF1D7484E1FE680D9721
SHA-512:	E01FD9F7B07DBEDED209E8F7B167A06E5455192644AC81D70AC55B5B9E0D51F2E7CCF9C4957843ED4FCD5571873A5134F9BEDF4033D0BCE88C95E9925526364A
Malicious:	false
Reputation:	low
URL:	https://cdn.opecloud.com/ope-dmplite.js
Preview:	!function(){"use strict";var t=function(){function t(t){this.funnel=t,this.initialCallPromise=null,this.maxCallDelayMs=2e3}return t.prototype.callPixel=function(t,n){var e=this;return this.funnel.withRaceProtection((function(){return new Promise((function(r){Object.entries(n).forEach((function(n){var e=n[0],r=n[1];void 0!==r&&t.searchParams.append(e,r)}));var o=new Image;o.addEventListener("load",(function(){1==o.width&&1==o.height?r({isThirdPartyTrackable:!1}):r({isThirdPartyTrackable:!0})})),o.addEventListener("error",(function(){1==o.width&&1==o.height?r({isThirdPartyTrackable:!1}):r({isThirdPartyTrackable:!0})})),window.setTimeout((function(){r({isThirdPartyTrackable:!1})}),e.maxCallDelayMs),o.src=t.toString()}))}))},t}();function n(n){return new t(n)}var e=function(){function t(){this.initialCallPromise=null}return t.prototype.withRaceProtection=function(t){return null===this.initialCallPromise?(this.initialCallPromise=t(),this.initialCallPromise):this.initialCallPromise.then((fun

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViem/YM:8WiIUemQM
MD5:	A825E31D18F2FF5845D245FED741E9F1
SHA1:	6E196F0B42376389AE1CC16E8F2D0C886940FAD7
SHA-256:	5D7C7D25A0DA74C0DD466120C3C09BD94CB982FC66EBC4A78675339F37323BF5
SHA-512:	3899089984B75089171A7A7DF174C75FED1E09CDB58C61BC0C4573B4716F5AE0274D0A63FAD5077E782BA4BF3EDF786102EE18EE4E4BD8DA93A0E12D85C7DA88
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&pid=eWu57J4Q2sVgL&cb=2&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1
Preview:	apstag.punt({"cb":"2"})

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	172
Entropy (8bit):	5.89051759974696
Encrypted:	false
SSDEEP:	3:yionv//thPlclBpNgSaRWW/bFqfBxtcJpmqpj43+/DhTnA6h/JMqiDTjTiOO7dlK:6v/lhPKN2SaRJosBN4OLFA64qiDnTyuh
MD5:	5B2C20761A80C77F3C81558F3201EFC6
SHA1:	AB8890CF81CE149C5909570E8C725B779FB03B8A
SHA-256:	73CB91518C98A64D313704833206F4FECFF0309F31621A098A4E8165E3E00648
SHA-512:	C27817EFEAE980B0BCCE4562CDFA569FF9CAF5EBD48606E7F8C31CADE6C5F955394683DF20B33DDC3283A07507D2BBAA76B30DEA203444EF1C438E237A00AC73
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................k....PLTE............8.;.....tRNS.`.PpX...LIDAT..-....!..r.c.va(.a4F"..H.b.&'=.6e.&.c%..!............,.~..v.9.E.5......C.gj.Af....IEND.B`.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10414)
Category:	downloaded
Size (bytes):	10415
Entropy (8bit):	5.326980706377948
Encrypted:	false
SSDEEP:	192:ZHvuY6RVIcAVTlK3wZYhzBM1GSBL9j9tSHSfImqYd0G5/H/98jp8Q:ZYI3KA+haG4I7QN/98jyQ
MD5:	380203DA1313F445D8BC395BA3B88BAD
SHA1:	C1B8D7AE214FF8D7B60D8033D8ADE1D5F5FCADBA
SHA-256:	68EAEE1DFB1182AF9BBB1CD60DF98ACEB32C2DE546D8AFE7F6480AC94679B350
SHA-512:	1418F3979E8DBEE3439CC357AA22850AE794BD405A7F65E6D90AC2E5929FD2D5D861E2B12C557292058FEA2B9D1AB888BC3245C45863FBCE1DB7071D04346532
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/internal-cs/27053452/beacon.js
Preview:	var COMSCORE=function(t){var n=function(){return n=Object.assign\|\|function(t){for(var n,i=1,e=arguments.length;i<e;i++)for(var r in n=arguments[i])Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r]);return t},n.apply(this,arguments)};"function"==typeof SuppressedError&&SuppressedError;var i=0,e=1;function r(t,n,i){-1==t.indexOf("?")&&(t+="?");var e=!1;(-1!=t.indexOf("&")\|\|t.length-1>t.indexOf("?"))&&(e=!0);for(var r=0;r<n.length;++r){var c=n[r];for(var s in c)e&&(t+="&"),e=!0,t+=s+"="+o(c[s]+"")}return t=function(t,n){if(t.length>n){var i=t.substring(0,n-8).lastIndexOf("&");t=(t=t.substring(0,i)+"&ns_cut="+o(t.substring(i+1))).substring(0,n)}return t}(t,i),t}function c(t,n){for(var i in n){var e=n[i];e!=undefined&&(t[i]=e)}}var o="undefined"!=typeof encodeURIComponent?encodeURIComponent:escape,s="undefined"!=typeof decodeURIComponent?decodeURIComponent:unescape;function u(t,n){return function(){for(var i=[],e=0;e<arguments.length;e++)i[e]=arguments[e];n.apply(t,i)}}function a(t){var

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3090), with no line terminators
Category:	downloaded
Size (bytes):	3090
Entropy (8bit):	5.461377430904058
Encrypted:	false
SSDEEP:	48:F7WRMfnUjdoLqd/1Q5xEgzSu7p0bQ0VtQYMzUm5pAY:SMfnUMqhu5xE/i0ZMlxbx
MD5:	DC68A0FE008C4D696A09721C2514D009
SHA1:	CFABDD714AD23641FACEC3D15087F6AD73B0C88D
SHA-256:	579C8AAA70B9FE327C0E930DE11E58595C735CC3C04991492A987EF591177587
SHA-512:	A523A751C4D6728AF6E1D75755FC20749627B6145C7E3E45466728DB43CA8E79269F6B863CF99678C9AAD36BDF68889835A72E8B1C3DED3D7189D3384C365D29
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3367/c4a646565b3991760716.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3367],{3367:(t,e,i)=>{i.r(e),i.d(e,{Content:()=>O});var s=i(3583),n=i(3127),r=i(6039),o=i(2379),l=i(2415),a=i(9383),h=i(9906),d=i(2180),p=i(7879),f=i(8970),b=i(4548),m=i(3190),u=i(8391),c=i(5595),v=Object.defineProperty,_=Object.getOwnPropertyDescriptor;const g={desktop:{atf:1800,lazy:2800,ref:2e3},mobile:{atf:1900,lazy:2800,ref:1800}};let O=class extends h.g7{constructor(t,e){if(super(t,e),this.slotName="content",this.adUnitId=r.A.isMobileOrTablet?"content_mobile":"content_btf",this.lazy=!0,this.refreshTime=s.Q0,this.restrictRefreshSize=!0,this.adBoxConfig=new p.HB({heightPxToContain:324,widthStyle:"100%"}),this.interscrollerConfig={isSlotValid:()=>this.number%2==1},this.maxOutstreamWidth=510,this.ibvConfig=new m.O(this),this.timeout=new d.V7(this,g),this._sizes=r.A.isMobileOrTablet?this.getMobileSizes(this.model):this.getDesktopSizes(this.model),this._gSlotSizes=r.A.isMobileOrTablet?[]:[[320,50]],void 0===O.experimenta

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072966&val=BB7435D573F24117990D5894FB5D3774
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	5.385631524271188
Encrypted:	false
SSDEEP:	3:YA0fRGPQhJNxf9qPjpWcAKJkUDqY:YAmRXJjVeNsVUuY
MD5:	163625B46B9A0982D3165FFEF779A810
SHA1:	BF75474E105B7EB01CE2D6E89D69C530C8B2BC8B
SHA-256:	5E79657F896442FD8ED2D75F5AF1D2954DAA87D0BEEE3AD8BA85F379D20A46C6
SHA-512:	4D071027CB30ABA91AE3554F094D6DA5A909399C9DB7AB7C187FA7AA1C2B5D7CE42FD1BAA24FF3E866AF5E2ECDAFEFF30EEA120EA3FD2567FB604C198DBA1843
Malicious:	false
Reputation:	low
Preview:	{"esp":"eyJpIjoieDlhTGZ2MXdDaVFVZU1zWkRBMSt1Zz09In0=","i":"x9aLfv1wCiQUeMsZDA1+ug=="}

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16170
Entropy (8bit):	6.017543591992124
Encrypted:	false
SSDEEP:	384:F7JcGAC/b0zWg5B156D9IFhkflIGWNQ5gNGN1ZZgsVddDh1:zUC/gzjB15v26k4GN1ZasVddDX
MD5:	8A089008B114033C48A6DDA624EDDD4F
SHA1:	88A860ADACE349BED7D3E676E0C71AC8463FFFFD
SHA-256:	C1E1FD049D5ABDEE6A8F7B5610F445B41B74BC17D5D7D4178BAD3E717C0772BD
SHA-512:	9DD7AC5E8DB1D50CF267C8DA7F7ADA9DBB98E4D2067586D91AABFD954436342423F45DF718D72DCF856B21AF3453B5B430BAAAD35F875E0C55303B518CAF9ABA
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202404220101&st=env
Preview:	{"sodar_query_id":"XK4qZruyCNHh6tkPqNqo2AE","injector_basename":"sodar2","bg_hash_basename":"tXhR5WxKMkfxhPR3Ieicu84_GDeFDNUHyibK8QhzoCs","bg_binary":"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

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.497656132776961
Encrypted:	false
SSDEEP:	384:kM/aDTs87Jbt81zUbdLZNaAsoSfX/KPH7T3BZdeX2hGWNH0pKyzy4dYlkWyv7S/v:J/aXskJt8xEdLZNaNtfX/KPH712X2hGK
MD5:	7FBC48EABE9BB1BEF523CF346C9E5363
SHA1:	FAB1C4A60DD82A0EA5EC61EE75A9D3D9DBA2472B
SHA-256:	51586EC2D56DC12C32B65B0612D89695B3A5B7D0C91592ACAD6EC8A04F8701AA
SHA-512:	EC7DED2166D3A59AF2A7EF2D792753007F4F7C872FE1842D9340080580BB4C56951F2C5DBC4E4BA71BAC8D1B43CF961FC10BF3336BF7F5980DD972B559B2F43E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240424/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60835), with no line terminators
Category:	downloaded
Size (bytes):	60835
Entropy (8bit):	5.519949356111581
Encrypted:	false
SSDEEP:	1536:y8bu3MuF2wXePR2T/HbREm93lhbozxXBB0l+1H9RpkFmI6fnu0MIBG+CwmzpRlWF:y8KB3lhcz7kFmI6fniIBGrwmzpRlW9lZ
MD5:	3AC36B93E230C09ABEA8266587E3313B
SHA1:	CA2C6609B8BD1711D55DC94B5A98987E68545224
SHA-256:	E7DC2D96E7B17036114E965BC4FD20227F0285F0E0A7530015FB57E6EE3A959C
SHA-512:	4C00C4E494C7FD15F662D256885381CE7DA3B48223D78A75A7E5B789CD9CC32D6D7FE3C6E5F440A9DC67ED244E4E44D30A09F1AEB42AACDA93EEF0B1AE4C36B8
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/6381/7b1b5bc2bf50b7f1fd3d.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[6381],{8473:(e,t,s)=>{s.d(t,{W4:()=>Ae,Dc:()=>a,HR:()=>_,n1:()=>se,An:()=>Ee,E:()=>re});class n{gppVersion;cmpStatus;cmpDisplayStatus;signalStatus;supportedAPIs;cmpId;sectionList;applicableSections;gppString;parsedSections;constructor(e){this.gppVersion=e.gppVersion,this.cmpStatus=e.cmpStatus,this.cmpDisplayStatus=e.cmpDisplayStatus,this.signalStatus=e.signalStatus,this.supportedAPIs=e.supportedAPIs,this.cmpId=e.cmpId,this.sectionList=e.gppModel.getSectionIds(),this.applicableSections=e.applicableSections,this.gppString=e.gppModel.encode(),this.parsedSections=e.gppModel.toObject()}}class i{callback;parameter;success=!0;cmpApiContext;constructor(e,t,s){this.cmpApiContext=e,Object.assign(this,{callback:t,parameter:s})}execute(){try{return this.respond()}catch(e){return this.invokeCallback(null),null}}invokeCallback(e){const t=null!==e;this.callback&&this.callback(e,t)}}class r extends i{respond(){let e=new n(this.cmpApiCon

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (911)
Category:	downloaded
Size (bytes):	1110
Entropy (8bit):	5.373479312013895
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIq9uNoMpvMrUpJjesmMuXbGLEHUiyO2WVvM:2e2C6lIVuNoMpvMIpx7EGLE0nLCvM
MD5:	D29005FF13D3287CDE5B5A2D1DE22E7E
SHA1:	CCFE023D194FDC2D85912512416BBC9D04A1D8FE
SHA-256:	35AC187C54C6E4AB9ECDC5BC89BD653B9580213FE9B3AE924EE4B21EAC96872A
SHA-512:	364A886E205A76D62295D87D998C46BB19AED9FCA40DD97A9E2F448E7E3DA14C54841CD0E072F71856913F77B78A3B47FE18AD92DC71194DD4A52A12E02E7059
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=da332442-e224-02bf-2eb1-e5d2da7e20fa"><img src="https://match.prod.bidr.io/cookie-sync/ox"><img src="https://contextual.media.net/cksync.php?type=opx&ovsid=dc56ddb8-fff7-0f33-2de1-7d9fdac5df9b"><img src="https://oxp.mxptint.net/OpenX.ashx"><img src="https://i.w55c.net/ping_match.gif?ei=OPENX&rurl=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537072979%26val%3D_wfivefivec_"><img src="https://c1.adform.net/serving/cookie/match?party=22"><img src="https://cms.quantserve.com/pixel/p-25CIknq_eSg16.gif?idmatch=0&gdpr=0"><img src="https://x.bidswitch.net/sync?ssp=openx"><img src="https://capi.connatix.com/us/pixel?puid=d840c480-fd6b-083c-00bf-a0cdfca12639&pId=8&gdpr

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	471
Entropy (8bit):	5.022284930450752
Encrypted:	false
SSDEEP:	12:YsfXGpLDltUXGpLDlttQXGpLDltoyHwHPjrHdMqY:YsfGdltsGdlttIGdltoUyPjTuqY
MD5:	ED5E0CC93637E936CF4A4A1D2C70CD21
SHA1:	75655A53E44ED1CEB010A6ABE0669FD38180A3B5
SHA-256:	46BF2987C83E22BD6BB782658762840E43C3389176AB927FF6DA4029F567A7A7
SHA-512:	053D4911BEB1B3518B49D47D3F7A5F7F91A458DA26C3AEA00121225BBEAAA8F2CB0E74FECA7ADB6D6A0EBA38D5C631E273B11BBED3E2A625128F4517948484D9
Malicious:	false
Reputation:	low
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"propertyId\":\"44\",\"vendorId\":\"liveRamp\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"pubcommon\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"id5\",\"sourceId\":\"600\"}]","3psamplerate":5}

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	118
Entropy (8bit):	4.570809340383417
Encrypted:	false
SSDEEP:	3:Y2AOQIgLIA7dBEcDFkfXJ2HWUsuXmYLZn:Y2AOQIgLr7dfGPMCFYLZ
MD5:	7876D2343E310F4041B67E038A193AE8
SHA1:	C56DC46423C4B1FFB2EED09A54917EEF8F02C58D
SHA-256:	F6F4C098DA6A6B5C748973EE34647AAAB96C1C363E7F77634839D25ABFEF57FE
SHA-512:	90E7538D94C86C3B9F58C7EA9E9BAB6DB5448A6B57C990FA033AABFAD6BDCFC1C9F60F32C8CC75CACBABEA083ED10B37837E33255E114614956E2BB84BAF5BDB
Malicious:	false
Reputation:	low
Preview:	{"SequenceNumber":"49648719064725242215272024223691853821986004625975672882","ShardId":"shardId-000000000003"} Tracked

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65497)
Category:	downloaded
Size (bytes):	157372
Entropy (8bit):	4.808411751499811
Encrypted:	false
SSDEEP:	1536:ug9zWL67C2WV0ofiOKvYtPyFyZCynfQL7k:uJV/fiOuGZCyf
MD5:	1E30F926C81FD0A2A252550E09411780
SHA1:	B3CDA66A9E11BAD28F041763B4DEA9DFC637D546
SHA-256:	35A56DC237F3CE93968206A16A2A39FA0833638014F36C9986ABBD0291E1D9E7
SHA-512:	9A17190921A72A1036F69F0D9A4EB28B65B5DC14BDEF18BD993CC71E66CCEB625D80EC77FE269F3D11FBA4C8BB48609B092ECFAC78656D30C4459960E3E0A4FB
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/css/frontend.min.css
Preview:	/! elementor - v3.6.0 - 21-03-2022 /..dialog-widget-content{background-color:#fff;position:absolute;border-radius:3px;-webkit-box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);overflow:hidden}.dialog-message{font-size:12px;line-height:1.5;-webkit-box-sizing:border-box;box-sizing:border-box}.dialog-type-lightbox{position:fixed;height:100%;width:100%;bottom:0;left:0;background-color:rgba(0,0,0,.8);z-index:9999;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.dialog-type-lightbox .dialog-widget-content{margin:auto;width:375px}.dialog-type-lightbox .dialog-header{font-size:15px;color:#495157;padding:30px 0 10px;font-weight:500}.dialog-type-lightbox .dialog-message{padding:0 30px 30px;min-height:50px}.dialog-type-lightbox:not(.elementor-popup-modal) .dialog-header,.dialog-type-lightbox:not(.elementor-popup-modal) .dialog-message{text-align:center}.dialog-type-lightbox .dialog-buttons-wrapper{border-top:1px solid #e6e

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	139850
Entropy (8bit):	5.997682848199398
Encrypted:	false
SSDEEP:	3072:/JdSSkJ4jIfGgYC53nni+J+bfyg6RGTAUMrjg2hmt8:/JdSSkJ4jIvLEnTT5Mrjg2hW8
MD5:	F39CA26279BCE78CCFC6BD9A1963C72D
SHA1:	1A1B07D0145084A8B6CEB3003FA147FC27052BC5
SHA-256:	531D1901C3B45913D86A421C6A9CB37025E4947FB7D3C7E1FDFB4868B06DE3D8
SHA-512:	D8A0488A3BF9CE9924D593626FD77518DA5A2D9E53AC78FFDB5639D2F5B37E54F502D14DD80EEAEBE3F1C63F35A4005476613FECEEE664A3F6CAC6FAA199F7BA
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/afterScroll/1abceeaafd0f74e0eb30.min.js
Preview:	(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[2208],{4559:(e,t,i)=>{"use strict";i.r(t),i.d(t,{load:()=>ni});var n=i(8129),s=i(700),o=i(5077),r=i(2845);function a(e){return!(!e.native\|\|!e.native.video\|\|!e.native.video.vastUrl&&!e.native.video.vastXml)}var l=i(2321),d=i(6497);let c;var h;(e=>{let t;e.load=i=>{return n=void 0,s=null,o=function*(){const n=i.offering.offering_domain;c=`https://errors.${n}/record`,t=yield d.Z.fetchJson(`${i.launcherUrl}/creativeBlocks`),l.Z.on(l.Z.events.outstreamAdError,(i=>{i.bidResponse.creativeId&&(t[i.bidResponse.creativeId]=!0),e.reportCreativeError(i)}))},new Promise(((e,t)=>{var i=e=>{try{a(o.next(e))}catch(e){t(e)}},r=e=>{try{a(o.throw(e))}catch(e){t(e)}},a=t=>t.done?e(t.value):Promise.resolve(t.value).then(i,r);a((o=o.apply(n,s)).next())}));var n,s,o},e.includes=e=>!!t&&!!t[e],e.reportCreativeError=({adError:t,bidResponse:i})=>{const{creativeId:n,bidder:s,s2sBidder:o}=i,r=o\|\|s,a=t.getVastErrorCode().toString(),l=e.buildErrorUrl(n,r,a);d.Z.f

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51004), with no line terminators
Category:	downloaded
Size (bytes):	51004
Entropy (8bit):	5.321492409932673
Encrypted:	false
SSDEEP:	768:sUBUmUyUqUeeNvLTbRQlJF1uOHRHR5ygGP9TBT/FvJVu2gg9FEn4dUAS5RRpr/xw:su53fnaLcuOSdl9UO6RPOJ4hS8i1X
MD5:	45D8CE969CA73ACB3147632AA9E43784
SHA1:	9E8E309ED6377F30595869C51E13E87453E279AB
SHA-256:	8195CCD2CB0F8DFFD0742ED558A55896ECE26EF3526D0BA9B6C271D3B2B8248A
SHA-512:	3093A97CB71E360DEC925F527FA693D142C4CABDCD0BD51DA23DC4A5E5786143A9887BF7D001F90418F0A6A16B0BD2CABF8C3FCD991E048F65697E9B259B1AAD
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/400.3bccb178.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[400],{9892:(e,t,o)=>{var r=o(6848);t.c=void 0;var n=r(o(368)),a=o(2792),i=(0,n.default)((0,a.jsx)("path",{d:"M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"}),"Close");t.c=i},1164:(e,t,o)=>{var r=o(6848);t.c=void 0;var n=r(o(368)),a=o(2792),i=(0,n.default)((0,a.jsx)("path",{d:"M16.59 8.59 12 13.17 7.41 8.59 6 10l6 6 6-6z"}),"ExpandMore");t.c=i},68:(e,t,o)=>{var r=o(6848);t.c=void 0;var n=r(o(368)),a=o(2792),i=(0,n.default)((0,a.jsx)("path",{d:"m12 21.35-1.45-1.32C5.4 15.36 2 12.28 2 8.5 2 5.42 4.42 3 7.5 3c1.74 0 3.41.81 4.5 2.09C13.09 3.81 14.76 3 16.5 3 19.58 3 22 5.42 22 8.5c0 3.78-3.4 6.86-8.55 11.54L12 21.35z"}),"Favorite");t.c=i},7184:(e,t,o)=>{var r=o(6848);t.c=void 0;var n=r(o(368)),a=o(2792),i=(0,n.default)((0,a.jsx)("path",{d:"M15.41 7.41 14 6l-6 6 6 6 1.41-1.41L10.83 12z"}),"NavigateBefore");t.c=i},7252:(e,t,o)=>{var r=o(6

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	174589
Entropy (8bit):	5.431064176297098
Encrypted:	false
SSDEEP:	3072:bmYEJkvvdG7uJh2uEJdXLNdiYJ/LKFG+g5ptloVwy:dvvdG7uJ8ugRLNdiYVKFGn6n
MD5:	A9939DCD5FEA90EE8A25728A37B9517B
SHA1:	89C6D7EB8FE0D942AF402AD4115EBB5BA32E576F
SHA-256:	41F85E5A9B52CD22AEEFE9194E1E33AAE9770CB38C776624B13952219108B43A
SHA-512:	B2D09CCBBD5CB08B6AEAECBA3230A8CE112FCA81BA6EE8CA9B57B4B211222E50673A160EB051CEC52DE3E89FDB4928E7F7B3CB408CAB5A6AB92283BBB21815EE
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/app.7.244.0.js
Preview:	(()=>{var e={2248:(e,t,r)=>{"use strict";function n(e){var t=0;for(var r in e)e[r]&&t++;return t}r.d(t,{k:()=>a});var o=858;function a(e){var t,r,a,i=n(null===e\|\|void 0===e\|\|null===(t=e.purpose)\|\|void 0===t?void 0:t.consents),c=n(null===e\|\|void 0===e\|\|null===(r=e.purpose)\|\|void 0===r?void 0:r.legitimateInterests),s=null===e\|\|void 0===e\|\|null===(a=e.vendor)\|\|void 0===a\|\|null===(a=a.consents)\|\|void 0===a?void 0:a[o];return 10===i&&9===c&&s}},4876:(e,t,r)=>{"use strict";r.d(t,{_:()=>c,u:()=>i});var n=r(1580),o=r(676);const a=n.createContext({betaName:"",betaVersion:""});function i(e){let{betaName:t,betaVersion:r,children:i}=e;const c=n.useMemo((()=>({betaName:t,betaVersion:r})),[t,r]);return(0,o.im)(a.Provider,{value:c,children:i})}function c(){return n.useContext(a)}},4476:(e,t,r)=>{"use strict";r.d(t,{O:()=>i,m:()=>c});var n=r(1580),o=r(676);const a=n.createContext(window.matchMedia("(max-width: 600px)").matches);function i(e){let{children:t}=e;const[r,i]=n.useState(window.matchMedia("(

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=1204c7db-0ff0-0854-044f-9b275ba68c4b
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1845
Entropy (8bit):	7.1079290432025735
Encrypted:	false
SSDEEP:	24:U8pxb/NEcalV78vlnAlObhhvmu8a7WpEG3dWFW7rZ5ZiXriZVJzljkYpeeU8n8Ja:U8TNNAMbh18fEGN97bZV92YQiCoD
MD5:	2C677C50A5B258F67A585FBB6103AE24
SHA1:	3AFAE105B2198E56F06B95AF2AB7A6CC60965367
SHA-256:	6E7EB7E6D433A6A6F77F111A8FD60F6949CEA0D6FAEA73DEA46F4F669BBF488F
SHA-512:	C2385E8AAA165C55B0C133E1FC041520806AF0FD6E299565FC4A6ACC1AAE943BD712F76ACAC6C83E681CC4399E964788C724D0D41CAF6180B319393D1EA826A9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C....................................................................... . .."......................................................................Y9<.G..@e..L.P.....u...R.........................................^...r.5q..K..v.:\..K.5......GzBL.h..A..W^y..........y.L+.....H.TI.....&..........................!..."#a...........?....5F..5....o...J.}d.YB..$.B.O2J..<'.Bu.>m.....#..M.v.. "..x.)y........{.:N.O..Y.Xb7..[.}..E.V..-.y..).>?..c....R .V.LpX.6%..A...."..............................12........?....s..s_;.d/]...w>.~C...MHk.....3...(.s.h.....>.{GO.........i...!.z.{..#=..Z!.1 .../L.y.'..px.ae.-...93.cCB.umK..Ta+^d6Z(..9..L^.........f.YP.A#F..1e...h'.J.{AA.u..[................................!.."#1.ABQ2CaR........?.....1.......3....l.O.{t..y.%..).c..wb?.Gb.......?.i...y.....F.......>z..ge..f.g......2........F{uwV...E...+.r..t..G..7..Y8.<q..gL.4..$..,f.9.6r^.....8.....

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2677), with no line terminators
Category:	downloaded
Size (bytes):	2677
Entropy (8bit):	5.855087484181328
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08vCuR0sWpQF1HG9QKviw8b6:wsbSUtJfxrqLWWWdV6j177RWpUnwF
MD5:	8D8BC88915DA97601F130F0B8190FE24
SHA1:	4D7DC60CE32735ED85F528264CF8AD5DFFE9A12C
SHA-256:	9487541022CE5693BB086E54ED6464D31FF8B64D69459020940CB0A3C4A32FF3
SHA-512:	FE15B101D3D314A1DCFF9F5097A77906339471D722BB76E2FBF3DFE29F07276907FF6BC360B23D2F8E4D0F137FF9A55051B987E6C69A38CA905A99A80C606E87
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/416707819/?random=1714073133449&cv=11&fst=1714073133449&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&hn=www.googleadservices.com&frm=0&tiba=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=1676511191.1714073129&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3114)
Category:	downloaded
Size (bytes):	111171
Entropy (8bit):	5.464467121921208
Encrypted:	false
SSDEEP:	1536:w4T9SVabI/TqfN5E/DlAPNiBNlKkDpU3uFkgiXdtyAs+NCz+r:7kD/uXUSEnljpUCyKAs+8Sr
MD5:	0A68C479A845EDB25E6A42BBE8F0C2FE
SHA1:	3B77228CFC356AC9461714A711509710841539FC
SHA-256:	6D28830EF0FDEBA41BC402B8B12341E929C6C66DB8FE512DEB2B1BAA9611745B
SHA-512:	307F355DCE039B1989D93ADE23A17CBBCF4CB815B24A95FB275771D86760D9D24B91EBC7D82ADD1F2A74C855B4A23DA52B1000126A2DE1ACF5A66B7346263628
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/dfa7banner_html_inpage_rendering_lib_200_268.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:aa(a)}},ca=function(a){if(!(a instanceof Array)){a=ba(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a},da="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ea;.if("function"==typeof Object.setPrototypeOf)ea=Object.setPrototypeOf;else{var fa;a:{var ha={mb:!0},ia={};try{ia.__proto__=ha;fa=ia.mb;break a}catch(a){}fa=!1}ea=fa?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}.var ja=ea,n=function(a,b){a.prototype=da(b.prototype);a.prototype.constructor=a;if(ja)ja(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyD

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072956&gdpr=0&val=Ip8uQXXMKBE5kSQWJ58xFCyaehM5mH4RLZ8tFqpA
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7985
Entropy (8bit):	4.946230308181587
Encrypted:	false
SSDEEP:	192:arPwPgiR9V/uDCkTeU2IPBDlMa+h69ZOZ5ZXZ9ZbZiZsZ+3ZUE5oMYta8P4/B:O3gr1vJE649B
MD5:	D7F595BC23833B3CA45FD6A6F837F82E
SHA1:	4AD012C0A1ECD191F1987C471BA8390F182AAA4B
SHA-256:	6D692187F1D1A46A22C379311E679154C96A404325FADA8C231BF3BC2D9884AC
SHA-512:	4B4A6C6F88B9A02F0633CE28D38BED2ED78F5DECA032CD48F35D1D9739485C40E972EAB2383F0C38353AF80D613A76A0B3C5D98CDCEED67FC80F9E0E09BADE15
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/launcher/settings.json?off=mediavine
Preview:	{"productionVersion":"3.1.15","videoVersion":"9.1.11","ampVersion":"3.0.0","betas":[{"trafficPercentage":2,"version":"3.1.15-ab"},{"trafficPercentage":6,"version":"3.1.15-paMark"},{"trafficPercentage":6,"version":"3.1.15-identityHub"},{"trafficPercentage":0,"version":"3.0.0-fixGGLoad"},{"trafficPercentage":2,"version":"3.1.15-adUnitRefact"},{"trafficPercentage":8,"version":"3.1.15-noTAM"},{"trafficPercentage":0,"version":"3.1.9-rogerV2szSwap"},{"trafficPercentage":0,"version":"3.1.9-rogerV2sz177100"},{"trafficPercentage":0,"version":"3.1.9-rogerV2sz256144"},{"trafficPercentage":4,"version":"3.1.15-1450-SwapCMP.5"},{"trafficPercentage":4,"version":"3.1.15-1957-pageTargetLIF"},{"trafficPercentage":4,"version":"3.1.15-growHouseUpdate"},{"trafficPercentage":6,"version":"3.1.15-1822-amMV"},{"trafficPercentage":10,"version":"3.1.15-densityExp"},{"trafficPercentage":8,"version":"3.1.15-genericSettings"},{"trafficPercentage":4,"version":"3.1.15-1968-dwellTime.1"},{"trafficPercentage":2,"versio

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11248)
Category:	downloaded
Size (bytes):	11283
Entropy (8bit):	5.190254988085319
Encrypted:	false
SSDEEP:	192:xUIc1FGRg1TkIjVKVqbaRFIK82u1pD6DyE6+hD9PtMDdhDgAuum41nwLG61wSoyU:xUIc1FXRkIhmq2mK82u1V9E6+VFMVHue
MD5:	B1CC609D9A12CCB6A85675EBED6D8981
SHA1:	D20C43EEA4D0DF24342C01953747C85D83CEEEC1
SHA-256:	1232AEB42CCC1A8C6AD0712081CEAE117322B5CF587BE6CA61717431D047315B
SHA-512:	6D9F5CC17CAB7AA1B2787960D48ECA35717AF23E4757BAB71E3F9C5FE59E979268F08848B5AAC549EF4948E4CF89492F6F0BD6E3A2CB43B0ACB91254EBB15227
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/wplink.min.js
Preview:	/! This file is auto-generated /.!function(s,l,o){var c,e,t,n,i,h=/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,63}$/i,u=/^(https?\|ftp):\/\/[A-Z0-9.-]+\.[A-Z]{2,63}[^ "]*$/i,p={},a={},r="ontouchend"in document;function d(){return c?c.$('a[data-wplink-edit="true"]'):null}window.wpLink={timeToTriggerRiver:150,minRiverAJAXDuration:200,riverBottomThreshold:5,keySensitivity:100,lastSearch:"",textarea:"",modalOpen:!1,init:function(){p.wrap=s("#wp-link-wrap"),p.dialog=s("#wp-link"),p.backdrop=s("#wp-link-backdrop"),p.submit=s("#wp-link-submit"),p.close=s("#wp-link-close"),p.text=s("#wp-link-text"),p.url=s("#wp-link-url"),p.nonce=s("#_ajax_linking_nonce"),p.openInNewTab=s("#wp-link-target"),p.search=s("#wp-link-search"),a.search=new t(s("#search-results")),a.recent=new t(s("#most-recent-results")),a.elements=p.dialog.find(".query-results"),p.queryNotice=s("#query-notice-message"),p.queryNoticeTextDefault=p.queryNotice.find(".query-notice-default"),p.queryNoticeTextHint=p.queryNotice.find(".query-not

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28267
Entropy (8bit):	7.983266395215805
Encrypted:	false
SSDEEP:	768:rs0QGvo1UU0SYuxA5dwIjfZSM0jinxIgf3wtOL:w0QUVxuxA5+Ijp0UIa3VL
MD5:	4EBE6176457AC0DC387F087B5E4F79FC
SHA1:	B3072611CFA688651A062A67E7DEFADD0806A99E
SHA-256:	2147FD247C0EA06D6046839A65AE73E2EB9F3C67EA8EF33B3B6007259F2FFC89
SHA-512:	5252C224A6EA7ED1D72761F835F55C84E552DAC4CD2FD19B6C1E994A47421AC3DA0FD3A60CB504C19355052FA64BCD27D7870CFCCB36AAF9C51E8CB7A969488E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Clear-Data-Validation-in-Excel-240x142.png
Preview:	.PNG........IHDR..............}.#..n2IDATx...w.d.]...r..yr.F3#K.lY.l..'l......,.kY...Kx.]x..gY`..k..8..9(..H3....s.\u.=........n.i..5.Uu.....o.\|...M..0%X.T].}T.!..Pr`...&"`..Up....@..5:[...e.....p.O..........8<.r..43....y..4.%..$..).\b.......B..e..D.!..e.H)..A...!.a....!..4.Ak.......h.ls.@e"...}..?u.B.......[..M..p.t,q.A....,x3+^.Zc.....ZQH........).mZ.B...8.........j..3.y5J...t..../._...BIp...4...[..M...6...z...b..v.Z.K....3w....0......\|.\..G..e.SUDM.JE!..Le....E...xJ..G.M..S.7.\.,....]t.p[.....%..:H...Z..h..~..........W..7uK....l.....RJ<..0...........A.A.\.4.B...`i.W...<r...x..^6.%..c.fc..5.\|..0...h.q..r.L4.EkM6.....`.P(.8..../..Zk...F........K..&.2.m.mz.....L..lL..4.R.C.D.....`_..^....LD....J......&".B....n...@.E.. .U..n.."b#;b..]rn..:F.. ...].#..r..i:;;)...9r.s...8..L.\>...?.....ibYV..RJJ..J).R..e.R..A.\.Z....m.R......~.X,F.Z......s.....".`...p....)N.<I[[..a..f9..<.b.j.............@J./..Ig..* .X.w.lI...R..).)..[=D.a.V....r*.o....].%!`.@.Xh...

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2733), with no line terminators
Category:	downloaded
Size (bytes):	2733
Entropy (8bit):	5.747559317991352
Encrypted:	false
SSDEEP:	48:C2Bq3tjOSCfvndRK4B2BqmY2BqhybCZ5S56eZA/5CSxekydNnqGa/ZUusyAq:C2Bqdj5Cfvn/K4B2BqmY2BqhybCZ5S5a
MD5:	28D981AE4AF137A456AA18A1AFD37110
SHA1:	EB39D3B215E4EF26CE64C56C7E4611F16952A57B
SHA-256:	61AE37D6F90190E8E4FBA371E4564626A82C74363638C3E4403D241C515CAF6B
SHA-512:	7190D175B7086950CA694ED3758CACD1CE46CD51BDB47A067777107540FF3C15E4B14DB6EB9CCFB4BE481D344E3DED76635EB90EEA7BA6CA2899D3BB23D17285
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=47752377&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=D3tf72mtRsaB8qJg1lHq1w%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7');PubMatic.loadAsyncImagePixel('https://us01.z.antigena.com/l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx 0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&rnd=RND');PubMatic.loadAsyncImagePixel('https://eb2.3lift.com/xuid?mid=7976&xuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&dongle=u6nf&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=MEY3QjVGRUYtNjlBRC00NkM2LTgxRjItQTI2MEQ2NTFFQUQ3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&go

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1914)
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	5.595477203583145
Encrypted:	false
SSDEEP:	96:eGZa44XCUq3ymv/YTW+sEn4xSqwadzuPxxLCpM:Lg4zUVoi94Aq0Ll
MD5:	E43B3F09EB323B895171E120791C2538
SHA1:	F44CC17A7110E2453C2FF9A250C0F27206203D5B
SHA-256:	CBA2CA327F62479DEC10ED7A52A1785154530F869E92AAC500528F7E7924C746
SHA-512:	5A0C55666812999A10A93C413773BBE9B45AF245D8E46AB84ABFBF69BBBB62F82D0B8C275FFBC72920F07C752D2D2BE895736B4E60BE0C566CB8A1F870E4D239
Malicious:	false
Reputation:	low
URL:	https://app.grow.me/iframe-login?siteId=a93bd662-05a1-4ce7-81ce-4c67bccef190&callback=https%3A%2F%2Fearnandexcel.com%2Fhttps%3A%2Fearnandexcel.com%2Fcourse-category%2Faccounting%2F%3Ftutor-course-filter-category%3D16698
Preview:	<!DOCTYPE html><html><body><script>(()=>{var C="https://api.grow.me",I="grow-me-iframe-prod",c={BACKEND_BASE_URL:C,SNOWPLOW_TRACKER_NAMESPACE:I};function r(e){let n=document.cookie.match(`(^\|;)\\s${e}\\s=\\s([^;]+)`);return n?n.pop():""}function u(e){return new Date(Date.now()+Number(e)1e3).toUTCString()}var g="grow_unverified_reader_id",y="growme_has_logged_in",E="grow_check_third_party_cookie_support",l=window.location.hostname.split(".").slice(-2).join(".");l!=="localhost"&&(l=`.${l}`);function f({name:e,value:n}){let o=new Date;o.setTime(o.getTime()+15778463e4);let t=[`${e}=${n}`,`Domain=${l}`,"Path=/","SameSite=None","Secure",`Expires=${o.toUTCString()}`].filter(Boolean).join("; ");document.cookie=t}async function O(e,n){let{SNOWPLOW_COLLECTOR_URL:o,SNOWPLOW_APP_ID:t,SNOWPLOW_TRACKER_NAMESPACE:i}=n;try{await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({schema:"iglu:com.snowplowanalytics.snowplow/payload_data/

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1220), with no line terminators
Category:	downloaded
Size (bytes):	1220
Entropy (8bit):	4.893443359043847
Encrypted:	false
SSDEEP:	24:Jc/Xrf83ue+JUJINTJ9gLDVN0GNFi9H8p8fk1E4jMK19H8Y8FKy9H8j8u:u/7f83ue+qJWTJ9qDP0gFiFh4JuI
MD5:	81FEC23FBD3FAB583D4D2170E3EEFE01
SHA1:	8D832066B9C828CBDD9F84DAD6037865AC7BB2A1
SHA-256:	59D6AB6EFE7EB235ADE623E146096601C95774568E2684E8080327117FF9537A
SHA-512:	86563DC938CA420FF06A5C1E321F0649C811314EA9AA21FE819F0AA4697627A25154C216EA5B94CFD86C5DF562A119201302CC967E5B430724B535FDF3AB8F4B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/elementor/css/post-27785.css
Preview:	.elementor-kit-27785{--e-global-color-primary:#6EC1E4;--e-global-color-secondary:#54595F;--e-global-color-text:#7A7A7A;--e-global-color-accent:#61CE70;--e-global-color-913c012:#0CD977;--e-global-color-d5f8989:#CCFF2A;--e-global-color-b4145ea:#3287C8;--e-global-typography-primary-font-family:"Roboto";--e-global-typography-primary-font-weight:600;--e-global-typography-secondary-font-family:"Roboto Slab";--e-global-typography-secondary-font-weight:400;--e-global-typography-text-font-family:"Roboto";--e-global-typography-text-font-weight:400;--e-global-typography-accent-font-family:"Roboto";--e-global-typography-accent-font-weight:500;}.elementor-section.elementor-section-boxed > .elementor-container{max-width:1140px;}.e-container{--container-max-width:1140px;}.elementor-widget:not(:last-child){margin-bottom:20px;}.elementor-element{--widgets-spacing:20px;}{}h1.entry-title{display:var(--page-title-display);}@media(max-width:1024px){.elementor-section.elementor-section-boxed > .elementor-co

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072977&val=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 141600, version 331.524
Category:	downloaded
Size (bytes):	141600
Entropy (8bit):	7.998446179529992
Encrypted:	true
SSDEEP:	3072:rSwYdBwem1sMx9wpWav6ZmGdX1+pZkTfxXpIu4k1W/FTRfH5Y:6BweAsYMWS3GljGk8Dfa
MD5:	16E9DBEB2AFD22D5CF0E7EEB2B2879AE
SHA1:	91689C405037A6CC57058A8738324BD762CF5C2B
SHA-256:	E77C7E1C8F859611D1200EE9A75EADBCE02664F28A53B05807233E88DEB82F65
SHA-512:	D435DFC9A00932C944C8A31713B6F2BBF1DAC23B59AC67895725C636462EA5A3C6C284BB99797093964F92CBCBB6539A01264793C8A0F3403451BD27529C7422
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......) ..........(..K......................?FFTM....`...........~.6.$..r..x.. ......'[......D...&..a_.....1lk=.....^.m:.._..P5........].......&.'-....`0.8..AL.\| J9a,..0cbI...N6..O.b...K....sl"F2.0[....cG....u.]..M.v9..F.../ty......].2d~...h_....12A....k.M..y..7.Lr9sQ.3w.......$.......3W..d.z=\...\|.L3..=.H..7.K~5..=..L.0g#<....+......5.(f..k..t..h8..."....4MS..iuw:=Zk.5D.~gV..j..y....#...y..<..B%...e..GD..{8......=.O...N.<.).r............($E....y..O...G.....b....@.k..UKF!.aK..r..:jU(...C.<..x......."....F.6h._..1.Q......07.eX..`.Q.....F.xV..y.ywF.^..(..M...(...T...j...}4.....B.F...`...q...\.....$[@f.@...@+\...O.....yG.tB%..JZ.&_f:.?^.-/..Vu...E...`..E2H.K...G...@.2u.q%.t.Rf...R.n.f..A.u....B.~.x...>.4...L64.K...g...3....S..=. ".%..9.U... ..3g.d...._:..u...U:..J%Q.!..1..}.oJ.B.....8..i.#6i...i.....m 4.}..J#..5i&.P.@..D..S..o5.h8D.....*..73.`..........S.&.... .5...?~T...9gW0.A.P.M...8..../.k..;F...\|.{v..'$.]..Y..U.Y.rJ.C@.......n..$.

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (311), with no line terminators
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	5.492241902193902
Encrypted:	false
SSDEEP:	6:jjxc0AQGo+65L4FWIr1KYZpGUiCA3K4FiHv8UsDpn:jjxcDUlQ13m6FvkDp
MD5:	307B6F8E436F2F0447212D6C4FA3092B
SHA1:	EE2893BEADCDC649AE2B06E62543E0EECAE4C673
SHA-256:	FA840393CD0017A188383588EE21C5CF4263E0FBE2F248E698C90AE84F5D3A2B
SHA-512:	D146F0ACE66F2975D363CE926469FC016C9B5DE118282583F51F06E09E8530A44DDF2A50523CFC82FCCE0F9F06F669DC3B0C2E249BBA89B44077972A46CAB74A
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=87473594&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1---
Preview:	PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/420486.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7');PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17176
Entropy (8bit):	7.97344865139521
Encrypted:	false
SSDEEP:	384:Tbs8Pq/cFA/1KihHgghXSMvYYBrivUVZ6w9j17By/sgjCJb:vs8SEFALh1iMAYB6Uz6mx7By/Vgb
MD5:	190DF34F6B93135477C878614DD55903
SHA1:	3E8B3228C2BD0E66F58DB1C468944947CB2E99D5
SHA-256:	FCA7F436DB4CFEEAAF2CAC6A65ED7DE582835106E4C1DF7D35DA60A3FC3700A4
SHA-512:	2DE330953BE0B0A5D3772C177ACAC6206C5438DE19893CCE7E8E786D77408DAC3C925C6FFF49EAAAC2B5907775A2061C9DEEC50230C7265DB3EC0EAA86359D48
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Fix-Spill-Error-in-Excel-240x142.png
Preview:	.PNG........IHDR..............}.#..B.IDATx..w.dWy....r..t..43...e!$$!#..,..1..c...x1x..,.a..d`.X...BF(!.F...M.s.]....q...gF....>..t.=...;.s....?Y+..".....S>..v..'6.mN..4!....^!I.v.,gw?....?..a....5>..6d..z~!.^....qQ.Ix..A8\|}>?!..0.)LA....A.....'.E.......8.Z..n..;...(.E..4!...+.~......`.^.BA.r..#..D(...oy.S..v.G.8\W.a\..P.........t...2^...3...hve.K%..+O.....H2..!9..<...\|}.O..o. ..2...4I.R..=.K!...$..W._B.$..t....T....[.A]a.._s.v.vI..0.t].....=.H$BWW.......K&^<...].......$F..V..ql.\|....ic.?v....(......=D....Iu}-...h.XZ[H<4..n..P....r.....S?..%..~GFzh....y1.......~..[EsU!..^N.t#{.h./.u.>...e^..i..+........ARO... ..pC.\|l...CC.l........GqQ1...,..$I..6....\..9.4..'OBC...r.cI%c.#Q....d..;6.2...r..t.<.U.1.{...1<...P.u...=r._Y.>9...../..d..v.-XH.K...v..8D.QL}E...0...l?LK.F@..s(JA....[xs.I.....=..up`.N."....l..k.\|E.z.0$..F..J.V.q..r$.--.....e.l.B.T..X..x.\|w.3.t.SRR.......((,8.m ....g..?...3.q.-[...k[....@...vF...1A{....hllb.......u.. .C.....

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41088)
Category:	downloaded
Size (bytes):	441368
Entropy (8bit):	5.464054436802838
Encrypted:	false
SSDEEP:	6144:hmlgLClwZJ1Ys72eBJMv+DPDAxAsklbWtklnxKZ:kOLCWbRJMvMTYMKZ
MD5:	ED00644AB0AFAB70C11354AA97AE265B
SHA1:	91B682A64EB8D2EF510CB27E65E60EB5FD71D00F
SHA-256:	19CC1CCED30687035CB740CBBF86A4C2D7C5085CA95E3FDEF76D7E28D35AF57D
SHA-512:	642E6A831CFF7541DDAFC32FD718A05E18AD9B2BF557E49D2844A3E776FA91A7D07ADE3562D9F1484FCB224E258ED290C3D9541A4B7034CB8E2424240EBDC348
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MTIyYzc3NzllMQ.js
Preview:	!function(e){var r={};function o(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=r,o.d=function(t,n,e){o.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},o.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},o.t=function(n,t){if(1&t&&(n=o(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(o.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var r in n)o.d(e,r,function(t){return n[t]}.bind(null,r));return e},o.n=function(t){var n=t&&t.__esModule?function(){return t["default"]}:function(){return t};return o.d(n,"a",n),n},o.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},o.p="https://analytics.tiktok.com/i18n/pixel/",o(o.s="ranp")}({"/6w+":function(t,n,e){"use strict";var

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65285)
Category:	downloaded
Size (bytes):	140890
Entropy (8bit):	5.215308736628414
Encrypted:	false
SSDEEP:	1536:KOgAc1fPC5szeCuG3RBQK8xi5Glq+DzCJpDUitMRLMGpukRRgj8evHgZsUgeAq51:swCrt2i5uDixKRRtYHgZsUgeAq5qOlJb
MD5:	28EFA41EAEB18CD38BB1AECA28480AEE
SHA1:	A2FE3C0DF9196597C283B2F6FFECC1D4D8702245
SHA-256:	C4A77C3BA0AF6B05ECDDBF190AB7EEC0DF40D0848233C6D48490BCE8BE80F0E6
SHA-512:	9671AEECC5241F3CCC766A448EABFEB9AAE032D2FB5D617A86E46D9616A0326252FFA730AC76F51A7954D9AE765370865F4FC5F9457944D2BCB2F606DA9A3B74
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/swiper/js/swiper.min.js
Preview:	/*. Swiper 5.4.1. * Most modern mobile touch slider and framework with hardware accelerated transitions. * http://swiperjs.com. . Copyright 2014-2020 Vladimir Kharlampidi. . Released under the MIT License. . Released on: May 20, 2020. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(i,s){void 0===i&&(i={}),void 0===s&&(s={}),Object.keys(s).forEach((function(a){void 0===i[a]?i[a]=s[a]:e(s[a])&&e(i[a])&&Object.keys(s[a]).length>0&&t(i[a],s[a])}))}var i="undefined"!=typeof document?document:{},s={body:{},addEventListener:function(){},removeEventListener:function(){},activeElement:{blur:function(){},nodeName:""},querySelector:function(){return null},querySelectorAll:function(){return[]},getElementById:function(){return null},createEve

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25177)
Category:	downloaded
Size (bytes):	41711
Entropy (8bit):	5.378199712525694
Encrypted:	false
SSDEEP:	768:5f8/g/Nl/s/sgs1Rfo0b2FwYLYdYKriRzCsvFvCuQ:5fUoNlCs00xXrDuCuQ
MD5:	82F2A3568FB0A5A8429B6D87770BB5FC
SHA1:	87FA26A633AB164A32827B1C524C9403453FEC01
SHA-256:	2B1D630081DB6515E4715621373C28C41AF3193A91F32ED73093C638043EF032
SHA-512:	7F013E9F2F9A021689EBB2D9B5089898E583376B89C011E3D894A82DCB360386B46ADA8E2B5B2B3056C794A34D4BE21273FC0CD2F068B651187F7F148EF9A270
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-04-24 18:24:40 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":40,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1"

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4093)
Category:	downloaded
Size (bytes):	4094
Entropy (8bit):	4.961588378857479
Encrypted:	false
SSDEEP:	96:dtmfw6UbirPBID8xIniqm8NbbOjnwG05gMsz9p:dtm/BI4xIi2Ojn/zP
MD5:	FBB458B6B54030F634802A998B7B7E64
SHA1:	55B33E95974E020FD8D9B9666B4E197EA99CF0DB
SHA-256:	3ACECEEBAA153A1B9A1813E5429002AEC6643EE291770B19EA7D8A0E65A4A882
SHA-512:	6B65596D9A78393982FD2C4B24F08C0FC145422EEEDE51DB2A96A9CC4BDA6E1FBC97F24D113674EC4DCC385549D997B1C928162E3856832C6BC6E00C7C228952
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/growl/js/jquery.growl.min.js
Preview:	(function(){"use strict";var a,b,c;a=jQuery,b=function(){class d{static transition(e){var f,g,h,i;for(i in f=e[0],g=this.transitions,g)if(h=g[i],null!=f.style[i])return h}}return d.transitions={webkitTransition:"webkitTransitionEnd",mozTransition:"mozTransitionEnd",oTransition:"oTransitionEnd",transition:"transitionend"},d}(),c=function(){class d{static growl(e={}){return new d(e)}constructor(e={}){this.render=this.render.bind(this),this.bind=this.bind.bind(this),this.unbind=this.unbind.bind(this),this.mouseEnter=this.mouseEnter.bind(this),this.mouseLeave=this.mouseLeave.bind(this),this.click=this.click.bind(this),this.close=this.close.bind(this),this.cycle=this.cycle.bind(this),this.waitAndDismiss=this.waitAndDismiss.bind(this),this.present=this.present.bind(this),this.dismiss=this.dismiss.bind(this),this.remove=this.remove.bind(this),this.animate=this.animate.bind(this),this.$growls=this.$growls.bind(this),this.$growl=this.$growl.bind(this),this.html=this.html.bind(this),this.content

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1829)
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.166291504957683
Encrypted:	false
SSDEEP:	48:Q7bqbgWHDU8kWDUgQYicd01YEvbMname0XG7uL6ya:ojWHDqWDNiS4meLx
MD5:	7489880430CC60DFA397FEF74D566960
SHA1:	C3E04E7C14D96F04A7286BD0067250313CF197C0
SHA-256:	48BEF5E3FE082CE514EAD59A84577FB91E168EDB7DA86C694DCF95144D40ECC1
SHA-512:	33B49B8A4288898167F6344D944C1AD9ABD873BF59088D86CA3CEAB73583F906686EECD211976F600D22BADCA5C30E30EC7907210658B8FFC2ABF7800698A0A9
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/utils.min.js
Preview:	/! This file is auto-generated /.window.wpCookies={each:function(e,t,n){var i,s;if(!e)return 0;if(n=n\|\|e,void 0!==e.length){for(i=0,s=e.length;i<s;i++)if(!1===t.call(n,e[i],i,e))return 0}else for(i in e)if(e.hasOwnProperty(i)&&!1===t.call(n,e[i],i,e))return 0;return 1},getHash:function(e){var t,e=this.get(e);return e&&this.each(e.split("&"),function(e){e=e.split("="),(t=t\|\|{})[e[0]]=e[1]}),t},setHash:function(e,t,n,i,s,r){var o="";this.each(t,function(e,t){o+=(o?"&":"")+t+"="+e}),this.set(e,o,n,i,s,r)},get:function(e){var t,n=document.cookie,i=e+"=";if(n){if(-1===(t=n.indexOf("; "+i))){if(0!==(t=n.indexOf(i)))return null}else t+=2;return-1===(e=n.indexOf(";",t))&&(e=n.length),decodeURIComponent(n.substring(t+i.length,e))}},set:function(e,t,n,i,s,r){var o=new Date;n="object"==typeof n&&n.toGMTString?n.toGMTString():parseInt(n,10)?(o.setTime(o.getTime()+1e3*parseInt(n,10)),o.toGMTString()):"",document.cookie=e+"="+encodeURIComponent(t)+(n?"; expires="+n:"")+(i?"; path="+i:"")+(s?"; dom

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://a.audrte.com/p?
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	4.276356609816637
Encrypted:	false
SSDEEP:	3:yCIYMXAIWFMVVdcMo7:ycopVTo7
MD5:	241E9AC19077965F6C78323993CABF92
SHA1:	AA188315F6EAE6D908B90623D11AABF6208990FC
SHA-256:	0B537C399CE6CF79218E5A7238BAF3C0A5E6FBB1D6D1B28C763C8809FFFDFD3E
SHA-512:	82C350D693029475E1DF1E85BCB015FDC6755BAD4AE8BEC5CFB54D5855AC9C771B3CB4DD185B0D798CA82E1F99664AF76A15829770E9ED2B4F203F3D4CFE1962
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-pro/assets/css/front.css
Preview:	.enrolment-expire-info {. margin-top: 10px !important;.}

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95653
Entropy (8bit):	5.148293538143595
Encrypted:	false
SSDEEP:	1536:NC5hYq+skejKXSXMms4R3IKtvpczR3IKtvX/vjqLR3IKtvjGR3IKtvxQefFF4X:WYq+sk8ISXMmH3IM43IMX/vjql3IMjA0
MD5:	23F9612B34A3E7D3CCC62BFACDBED871
SHA1:	7E2EC3B3C4FC24239F9B81DDF2A5E067DA118C69
SHA-256:	D3EB83794C8E7ADAF288A3D4F8E1C2F80C150C7EA131DE8F71B62651E8055DDA
SHA-512:	3BB64CB78E94CAF245115339D7B52B896D53446F6523051C887C8B1F65CFAB965731B0C0FAE8BFD8049A8BCBF20C22EB7C79C1E2C9B482A909732DEE10E3B8CC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/js/tutor-front.min.js
Preview:	(()=>{var n={3676:()=>{window.readyState_complete=function(e){var r=function t(e){return e()};document.addEventListener("readystatechange",function(t){return t.target.readyState==="complete"?typeof e=="function"?setTimeout(function(){return r(e)}):"":""})};window.addBodyClass=function(t){var e=new URL(t);var r=e.searchParams.get("tab_page");var n=e.searchParams.get("edit")&&"_edit";document.body.classList.add(r);document.body.classList.add(r+n)};window.selectorById=function(t){return document.getElementById(t)};window.selectorByClass=function(t){return document.getElementsByClassName(t)};window.json_download=function(t,e){var r=new Blob([t],{type:"application/json"});var n=document.createElement("a");n.href=URL.createObjectURL(r);n.download=e;n.click()}},4367:()=>{window.selectSearchField=function(t){var r=document.querySelectorAll(t);(function(){r.forEach(function(o){if(o&&!o.classList.contains("tutor-js-form-select")&&!o.hasAttribute("noDropdown")&&!o.classList.contains("no-tutor-dro

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27174)
Category:	downloaded
Size (bytes):	27209
Entropy (8bit):	5.0419999700227285
Encrypted:	false
SSDEEP:	384:qaQzKXnqlUoHrvxY3ta3vgisb/T3ZW0nX3Xuyw6KudjFf6vtFYIydpi:1QzKajN2g3vgiWF/nRZRcCg
MD5:	705E8A2C66B4DEA1FF91F5B39B497BE2
SHA1:	57142AC10916FD007D973B7D1EB0E646C8624003
SHA-256:	FD71E1C8A2B3BEF3A3BA07877E5BBAB2249389B27BF2E18FCC74272D151F37BC
SHA-512:	2CB66533648C543FF87984E3EBAC830C17E9FB217C10CB529CCDDB65E7D14CD40804B4AEF1A2D102A5EF43B70C4C11F021F0ACF92233E2012E393831779990D5
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/editor.min.css
Preview:	/! This file is auto-generated /..mce-tinymce{box-shadow:none}.mce-container,.mce-container ,.mce-widget,.mce-widget {color:inherit;font-family:inherit}.mce-container .mce-monospace,.mce-widget .mce-monospace{font-family:Consolas,Monaco,monospace;font-size:13px;line-height:150%}#mce-modal-block,#mce-modal-block.mce-fade{opacity:.7;transition:none;background:#000}.mce-window{border-radius:0;box-shadow:0 3px 6px rgba(0,0,0,.3);-webkit-font-smoothing:subpixel-antialiased;transition:none}.mce-window .mce-container-body.mce-abs-layout{overflow:visible}.mce-window .mce-window-head{background:#fff;border-bottom:1px solid #dcdcde;padding:0;min-height:36px}.mce-window .mce-window-head .mce-title{color:#3c434a;font-size:18px;font-weight:600;line-height:36px;margin:0;padding:0 36px 0 16px}.mce-window .mce-window-head .mce-close,.mce-window-head .mce-close .mce-i-remove{color:transparent;top:0;right:0;width:36px;height:36px;padding:0;line-height:36px;text-align:center}.mce-window-head .mce-clo

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MzgxNTY3ZWQtOWQ4MC02Yjc3LTViNGUtNTk0OGEyYzg4MzI3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (689)
Category:	downloaded
Size (bytes):	888
Entropy (8bit):	5.335168288042498
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIntTkMSmChReSJHvPH9r8a/FdchL:2e2C6lIITkMSmCh9PH99d+p
MD5:	5ACAFECAD4EC8562431E42D8099E04BA
SHA1:	02A29BB381A5297BF0FCD01FDBC1E89CD44650DA
SHA-256:	7C69E89313EB67D520D3AEA5BC121834F8B6D61CF9D926E00FCCF12A0EB0A193
SHA-512:	7B9084C1BB83E9954B5C7F40A34821F0939E21BE6C24DA35EEA39F01F5D198EB4CE64BD9E79729A070B479D3424DF5495B487D4A8B7949EB44FB9E712D9685A4
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://ce.lijit.com/merge?pid=76&3pid=78946ae7-be43-0fde-0912-b557109b7215&gdpr=0&gdpr_consent="><img src="https://i.liadm.com/s/57424?bidder_id=206088&bidder_uuid=14cc68a3-632d-0fa2-0c28-fff7e2bc8ca8"><img src="https://aa.agkn.com/adscores/g.pixel?sid=9212314908&puid=08f85459-1b3b-0e42-24ec-8f7be8ecdf61"><img src="https://bpi.rtactivate.com/tag/?id=50019&user_id=8a559fd8-8b7f-07af-2805-2cf89ad22896"><img src="https://stags.bluekai.com/site/37274?limit=1&id=336eec81-6180-0852-3459-9cd5f37a2df4"><img src="https://id.rlcdn.com/709996.gif"><img src="https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=b8d721ad-4c6f-10e5-b987-48024de70d85">..</body>.</html>.

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 174360, version 331.524
Category:	downloaded
Size (bytes):	174360
Entropy (8bit):	7.998696396645795
Encrypted:	true
SSDEEP:	3072:OZAxbDg0hc70KJJqgjm+9dRUk52fip6GkVUtEIFK6PuE+ns2C0fysWIE:OZMbdc70KLLmQUkh6GkVlIFK6ppTQk
MD5:	DD049A6496EEA2A18937237B999EA8FA
SHA1:	7F9D7C88DB430BD3BD75AB11D3DAEBFBB068D5BA
SHA-256:	A771731F8DDB3A2C0426884135E1136B22D3A40BB48C69BF77B58F3E5C854ED7
SHA-512:	0C25445B4D5F53D540AA3B50AAFD761F6605A345CC77A34BE7E9C63966BC8BA9CB542CF300118C25FDF7937FBDECC0CCF586F597BDEC1618857E2A7CBBA8F89E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-regular-400.woff2
Preview:	wOF2.....................K......................?FFTM....`...........E.6.$..r..x.. ..F...'[........t...x..T..Bn.).G..."...6.`~..(...\.......W&.P.Nvto..?... ....c1.........PP#.4.d..Lk......T......S...j....c-e..[..T.FDFDX.5J.Md#...B..S.....[v..a._.3.....g....f..>.....}...^o.U.^....r+....'.w#....I&...Mu>...I..8\|D....!...........x13j`gw..HJ..;l?.&.<.....Pgu.u..j....D...h...~...f...c..C..6\|o-N.b..G..t....A^..#+.J.J).<..o.#.L..9......:.....s......S)..R.W.?_.n..y.Nn.p@..8.I..6..I=.O...s...}l..3y.wg.1.....!.......\|...I.a.1E.I.3aL..a..(.j........:[pLl...V-..Z.V.v9.Z;eD'..e#a..U.~.r.d..?A.H..n.f.hn.`]l..0r...E....z.F.=..Q...&X`...........o......K.......u<.....D....}.......QSk.w.eB..jkr.2....9.%....pQ...p.68y.(8Z...Hl.k"8.&B.(.r89.].[p....:Jw.i?t9.Hmw..M.Ig.........w...[..t...Y=...9>V.._...].2..@&..J.X....i.o...).J....dU].kt...p..o......?..k...JI$xY59y....}S.....Cu...9./W0y-.......<......;7.AgP@...!.!$S\|.\...=...x.4V;.a0....l....)........1P...p......vu

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65463)
Category:	downloaded
Size (bytes):	169520
Entropy (8bit):	5.532368164144249
Encrypted:	false
SSDEEP:	3072:GsyueQHZi3+6imLTV3tyC30naoeCNu/Wo2Cang4FX22umzAqOPB+c2+7JTcALyf3:GsyueQHZi33vV3tyCEnao7Nu/J2CBQMI
MD5:	99655C629CB3A2A1A961E5C5A18492AD
SHA1:	3D85D70BA8FA01B179CD15B59D50F9F861DE47EC
SHA-256:	ED48A9A43C2E6ED54E2795D8C5B0D37CB45A01D2ABECB11AD40BA6042A39C95A
SHA-512:	1557E0A44EB0512C6D0693C07E71C9E88C316BD4AF2261B06BDD98A6D8B6751539B350FE5C5B14E523987AB014F7EC7EDB25BBB51CAFA078F395F6144B66ABD3
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3.1.15/wrapper.min.js?bust=-327903215
Preview:	/! For license information please see wrapper.min.js.LICENSE.txt /.(()=>{var e,t,n,i,r={5001:e=>{"use strict";function t(e,t){t=t\|\|{};this._capacity=t.capacity,this._head=0,this._tail=0,Array.isArray(e)?this._fromArray(e):(this._capacityMask=3,this._list=new Array(4))}t.prototype.peekAt=function(e){var t=e;if(t===(0\|t)){var n=this.size();if(!(t>=n\|\|t<-n))return t<0&&(t+=n),t=this._head+t&this._capacityMask,this._list[t]}},t.prototype.get=function(e){return this.peekAt(e)},t.prototype.peek=function(){if(this._head!==this._tail)return this._list[this._head]},t.prototype.peekFront=function(){return this.peek()},t.prototype.peekBack=function(){return this.peekAt(-1)},Object.defineProperty(t.prototype,"length",{get:function(){return this.size()}}),t.prototype.size=function(){return this._head===this._tail?0:this._head<this._tail?this._tail-this._head:this._capacityMask+1-(this._head-this._tail)},t.prototype.unshift=function(e){if(0===arguments.length)return this.size();var t=this._list.le

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 491 x 299, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	8426
Entropy (8bit):	7.652316403632196
Encrypted:	false
SSDEEP:	192:f/ZVhOlWlzkBscT0ot50B8ICsbal50Nlsn1U0N50eePNcEhJ8zJd6fgEfZcYvVaf:f/Z/OlWl4ihBhCsbxw15MJPRJmrXoaf
MD5:	FF5ED776524269720C90D4FF63ABB478
SHA1:	8AE843312341D5A05860F2138EA66D928F89C851
SHA-256:	F3EBCC91F7D20AB6421CF3042BB58D8D9EB303E9864C5521F9BD7A4C013EEA85
SHA-512:	AD6F93AD6CE0EF76B2B8EE5D2C6A6DCD23989E3536FE10B727DECC464239350A8E6A511C70D198D7CDAF21077C2D19CF644DAB2D80DDE44FC243D7C02717D841
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......+.....qy<B....sRGB.........gAMA......a... .IDATx^.An.L....m].g.7}.....B.....+..)....;.<.E%^.U..BT....6RID...sT=...g...'F...?...\\|.s..w.K........q.np...\\|.s...%..k...._.g.1...~FS...<v...c.3..g7.1...7.1...7.1......?.7.1.<'..h...1..\........c..7.1...7.1...7.1...7.1...7.1...7.1...7.1...7.1...7.Y....o...................n.L.Zte..jNi.....C...y7............5..%....O.uY.w.K......."npsg......g.o<.q......U...l...h".1..A.....M1h.I...d<7_(..k..<.x.f{>...Z..\|0{.n..q<.8..'.....7w..n...b..g..d...ak.,........(..[.....M..<. .f......:g...7....i..h..>..^.7j.f).^...T...b..{.\|}.8...~.;.n..j..x.s.0..B.[... ..o_......^.%Kd.}.VYvY.T\|.G.......bm.hy:..L...g.j.......nps.npsg..V....B.l.../..6x8..{...+npsw.7x.4..f.m.UbSP+,[..[....<g..?9.J.V_....Kd...P..c......g4u....v>..V.9....q..d.....<..k.^..nm/..]~C=.-.4v....\.....s..:..1...7Cl{-....'w.-....Y.C.....q..n..O...[./..L....K.........zH.\|.7..3YyD..}....O..k)....$..k..3.BA..<...._.w..m....W.

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19874), with no line terminators
Category:	downloaded
Size (bytes):	19874
Entropy (8bit):	5.41216397835057
Encrypted:	false
SSDEEP:	384:EcNQ9vV0Sc32XtxuUbvCv7OuyphlMAH2t0yU3JM9gM9FnBedmGE/kflHYx:NNQFVBc329AUbvCv7Ouyph+U2t0zJWgK
MD5:	2EC1861938D433B66B56603D4E3FC0CB
SHA1:	15C9C6DB65C7C4AB92FD8B1004CDC798E7E6EEF7
SHA-256:	EAFC49FDADC4D60F758C7AFD474AAFDDD88E5416776C38EC89BC2E258038E550
SHA-512:	7320716F3CC456F2E5431614019B26557F203A2D42096A1DAF89DDD4DA18F09E0DA5A6F071E5BDC0B0FF2CE14E2A4CD2330957ADE71104EA76FDFF4DC25AE942
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/740.3ccee1e5.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[740],{2740:(e,o,n)=>{n.r(o),n.d(o,{default:()=>Fe});var t=n(9080),r=n(2477),c=n(5544),i=n(9980),a=n(2220),l=n(6712),s=n(8512),d=n(1616),u=n(1232),p=n(1176),m=n(6424),b=n(8552),h=n(8940),f=n(5307),g=n(1580),v=n(7824),k=n(7692),y=n(7084),C=n(2964),x=n(3404),_=n(7988),w=n(4844),S=n(1028);function P(e){return(0,w.cp)("MuiFormControlLabel",e)}const M=(0,S.c)("MuiFormControlLabel",["root","labelPlacementStart","labelPlacementTop","labelPlacementBottom","disabled","label","error"]);var I=n(6200),L=n(676);const B=["checked","className","componentsProps","control","disabled","disableTypography","inputRef","label","labelPlacement","name","onChange","value"],R=(0,x.cp)("label",{name:"MuiFormControlLabel",slot:"Root",overridesResolver:(e,o)=>{const{ownerState:n}=e;return[{["& .".concat(M.label)]:o.label},o.root,o["labelPlacement".concat((0,C.c)(n.labelPlacement))]]}})((e=>{let{theme:o,ownerState:n}=

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=e047ce99-8b6d-400f-973c-746356c74d77&u_sclid=23642ee4-9521-4f89-8751-3f4f3aa963a9&u_scsid=bc2dc1e1-c043-4115-b003-10863bafdb69&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=17632&m_fcps=7523&m_pi=17612&m_pl=0&m_pv=2&m_rd=20106&m_sh=1024&m_sl=1&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&trackId=2d218ca2-ef93-486f-b17e-95bb8b9b9529&ts=1714073132985&v=3.16.0-2404242003
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	4.00334752435903
Encrypted:	false
SSDEEP:	3:jA4FKMjWezSyjLkAh2aV:IezfLB
MD5:	AE836E235DA819B6E2487CA66DDDB9B6
SHA1:	8B56BA4C4F52D663CA4DA4C0026468808EB42B2A
SHA-256:	736D1E2B722760CE1FE0CBA11E8977EFB93254413DAC70364750C7A47009D62C
SHA-512:	B31B472B292BB564D914E8E33087715F2600021807C4E3E517AFB813BDB81114299C70C32516258097D384B7B1B509024AF995E66073B2BF63AEE25EA6B3499F
Malicious:	false
Reputation:	low
URL:	"https://ssbsync.smartadserver.com/api/sync?callerId=140&gdpr={0,1}&gdpr_consent={empty,consent%20string}&gdpr=0&gdpr_consent="
Preview:	User sync url not found in sync call data source. Caller id is 140

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25130), with no line terminators
Category:	downloaded
Size (bytes):	25130
Entropy (8bit):	5.157408822069423
Encrypted:	false
SSDEEP:	384:SXS39O5bNTUsI/jR1xqx69gaAXu30mspt3p:lXgNeEms7Z
MD5:	20D5B6B1F9183D4EB99C46614B7FA35A
SHA1:	A11838695DEBD39B038ACC5D4917B1D3C5FF1DFA
SHA-256:	99AADF88140944814888948F92632225093523A3B7C1D8152C63340C6D5236AF
SHA-512:	B76B40CCCE436EC92591F7310C213870B2050902494C6453339E73A90CFA4F92E8B567D16FBE1187F2C9844117C0EFF33013FAD2DB59E5AB9CD40377390BAEEB
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/248.a2efd66c.chunk.js
Preview:	(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[248],{8248:(t,e,i)=>{t.exports=i(3376)},6448:(t,e,i)=>{"use strict";Object.defineProperty(e,"__esModule",{value:!0});var o=i(1580);e.LeftArrow=function(t){var e=t.customLeftArrow,i=t.getState,n=t.previous,r=t.disabled,s=t.rtl;if(e)return o.cloneElement(e,{onClick:function(){return n()},carouselState:i(),disabled:r,rtl:s});var a=s?"rtl":"";return o.createElement("button",{"aria-label":"Go to previous slide",className:"react-multiple-carousel__arrow react-multiple-carousel__arrow--left "+a,onClick:function(){return n()},type:"button",disabled:r})};e.RightArrow=function(t){var e=t.customRightArrow,i=t.getState,n=t.next,r=t.disabled,s=t.rtl;if(e)return o.cloneElement(e,{onClick:function(){return n()},carouselState:i(),disabled:r,rtl:s});var a=s?"rtl":"";return o.createElement("button",{"aria-label":"Go to next slide",className:"react-multiple-carousel__arrow react-multiple-carousel__arrow--right "+a,onCl

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32561)
Category:	downloaded
Size (bytes):	32564
Entropy (8bit):	5.6754281528011585
Encrypted:	false
SSDEEP:	768:ZhUcMjkKKVt1VqUz+FGQUrlTZ4KQCbxXPKzh+wuCUbfgPp7pXliV:ZzM3u+FGQINVjPKzUwuCUbfgPp7pXliV
MD5:	08F3B09357048F26A0218B0DD8F528B9
SHA1:	61D0F9634D70658434DCA1B9989AF7AB4E232174
SHA-256:	F202656DF18ADB76DB5783E845A7B54DC9F06B75E5FD47E7AF856B6C96FA7A52
SHA-512:	50AE6452D0F479DAC34CED906FEF7EA651E959D1193D27C6DE8B79B1B13B1AC7B5E2AAA86BBFBBA14BF4EB97B4808087F4E358CD782B6CE6CDC84B77024B349A
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css
Preview:	@font-face{font-family:"qlwapp-whatsapp";src:url(data:application/x-font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072968&val=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2522), with no line terminators
Category:	downloaded
Size (bytes):	2522
Entropy (8bit):	5.315304272929255
Encrypted:	false
SSDEEP:	48:Fd0qcQAmy5g2ZSUAHlh3fhy6bydHY2mJHDQ4c2mxT8Kipjp2:LmmmXZdAHlh3py6bydHYBJHDJc2mZ8Kf
MD5:	76ED95A13469C309BB1771B0E3CC1C4F
SHA1:	15FFD8A33597B5B544B001F098EC13352B5027DB
SHA-256:	64A4ED8872228E80F2EF6519AE6F19200DDD5DA2670CDBCB30EEB8AC46E09A63
SHA-512:	F13D6D5F4EFF34373AD0968581E85723D2AB3B99E03FBB8F6F4181DFF68D7E8CCA85E208C22182DDB167988A01F066B13B26BF25F41CFF3DE5470C508ABB9753
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/9300/d273b3f7a25cb28cb418.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9300],{5182:(e,t,i)=>{i.d(t,{Dn:()=>a});var a=(e=>(e["3gpp"]="video/3gpp",e["3gpp2"]="video/3gpp2",e.flash="application/x-shockwave-flash",e.flv="video/x-flv",e.javascript="application/javascript",e.m4v="video/x-m4v",e.mp4="video/mp4",e.mpeg="video/mpeg",e.ogg="video/ogg",e.quicktime="video/quicktime",e.webm="video/webm",e.wmv="video/x-ms-wmv",e))(a\|\|{})},8001:(e,t,i)=>{i.d(t,{G:()=>a});var a=(e=>(e.title="title",e.body="body",e.sponsoredBy="sponsoredBy",e.displayurl="displayurl",e.icon="icon",e.image="image",e.clickUrl="clickUrl",e.cta="cta",e.video="video",e))(a\|\|{})},9300:(e,t,i)=>{i.r(t),i.d(t,{buildRequestFromTemplate:()=>o,getLen:()=>l});var a=i(5182),r=i(8074),s=i(6039),n=i(3528),p=i(8001);const d={},o=e=>{if(d[e])return d[e];const t={sponsoredBy:{required:!1}},i=document.createElement("div");return i.innerHTML=e,i.querySelectorAll("[data-native-type]").forEach((e=>{const i=e.getAttribute("data-native-type"),s=u(e

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9149
Entropy (8bit):	4.5906448911401005
Encrypted:	false
SSDEEP:	192:7KxCtThYqXTjAd2ziFcxanFpeC3HMekTiF9hLWF0AA:7KxmuIfA0+FcknFIChkeF9VWF4
MD5:	9D6309CA421A87E1D6F76B0ED0A706C6
SHA1:	F106485A8B7879E27E8A84B2BA7BC13351C08620
SHA-256:	CFBAA49DB30DE5D8E6910FCF4430FDF7797B499955FCDE7EE37F4CCECC34D252
SHA-512:	40C220D40F5C01720CFDE9B451480CA114E30553CEDD0DA95EDCE86EF06B87C09CE00A25F0768F40A7BA816DB3378474699DEC234E40CB1B7AA679AECE3930A4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/link-whisper-premium/js/frontend.js
Preview:	"use strict";....[].forEach.call(document.querySelectorAll('a'), function(el) {.. el.addEventListener('click', wpil_link_clicked);.. el.addEventListener('auxclick', wpil_link_clicked);..});......function wpil_link_clicked(e){..// e.preventDefault(); // todo remember to remove this.. var link = this;.. var linkAnchor = '';.. var hasImage = false;.. var imageTitle = '';.. var imageTags = ['img', 'svg'];.... // if the click wasn't a primary or middle click, or there's no link, exit.. if(!(e.which == 1 \|\| e.button == 0 ) && !(e.which == 2 \|\| e.button == 4 ) \|\| link.length < 1){.. return;.. }.... if('1' === wpilFrontend.disableClicks){.. return;.. }.... if(this.href === undefined \|\| link.href === '#'){.. return;.. }.... function findLinkText(link){.. if(link.children.length > 0){.. for(var i in link.children){.. var childThis = link.children[i];.. if(childThis.children !== un

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5819)
Category:	downloaded
Size (bytes):	5854
Entropy (8bit):	4.992167790791215
Encrypted:	false
SSDEEP:	96:lBIiP1NQxABpLsSzYOzCRF3HohBmdOI1q6nW0oTX2E2d/uj2Oc1Zh+wuHCj6rMMu:TZhTw/kpV3CXdLx
MD5:	61ACBB6EBDD2479DCB66E467E3F1D80F
SHA1:	82F9D6C19DE343CC39B2C461B4A9A97770699EC8
SHA-256:	A263951BA358B2B766FE5E06C24A5869F2A67AEEE53A4BA7D3B1F9D478FC3C34
SHA-512:	17C1018EBA31A712B345977946ABD6C184F0A6C50CAD18DD1D9F18CC2EDA606EBFDC9F987D45A5E41849C4B0B6A4344C77130B937C0D831ACA09A0D3BE49F7B0
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/buttons.min.css
Preview:	/! This file is auto-generated /..wp-core-ui .button,.wp-core-ui .button-primary,.wp-core-ui .button-secondary{display:inline-block;text-decoration:none;font-size:13px;line-height:2.15384615;min-height:30px;margin:0;padding:0 10px;cursor:pointer;border-width:1px;border-style:solid;-webkit-appearance:none;border-radius:3px;white-space:nowrap;box-sizing:border-box}.wp-core-ui button::-moz-focus-inner,.wp-core-ui input[type=button]::-moz-focus-inner,.wp-core-ui input[type=reset]::-moz-focus-inner,.wp-core-ui input[type=submit]::-moz-focus-inner{border-width:0;border-style:none;padding:0}.wp-core-ui .button-group.button-large .button,.wp-core-ui .button.button-large{min-height:32px;line-height:2.30769231;padding:0 12px}.wp-core-ui .button-group.button-small .button,.wp-core-ui .button.button-small{min-height:26px;line-height:2.18181818;padding:0 8px;font-size:11px}.wp-core-ui .button-group.button-hero .button,.wp-core-ui .button.button-hero{font-size:14px;min-height:46px;line-height:3.14

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20458), with no line terminators
Category:	downloaded
Size (bytes):	20458
Entropy (8bit):	5.012886968794428
Encrypted:	false
SSDEEP:	384:u7c/8PIPkzMzMzizBSDtbQrMD/Gvd5eUwUaBB/X5KdJG28l4ZtBo5vHz:V+IkgMd
MD5:	A94C4DE3D8028FC56B148E8F66524E59
SHA1:	1B7227237F9785C66062A4811508916518E4132C
SHA-256:	F2B7C76C9AFE8EEDCE734F7D8C524C475C403EEF024CF1D4F2E3F92775FF5406
SHA-512:	50C51A69A44AFE2DA2840CCDCAB6A22D9CD3F1F79604363E94B9C19E1037F8C11F427E2368D24C18169DEA7CA494899FEDDD0877A9FF25BD329EBED10A9C8D3D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/lightGallery/css/lightgallery.min.css
Preview:	.lg-sub-html,.lg-toolbar{background-color:rgba(0,0,0,.45)}@font-face{font-family:lg;src:url(../fonts/lg.eot?n1z373);src:url(../fonts/lg.eot?#iefixn1z373) format("embedded-opentype"),url(../fonts/lg.woff?n1z373) format("woff"),url(../fonts/lg.ttf?n1z373) format("truetype"),url(../fonts/lg.svg?n1z373#lg) format("svg");font-weight:400;font-style:normal}.lg-icon{font-family:lg;speak:none;font-style:normal;font-weight:400;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.lg-actions .lg-next,.lg-actions .lg-prev{background-color:rgba(0,0,0,.45);border-radius:2px;color:#999;cursor:pointer;display:block;font-size:22px;margin-top:-10px;padding:8px 10px 9px;position:absolute;top:50%;z-index:1080;border:none;outline:0}.lg-actions .lg-next.disabled,.lg-actions .lg-prev.disabled{pointer-events:none;opacity:.5}.lg-actions .lg-next:hover,.lg-actions .lg-prev:hover{color:#FFF}.lg-actions .lg-next{right:20px}.lg-actions .lg-next:

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---&b=1&g=AgaxPzOWhH7pcNFuSmTljjLs7W1vK1ZzHBV0j0biRkI%3D
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 535 x 304, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8586
Entropy (8bit):	7.77330796461918
Encrypted:	false
SSDEEP:	192:fDfmLltIYfvyI64MCS5BXKnx+9I/g92jpXXppXv:fDfmhiYCt4UvKI9agYjpn7v
MD5:	0EC27C71C98C8F5FCE83EC9ECECF37DA
SHA1:	F49E5ACD3FBD0C3BB93151C0761538120045FCB0
SHA-256:	1EBF2A246E5C63540B87B0ECB09119DFDA21396CDFD533A86F97B0E98E96C460
SHA-512:	5653637D8ABB27B0AC25830522C52386865485CEF5EBFAE1B68E36140A79F292A3B6E3BA2FF066F67CA32AB350C0DA01E221074EECC05855FBDBDECCD9000086
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/45e9cc7b-f6ea-4201-bfec-138934ea5b0d.png
Preview:	.PNG........IHDR.......0.......S[....sRGB.........gAMA......a.....pHYs...........k...!.IDATx^..ol....:...@M-..]_..fdSU...'.j........P...S\^..".k.H..G.Ea....C.4!...5..\.J....mD.r..>."....db;...u.{.<.....\>...~..>..r.!g...y..i{..&e.\.b..8..Z......l..b.....#..@..\.......l..b.on.......D%.bii...n......}..Zc.s..l.....3...a..<....?......v..w.)n...E..6..#..m0.d.........k.U...Y...../...D..H>>.@.m...f...:\....!\..........W......sT..4..@..Mv.3..C.g..p...'.?...p.._mmm..V.....>....\|.........t.Rj.E..":UM?.B....w.^W. .n..6...X..F.>.@.e2..g.S...YmtZ....._iXD)I.. ..QM...0.\|:.....4].fW..<-......Ij..~.].G7.....h.h....:....e....?....d..p...."\........ (......p..@.(..Yi.g5........E....A....@P....LMM........j.kdd.....5.I......K.j^S.....5.j..Vo8...7.N.`.`3...ioo7...%...{..LLL.3g.S.N..N._....C.0.. ]...6...5.....................lD.....x.=G.2.!.5...K...1:..r.y.D...~.g...8..>z..(X.''....o{...>_.5.S.Dt.T....._.x.X. ...@.......g.\|.;.1.....V.F0:\|..\|...........9.....S..V.{....

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	77
Entropy (8bit):	3.7011434673082864
Encrypted:	false
SSDEEP:	3:3FFiAK/kWNuR48FIFWKQLvaSdNY:3FFi3bNuRgFWXaQY
MD5:	94678B0A04A48C4D00B00A171D54AA1B
SHA1:	6A70036494ACFC365E4D4F2718D8B7358F203600
SHA-256:	6C49A0B5F69BB7575E27E8ED2A7862C7CF597D6EB7221E5363FD66A6C6F43FF2
SHA-512:	64CA4DFBB8A83A2350730EB6AEE01304BB1C29685E5BA40CF03783FFDE96829F398C03C8C814D7FF52EB53B302F70CECC364A495A5E5E6D3D8B2B3D34A039CDB
Malicious:	false
Reputation:	low
Preview:	{.. "geo": {.. "state": "GA",.. "country_code": "US".. }.. }

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8747), with no line terminators
Category:	downloaded
Size (bytes):	8747
Entropy (8bit):	5.4725933711298484
Encrypted:	false
SSDEEP:	192:a3OG6q3O2hKx32wau8oxY6cZsQF9IZwKsQMoWwXzwLajwAo9X61mMEORnEu43Obv:O6ehI3cu8oy6cZsmAwkoYNEOREu8uP7F
MD5:	1E854CDC5F47EB5C60A0329D023EDF27
SHA1:	9FED1DEAF69FA1DD65A5D8F52ABB6529F956FABE
SHA-256:	FB8218A504F901ABD6E5240C1C634018485743C80901A9AF5E17A5D3FE39DF65
SHA-512:	B5DDB8A8E68CB2B91EDBFB8BE572C6751B514CBF9B46F71068704E21D635A9A6D626661763296A84300753187FDC9643C2D14E4C1ED37F4C59F290DF0544EBE2
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/gpp/a5a52b2a9ac68755afed.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[999],{6500:(t,e,s)=>{s.r(e),s.d(e,{GPP:()=>N});var i=s(8473),o=s(3583),n=s(6643),a=s(4441),p=s(3528),c=s(2932),l=s(6921),r=(t,e,s)=>new Promise(((i,o)=>{var n=t=>{try{p(s.next(t))}catch(t){o(t)}},a=t=>{try{p(s.throw(t))}catch(t){o(t)}},p=t=>t.done?i(t.value):Promise.resolve(t.value).then(n,a);p((s=s.apply(t,e)).next())}));let u,P;function d(){return r(this,null,(function*(){if(!P){const{GDPR:t}=yield Promise.all([s.e(1011),s.e(8262)]).then(s.bind(s,1353));P=new t}return P}))}var A=(t=>(t.US="US",t.EU="EU",t))(A\|\|{}),g=(t=>(t[t.TCFEUV2=2]="TCFEUV2",t[t.TCFCAV1=5]="TCFCAV1",t[t.USPV1=6]="USPV1",t[t.USPNATV1=7]="USPNATV1",t[t.USPCAV1=8]="USPCAV1",t[t.USPVAV1=9]="USPVAV1",t[t.USPCOV1=10]="USPCOV1",t[t.USPUTV1=11]="USPUTV1",t[t.USPCTV1=12]="USPCTV1",t))(g\|\|{}),S=s(9399);const h=new Map;h.set("US",A.US);for(const t in S.g)h.set(t,A.EU);var m=(t=>(t.NOT_APPLICABLE="BqgAAAAAAgA",t.APPLIES="BqgAAAAAAgA",t.NOTIFIED="BVQqAAAAAgA",t

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	104
Entropy (8bit):	4.807324007837037
Encrypted:	false
SSDEEP:	3:8WiCLViemo/HHVIoCYKgQnIwBM4DCVeBSyfNh:8WiIUemo/H1fCYKbY4DCVeSMX
MD5:	CC5C23B445ABF8BA4E3DE22FB76B522B
SHA1:	1466DD00502360513DD71B22C1043859312BE0F9
SHA-256:	9C26D98737A773D4E29C2B539E05CCE37EB8AA92B6026B8A1E6D1DB6062FF10F
SHA-512:	4450A85C64BB0E4C58E8E7D021E1BFC86D0785CE283B4606333B621FD379FF10A9540968EE3167A2BC37B70A7AEBDE3E7B12AB605B181FA958AE0A8F476ECD5B
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"0"})

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2196)
Category:	downloaded
Size (bytes):	2427
Entropy (8bit):	5.414030619935235
Encrypted:	false
SSDEEP:	48:sev196P9LJTORQvNmpUaw5mS9uNoMpvM6c6QOUvNmCeO4vNm2OwQvNmZv9vBjOAS:Xr6P9LJTwQFma57hMpk6c6QxFmCe7Fmd
MD5:	A4F8D5F1BFD927304D866072241BC45D
SHA1:	BD9D74634688ADEAE40CCA89FF85EF8AF1FAF2A2
SHA-256:	1A7CA826CB4142B4534343780845EDFC0ECFE7D955FEC976A21558F68D266716
SHA-512:	F67246CDA75E8F29D80A571013C460EC96F057787AAAE33FEDFF8815B2D90148B37D285D151696E1F2B3E10405B372F69E0741BF2E9FDF32491654CC439AEB32
Malicious:	false
Reputation:	low
URL:	https://exchange.mediavine.com/usersync/sync?origin=https://earnandexcel.com&src=//exchange.mediavine.com&s2sVersion=production&mv_uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&version=invalidate-verizon-pushes&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22centro%22%3Atrue%7D
Preview:	<script>. window.parent.postMessage({. message: 'syncUrls',. tokens: {"mv_uuid":"9c050a90-0339-11ef-8f5d-8719b2ab76bc","version":"invalidate-verizon-pushes"},. syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3DPID"},{"url":"https://ap.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702","type":"script"},{"url":"https://acdn.adnxs.com/dmp/async_usersync.html","type":"iframe"},{"type":"iframe","url":"https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId="},{"url":"https://secu

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23122), with CRLF line terminators
Category:	downloaded
Size (bytes):	23264
Entropy (8bit):	5.228900729617308
Encrypted:	false
SSDEEP:	384:QXrHpFSnWB6/tX2lH1dkMiYnFpg54Lrf7m9SNAc0Eny+RWuK7NeBMwV/vtrx+OLg:RWB6/8lH1dkMioFpg54n7mcQEny+NLx+
MD5:	C2E02460A0C2BB3C499009F8AA4297AB
SHA1:	7998A9786924B8222A46F05E0314B05862F7A713
SHA-256:	788B4B14EC9F43877F386CC49C67218B664C545F048468334B493B7D238F89F4
SHA-512:	EA95F555B553D07F68D4E9F4611EB570849D40B68F767EB353F07001F621F30A41F733BF4230618EE76F63653AF107FD9C7B8BC0E47481C7FD54370E88955349
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/validate/jquery.validate.min.js
Preview:	/! jQuery Validation Plugin - v1.17.0 - 7/29/2017.. https://jqueryvalidation.org/.. * Copyright (c) 2017 J.rn Zaefferer; Licensed MIT */..!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 148 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2472
Entropy (8bit):	7.422669617464948
Encrypted:	false
SSDEEP:	48:u/o/a9CTnV7AZZ2sQdYa6NgDcRObMdgu6mqCXqMnZ41v54sU:u/o/ACholY63bgu6lMnZ4XK
MD5:	D6D96B7B230E818D591FCA1DFAE99455
SHA1:	6239563443DFCA7244D5178D10EE9AD3740C453C
SHA-256:	D797B2044A96FF1A97E3D1E5DA44BB9B941B543284084E905D19A183C8CA2D49
SHA-512:	12898452BB0F65ACDE14464359964691D7DA8BB1CE6E510FE4A68B586D303FF34C48499F510E3F03C7EC974BCEF3498F28A2E5D79D3FEBE60FEE382C04B761C7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png
Preview:	.PNG........IHDR.......2.............PLTE...---((((((((((((((((((((((((((((((DDD((((((:::(((((((((.....R((((((((((((111...DDDDDD((((((DDD...DDD((((((..Q((((((...((((((DDD.....R(((DDD(((DDDDDDDDD(((DDD(((..R(((DDD(((((((((---DDD(((..R..R(((.....R((((((..R(((...(((DDD..R........R......DDDDDD...DDD(((..R........R.....RDDD(((((((((DDD...DDD........R........RDDD(((..R(((..RDDD..RDDD...DDD.....R(((..R(((..RDDD...(((DDD........R...DDD..R..R..R..R.....R..R..R...DDD...DDDDDD..RDDDDDDDDD!.P.....Q...........R..R..R...........R.....R.....R(((..R\|.......R...(((%.M....VU....tRNS......f.\........S&...-.....5....$...;...e....v...qRH...2!..P.........LDB..............zxjE@75&..........XJJ:0#........tlWK=4/#...........tkda]VB&......{kJ9.ohf..2....IDATX...W.A...H..(..L. ... `.(.).""EE.RT.(...{/..G:.I.]./.................._........?Z.l&..G.'~..c!..l....=...J-,...n.-..J.......6.`.W.@%Q..n...F.\|.&I..V.W.A...}h./.\.....Q.WJ...f.3>&f.d..#.'%..m~}3.0>...\nA..RH..K..4...5K.n[Fj.h..(....

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7973)
Category:	downloaded
Size (bytes):	20787
Entropy (8bit):	5.301875884707572
Encrypted:	false
SSDEEP:	384:8uMSX9vEqkTVScdV/vWxcHsiW58furhDGXvhHQfww/Xc2S8mFkF50y:iScPy+hkLqkJ
MD5:	49FA677B9CD7DDF221DC06537B35E10F
SHA1:	7485F3F99C3C1A57197F2B099F3F8D68B8609D06
SHA-256:	0CD851E5B33AF0FBB354DF65506DA39807B998E07723F3D08ABA5179FA2ED97E
SHA-512:	40D50C965DB656D352C1E73BF3FF9E82B64422398974D55902B0EAAB213FF255AF9338C33D09A8B148DA37B1A13EF0377DE2B510F6B5C7C42C8F866BA3189A54
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/core.min.js
Preview:	/! jQuery UI - v1.12.1 - 2020-09-25. http://jqueryui.com.* Includes: data.js, disable-selection.js, escape-selector.js, focusable.js, form-reset-mixin.js, form.js, ie.js, jquery-1-7.js, keycode.js, labels.js, plugin.js, position.js, safe-active-element.js, safe-blur.js, scroll-parent.js, tabbable.js, unique-id.js, version.js, widget.js.* Copyright jQuery Foundation and other contributors; Licensed /.!function(t){"function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(x){var t,e,n,W,C,o,s,r,l,a,i,h;function E(t,e,i){return[parseFloat(t[0])(a.test(t[0])?e/100:1),parseFloat(t[1])(a.test(t[1])?i/100:1)]}function H(t,e){return parseInt(x.css(t,e),10)\|\|0}x.ui=x.ui\|\|{},x.ui.version="1.12.1",./!. * jQuery UI :data 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.x.extend(x.expr[":"],{data:x.expr.createPseudo?x.expr.createPseudo(function(e){return function(t){r

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	5.1770759053748385
Encrypted:	false
SSDEEP:	3:qQgfjg5anvEVUxQARpEy3TWIHW8kQkaf4NoWjUHW4gneBzWLKjUSHJb4CNw1B:qQQjgYke7hjWdQkU4xj2gecLA1Hx4CNK
MD5:	5E184A2A90EF8D40F9BDBE5B4CF1390A
SHA1:	EEB994B8129B8C993849EC4140EFB63D8EE6B025
SHA-256:	56DF8896D440B37F638F84D6F71C7689B1F2FD4B2C7123E65397A45E8EE6D382
SHA-512:	11E272B0C2ABB4B38989D3C93E079A7566F107DE3DDE1A00C63CD882DA2642E6954B60510CAF089483A3CC0DA68113F304759BFAAFDBA9F59F65C4638B53ABA2
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/config/com/5e40fa19-dd6c-4373-b1e0-df7865ef9034.js?v=3.16.0-2404242003
Preview:	!function(){"use strict";try{window.snaptr.cfg('5e40fa19-dd6c-4373-b1e0-df7865ef9034',{"asc":[],"a":["PII","AV3"],"ipg":"1","b":["ERR"],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	43457
Entropy (8bit):	6.048805625998781
Encrypted:	false
SSDEEP:	768:hm5QJJSQ2rWXM7XdyVo9KxI79hb9TuX9Y+qE6HN50pxIu+SkRddE2kEv81r1V/rq:G6RMuLOdEN1pVJaotl9XY
MD5:	BE89DB1AFDC791F264F405D3EB5982E3
SHA1:	18C0C07CDEEE944EE4941A5E432135E9D92C4A93
SHA-256:	7C8CAC2FA8162E9F6EBF6448395624262B9C6A9DFDA171F56F4A6689C821BE12
SHA-512:	25DF8767C176397E83C4E5E5723F1BA5E40F8D27498C809E88CA016E97923E691C22B1EE5E6CD40048184C9F47709305CA6413FE255B3E1ABDA7E96CB1FBF537
Malicious:	false
Reputation:	low
Preview:	{"/1030006/earnandexcel/adhesion":["html",0,null,null,1,90,728,0,1,null,null,1,1,[["ID=7a42548af4e2f629:T=1714073169:RT=1714073169:S=ALNI_Ma_l4txy5C27Mi8Mh9Z_tSJyYVx9g",1747769169,"/","earnandexcel.com",1],["UID=00000df667af239e:T=1714073169:RT=1714073169:S=ALNI_MZZiyo-CiD0f8BywRD5z63Rb87DFQ",1747769169,"/","earnandexcel.com",2]],[107212704516],[179384556],[29955756],[299148516],[98686],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CIipgJOM3oUDFc3aKAUdagYIEQ",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=e9abea3297f70672:T=1714073169:RT=1714073169:S=AA-Afjb6IMzHp2G7ONnOeSk1xhlk",1729625169,"/","earnandexcel.com"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240424';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</scrip

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13060)
Category:	downloaded
Size (bytes):	13130
Entropy (8bit):	5.427959221454025
Encrypted:	false
SSDEEP:	384:77nuA3md5GfxUJfiQswjwO63yvp9gtOiicoIFaw2oGQPYp/2n65sQ:XuA2d2UIQP0O6ivDpwLauPYpun65sQ
MD5:	3B17E8AE675F8C210AEB58C61DFB929A
SHA1:	8A4431A4E1AECF59FE74A25AFE76CDDF9A8D3648
SHA-256:	25BFF8CE59B35CBF4138620FF56273BE3589F972B58D3B72C7F1034DD1FFF4B5
SHA-512:	9386CDAB26DD814048DFAB2FFA3DC78C04B4A6B0D81E03F9115B2734A6FC6FDAC1217557C849C894A73BC1B5B074909EB51ED14B76428BEFB54D9E51ED6DF6F2
Malicious:	false
Reputation:	low
URL:	https://exchange.mediavine.com/usersync.min.js?s2sVersion=production
Preview:	/! For license information please see usersync.min.js.LICENSE.txt /.(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(i){function o(){}function r(n,t,r){if("undefined"!=typeof document){"number"==typeof(r=e({path:"/"},o.defaults,r)).expires&&(r.expires=new Date(1new Date+864e5r.expires)),r.expires=r.expires?r.expires.toUTCString():"";try{var a=JSON.stringify(t);/^[\{\[]/.test(a)&&(t=a)}catch(e){}t=i.write?i.write(t,n):encodeURIComponent(String(t)).replace(/%(23\|24\|26\|2B\|3A\|3C\|3E\|3D\|2F\|3F\|40\|5B\|5D\|5E\|60\|7B\|7D\|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23\|24\|26\|2B\|5E\|60\|7C)/g,decodeURIComponent).replace(/[]/g,escape);var c="";for(var s in r)r[s]&&(c+="; "+s,!0!==r[s]&&(c+="="+r[s].split(";")[0]));return document.cookie=n+"="+t+c}}f

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
URL:	https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15255), with no line terminators
Category:	downloaded
Size (bytes):	15255
Entropy (8bit):	5.3762496312604995
Encrypted:	false
SSDEEP:	192:EuhxDm2QXu1u3aHWPRPZntZ+YNzu1ZiWZz44lb+Nr0waZGJOwzTOYfUf6wnj245K:ESxb14t09V4zFMGfUfBjLL/LMB
MD5:	BAC87AAF37D47F5F94879437AF49BFB9
SHA1:	69510BE28F510FFF553D2E87EB1C361ECE01A32D
SHA-256:	A27A309AF92F18AB14A4448EACF239FE549E4DCF159C31F77E604842763D034A
SHA-512:	3AE88C216078B7E31518381AEFD91D9728B322713B3E8A4E43E335E90409406F2B804CED0639E91BC7D376A56D835FC2CF3955AD7E84647FD474107F05873DCF
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/1664/dd8532c24c7dcb918aa0.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[1664],{8152:(t,e,i)=>{i.d(e,{Ay:()=>u,BL:()=>l,fC:()=>a});var s=i(5077),o=i(8490),n=i(953);const r={};function a(t){t.forEach((t=>{var e;if(!t.adUnitCode)return;const i=window.$adManagementConfig.web.model;o.f.addSlotLevelData(t,i);let a=r[t.adUnitCode]\|\|u(t.adUnitCode);r[t.adUnitCode]=a,"instream"===(null==(e=t.mediaTypes.video)?void 0:e.context)&&(a=s.D.video);const d=n.Z.getSlotById(a);t.isInView=Boolean(null==d?void 0:d.onRail),t.refreshCount=null==d?void 0:d.refreshes,t.adunitPath=null==d?void 0:d.adUnitPath}))}const d=new RegExp(/_outstream_desktop\|_outstream_mobile\|_ibv_desktop\|_ibv_mobile/);function u(t){let e=t.replace(d,"");return-1===e.indexOf("adhesion")&&(e=e.replace("desktop","btf")),e}function l(t){let e=t.replace(d,"");return e=e.replace(/_[0-9]_+/g,"_"),e}},1664:(t,e,i)=>{i.r(e),i.d(e,{default:()=>E});var s=i(7562),o=i(4515),n=(t=>(t.siteIdCTPDesktop="desktop_ctp",t.siteIdAutoplayDesktop="desktop_autopla

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3021)
Category:	downloaded
Size (bytes):	3057
Entropy (8bit):	5.188039965806057
Encrypted:	false
SSDEEP:	48:Q71QdodncHcNQ4mrIVk52X+IAC9KkNUKDANaiG5VERKIJwigTdteEdMays27J:Xohvj6kZKkFeAEMbB8
MD5:	6524A328777F6E65ECF389155CE398E5
SHA1:	4750986FB15EC3B3C06FCE5A99F0DB4CD182FB02
SHA-256:	DE7ADE682FF7B0A993BBF1D0E3381F04180FC94B476F4FB3FB2DEA65D9B33863
SHA-512:	52B86A699BE9EE98D339794CA68111B2D7214D8CF675DA289F1D6A32BB3B9AF804D380282D17CF882A68011628185469D751B27EC5D6C17665E40047F9CDC095
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/a11y.min.js
Preview:	/! This file is auto-generated /.this.wp=this.wp\|\|{},this.wp.a11y=function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s="jncB")}({Y8OO:func

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46296)
Category:	downloaded
Size (bytes):	63802
Entropy (8bit):	5.452228681722286
Encrypted:	false
SSDEEP:	1536:Hc0MDTvBMxv5ZkbHh2dTpzAVmGaOuVV2H4:xfyhQTymjO1H4
MD5:	8FA0FA673B4561618E24310DC690A309
SHA1:	8681DA7B82A632AAE88D65B064B648D725A17751
SHA-256:	68AFF7BAEEE68F8079078D25F80461973DC7215E5D3BCDE51039D6BC74112DD2
SHA-512:	67EDA9C6049288BC5FDD30A63C25C747C0C45933CF0788643386EAEB75A86C233EB59D4D9A5A9B2DDA14F562B4510E81EAB5176F0ABC09747D8F524535F2B4E7
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/earn-and-excel.js
Preview:	window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.cmp_version = "13adaa586e1080440be72fa0a37b1cb5ff0595a8";. window.$adManagementConfig.web.model = {"gdpr":"0","bidRequests":{"leaderboard_atf":[{"bidder":"amazon"},{"bidder":"indexExchange","size":[728,90],"params":{"size":[728,90],"siteId":"179864"}},{"bidder":"indexExchange","size":[970,250],"params":{"size":[970,250],"siteId":"179864"}},{"bidder":"indexExchange","size":[970,90],"params":{"size":[970,90],"siteId":"179864"}},{"bidder":"pubmatic","params":{"publisherId":"157108","adSlot":"leaderboard_atf","bcat":[]}},{"bidder":"rubicon","params":{"accountId":"17404","siteId":"168624","zoneId":"812708","inventory":{"category":["hobbies-and-interests"]}}},{"bidder":"triplelift","params":{"inventoryCode":"Mediavine_ron_leaderboard_atf_970x250_Prebid"}}],"leaderboard_btf":[{"bidder":"amazon"}],"sidebar_atf":[{"bidder

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=540245193&val=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://match.prod.bidr.io/cookie-sync/ox
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28267
Entropy (8bit):	7.983266395215805
Encrypted:	false
SSDEEP:	768:rs0QGvo1UU0SYuxA5dwIjfZSM0jinxIgf3wtOL:w0QUVxuxA5+Ijp0UIa3VL
MD5:	4EBE6176457AC0DC387F087B5E4F79FC
SHA1:	B3072611CFA688651A062A67E7DEFADD0806A99E
SHA-256:	2147FD247C0EA06D6046839A65AE73E2EB9F3C67EA8EF33B3B6007259F2FFC89
SHA-512:	5252C224A6EA7ED1D72761F835F55C84E552DAC4CD2FD19B6C1E994A47421AC3DA0FD3A60CB504C19355052FA64BCD27D7870CFCCB36AAF9C51E8CB7A969488E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............}.#..n2IDATx...w.d.]...r..yr.F3#K.lY.l..'l......,.kY...Kx.]x..gY`..k..8..9(..H3....s.\u.=........n.i..5.Uu.....o.\|...M..0%X.T].}T.!..Pr`...&"`..Up....@..5:[...e.....p.O..........8<.r..43....y..4.%..$..).\b.......B..e..D.!..e.H)..A...!.a....!..4.Ak.......h.ls.@e"...}..?u.B.......[..M..p.t,q.A....,x3+^.Zc.....ZQH........).mZ.B...8.........j..3.y5J...t..../._...BIp...4...[..M...6...z...b..v.Z.K....3w....0......\|.\..G..e.SUDM.JE!..Le....E...xJ..G.M..S.7.\.,....]t.p[.....%..:H...Z..h..~..........W..7uK....l.....RJ<..0...........A.A.\.4.B...`i.W...<r...x..^6.%..c.fc..5.\|..0...h.q..r.L4.EkM6.....`.P(.8..../..Zk...F........K..&.2.m.mz.....L..lL..4.R.C.D.....`_..^....LD....J......&".B....n...@.E.. .U..n.."b#;b..]rn..:F.. ...].#..r..i:;;)...9r.s...8..L.\>...?.....ibYV..RJJ..J).R..e.R..A.\.Z....m.R......~.X,F.Z......s.....".`...p....)N.<I[[..a..f9..<.b.j.............@J./..Ig..* .X.w.lI...R..).)..[=D.a.V....r*.o....].%!`.@.Xh...

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2664), with no line terminators
Category:	downloaded
Size (bytes):	2664
Entropy (8bit):	5.849911576155497
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt087CuRwsWpQvbUG9QKOu6:wsbSUtJfxrqLWWWdV6j1n7RSpJr
MD5:	EEBBCD3E01E3C7A1726ED29477E44B72
SHA1:	0D14C3B3747F0AD29F111CF1B9CAD4A1F17D2A82
SHA-256:	FCF45D331622DA4277B3E214A7EBF09271EE897741F8BB9F9AAC60A8C2042094
SHA-512:	F63186C46B89AF6BE46460687E2EB3182110D5A62FF099170E0939CD6E3FFB636F62544C7B710E3A132265307B258E5DD6864B11871B76E17749A345C5A9C41F
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/416707819/?random=1714073175744&cv=11&fst=1714073175744&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fhttps%3A%2Fearnandexcel.com%2Fcourse-category%2Faccounting%2F%3Ftutor-course-filter-category%3D16698&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=1676511191.1714073129&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/record?impkey=V1:4kQNdX/MQEKFA6tG:HLJM9YKC25tuaIfjqp3wlk9E8+fKw8WJQUR1HRDnlPCDdbwIDHMbXf8thaURVuZV7Q==&slot=universalPlayer&site=earn-and-excel&path=/blog/how-to-add-a-legend-in-excel-a-com&page_url=https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/&secure=1&sessiondepth=1&optout=&categories=hobbies-and-interests&generator=web&bucket=93&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=25&month=4&hour=19&wrapper_group=3.1.15-1450-SwapCMP.5-beta-control&wswy=0&sessionId=1040263935&page_view_id=0e0d1c1c0a0l170s0x0i1n0u140x0h03&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&partnerLift=amazonE6M2&hb_bid=no_bid&slot_id=universalPlayer&hb_bidder=no_bidder&hb_count=0&hb_pmp=0&UR=28&URP=138&OE=0&google=0&native=0&slot_number=1&slot=universalPlayer&arrival=0&refresh=0&bidFloor=0.28&ccpa=1---&psa=&timeout=universal_player_atf_d_2301&gid=0&inview=0&grow_state=4&grow_version=7.244.0&3pc=timedOut&illr=0&gpp=0-0-0&pps=&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=universal_player&device=desktop&country=US&offeringId=1&adProduct=stickyOutstream&oCpm=undefined
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5462)
Category:	downloaded
Size (bytes):	5693
Entropy (8bit):	5.411630330739059
Encrypted:	false
SSDEEP:	96:Xr6P9LJTwQFm0a7FmIy7gFmdSkz57hMpk6c6nkFmIxFmCe7Fm2cFmZVWvYNAkyLo:bYLdwymzBmIy7impNVMumIjm7Bm2GmW2
MD5:	5979A60FEA795400FA1CAEDC7395796B
SHA1:	801DFA15D0D0EB5970FEA498DDE89545C6693BFF
SHA-256:	52BD337EFAF98C99CCA8670931152CF2706A3D513C051C5819DF295F5C822405
SHA-512:	5EDEBEF1E66D81C9D4D784CBDA2043E5F84F10F44EF2E103B5F708C081542FE5C87CAE4F64D7B19ADBEFCC38091526BCD532BB35EA5F55415D76F0A6AB4ADD24
Malicious:	false
Reputation:	low
URL:	https://exchange.mediavine.com/usersync/sync?origin=https://earnandexcel.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22centro%22%3Atrue%7D
Preview:	<script>. window.parent.postMessage({. message: 'syncUrls',. tokens: {"mv_uuid":"9c050a90-0339-11ef-8f5d-8719b2ab76bc","version":"invalidate-verizon-pushes"},. syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3DPID"},{"url":"https://bh.contextweb.com/bh/rtset?pid=562036&ev=9c050a90-0339-11ef-8f5d-8719b2ab76bc&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25","type":"iframe"},{"url":"https://ap.lijit.com/pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dp

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23432)
Category:	downloaded
Size (bytes):	23433
Entropy (8bit):	4.988691933097723
Encrypted:	false
SSDEEP:	384:uifv9o67LRIHsTZQu07f087x7iY3bVyYQPDcdd8HyxlYOgjYYuXCy90fY6wEvyMa:pv9o2LRysTZQugf087x7iY3JyhPgdV/n
MD5:	63FAD256B41B5D84BC1E86461A96A318
SHA1:	20D44C76509B9FB61A6E005112D60A1F3B73B8EC
SHA-256:	A69C12CCD186A899DB79FCE802B46C08E71F69C2C422BE2666ED8565E3ADD026
SHA-512:	09BBD78798D0A62B0020A3C97A2E1E34970806003BFBE8F6DDBBDAA248C10A4E947BF58D93F1FB468A7F820D1BA6F83E85A561E740277555F8AEBA356A6D6C72
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js
Preview:	"use strict";var extendStatics=function(d,b){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(d[p]=b[p])},extendStatics(d,b)};function __extends(d,b){if("function"!=typeof b&&null!==b)throw new TypeError("Class extends value "+String(b)+" is not a constructor or null");function __(){this.constructor=d}extendStatics(d,b),d.prototype=null===b?Object.create(b):(__.prototype=b.prototype,new __)}var __assign=function(){return __assign=Object.assign\|\|function(t){for(var s,i=1,n=arguments.length;i<n;i++)for(var p in s=arguments[i])Object.prototype.hasOwnProperty.call(s,p)&&(t[p]=s[p]);return t},__assign.apply(this,arguments)},reactive=function(getter,interval){void 0===interval&&(interval=300);var subs=[],v=getter(),interval_id=setInterval((function(){if(0===subs.length)return;var new_v=getter();if(v===new_v\|\|"object"==typeof v&&JSON.stringify(v)===JSON.stringify(n

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58981)
Category:	downloaded
Size (bytes):	59016
Entropy (8bit):	6.036924444025019
Encrypted:	false
SSDEEP:	768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+rJq
MD5:	D68D6BF519169D86E155BAD0BED833F8
SHA1:	27BA9C67D0E775FC4E6DD62011DAF4C3902698FC
SHA-256:	C21E5A2B32C47BC5F9D9EFC97BC0E29FD081946D1D3EBFFC5621CFAFB1D3960E
SHA-512:	FD0956D1A7165E61348FDA53D859493A094D5A669AA0BA648BE3381B02ED170EFD776704AF6965F1E31143F510172EE941D4F2FC32C4751D9B8763B66301486D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/dashicons.min.css
Preview:	/! This file is auto-generated /.@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:application/x-font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (453), with no line terminators
Category:	downloaded
Size (bytes):	453
Entropy (8bit):	5.129807008387096
Encrypted:	false
SSDEEP:	12:9XcePce0eeQ91RxKDJ7yhTz3nLglmSnLMVljW5lv8enLxUf:9MLoAiTDLgl7LIjW5lv8uL6f
MD5:	67E1029DD6859241DE670441D43C31D5
SHA1:	F65A29D631B06E9FBD2BCFD4B8B039788127DF6C
SHA-256:	C6AC90CA36020B95161E6C8503B328194D0DA4059C5144917F3914129252B930
SHA-512:	56BF2E511675408D70829EA145155307F72EC38CD29DDD4B2113705B14AFE926F844A3FC300C28DC9D57E241DA45EFE407F0FB22D38910310810B2708534BEC0
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/thrive-ultimatum/js/dist/no-campaign.min.js?v=3.25
Preview:	(()=>{if(!window.ThriveGlobal\|\|!window.ThriveGlobal.$j){var a=window.$;window.ThriveGlobal={$j:jQuery.noConflict()},a&&(window.$=a)}var o;(o=ThriveGlobal.$j)((function(){var a={action:TVE_Ult_Data.conversion_events_action,post_id:TVE_Ult_Data.post_id};window.TVE_Dash&&!TVE_Dash.ajax_sent?o(document).on("tve-dash.load",(function(n){TVE_Dash.add_load_item("tu_conversion_events",a,o.noop)})):o.ajax({url:TVE_Ult_Data.ajaxurl,type:"post",data:a})}))})();

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10760
Entropy (8bit):	4.624388323602215
Encrypted:	false
SSDEEP:	192:xy1ZfCKf1yA0taJATuPWJKUOG83hYYJ67G/WSRQ9lC+skiE7RPSzuaob4y1ZvCCr:AZVfvJYJKavYSyVmZDfFJ+JSoRAr
MD5:	177D8F4FE4A521258FF58FB8047F6A39
SHA1:	FC9EB8A3C7FB52C8899CC109D63A714EA71858BA
SHA-256:	4F51A29BA7C884C2F730336B02987FF796BB8BA0D72FBDC15A11AD7CCBF90B40
SHA-512:	60E9799C06936AE81CE0BF5F638F89CF323049C52E4F2E33B9A10A1EC582A06175B10D009B7D2612987A8F2A7A54D2BDE44EC56FAAED8F72CED19FA7438DF9DA
Malicious:	false
Reputation:	low
Preview:	{"page":{"bookmarkCount":1,"categories":[{"name":null,"description":null}],"dbId":"4a0d234a-a41e-428a-8b50-810331596236","description":"Are you looking to enhance the clarity and readability of your Excel charts? One powerful tool at your disposal is the legend feature in Excel. Legends provide a visual guide that helps viewers interpret the various data series or categories presented in your charts. Whether you are a data analyst, a business professional, or a student, understanding how to add a legend in Excel is a valuable skill that can elevate your data visualization and make your charts more impactful. In this comprehensive guide, we will walk you through the step-by-step process of adding a legend to your Excel charts, ensuring that you have the knowledge and expertise to create visually appealing and informative charts. From understanding the importance of legends to customizing their appearance, we will cover all the essential aspects to help you master this essential Excel fe

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13009
Entropy (8bit):	4.874257356539289
Encrypted:	false
SSDEEP:	192:CdB1rktcyfhvnUcG2ZiLr2bK3pxRW0oLUnRGSGeVskDObrne1M+XN:VtnFUcNZiLhw0ZRPuXQl
MD5:	5A58D3320F1F9FA113731CBF68DAC977
SHA1:	ABEFB7CC00B2CF1A67F4587EF85369647CD4C7F4
SHA-256:	36D1285581A74AC578716F5441BDA867B81C1EC27112AA392453421C56A575D5
SHA-512:	49366DC6C95E25A0382486E23FCBAD001298217AF4FD9BCDBD0E2E2A0D924D12C13C99892EC68EEEE4D7B660F7FEB04B48D50F2AAB5477A105037C4A1F4D5845
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/locales/en/translation.json
Preview:	{. "accept": "Accept",. "account": "Account",. "backToSearch": "Back to Search Results",. "backToWebsite": "Back to website",. "bookmarkImportCTALoggedIn": "View your Bookmarks",. "bookmarkImportCTALoggedOut": "Sign up for Free",. "bookmarkImportDescriptionLoggedIn": "Head to your Grow account to start saving your favorite content from {{siteName}}",. "bookmarkImportDescriptionLoggedOut": "Create a Grow account to keep your bookmarks from {{siteName}}",. "bookmarkImportDescriptionLoggedOutDeadline": "Create a Grow account by {{bookmarkImportDeadline}} to keep your bookmarks from {{siteName}}",. "bookmarkImportDescriptionPendingBookmarksDeadline": "Head to your Grow account by {{bookmarkImportDeadline}} to keep your bookmarks from {{siteName}}",. "bookmarkImportTitle": "{{siteName}} has moved to Grow",. "bookmarkPage": "Bookmark page",. "bookmarkSavedToast": {. "description": "Successfully added to <bookmarkLink>bookmarks</bookmarkLink>!". },. "bookmarks": "Bookmarks",

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://sda.fyi/update?cats=
Preview:	{}

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	174830
Entropy (8bit):	6.0042818850599105
Encrypted:	false
SSDEEP:	3072:eu7ebLOdE7W3UD4+kU8J+5VruJhv/XZv8c:NOLL7aUM4TruXJL
MD5:	ABA175D1A13F61A1D1B8D85D40E5CA19
SHA1:	CB610A7D422EF6159F7306EDDE2864A7A3705F70
SHA-256:	175288FB641ED13BBA6FCAC0B69B11BD1E6BDF493CD6836E09855FD53B0D9DF2
SHA-512:	D203B4141266B518EC92E9793A98B6389F4553E95DD17980E31575B5FDD2524E36F420596320F99FCAB9B700DB7C7C2CEC4F4F4C11B2C23D581C1E057B126F8D
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=855858948973280&correlator=2166323553846027&eid=95331444%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404220101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Csticky_sidebar%2Ccontent&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3%2C%2F0%2F1%2F3&prev_iu_szs=300x250%2C320x50%7C300x250%7C728x90%7C336x280%7C468x60%7C250x250%7C320x50%2C320x50%7C300x250%7C728x90%7C336x280%7C468x60%7C250x250%7C320x50&fluid=0%2Cheight%2Cheight&ifi=2&sfv=1-0-40&fsbs=1%2C1%2C1&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1714073158326&lmt=1714073114&adxs=877%2C272%2C272&adys=1740%2C1191%2C2964&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C2%7C3&ucis=2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&vis=1&psz=300x0%7C300x-1%7C300x-1&msz=300x0%7C300x-1%7C300x-1&fws=0%2C4%2C4&ohw=0%2C300%2C300&ga_vid=1040263935.1714073125&ga_sid=1714073158&ga_hid=1167203519&ga_fc=true&td=1&topics=1&tps=1&htps=10&a3p=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..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1714073113777&idt=31084&ppid=b03b0fd7e0e41bad0667f61a661b1707fd854efb12a02011e91d89500d81a2d6&prev_scp=maxVelocity%3D801%26partnerLift%3DamazonE6M2%26hb_bid%3Dno_bid%26slot_id%3Dsidebar_btf%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dsidebar_btf%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dsticky_sidebar_lazy_d_1701%26gid%3D0%26inview%3D0%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna%7CmaxVelocity%3D801%26partnerLift%3DamazonE6M2%26hb_bid%3Dno_bid%26slot_id%3Dcontent_btf%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dcontent_btf%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dcontent_lazy_d_2801%26gid%3D0%26inview%3D1%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna%7CmaxVelocity%3D801%26partnerLift%3DamazonE6M2%26hb_bid%3Dno_bid%26slot_id%3Dcontent_2_btf%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D2%26slot%3Dcontent_btf%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dcontent_lazy_d_2700%26gid%3D0%26inview%3D1%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=site%3Dearn-and-excel%26path%3D%252Fblog%252Fhow-to-add-a-legend-in-excel-a-com%26page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%252F%26secure%3D1%26sessiondepth%3D1%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D93%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D25%26month%3D4%26hour%3D19%26wrapper_group%3D3.1.15-1450-SwapCMP.5-beta-control%26wswy%3D0%26sessionId%3D1040263935%26page_view_id%3D0e0d1c1c0a0l170s0x0i1n0u140x0h03%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=1349499422%2C2679092603%2C531153210&frm=20&eoidce=1
Preview:	{"/1030006/earnandexcel/sticky_sidebar":["html",1,null,null,1,250,300,0,0,null,null,1,1,[["ID=d0732290375c83c0:T=1714073159:RT=1714073159:S=ALNI_MZbaMpMoVsdFXOH7y-U0bxYsxXO9Q",1747769159,"/","earnandexcel.com",1],["UID=00000df669624852:T=1714073159:RT=1714073159:S=ALNI_Ma6Wp_h5MQNE3CNX-FiY1eM1wF4Qw",1747769159,"/","earnandexcel.com",2]],[138330667671],[5520407722],[4861501641],[2768825943],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsliUW7K7652rMkHkgvxgAGHO_W7iesd5UmLOgvbg2TzHaJwzZcRo1JDSlH4YVkc9mM9c3tAn5uvmHt-0QmvBko","CPrBuI6M3oUDFSUFigMdkUwCmg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=665ab9e36e745c0d:T=1714073159:RT=1714073159:S=AA-AfjYli1gEzKcDWdYlI535NnQ_",1729625159,"/","earnandexcel.com"]],[]]}.<!DOCTYPE html><html><head><script>var jscVersion = 'r20240424';</script><script>var google_casm=[];</script><style type="text/css">b

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65454)
Category:	downloaded
Size (bytes):	328270
Entropy (8bit):	5.34570196527479
Encrypted:	false
SSDEEP:	3072:XBwoIEcRc1zLwQwmiMgsGsL7yBuM1cwfmg9CLkeXIypLw7nuGOilGQa8PVtvNzA1:WwF7yBuILfmggLtIypLw7rOiIyVU
MD5:	09C9F4AA29B9D997B31927D2075FE905
SHA1:	1FD3675295471D70E1E4563D9791409087BA84ED
SHA-256:	5CA8DB4C3FE23B2135F1C2885C4BD91804A12F36DE08DED3FEC95110DC5D709B
SHA-512:	DDC0BDD5DBA6E489307755D24AC31FA90BCBA9D235D826DC85F24E37FDED6D3B32AB61B11981DF2EFC8958DF283039CF96AEB45D2F254097B4B00F2BF263D492
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/8129/6f9a60d1cadb27b38bb7.min.js
Preview:	/! For license information please see 6f9a60d1cadb27b38bb7.min.js.LICENSE.txt /.(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[8129],{471:(e,t,n)=>{"use strict";n.d(t,{b6:()=>f,kX:()=>u,m1:()=>l,sM:()=>d});var r=n(4942),i=n(885),o=n(2982),a=n(9823);function c(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?c(Object(n),!0).forEach((function(t){(0,r.Z)(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):c(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var d=0,u=1,l=2;function f(e){var t=e.apiName,n=e.apiVersion,c=e.apiArgs,f=void 0===c?["command","callback","parameter","version"]:c,p=e.callbackArgs,g=void 0===p

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://9e5c0a37566effe5d8c63fe4504aeef3.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2888)
Category:	downloaded
Size (bytes):	20370
Entropy (8bit):	5.522634512019388
Encrypted:	false
SSDEEP:	384:8OYtIHE3Q5+gVH9xFsPKD/O8I6g+iWCUs1pFBLxncqwOjaQX6wymb6aHNmXPJlIH:jYtIHUQ0gBjFhDW81g+iWzIp9ncqwOW0
MD5:	308A5F23E118C0CF9F688A5D70F90C6F
SHA1:	3E1C92A62743FE1A8B42C7498D792CD47C235281
SHA-256:	9709CAAEB47935E01F79E18B93611C0CACD448454BE40C3A3D99D7B041A59C3C
SHA-512:	D275C6E21B6DA33312B645B4816A1B741B944B82BA48BFEE2369CC6ACEAE8C9EBCDF23E99C32B731B7376FD57260269197BA00B645D43B577CADB27B12D1401B
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240424/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function da(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,g){for(var f=Array(arguments.length-2),k=2;k<arguments.length;k++)f[k-2]=arguments[k];return b.prototype[e].apply(d,f

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 770 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	156902
Entropy (8bit):	7.99281555345765
Encrypted:	true
SSDEEP:	3072:5Vn6TdYI94JikSpIKUUpIwN2Xm7BTnq6f7OZDGgzrvbkRSH6Sf:nnUhDg9wNlBTq6a9GAvI0
MD5:	3240EC8533B48CE84346D1C68EAA4330
SHA1:	C2CCAC88679B103C98BEF53D5C128BB82CD54A57
SHA-256:	18C87AEE8B25E2645589DAF15CEA0D64C809EDE3CB7D4DF5F745EBC280E5A704
SHA-512:	B7657EAD31D39D6B8C36219802E374A588DCA428E73C33760627635545FA27B3B16C19ECB0BDF5B3E5333AAC9B112DB806254B6B866EE47523AD497E91C8A071
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Add-a-Legend-in-Excel-770x400.png
Preview:	.PNG........IHDR.....................IDATx...w.$.}...+W.49.l.X.... .f....(..Le..`J..(....A.\|-[..l..H1.....ar..=.sW:....Y,H.E....?.3]U}N.s.~..I...[...I.r..5.Yf0....y.tEE...v.....^.LD.......9.....Qh.........."..%.o~.7.;.>...E/.'Np.x.E.^...!.....e..z...$!IRw.x...hR..P..p ......2.._d..K.%..]...u...O..e.6.}..~....H...@......]..n.Tu.....\|....]..aB.....F~..w3....c..]....$.c..>q..c.8......7..........................a21.@....7......)...#....C..8.?.;..E....?..._.H._>....7q....IF.e..Nr..uhJ.A2.....7.......4z..P.sS..2............r....~)..Db...uM...F...;...&....5.Yf8..\~...a\|..iG..=.h....q.....;.3..kq.4....s....^....."..............M.^eCIOkw....x!.Uy"=.^..i.f.pr..f...W..L..^\|I^.W{.w...^O]t..K....{...}.G..{>.X\|..{........3.f..n.?.o...........=.....?....?..o.........../...~...............s....H.......>..{.6LM..^w?......{............/....G....#...>....9.7.*+..;....._.m........~...Sw..].8.7..\|.W..w\|..?H...W.....?.p..Y.x..o..>...v.......~.Wy.7.n.$.

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61467), with no line terminators
Category:	downloaded
Size (bytes):	61467
Entropy (8bit):	5.423316732850391
Encrypted:	false
SSDEEP:	768:OiUakCE0I/GnDBf6z2sDkRkcbWL/zvZd3SvHbJia3X8lrAbBCFDzGrH7/jRralIG:rkdhSfmYCDad+Wm2n3i8hCp616d
MD5:	2C272BF73EBDF72B92BE7C8CB369C061
SHA1:	022C31B86490AC8729B9E8D8693DC4DBABDA6CFD
SHA-256:	86062A71C99FDD64DA432872963F7C4D9980AB0D22D23458AE568C2022272DD1
SHA-512:	4E49165574BF1ACD7BAC5E5487B8384A81CF3DF4C9D8C0DC27A3993CEF00C36EE906A2892B3A8739EB8FDA6E93A8BDA7432268B162F2B1BBA19949140B40807E
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/32.32b151bc.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[32],{1652:(e,t,i)=>{i.r(t),i.d(t,{FullScreenView:()=>qt,default:()=>Qt});var a=i(2477),o=i(1580),n=i(9924),r=i(2136),s=i(5036),c=i(1608),l=i(3040),d=i(1232),m=i(5544),g=i(8512),h=i(612),u=i(676);const p=e=>({minHeight:"unset",minWidth:"72px",paddingBottom:0,paddingTop:0,"& :nth-child(1)":{paddingLeft:0},svg:{height:"15px",width:"15px"},span:{textTransform:"capitalize",fontWeight:"normal","&:after":{content:"attr(data-text)",height:0,visibility:"hidden",overflow:"hidden",userSelect:"none",pointerEvents:"none",fontWeight:"bold",display:"block","@media speech":{display:"none"}}},"&.Mui-selected":{svg:{color:e.palette.primary.main,width:"15px",height:"15px"},span:{fontWeight:"800",color:e.palette.text.primary}}});var k=(0,a.cp)(l.O).withConfig({displayName:"Tabs___StyledCloseIcon",componentId:"sc-2emfif-0"})(["",""],(e=>e._css2));function f(e){let{onClick:t}=e;return(0,u.im)(d.c,{color:"inhe

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13265), with no line terminators
Category:	downloaded
Size (bytes):	13265
Entropy (8bit):	5.535281711885961
Encrypted:	false
SSDEEP:	192:wo+127EbWf6h8yrGohbWfjD2D6iZ2j43pNbblahJtQblbQcwCU82NfmR:9TEbS+8rFjDOrU45NbblahzQBbJw9cR
MD5:	2ED4E4D44477A8F9A6EA4C990DD79D96
SHA1:	327825E486261CEB32519D02A8E79DA9051D262D
SHA-256:	F7F90B61F4DD55DE7311CCC80ADA5B8780413DBEFFE882C97C71AFE6B1CD4AC3
SHA-512:	DE86444B932E2B2BDF4F74A659F1324628D0815B768E636BC6805B5B1811DE396D24332B76CCFA5F3581A993391AEA264EB1E6FF0247053F4A7BB65C4EE19E6C
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/prebid/bd4b6908467a2163ab62.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[9598],{2619:(e,t,i)=>{i.r(t),i.d(t,{growProvidedIdSubmodule:()=>r});var a=i(6283),n=i(3915);const r={name:"growProvidedId",gvlid:Object.freeze({}),decode(e){const t=e?{pubProvidedId:e}:void 0;return(0,n.PN)("GrowProvidedId: Decoded value "+JSON.stringify(t)),t},getId(e){const t=e&&e.params\|\|{};let i=[];return Array.isArray(t.eids)&&(i=i.concat(t.eids)),"function"==typeof t.eidsFunction&&(i=i.concat(t.eidsFunction())),{id:i}}};(0,a.Bx)("userId",r)},1900:(e,t,i)=>{i.r(t),i.d(t,{S2SAdapter:()=>H});var a=i(2845),n=i(5990),r=i(3528),s=(e=>(e.https="https:",e.http="http:",e))(s\|\|{});var o=i(9879),d=i(5077),c=i(2946),l=i(5595),p=Object.defineProperty,u=Object.getOwnPropertySymbols,m=Object.prototype.hasOwnProperty,v=Object.prototype.propertyIsEnumerable,g=(e,t,i)=>t in e?p(e,t,{enumerable:!0,configurable:!0,writable:!0,value:i}):e[t]=i,h=(e,t)=>{for(var i in t\|\|(t={}))m.call(t,i)&&g(e,i,t[i]);if(u)for(var i of u(t))v.call(t,i)&

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/416707819?random=1714073175744&cv=11&fst=1714073175744&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fhttps%3A%2Fearnandexcel.com%2Fcourse-category%2Faccounting%2F%3Ftutor-course-filter-category%3D16698&hn=www.googleadservices.com&frm=0&tiba=Page%20not%20found%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=1676511191.1714073129&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	290946
Entropy (8bit):	5.609020274700779
Encrypted:	false
SSDEEP:	6144:Y4NQX5NzJpYLceF+qKXjXP9RIMVTO5Y0SS:BN+xJ4No/S
MD5:	851F0138E29D55394CBDAC20086D6187
SHA1:	448D10D868C8323F1F104B1E3D6408D88CE6B605
SHA-256:	4D770ACD9D7888D7DAC8ED4842412DE3FB789C8452DC04C5E088BA7B10661ED0
SHA-512:	5E7EB726BDC80DC0F12B61D817CDD6DCDFFF43E398082AC3B382489F917B059BBE31BA9CF219DF70E8EE13D315DCFC6C24D61EA310A5CEF8C3BE4F8D5DB56186
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-37L88V1J5W&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52990)
Category:	downloaded
Size (bytes):	53044
Entropy (8bit):	5.438374620694402
Encrypted:	false
SSDEEP:	768:Hcrbt0v6S3UbiINuGAIA0XieVpeB6ELQ1GHaLi9:HoBmM9e4E01GHa29
MD5:	0B6AA3AA07869D5163C8D489F7C66256
SHA1:	BD32C24DFC6C71AE54BF2E6473AD61FA6F81BE3B
SHA-256:	3D649C0B3E87FD6ABCB983656A0A1B3923A2A59885C3A30538641FD4F7126CBD
SHA-512:	D754CB423718F3BC335081D41A88386B58E2EB523635BD15773B43495064B52B0FBB9265DA8DD19E47A97CFAA1FABD40C73C36F9684F6C44F2A18E6502F44E88
Malicious:	false
Reputation:	low
URL:	https://acdn.adnxs.com/dmp/async_usersync.html
Preview:	<!DOCTYPE html>.<html>.<head>.</head>.<body>.<script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=function(t,e,n){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},a.t=function(t,e){if(1&e&&(t=a(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)a.d(n,i,function(e){return t[e]}.bind(null,i));return n},a.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return a.d(e,"a",e),e},a.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},a.p="./",a(a.s=114)}({1:functi

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 535 x 304, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8586
Entropy (8bit):	7.77330796461918
Encrypted:	false
SSDEEP:	192:fDfmLltIYfvyI64MCS5BXKnx+9I/g92jpXXppXv:fDfmhiYCt4UvKI9agYjpn7v
MD5:	0EC27C71C98C8F5FCE83EC9ECECF37DA
SHA1:	F49E5ACD3FBD0C3BB93151C0761538120045FCB0
SHA-256:	1EBF2A246E5C63540B87B0ECB09119DFDA21396CDFD533A86F97B0E98E96C460
SHA-512:	5653637D8ABB27B0AC25830522C52386865485CEF5EBFAE1B68E36140A79F292A3B6E3BA2FF066F67CA32AB350C0DA01E221074EECC05855FBDBDECCD9000086
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......0.......S[....sRGB.........gAMA......a.....pHYs...........k...!.IDATx^..ol....:...@M-..]_..fdSU...'.j........P...S\^..".k.H..G.Ea....C.4!...5..\.J....mD.r..>."....db;...u.{.<.....\>...~..>..r.!g...y..i{..&e.\.b..8..Z......l..b.....#..@..\.......l..b.on.......D%.bii...n......}..Zc.s..l.....3...a..<....?......v..w.)n...E..6..#..m0.d.........k.U...Y...../...D..H>>.@.m...f...:\....!\..........W......sT..4..@..Mv.3..C.g..p...'.?...p.._mmm..V.....>....\|.........t.Rj.E..":UM?.B....w.^W. .n..6...X..F.>.@.e2..g.S...YmtZ....._iXD)I.. ..QM...0.\|:.....4].fW..<-......Ij..~.].G7.....h.h....:....e....?....d..p...."\........ (......p..@.(..Yi.g5........E....A....@P....LMM........j.kdd.....5.I......K.j^S.....5.j..Vo8...7.N.`.`3...ioo7...%...{..LLL.3g.S.N..N._....C.0.. ]...6...5.....................lD.....x.=G.2.!.5...K...1:..r.y.D...~.g...8..>z..(X.''....o{...>_.5.S.Dt.T....._.x.X. ...@.......g.\|.;.1.....V.F0:\|..\|...........9.....S..V.{....

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24601)
Category:	downloaded
Size (bytes):	24782
Entropy (8bit):	5.003831500752687
Encrypted:	false
SSDEEP:	384:UtbqeUUy/oVBVkWODL8q4wBcqWS0zxwEHYX+YgLxW1vYWaN4uByF:yJJM4BnOXBuFHp5w1vCaF
MD5:	151E4DECE13AC73729937293D388F96B
SHA1:	2965EA03B973983AA01E7BE7865C1F969742D3FF
SHA-256:	60A11AA8AFF6983EA43C28B1741C1B73B4B1E696DB79D426F039B14572182E2F
SHA-512:	725666922E525FFF0FAFC2560FCE3C6BD27669285F320D84016073D6B7ECA6CE1A95937D450D6C6B933A60BE037E629E6BEA3C40D5D9C08713C886750A3CD47E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/sortable.min.js
Preview:	/!. jQuery UI Sortable 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(t){"function"==typeof define&&define.amd?define(["jquery","./mouse","./core"],t):t(jQuery)}(function(u){return u.widget("ui.sortable",u.ui.mouse,{version:"1.12.1",widgetEventPrefix:"sort",ready:!1,options:{appendTo:"parent",axis:!1,connectWith:!1,containment:!1,cursor:"auto",cursorAt:!1,dropOnEmpty:!0,forcePlaceholderSize:!1,forceHelperSize:!1,grid:!1,handle:!1,helper:"original",items:"> ",opacity:!1,placeholder:!1,revert:!1,scroll:!0,scrollSensitivity:20,scrollSpeed:20,scope:"default",tolerance:"intersect",zIndex:1e3,activate:null,beforeStop:null,change:null,deactivate:null,out:null,over:null,receive:null,remove:null,sort:null,start:null,stop:null,update:null},_isOverAxis:function(t,e,i){return e<=t&&t<e+i},_isFloating:function(t){return/left\|right/.test(t.css("float"))\|\|/inline\|table-cell/.test(

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZiquQIPQzJS1XtQhuYTwyGhu
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (21172), with no line terminators
Category:	downloaded
Size (bytes):	21172
Entropy (8bit):	5.525095634617323
Encrypted:	false
SSDEEP:	384:afyobKqgLs+862hz1OUhjoBSeC3uQqdUF+z7V8y0FyBzdM:WgLhufMBzjzJz0kBzdM
MD5:	8DC2756F85FCCEA2E456061D06BDEA5E
SHA1:	CDB7F846722AE88CFCCA334697B1C61E7945D8EA
SHA-256:	FF17F0A5C2B621CE0625CFD2D947BF0EABF322C95A8E75A27F42D0722329AE9E
SHA-512:	585B17E9F72A35299CF49D23567DD29D1FBC70CAEF0C8374F20ED43C16BCFBBE0CB95107A88E3666B88C1D09263E2180771EFFEB9FDFDD8423CC08840DCF0D69
Malicious:	false
Reputation:	low
URL:	https://cdn.mediago.io/js/cookieSync.html?tn=41b6e88a2b85b0e731ef8e73e5558712
Preview:	<!doctype html><html><head><meta charset="UTF-8"><title></title></head><body><script>!function(){"use strict";function o(e){var t=s[e];if(void 0!==t)return t.exports;t=s[e]={exports:{}};return d[e](t,t.exports,o),t.exports}var n,e,i,a,r,c,d={824:function(e,t){t.default=void 0,t.default={pixelVersion:"142588655",windowkey:"xeiog5asiia8yf9xc1jkbn",pixelArr:"_megoaa",keyPixelParam:"_megoaa_gqddkg5",keyPixelPv:"_megoaa_a766v7tf0ym",keyCv:"_megoaa_f4g7wujdwog",keyAcidFromLP:"_megoaa_v1sudthdlpq",keyCpidFromLP:"_megoaa_cc4d76fdaf5",keyVals:"_mg_jlisnwrs4il",keyAcTr:"_mg_e14zcvjgpba",keyCpTr:"_mg_cc4d76fdaf5",url:{postbackTrack:"https://trace.mediago.io/api/bidder/postback",reachTrack:"https://trace.mediago.io/api/bidder/postback",conversionTrack:"https://trace.mediago.io/api/bidder/track/pixel/conversion",gtmCvTrack:"https://trace.mediago.io/cv/pixel/v2/conversion",pageviewTrack:"https://trace.mediago.io/api/bidder/track/pixel/pageview",track:"//sync.mediago.io/api/track?tn=9220dd482c2a49631

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 2-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	172
Entropy (8bit):	5.89051759974696
Encrypted:	false
SSDEEP:	3:yionv//thPlclBpNgSaRWW/bFqfBxtcJpmqpj43+/DhTnA6h/JMqiDTjTiOO7dlK:6v/lhPKN2SaRJosBN4OLFA64qiDnTyuh
MD5:	5B2C20761A80C77F3C81558F3201EFC6
SHA1:	AB8890CF81CE149C5909570E8C725B779FB03B8A
SHA-256:	73CB91518C98A64D313704833206F4FECFF0309F31621A098A4E8165E3E00648
SHA-512:	C27817EFEAE980B0BCCE4562CDFA569FF9CAF5EBD48606E7F8C31CADE6C5F955394683DF20B33DDC3283A07507D2BBAA76B30DEA203444EF1C438E237A00AC73
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/images/cursor/light-close.png
Preview:	.PNG........IHDR................k....PLTE............8.;.....tRNS.`.PpX...LIDAT..-....!..r.c.va(.a4F"..H.b.&'=.6e.&.c%..!............,.~..v.9.E.5......C.gj.Af....IEND.B`.

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 296 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5715
Entropy (8bit):	7.869885847394282
Encrypted:	false
SSDEEP:	96:wSPPQvTQZq7lb5nBYOlxWnxcvPqHRg0op5eN/q7FgxZeCtFnObfKEedce45gb62r:+bQQ95nmOlqxP1/Tx8CHkedce4ib6zy
MD5:	507589703EC0C072DA80113269CC7447
SHA1:	719F9F9DFDD062CD043246A3C5A95140456808A9
SHA-256:	AE7DDCC420080743B2D1E044CFFB7405309F85D1609D6E4DCBF2C4D500CEA13A
SHA-512:	8466BEA3C23DF0B3041F5A8C4B8E5E7F4170DF71A063D65A3028709983F82E9390ADB79412C63FB27147E270F1F82EF541384C77E670FA30160CF6309D19019C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png
Preview:	.PNG........IHDR...(...d.....5.....IDATx...]h.q.....mv.<F.y.YF.C...Z.\H..;).v#..IZ...D....r!O.d%.i.y(..1{....;.......?O.w.n..>.}..o.RJ)..RJ)..RJ)..R...6.._VV...]Y.).(.T.c..1....%..m..@..\d....9.)l....k.....6..S....S`.R.a..xl.#t.;`...<.V.G.QJ..}c@5n...0.@Y...j..J)..;....w;H........F)..p.?.f....@Y!\|.q.![..R...q.....F<PV.M.E.2.RJ...T4..<..e...va...J...i..Q.?p.......A...SJ....r\@+\.....p...g.R.....2..<..y.,..q..uHWMbH2Q..x.~;0.4P...G0G..(..yw.q....aI......{0Y.t.R$o..X.z....D.eu.>..HC.T...S.q..p.&.@Y.5(.}J.$.3.C.>.....(....,......<{.G...x.......Q..R.PUUU.&.........I......e....P.WgT<c...)......h.....=...4.(....]O..x. .@.\.H..b.r.........@;.Q.\|3D.....cQ..!.(....T9..&...(..........(h.t...<P...(....z......Q..F).T.....>.T.z5PU.@.f..4#..>.....;.4P..@Ew....y,.(.}....`.....8.T?z#..3.R...../..Z.F.8.T..Fa....N.....7.;0...{..E.E..B.F..a\|.A.r..<d#...A>.x....4P~.T..a+.....2^.P.P.zt.<P]......D,.6..i\.=<.m\A.[P.....e.C8.3....(.......I .Hb.A..(.............G.e..a..

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	131021
Entropy (8bit):	4.758705090801324
Encrypted:	false
SSDEEP:	3072:ill+04aaYgghtcDMHi8fC/s7sS744jkSJlRgFLER7a83NsynBN:iG0JztRMk
MD5:	C108A32B592210538F0122D69787FC2C
SHA1:	F05180540A4C54D83E872F67503ACF1512D9F256
SHA-256:	2F034A1152B6FEAEA2A4F173B1987F2C349BD195D0005529F13C3DA1CBB8840F
SHA-512:	653BC4AAA9E72668C79848C29C70F6242CD286D958881695A1A30FA85289D0B5C0946A1F7F55BA4432DB275DBE353CFBB884AD8084205739E855EC6790393871
Malicious:	false
Reputation:	low
Preview:	{"mostPopularPages":{"edges":[{"node":{"__typename":"Page","id":"UGFnZTpkMmRlYzFiNS00YWNhLTQ2OTUtYmJmOC1jZTNmYTY3ZTQwZTM=","title":"Skills For Professionals","url":"https://earnandexcel.com/","description":"Start to success Learn Skills That Will Make You Invaluable To Your Company Let experienced professionals pass on their skills and knowledge to you as you become your team.s MVP with our courses in Excel, Data Analysis, Business Intelligence, Microsoft Office , Data Science, Accounting, Digital Marketing & More! Search for: Search Most Popular Courses All Excel Premium Digital Marketing Accounting Office Data Science DA & BI All Excel Premium Digital Marketing Accounting Office Data Science DA & BI Let Us Help Finding Your Right Courses Get started Start to success Achieve Your Goals with Earn And Excel 1 + Students Enrolled 1 Classes Completed 0 % Learners report career benefits 0 + Courses from top instructors Some Of The Companies Our Students Work At Start Learning Testimonial

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (25893), with no line terminators
Category:	downloaded
Size (bytes):	25893
Entropy (8bit):	5.405106022586973
Encrypted:	false
SSDEEP:	384:s4f0OQ68LHc896TuTyCbM7+escmGC5voQD0Rn2+h6NpVXtOT8ykpUJG51:hw6iTyCbnDeCPpVXE8PGJy1
MD5:	A573E0323F255D4FF82173D608F94309
SHA1:	6FEE3EBAD7CDEBA642B491082413EE50BB8507E7
SHA-256:	97F03AA7DE4112351586ED0089FBD8D2C1B14F3031346B70C130D07B488B0E8B
SHA-512:	E12B72DC79504A7CB881A5617ED2AE8C60D0D76313058B8B1E6E3E5EEE97B6E1499B05618BE1C852FAAD0E613DBA99FADF95D89B92A2A6C0D9E1B0D095CD212C
Malicious:	false
Reputation:	low
URL:	https://widget.wickedreports.com/widget.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="/",n(n.s=96)}({165:function(e,t,n){"use strict";function r(e,t){for(var n=0;n<t.length;n++){var r=t[n

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	218938
Entropy (8bit):	5.415736669991316
Encrypted:	false
SSDEEP:	6144:vR9Um9Yw3sA5L7ncPidHslXWfXbl01A/d9S:PnOr4l0CfS
MD5:	856501D11FCD34EC85F3D45B2567CE92
SHA1:	54023FD129DB426E23556FBC52DCBC60E6F172E7
SHA-256:	B47638E2B3E5A0F28AC238700ECD6A54D333BD521A54B20BB873A565FEC58687
SHA-512:	F16252ABBED2559FBE8A44DC0095D0FC4F4F00BED9B73B422CB1D051D4A3B3302894A1922C3ACA83AADC9A3608F66DEAE426E5FD368A6B1E170A0AC03AD45E5C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3245
Entropy (8bit):	4.951746735226564
Encrypted:	false
SSDEEP:	48:Yui6RR+1R5IWvYCZCfbaQIJSJEhL3SsqVTmKigjYLQU+uKi6Jw:n2dwQS0q5t8MbO
MD5:	5DFD02CD48A37F5496C3B73AB7C12009
SHA1:	DEB9DEE1A3EABC51AFB40BA2D871F56E3903AFCC
SHA-256:	DDC0506ACE28040C4627D77507F3765B9611803F3750E001235EE79109D113D9
SHA-512:	81AD7C69BB82EA58FA19E3B2907E0408ED1A60F68BC3FB0920A6E29C8D4CB010BB1412B659EAB09C1882860DEA3FD016D00B43C7E069FE672448AA5F8890FFDF
Malicious:	false
Reputation:	low
Preview:	{"id":"a93bd662-05a1-4ce7-81ce-4c67bccef190","dbId":"a93bd662-05a1-4ce7-81ce-4c67bccef190","name":"Earn and Excel","domains":["earnandexcel.com"],"domainObjects":[{"domain":"earnandexcel.com","isVerified":true}],"googleAnalyticsId":"278709754","growEnabled":true,"hasPages":true,"deletedAt":null,"siteConfig":{"actionColor":"","alignment":"right","bookmarkImportCtaEnabled":false,"bookmarkImportCtaDeadline":null,"bookmarkImportCtaImageUrl":null,"avoidSelectors":[],"colorMode":"light","contentSelector":"","copyLinkShare":null,"defaultSearchSelectors":false,"defaultPopupWidgetId":null,"defaultSpotlightWidgetId":null,"defaultMostValuableContentWidgetId":null,"dynamicPageUrls":[],"facebookShare":true,"fullPageActionColor":"","fullPageBackgroundColor":"","fullPageHeaderBackgroundColor":"","fullPageHeaderTextColor":"","fullPageTextColor":"","googleAnalyticsEnabled":false,"growLabs":false,"hideSelectors":[],"horizontalOffset":15,"inputBackgroundColor":"","inputTextColor":"","inviewDesktopOffset"

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	64525
Entropy (8bit):	5.965651347344962
Encrypted:	false
SSDEEP:	768:vt8vQ+AC7+Clpxixm7VaHkuoa9tqIv8CxtqFPR2kTtWhrJT/TruEKgt0w08be97F:vGcR3a2N7ruJYD4MXFV/C5xPIShVGXY
MD5:	05DA040E986FAEACEB17A7D941EC5E8E
SHA1:	427F2298B258A510CDE9B4530B50269490EDA2FC
SHA-256:	45C0FD4308E486D9FD7EE8795248BA68DDCE8374AADF2C6C4F726616ED43B475
SHA-512:	3891E95AD0DBC37BD7DC57BB872735B2704C300FE4966E9F8CF78F879E3338C0183E1832339A41E6686F4DDA556E9A3376407B2A70BB3F778086D54980E4DEF7
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=855858948973280&correlator=2238754748989985&eid=95331444%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404220101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1714073158305&lmt=1714073114&adxs=-12245933&adys=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&vis=1&psz=728x-1&msz=0x-1&fws=640&ohw=0&ga_vid=1040263935.1714073125&ga_sid=1714073158&ga_hid=1167203519&ga_fc=true&td=1&topics=1&tps=1&htps=10&a3p=EhkKCnVpZGFwaS5jb20YwpzitfExSABSAghkEocBCgphbWF6b24uY29tEnA3Ym9EUmdpSkZEeUFiMHpuSVBKOTZQNm91U2RhRGNqQ3lMRWR0ak8vd3dRMkdybi83RnBiVnRyRTk2alZEN1ZDZU5HNVZmL2YwZTdXZ0x3NnV1RFMwOTdqNGVVSWtZTGNhU2hyWm0zWTZEWjd3N20zGJbR4rXxMUgAEt4BCg5lc3AuY3JpdGVvLmNvbRLCAW9fYmR6Vjh3YlNVeVFrSjZhRGgyVUVoSmVYSndlblEwVmxGUVVHY2xNa0pZY0V0UmIzSkljelUyVmpkRmNFdHFUREpyVEhaeU9ISkJOVFJqWXpSRVozSjFXa3BMWWtkcU5ITTNhRmRNYldaSE5VOW5ZamRMVm5wUFNrWTBNeVV5UW5KVmIwZFJObHB2VW1OdmNqTk5XVVppSlRKQ2NHa3pValZyUVZJbE1rSlJKVEpDWW1SM2NFVTJPV0ZMUnpSeFNnGJW74rXxMUgAEoICCghydGJob3VzZRLsAWFsYkE3d3FqMFZDaG5VU1ZsdTRRWGxuOHkyaEFOWUNBZHdvSUZIb3l3SDllUTNRTi93c3dab1c2Q2hwNGRJelA2Tm4wN1dBUkRISmNSMzlqcWM2S1pOdHJFM0U4akFZa1NkTTkzMVFCVVpDNTBmNzVDNGw1Q2hDVGpPQWVWTmNXbjQ0aURZdHJIS2Jxckl6VGR0YU1rWkx5QkVhN0p3MWZxZ1lISk9IcDNpZWxwNVhvOEtvbzVNU3dYZHF0bjc0MkxnV0FKOWhjWkc5dENkR0JuRUU2eGpVbVZQclF2ekF6czVNVVpOK3lacW89GIe84rXxMUgAEj4KBW9wZW54EixleUpwSWpvaWVEbGhUR1oyTVhkRGFWRlZaVTF6V2tSQk1TdDFaejA5SW4wPRj7weK18TFIAA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1714073113777&idt=31084&ppid=b03b0fd7e0e41bad0667f61a661b1707fd854efb12a02011e91d89500d81a2d6&prev_scp=sizeLift%3Dadhesion_desktop_970x90_c%26partnerLift%3DamazonE6M2%26hb_bid%3Dno_bid%26slot_id%3Dadhesion_desktop%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=site%3Dearn-and-excel%26path%3D%252Fblog%252Fhow-to-add-a-legend-in-excel-a-com%26page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%252F%26secure%3D1%26sessiondepth%3D1%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D93%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D25%26month%3D4%26hour%3D19%26wrapper_group%3D3.1.15-1450-SwapCMP.5-beta-control%26wswy%3D0%26sessionId%3D1040263935%26page_view_id%3D0e0d1c1c0a0l170s0x0i1n0u140x0h03%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=1212450974&frm=20&eoidce=1
Preview:	{"/1030006/earnandexcel/adhesion":["html",0,null,null,0,90,728,0,0,null,null,null,1,[["ID=c6bddaad3806b653:T=1714073159:RT=1714073159:S=ALNI_MYzbiRF2pPE0lpSWBYFgcmzThNVVA",1747769159,"/","earnandexcel.com",1],["UID=00000df66822f417:T=1714073159:RT=1714073159:S=ALNI_MYT37OohOVdX7h6fojV7VY1iCiR0A",1747769159,"/","earnandexcel.com",2]],[138432583144],[5675949035],[4861501641],[2848090303],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsntNKD1sF4ipBufGACB28kqM3hnwx4uISF5umpmgt8x4dfDOK762VNeY1lpeDyXqhalRsPG_v4J2EfIAgEDCuU","COzEt46M3oUDFb_zKAUdQMcBXg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qP6VwmLuDNTfwlbvACDL7fCeWJDUjwwADe1RC_09fzGw2Qc4N5d2cwD1NzJa0D1jZ7bV7H2BqkJZeov_DPBykDubLHrqcWpuHKh1i4OZIUJDLrjv7wuaI4pF04BujQE79oYJYCaXJlttRcp5cSeuRkEvw",null,null,1,null,null,null,[["ID=dfe8b324b217e9ec:T=1714073159:RT=1714073159:S=AA-Afjab2GkEGu-7L_AEiRerUAzY",1729625159,"/","earnan

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	359
Entropy (8bit):	4.303670588180171
Encrypted:	false
SSDEEP:	6:SJL/B9pX9D90lESaKSoET4ImRKXIAcAifi8FtUSFLbF/hViXwGb:61X9D9HdKoT4sXIZFtjJhViPb
MD5:	85E198B701A5ADF4685113436597BB98
SHA1:	4C8302FD62281E494772A95C183CC04694773CA0
SHA-256:	8C4FC04634A28970E4A08A3F3A9E5B605FE4BAFBC4A91BA48ECD48A486A61825
SHA-512:	7B4984D844C9F518519F05179A6D559197D2106DBA1354B237EE674FBB33949DA167A6B11641D19C62B65C0659A266FD000060844E7239EFD731A6E1626FE114
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/sync/check
Preview:	. <html>. <body>. <script>. document.cookie = 's=1;SameSite=None;Secure';. (function() {. if (!window.parent) return;. var msg = /s=1/.test(document.cookie) ? '3pc.supported' : '3pc.unsupported';. window.parent.postMessage(msg, '*');. })();. </script>. </body>. </html>

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 262, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161785
Entropy (8bit):	7.993206011070407
Encrypted:	true
SSDEEP:	3072:cTJj/ReDN50oymz3kI794WbH7lhT6AXwzVJttJ1pvgKmDETnwIx:wxMIR2GmHZ16AXmVJtDnwIx
MD5:	50656494E6D73CCB1C580468F0338C3B
SHA1:	A75A34BECBEB8BA8A93D7D50EE8064DAE67FE789
SHA-256:	D354277A3ED433F1A308245F6BDABD492E2E21EA00298A60517A177CE2E4A996
SHA-512:	F956FB4B6D368C904C7C6EAD6A8BDFC7BC8D9492579B88A2F88CE501159ECF6C59C0BCF072929D0D7BD9DCA68034A49CFFB745216A6037D800705AE50B9481A4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/QUIZ-PIC-480x262.png
Preview:	.PNG........IHDR...............F.....IDATx...y.eYv....>.....g...!'Ed...J!!$!......MQ...AW....L]ft.X7f@C.&a...(..!.I9D......O...x.3....3.s.}."Cm...t....=..{...o}.\|.........._..>\|}.........._..>\|}.........._..>\|}...........y._..o.q..)z..t6...+.'3..q...Gp.&..IfS\..zH.....dJ...."...3....<...y.t..$).s.\|..d6.1.Nq\..`......l.`.)=..A+.. $B.B#.hm~.^Z..JSd.I2Ce.....$GJ.(..\|.!.B....A...'.~..UmOk....~.a.1..7k.9..6..S.......SA.}.a.u.msLZC......:........o....A8.!.\..u=....}.0....0..\T.2.L...2:.#....@.Q.#....Zi&.1..y....!.......\.EJ..:H!.J#.@K....0gN.d.....s)...9..>_ pDu..{.DZW../.......\ka..\|.E8.8.....-...g..3...ksZ....b.G..$+....J.+MQ.(.PJQ...B.d)...b.u.G.0..Xu.HA...Lf..1..'.Y:G*..3&.9.\...W..?..U.....T._]..dI.....B..\|.............R..h>.5Ji._..l..D!..@...!.....Q............5.:N..jM...0.....F..5.b~..4HG..\|.{S..s.Y..l[..6..{.."-.mFLv..J.[.?....U.;#.(/.2.^....DHA..1.4..j.Z.)X=.......>P...)...?/..TQ_..+.....h.;.1.NX....)P......\y......".........

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4772), with no line terminators
Category:	downloaded
Size (bytes):	4772
Entropy (8bit):	5.342494195072866
Encrypted:	false
SSDEEP:	96:5RflO4sdDsfsjxYZYfUP2fOpqA6FJ9kTrPxGIhGRG2b3OFK7vtSJ9:nflO4sBsf4xYZYk2fOYsTrPxGQGRG2bi
MD5:	6C9B47373B89C333CC9635AB81025291
SHA1:	D67738FBA321D5A2636FBA8BFC19D7F601465AE9
SHA-256:	2890052D7681E41619A41556F585712CC20CEA3FCBB19480DE840F39C785BCE7
SHA-512:	5E87D95E96BDA7B70572B3581E9F8EA1D1EBE85B41319C1044D3E4F44097229FF433CD63F0BF95EB4281E50C6C544BE26F5A4354745B03C99C242C914AB3E6DC
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/5728/7a7d57b222fe0e3bde51.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[5728,2723],{3190:(t,e,i)=>{i.d(e,{O:()=>s});class s{constructor(t){this.slot=t}meetsIBVCriteria(){return this.slot.meetsOutstreamCriteria()}ibvSizes(){return this.slot.sizes}}},4548:(t,e,i)=>{i.d(e,{b:()=>h});var s=i(6469),r=i(6039),a=Object.getPrototypeOf,n=Reflect.get,d=(t,e,i)=>n(a(t),i,e),o=(t,e,i)=>new Promise(((s,r)=>{var a=t=>{try{d(i.next(t))}catch(t){r(t)}},n=t=>{try{d(i.throw(t))}catch(t){r(t)}},d=t=>t.done?s(t.value):Promise.resolve(t.value).then(a,n);d((i=i.apply(t,e)).next())}));function h(t,e){return class e extends t{validate(){return super.validate()}adunits(){return o(this,null,(function*(){var t;const i=[];if(null==(t=this.ibvConfig)?void 0:t.meetsIBVCriteria()){const t=this.getIBVAdunit();t&&i.push(t)}return i.push(...yield d(e.prototype,this,"adunits").call(this)),i}))}getIBVAdunit(){var t;let e,i;r.A.isMobileOrTablet?(e=`${this.slotName}_ibv_mobile`,i=`${this.id}_ibv_mobile`):(e=`${this.slotName}_ibv

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmpmt9r_1tz", last modified: Thu May 27 18:30:51 2021, max compression, original size modulo 2^32 24615
Category:	downloaded
Size (bytes):	7927
Entropy (8bit):	7.971132676007268
Encrypted:	false
SSDEEP:	192:9Kc5LTj0P5wffE5IkNpgSuBytYo5x17NS4UkRDS8hO86A8PE:9H+RwfpkNPV/T17NcwDSVFA8PE
MD5:	DF5542B88BC0E368C6999754A5B9E2BA
SHA1:	54F17142FAEB7C882FEE3BF67D537733E75E43AE
SHA-256:	B82DA9703A35C5436F9E47711F5B95D5357F02D590CB39DBA99355B9B073561F
SHA-512:	3BF0A63824E0D30C5A71CAE83DCEEE6E2A587FC5B9B7E81943E42DC448F9654998DA35A0BDC309B40D7D3BCFC3C95AC3D3322D1394B21542578FB2BA69EADC28
Malicious:	false
Reputation:	low
URL:	https://oa.openxcdn.net/esp.js
Preview:	....[.`..tmpmt9r_1tz..<.{.6..E.ueb..V.GJ....d7....mOQ}..IlhR%!;....73.H...t..].........7Q2Mo.....l.Ld.&.dw.a...]10.;....h.Q2f...,..'>,.L.....(.....~...K..(....N.0.....)..3.7q.=....k.]..g.$..wja....2/.K.^.\."&..Y...,].L.R.;...D.^..1.B.I.....(...{.t.y...sv{u.....dz&.(....^o..m9P7^..y.NW.p..uv.`et3.{.......{..se.......f....~.o...r.3'....^5R...4.4r.L.R........KlA=..<.W.t..W..0.G.PNt..,.,.\.N.X0Xi...r.0......../.2f.,A.%-L..lQA.4...dd.Kp't..\.picItCM.e...'.-...&1.R....2p...u..........F`.....i.+..H..../.%...Ec7d\|....F1..d.$.._...!."..i"..]1....r.e"O.k\|..HpqXQ.e.\...a..<..l.....0.&n:z..-{..T.0.^.\...{..r...i.9_q'....`.e..F.....j..4..V0V....a..\|b..x..U}.p....UJ.:.. ..E.&k.,h....1P.Uje.~@..4H.H...4[......8<.Wa~.L^..kO..B#KIQ....[...m.V.z...`.&.h..o.H.k..$.....r.Vqg.4.l. +j..._...^OTd...0. %.C./.Fu5.V.......M....0.w.%..{../.....+2=.a.K...bk... &+.Z0...._.(.g..B.{..e.Dy'....m'[%.v!e.L.e,$X+.A`...}.AF..C..#E-s%."..)h... .....z....1p..i.q....9......%..W

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19788), with no line terminators
Category:	downloaded
Size (bytes):	19788
Entropy (8bit):	5.3899923640254945
Encrypted:	false
SSDEEP:	384:H89zmQ3Ea5FRssJGVsKHK6fUSpI/hq2sC3ZYoXg80/xhu98oRWKqxrGSbvWp6u:H84q1JGV5qAvpIA2sC3ZYCn0/xhwj5Yg
MD5:	57E428479A67CF8E16597DF4433FD511
SHA1:	50A9393C41578D4DFE60BC0F7B2FB79A8370021D
SHA-256:	6E54381D04DD55BAB23A149AC6B1F67A766C76F69D6C90855D1A9967E80A689E
SHA-512:	5159C60DAD086DC9F89F12041AD5EEE3B202B75F67F6578F8F30619372BCA91FFCCEA27CD8E172D3ADEF4287D85E227A844D2D3C3113F5B0255730F034344CCC
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/6975/660cbf5be98a42152bb8.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[6975],{4846:(e,t,o)=>{o.d(t,{v:()=>b});var n=o(3583),i=o(6881),a=o(6039),r=o(4441),s=o(5595);const d="utm_source",l="utm_campaign";const c=new class{constructor(e=document){this._document=e,window.__tcfapi\|\|(this.utmSourceCookie=new r.V({name:d,maxAge:0}),this.utmCampaignCookie=new r.V({name:l,maxAge:0}),this.utmSource=(0,s.Ph)(d,this._document.location.search)\|\|this.utmSourceCookie.value,this.utmSourceCookie.set(this.utmSource),this.utmCampaign=(0,s.Ph)(l,this._document.location.search)\|\|this.utmCampaignCookie.value,this.utmCampaignCookie.set(this.utmCampaign))}};var g=o(9879),u=o(8387),p=o(6189),m=o(4666),h=o(2137);const b=e=>{const t=new Date,o=new m.l,r={};r.site=e.slug.substr(0,n.n3),r.path=window.location.pathname.substr(0,n.n3),r.page_url=u.Z,r.secure="https:"===window.location.protocol?"1":"0",r.sessiondepth=h.ZP.depth.toString(),r.optout=e.optouts.map((e=>e.slug)),r.categories=e.categories.map((e=>e.slug.substr(

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (550)
Category:	downloaded
Size (bytes):	749
Entropy (8bit):	5.461256157652186
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIzeTd1Xcm9TuOBIdNcDgubXl2zW2M4pQcqWSL8HoQL:2e2C6hHfhiVIIwdNwRbrT4tT
MD5:	65CF2B9A4B348C146EC9FD14173F9DD2
SHA1:	29CB54633D9A7FE9447816A38BF53674A8AD2698
SHA-256:	41E9817EA3E6B82BF2C90D8DB4BC565AC65762B5C40C36EF3F41E045FD199760
SHA-512:	46264A68CFB0A4ADC76A0B447EC81958FFF0CB59D7EF70EE11B7E9EE5FD519BEC282F344327EE0819E001301AE2CC9B92D7E18950DB35A24F6A1CC85EB1F6F08
Malicious:	false
Reputation:	low
URL:	https://google-bidout-d.openx.net/w/1.0/pd?plm=5
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://aorta.clickagy.com/pixel.gif?ch=4&cm=0bf480c2-068d-099d-383b-98b08c184376&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D"><img src="https://rtb.openx.net/sync/dds"><img src="https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID}"><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0"><img src="https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=1204c7db-0ff0-0854-044f-9b275ba68c4b">..</body>.</html>.

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	54792
Entropy (8bit):	4.6771570641199585
Encrypted:	false
SSDEEP:	768:hpt3RSRsWXZQEUbfi+a/1WnapSEiGLDB4cB274EuNC919U6B5ep17HlrFMH:hLUbihbK+aWgYGPKxvuUbU6B67FO
MD5:	77954D4A1D80AEC12A551AB9E07A9764
SHA1:	9C31CFA2ECDB470D653BF69203A887F64AB57510
SHA-256:	B4AC521EF057CD36E6BEFD10E02A9A307882606AC70DDC9478F5453E15B3061F
SHA-512:	9E9792E624A53E2E31C81D6469D54ADB195F0B092FE38A1A541041DA7776332B6F591F758275365812CE77412C5BF7AB4D53DC2A16C8008A3160074D66DA0DEB
Malicious:	false
Reputation:	low
Preview:	{"w3pr0g":{"1b83mdc":{"b":"bpjlds"},"kl6lmo":{"b":"bpjlds"},"1k3qmm8":{"b":"bpjlds"},"2twl4w":{"b":"bpjlds"},"12cgm4g":{"b":"bpjlds"},"voqcxs":{"b":"bpjlds"},"1v7adxc":{"b":"1b83mdc"},"dxgcg0":{"b":"kl6lmo"},"1dg0dfk":{"b":"kl6lmo"},"mt3cow":{"b":"1k3qmm8"},"1mbndog":{"b":"2twl4w"},"51tc74":{"b":"2twl4w"},"14kdd6o":{"b":"12cgm4g"},"r8wutc":{"b":"voqcxs"},"1qrgvsw":{"b":"voqcxs"},"9hmubk":{"b":"1v7adxc"},"1906vb4":{"b":"dxgcg0"},"id9ukg":{"b":"dxgcg0"},"1hvtvk0":{"b":"1dg0dfk"},"lzu2o":{"b":"mt3cow"},"104jv28":{"b":"mt3cow"},"z0lhj4":{"b":"1mbndog"},"1yj5iio":{"b":"51tc74"},"h9bh1c":{"b":"51tc74"},"1grvi0w":{"b":"14kdd6o"},"q4yha8":{"b":"r8wutc"},"1pnii9s":{"b":"r8wutc"},"8dogsg":{"b":"1qrgvsw"},"17w8hs0":{"b":"9hmubk"},"ukrzeo":{"b":"9hmubk"},"1u3c0e8":{"b":"1906vb4"},"cthyww":{"b":"id9ukg"},"1cc1zwg":{"b":"id9ukg"},"lp4z5s":{"b":"1hvtvk0"},"1l7p05c":{"b":"1hvtvk0"},"3xuyo0":{"b":"lzu2o"},"13geznk":{"b":"104jv28"},"wsoqgw":{"b":"104jv28"},"1wb8rgg":{"b":"z0lhj4"},"f1epz4":{"b":"1yj5iio

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28360)
Category:	downloaded
Size (bytes):	45911
Entropy (8bit):	5.50390226766743
Encrypted:	false
SSDEEP:	768:lIemuoTiQKPcQx28J54S5KjRtJBr1ji4RPtidM6kRsy0:lI1EcQFhKjRfrjpRPtidM6k2d
MD5:	B63285518F1BC28F01CFE8BFB4E6CA47
SHA1:	850CF5957261D3D7BC5484797F5EA6F32630F52F
SHA-256:	DAC99C71E943D58B4FAC29E7BED45DA2FC55CEEC4D6627ECCE863DEC95A520AA
SHA-512:	0AEA2B88D4C09C7E829B27DB1DF56EB8AA22556A100A0E9FA4DF1B8592C2A0661ADD2C7B5FC7451BDA6A27775EA16B262349EA119CB409C91FE5D9D61A90DE34
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	6084
Entropy (8bit):	5.206084699524321
Encrypted:	false
SSDEEP:	96:VFVrqL/IYenalR8ZFAoYUzzeHBUv5ptbi8FmygHcCu88A5BB252R/B0:8L/I7nalSFnYUzzehy5pt+8sR8B8v5Bg
MD5:	D2439FAFF2996014DCECE9EC1EBCA467
SHA1:	23B4AAB4975DE765610734FD0CD2009A6A3DDFBB
SHA-256:	516D673F3FA3AD6270CBAE53301E87D5D9D84C30D28F1CCF79EBC3D91C060DE9
SHA-512:	E35BBB4D2CCF3B16DC1EB0900D44D90F6D4AEA6C5FF0382F389DCD53CA531D1146FBA0806542BA138C92F8F0841325DD5A786B4E266DACD86C38E632B3FE7743
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/dfp/120006/4861501641/1605545600158/index.html
Preview:	<!DOCTYPE html>. ..NOTES:..1. All tokens are represented by '$' sign in the template...2. You can write your code only wherever mentioned...3. All occurrences of existing tokens will be replaced by their appropriate values...4. Blank lines will be removed automatically...5. Remove unnecessary comments before creating your template..-->.<html>.<head><script type="text/javascript">. . (function() {. var MAX_URL_PARAM_LENGTH = 34;. var CLICK_X_URL_KEY = 'nx';. var CLICK_Y_URL_KEY = 'ny';. var CREATIVE_DIMENSIONS_KEY = 'dim';. var AD_URL_PARAM = '&adurl=';.. var relegateNavigation = '';. var urlParamMap = {};.. urlParamMap[CLICK_X_URL_KEY] = null;. urlParamMap[CLICK_Y_URL_KEY] = null;. urlParamMap[CREATIVE_DIMENSIONS_KEY] = null;.. var handleClickTagMessage = function(e) {. try {. var eventData = JSON.parse(e.data);. } catch (err) {. return;. }. if (eventData.isInitClickTag) {. if (eventData.clickTags) {.

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073062&val=1978557987846830937
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19548), with no line terminators
Category:	downloaded
Size (bytes):	19548
Entropy (8bit):	5.290467188090926
Encrypted:	false
SSDEEP:	384:HluuvinPoezlK66nPw+kS3i/q88cfPMIoK+VX477tO2bLiUoJV8hxypR7+UGkIq:HluuviwepKJnPw9SS/xYIoBe77tO2bLW
MD5:	51AAAC94D1B60CBA6FDB4DFC68B9AA14
SHA1:	38DA8CBBE250AE19B20CE972DB03F72DF6CECD3F
SHA-256:	7DB6FEC57509168C724F10200C01EE06DFD84B7096857411B231E006F1ACFF4F
SHA-512:	4AFAEB617522C5E36FE251E7FA2156A119AD74EFB8BD72E4A8B87CBAD3FAACF11C1F79DC90F6026BF34923717A0DA3B68C915A8E2C8396B2969F36576045F322
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/4508/57c70d08153f3e7b78bd.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[4508],{2110:(e,t,i)=>{i.d(t,{f:()=>s});var s=(e=>(e.start="start",e.resume="resume",e.pause="pause",e.init="init",e))(s\|\|{})},4508:(e,t,i)=>{i.r(t),i.d(t,{OUTSTREAM_REFRESH_TIME:()=>_,OutstreamRenderer:()=>w});var s=i(3583),n=i(2110),r=i(2321),o=i(700),a=i(9225),d=i(3528),l=i(1507),h=i(6497),c=i(5077),u=i(5068),p=i(6057);const b=(e,t)=>{e.reauctions++,r.Z.trigger(r.Z.events.bidReady,t),e.refreshes++,r.Z.trigger(r.Z.events.refreshTimeReached,e)};var m=Object.defineProperty,g=Object.getOwnPropertySymbols,v=Object.prototype.hasOwnProperty,f=Object.prototype.propertyIsEnumerable,y=(e,t,i)=>t in e?m(e,t,{enumerable:!0,configurable:!0,writable:!0,value:i}):e[t]=i;const _=31;class w{constructor(e){this.slot=e,this.onVisibilityChange=e=>{if(this.player){if(this.player.playerState===n.f.init)return;e?this.player.play():this.player.pause()}},this.onImpression=()=>{r.Z.trigger(r.Z.events.registerRefreshable,this.slot)},this.onAdSta

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 296 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5715
Entropy (8bit):	7.869885847394282
Encrypted:	false
SSDEEP:	96:wSPPQvTQZq7lb5nBYOlxWnxcvPqHRg0op5eN/q7FgxZeCtFnObfKEedce45gb62r:+bQQ95nmOlqxP1/Tx8CHkedce4ib6zy
MD5:	507589703EC0C072DA80113269CC7447
SHA1:	719F9F9DFDD062CD043246A3C5A95140456808A9
SHA-256:	AE7DDCC420080743B2D1E044CFFB7405309F85D1609D6E4DCBF2C4D500CEA13A
SHA-512:	8466BEA3C23DF0B3041F5A8C4B8E5E7F4170DF71A063D65A3028709983F82E9390ADB79412C63FB27147E270F1F82EF541384C77E670FA30160CF6309D19019C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...d.....5.....IDATx...]h.q.....mv.<F.y.YF.C...Z.\H..;).v#..IZ...D....r!O.d%.i.y(..1{....;.......?O.w.n..>.}..o.RJ)..RJ)..RJ)..R...6.._VV...]Y.).(.T.c..1....%..m..@..\d....9.)l....k.....6..S....S`.R.a..xl.#t.;`...<.V.G.QJ..}c@5n...0.@Y...j..J)..;....w;H........F)..p.?.f....@Y!\|.q.![..R...q.....F<PV.M.E.2.RJ...T4..<..e...va...J...i..Q.?p.......A...SJ....r\@+\.....p...g.R.....2..<..y.,..q..uHWMbH2Q..x.~;0.4P...G0G..(..yw.q....aI......{0Y.t.R$o..X.z....D.eu.>..HC.T...S.q..p.&.@Y.5(.}J.$.3.C.>.....(....,......<{.G...x.......Q..R.PUUU.&.........I......e....P.WgT<c...)......h.....=...4.(....]O..x. .@.\.H..b.r.........@;.Q.\|3D.....cQ..!.(....T9..&...(..........(h.t...<P...(....z......Q..F).T.....>.T.z5PU.@.f..4#..>.....;.4P..@Ew....y,.(.}....`.....8.T?z#..3.R...../..Z.F.8.T..Fa....N.....7.;0...{..E.E..B.F..a\|.A.r..<d#...A>.x....4P~.T..a+.....2^.P.P.zt.<P]......D,.6..i\.=<.m\A.[P.....e.C8.3....(.......I .Hb.A..(.............G.e..a..

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240424/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10836), with no line terminators
Category:	downloaded
Size (bytes):	10836
Entropy (8bit):	5.332224197158819
Encrypted:	false
SSDEEP:	192:JqTec59OpsBJ/SfQQxbO+9OU7lfEyrSqVSkTtHy1WrcXZ5YioaOmQMybWDG9sTRY:JcYsBJ/CQQThfDrSqVS65y1WrcXZiArI
MD5:	74EDC463C468853FA9C0294FFCC70AC0
SHA1:	EA59E22EA74D5A1AD27F4D09A8E8F8CA275D9908
SHA-256:	564CEDDACA488B551B89326C841C3646C86365C86D4BE39DE14A8B8AFFF2D1BC
SHA-512:	F41C0A057415F63AAA85BBEECFDD83218903B04C4C3D513DB0044CA934B90E368CEEE87A55777BEE1EAF410DB2C123DABD618EC505B9E591FDE055E93394C9FC
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/675/7c9a2a701a4b64007958.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[675],{5182:(t,e,i)=>{i.d(e,{Dn:()=>s});var s=(t=>(t["3gpp"]="video/3gpp",t["3gpp2"]="video/3gpp2",t.flash="application/x-shockwave-flash",t.flv="video/x-flv",t.javascript="application/javascript",t.m4v="video/x-m4v",t.mp4="video/mp4",t.mpeg="video/mpeg",t.ogg="video/ogg",t.quicktime="video/quicktime",t.webm="video/webm",t.wmv="video/x-ms-wmv",t))(s\|\|{})},7666:(t,e,i)=>{i.d(e,{F:()=>n});var s=i(3528);const r=new s.Yd(s.in.debug);function n(t,e,i){let s=t.parentElement,n=!1;for(;s;){for(const o in e){const a=e[o];if(i){const e=getComputedStyle(s)[o];e!==a&&(r.debug(`MEDIAVINE OVERRIDE ANCESTOR REPORT:\n \nModifying ancestor element from '${o}: ${e}' to '${o}: ${a}'\n \nBase Element`,t,"\nAncestor Modified: ",s),n=!0)}s.style.setProperty(o,a,"important")}s=s.parentElement}i&&!n&&r.debug("MEDIAVINE OVERRIDE ANCESTOR REPORT: No ancestors of base element")}},3190:(t,e,i)=>{i.d(e,{O:()=>s});class s

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	5.385631524271188
Encrypted:	false
SSDEEP:	3:YA0fRGPQhJNxf9qPjpWcAKJkUDqY:YAmRXJjVeNsVUuY
MD5:	163625B46B9A0982D3165FFEF779A810
SHA1:	BF75474E105B7EB01CE2D6E89D69C530C8B2BC8B
SHA-256:	5E79657F896442FD8ED2D75F5AF1D2954DAA87D0BEEE3AD8BA85F379D20A46C6
SHA-512:	4D071027CB30ABA91AE3554F094D6DA5A909399C9DB7AB7C187FA7AA1C2B5D7CE42FD1BAA24FF3E866AF5E2ECDAFEFF30EEA120EA3FD2567FB604C198DBA1843
Malicious:	false
Reputation:	low
URL:	https://oajs.openx.net/esp?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rid=esp
Preview:	{"esp":"eyJpIjoieDlhTGZ2MXdDaVFVZU1zWkRBMSt1Zz09In0=","i":"x9aLfv1wCiQUeMsZDA1+ug=="}

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32043)
Category:	downloaded
Size (bytes):	242058
Entropy (8bit):	5.386426681750811
Encrypted:	false
SSDEEP:	3072:URDNWAw1kQMqBNmpOHNxBjEYpf+hD5IJ3ui30F:6WAukHOHlEuf+hD5y3ui38
MD5:	2C827824A670702A535169F076C36254
SHA1:	5C7775DE15481A15AFD7D4BEF3B3491C455EBCCC
SHA-256:	BC12347103DA4DA2AC30F8B4DEFD567679284E0BAD691A54FAD78AD804FC9C27
SHA-512:	B5EDE2B2055BF26EB5273A631EC663C86FB2F32DA4285932C23AE1976EC3FFC47F7AE490B3A2BE333F54D378C3C4103BBA0B97401B04A47A2DAB38F6EB13DC2E
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/ads/studio/cached_libs/createjs_2019.11.15_min.js
Preview:	/!. @license createjs.* Visit http://createjs.com/ for documentation, updates and examples... Copyright (c) 2011-2015 gskinner.com, inc... Distributed under the terms of the MIT license..* http://www.opensource.org/licenses/mit-license.html.. This notice shall be included in all copies or substantial portions of the Software..*/.this.createjs=this.createjs\|\|{},createjs.extend=function(a,b){"use strict";function c(){this.constructor=a}return c.prototype=b.prototype,a.prototype=new c},this.createjs=this.createjs\|\|{},createjs.promote=function(a,b){"use strict";var c=a.prototype,d=Object.getPrototypeOf&&Object.getPrototypeOf(c)\|\|c.__proto__;if(d){c[(b+="_")+"constructor"]=d.constructor;for(var e in d)c.hasOwnProperty(e)&&"function"==typeof d[e]&&(c[b+e]=d[e])}return a},this.createjs=this.createjs\|\|{},createjs.indexOf=function(a,b){"use strict";for(var c=0,d=a.length;d>c;c++)if(b===a[c])return c;return-1},this.createjs=this.createjs\|\|{},function(){"use strict";function a(){throw"UID

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 300x175, components 3
Category:	dropped
Size (bytes):	34711
Entropy (8bit):	7.945393558509256
Encrypted:	false
SSDEEP:	768:LvlKGt//WYdcMq12E98hJ8qDaBQYuSwWJ9nYWwV6e/:Lvlx//ROMq12a3phunWJ9YP/
MD5:	1717C7EC93A90CE5090CE12FDC063B2E
SHA1:	A3DD6D021DB4EB8BBCC5D42D470152A2A3188A8A
SHA-256:	ACFA52A33F860BAE40C3A8C1685C28E3A9E2706F0244B6881320A817663E7F7D
SHA-512:	7F5F1D0F947B22EF7437C2E740F2CFA6332890B945E20EBD0BB04A041ED5946FEFFE3ABE857329B527C54CE06486667D56C1083264A075EB133EECA4BCD1E6C5
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................,.."........................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..P..Z......H$_.".n.=^..^,.Q.Y........R8.....g..7rhSK.....Q...W>$......)S..SP.f\|..r.f....oO.C.>...T....i.%...#..+..9b{.s.+..Qq.Im...8.?.HS.V....Y/.wB.......N...a.0.]N....2`q.. ....s..Z=.O.....MP.......n........[.M..Xr...eh...y...]6..$owU..Y..yx..-.QF*Z...3k1..^xv.F..(.).d...).).5.o...o._i.f...r..-ni.'&h.bFi.d.=.tU..._G..v..w...7...O....]...eow.O,M..I.Jm.,."X.....$...Fk.Q.o/.....k....

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2714), with no line terminators
Category:	downloaded
Size (bytes):	2714
Entropy (8bit):	4.972379482060203
Encrypted:	false
SSDEEP:	24:zEJiJOKq3JpJ9tJitJYJhJwYhex1aNpQj5IuMNtefSfdrcCTeQKUHWWWONuoAh3N:zQi1aE5qs69S5GjAFfJpK17f2p/CE
MD5:	087102ECB9F9971D052FDDC91ECC63E9
SHA1:	7C487378BBE1F0F48DABA4B006FCF55A2D1F9033
SHA-256:	3EE638689E343730A82027D03714F274B6C665CF7E3BF60B5208A3A0CDB3581D
SHA-512:	6C286292DEC88B7FB7992305C8AD1BB3823C78CEA1F4CB0F12B5B190BA74A97ED6E08E3A9617F3EFD7B9686282EF365C613F70F91B8FB8A01E3216FF32467872
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/dist/block-library/theme.min.css
Preview:	#start-resizable-editor-section{display:none}.wp-block-audio figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-audio figcaption{color:hsla(0,0%,100%,.65)}.wp-block-code{font-family:Menlo,Consolas,monaco,monospace;color:#1e1e1e;padding:.8em 1em;border:1px solid #ddd;border-radius:4px}.wp-block-embed figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-embed figcaption{color:hsla(0,0%,100%,.65)}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcaption{color:hsla(0,0%,100%,.65)}.wp-block-pullquote{border-top:4px solid;border-bottom:4px solid;margin-bottom:1.75em;color:currentColor}.wp-block-pullquote__citation,.wp-block-pullquote cite,.wp-block-pullquote footer{color:currentColor;text-transform:uppercase;font-size:.8125em;font-style:normal}.wp-bloc

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (985)
Category:	downloaded
Size (bytes):	1179
Entropy (8bit):	5.162194638401162
Encrypted:	false
SSDEEP:	24:N+oTAgbJBaIYJx5j3JrtcARrAlNDlKZpEXB3n:NZaf3tAlR33
MD5:	4CC86D1003C45134D6838F13E3885DB1
SHA1:	7E24D802FA52DB547E437A5D92F21932BB858993
SHA-256:	196BED4FAF0FE38B89A496B1F41319B2A8077263F85819F8AD42933E0A2E2E52
SHA-512:	EE792251931FEB5C09EFCDBE79229B8E3C5CC88A920392A92B78F70D27FA8D8DDFD4A1B976BAF52FFFBB270F46A144CF74B3795B82AE7A513B439FCC6B970952
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/jquery.ui.touch-punch.js
Preview:	/!. jQuery UI Touch Punch 0.2.2. . Copyright 2011, Dave Furfero. * Dual licensed under the MIT or GPL Version 2 licenses.. . Depends:. * jquery.ui.widget.js. * jquery.ui.mouse.js. */.(function(b){b.support.touch="ontouchend" in document;if(!b.support.touch){return}var c=b.ui.mouse.prototype,e=c._mouseInit,a;function d(g,h){if(g.originalEvent.touches.length>1){return}g.preventDefault();var i=g.originalEvent.changedTouches[0],f=document.createEvent("MouseEvents");f.initMouseEvent(h,true,true,window,1,i.screenX,i.screenY,i.clientX,i.clientY,false,false,false,false,0,null);g.target.dispatchEvent(f)}c._touchStart=function(g){var f=this;if(a\|\|!f._mouseCapture(g.originalEvent.changedTouches[0])){return}a=true;f._touchMoved=false;d(g,"mouseover");d(g,"mousemove");d(g,"mousedown")};c._touchMove=function(f){if(!a){return}this._touchMoved=true;d(f,"mousemove")};c._touchEnd=function(f){if(!a){return}d(f,"mouseup");d(f,"mouseout");if(!this._touchMoved){d(f,"click")}a=false};c._mouseInit=

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=3355&partner_device_id=LVFMWCG3-S-CYEQ
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	10198
Entropy (8bit):	5.2820860580049045
Encrypted:	false
SSDEEP:	192:To5msb3ZbL8I712wp4NaBOvTQqTqR34cgFDvHtx9Ng9U7v:dsb3ZbLn712qstfDvHtx9Ng9U7v
MD5:	B5DAC75108E27B15E3A0505FDF39D4A6
SHA1:	711D8657E84B694373886A7ECEC565854B31A496
SHA-256:	584D623EC3125BFC106A88A57BFCCB15FAF6EC72547191F81B894612AD910CC1
SHA-512:	10E3759963069390253E5DC02BE9B518B3F78BDF7776517C144D3F2458A46A4C3888720B3684B95D6E0D6D9D45DCDE318C613867D0E3331EF3C63F789BBA0FCC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/dist/i18n.min.js
Preview:	/! This file is auto-generated /.this.wp=this.wp\|\|{},this.wp.i18n=function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s="Vhyj")}({"4Z/T":fu

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3202)
Category:	downloaded
Size (bytes):	3380
Entropy (8bit):	5.036327515003673
Encrypted:	false
SSDEEP:	48:NpzuSHXsAZP3YahLJfIBW8c68tYYYVTsjtyDebasJBW0uxavfGYDtheEeSrSpS7h:fuo3YQL6/cRpWT8tDvBWfwvfL
MD5:	F5FEC54AE43BEA19A01D7479CDD6D0EE
SHA1:	3ABF306A1352402F2B0FAE989EB3211C4AF0BEDE
SHA-256:	93FFE8A780B4034C7B14AC0D57D752368B53EAFC734D906C8CDF3D3642A9EB36
SHA-512:	0EC6602BDC5155084C4BA8EF60889CF2DAA56ED8817D5DC5EB95D88A2FDF6804D93D0DB4A366FA93567813DEED79A67C93AD611C890663595A2B97C811418E29
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/mouse.min.js
Preview:	/!. jQuery UI Mouse 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(o){var n=!1;return o(document).on("mouseup",function(){n=!1}),o.widget("ui.mouse",{version:"1.12.1",options:{cancel:"input, textarea, button, select, option",distance:1,delay:0},_mouseInit:function(){var t=this;this.element.on("mousedown."+this.widgetName,function(e){return t._mouseDown(e)}).on("click."+this.widgetName,function(e){if(!0===o.data(e.target,t.widgetName+".preventClickEvent"))return o.removeData(e.target,t.widgetName+".preventClickEvent"),e.stopImmediatePropagation(),!1}),this.started=!1},_mouseDestroy:function(){this.element.off("."+this.widgetName),this._mouseMoveDelegate&&this.document.off("mousemove."+this.widgetName,this._mouseMoveDelegate).off("mouseup."+this.widgetName,this._mouseUpDelegate)}

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2167
Entropy (8bit):	5.329032753313809
Encrypted:	false
SSDEEP:	48:HOL21RVc+u7OLPN0oDOCcRVc+u7OCjN0oDOMORVc+u7OMNN0oD:HOL2PVc+u7OLPNHOCYVc+u7OCjNHOMiW
MD5:	FDB822707735A82C7A9E12C4A2693481
SHA1:	D532F839C9B7262FF6F176DB7EFB2A9B5E8A6F0A
SHA-256:	210C0DEC6B8654D40ACA7610C693067129122F2DC88D1E5525365F7BB4A8E5CF
SHA-512:	1AF94B5695B3CDF189D7CD16DD816AE80A74B88B29937B94F87BB524E3ECE075309E9CF05081A1D608E72F71020FA7293E116C4B536482103C29D0C5D71E24E5
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Lato:400,700,900"
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 728x90, components 3
Category:	downloaded
Size (bytes):	23272
Entropy (8bit):	7.921011370329615
Encrypted:	false
SSDEEP:	384:KTf4DwJOaHCklQnV43ISvWeZz1b1IUDbIDTVWfRdqmxJLVz68580bL8v:KT4840aVWvVFQDTcZdqWN68H8v
MD5:	E5C33A1E649A886920320C8DDF60583F
SHA1:	AA5ED3BF6ACFD39F196DE1D472F9E0649E88308B
SHA-256:	A354897025A97F1F81419C2E7CF7EDCF4328264C7529E070888CD1A9FAFDF7F7
SHA-512:	F579DB122D8D9E92835185B47546231424E228F7332840A4F8FD728B3F2B2FB526A45673C4971E3C59BCA010A6412E26F64922CAFCAB3C4F96E4AA149F0A1C08
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/14455271421009595138
Preview:	......JFIF.....H.H.....:Exif..MM.......Q...........Q...........Q..................C....................................................................C.......................................................................Z...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....d..C...).....hE..~...<..,.6....VA..A....m.[..8.SN.g.(..FP...D;.C..B.z....g.#o.g.[h...d(....fU...I=."......\|..x"..^0...{HY...._H...I..8.......J..2......H..._.g\..K..7LX....Ya.(.;G.f..\...n....X....<.......\|Z....zN.7.ld$.i.JQ.F..H0Y....x.\|d....5...jz..uu.F..d.NX..+?...$.4.cT.zV...X.....k.]>..~....

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4778), with no line terminators
Category:	downloaded
Size (bytes):	4778
Entropy (8bit):	5.427364743677547
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALwuLMpn02MGkdtH9JeXy1pecbt:9++2y7CpRuyfM39JKiwcbt
MD5:	A2A93A7555E1E5D3D59E9AC8D0F42647
SHA1:	24A9D3862F135F90A06F38AB85CB0F766BC5D432
SHA-256:	5E377A70F415B4E1896EBBD9504B4F045E38283DCA192996096410229479B905
SHA-512:	C898E0BE095B8E423D3E9AE4A6A687158064ABE2B6B8A0A114DF92AC5AEE7A4FC649475A1CD197D27906ED9CA55CD756D3121C84F3B7E70A4954A05D2A5F532D
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuQVIPF5FsBB2dCdYFOdYvkRScVFuaKK0BpB01gUM9tiZL-9KcuBggto-yHdOUYkOVq0ruZKbjqpN9etHzgpPN1_rlkVbb43WIOkWckX5PMs_RDjLX4SHnenWw9Ov21lrSPmz0YyRXVOKkDeURn-FnVSQ8nPsCb7fo&sig=Cg0ArKJSzAW_XhiCVLVPEAE&id=lidar2&mcvt=1005&p=817,250,907,978&mtos=1005,1005,1005,1005,1005&tos=1005,0,0,0,0&v=20240424&bin=7&avms=nio&bs=1263,907&mc=1&vu=1&app=0&itpl=3&adk=1212450974&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=1000596000&rst=1714073159610&rpt=1188&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21172
Entropy (8bit):	4.533189332231436
Encrypted:	false
SSDEEP:	384:VeofQv4B3BP+81mg+gLPZaQY/6QSnxZJWryIlt8ZE:VXfQQB98g+gLHnx+rB
MD5:	B4ECF05FE49C7D270978FD43997BEE50
SHA1:	14E60BC37D6AF6907CFA60553CCAB5A63D2E5A34
SHA-256:	0B06CA55C1EB4674BF666BEE6CD0193D8E72D3ED8535B7B5DF6160E0391D84FC
SHA-512:	DBF781BA95BA296226EB9E31AFAC76017BA8DCDB3EBE7571E54256849512673414AECA5E2AFF4E4E77BAA640F7F52B507187B4290A15E46373DD948CFD3FE877
Malicious:	false
Reputation:	low
URL:	https://cdn.lijit.com/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702
Preview:	//sovrn beacon standalone .js.window.sovrn = window.sovrn \|\| {};.sovrn.auction = sovrn.auction \|\| {};.let beaconFlag = false;.let cmpVersion = 0;..sovrn.auction = {. doNotTrack: function (nav, win) {. nav = nav \|\| navigator;. win = win \|\| window;. var optOutCookie = sovrn.auction.readCookie('tracking_optout');. return nav.doNotTrack === 'yes'. \|\| nav.doNotTrack === '1'. \|\| nav.msDoNotTrack === '1'. \|\| win.doNotTrack === '1'. \|\| optOutCookie === '1';. },.. readCookie: function (name) {. var nameEQ = name + "=";. var ca = document.cookie.split(';');. for (var i = 0; i < ca.length; i++) {. var c = ca[i];. while (c.charAt(0) === ' ') c = c.substring(1, c.length);. if (c.indexOf(nameEQ) === 0) return c.substring(nameEQ.length, c.length);. }. return null;. },.. sendBeacon: function () {. sovrn.auction.beaconConfig =

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	5.022284930450752
Encrypted:	false
SSDEEP:	12:YsfXGpLDltUXGpLDlttQXGpLDltoyHwHPjrHdMqY:YsfGdltsGdlttIGdltoUyPjTuqY
MD5:	ED5E0CC93637E936CF4A4A1D2C70CD21
SHA1:	75655A53E44ED1CEB010A6ABE0669FD38180A3B5
SHA-256:	46BF2987C83E22BD6BB782658762840E43C3389176AB927FF6DA4029F567A7A7
SHA-512:	053D4911BEB1B3518B49D47D3F7A5F7F91A458DA26C3AEA00121225BBEAAA8F2CB0E74FECA7ADB6D6A0EBA38D5C631E273B11BBED3E2A625128F4517948484D9
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=600&u=https%3A%2F%2Fearnandexcel.com&pubid=38918095-8e45-4332-88bf-226b3514cb64
Preview:	{"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"propertyId\":\"44\",\"vendorId\":\"liveRamp\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"pubcommon\",\"sourceId\":\"600\"},{\"propertyId\":null,\"vendorId\":\"id5\",\"sourceId\":\"600\"}]","3psamplerate":5}

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	62576
Entropy (8bit):	5.973861232664224
Encrypted:	false
SSDEEP:	768:9WQkXd0L+wtoOmx1ok4K+k4Kp74zk4KThvxy:9VkdOt5K+5KB4z5KVU
MD5:	9D15D63ACAA2F888861782ABEA9F4B7C
SHA1:	7FD36EC11E3F7B360C814DB5AC362EEC99D76AD1
SHA-256:	53B82EF1DCED7A4D5DAA450E973D52DEEEEADF9094AD094205CF5F0326173491
SHA-512:	B4792A36E47FE7D971CBDE39FF553A8AF5803398D683B1B3B6128F97032A5CF4CED2B0D02EF2BB135A7E15AA82E1BA16C7B14CCDE5C1F5D31E87E94A6D69B8C2
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2406978322060402&correlator=3795706246462958&eid=95330636%2C95331444%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404220101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1&eri=1&sc=1&cookie=ID%3Dd0732290375c83c0%3AT%3D1714073159%3ART%3D1714073159%3AS%3DALNI_MZbaMpMoVsdFXOH7y-U0bxYsxXO9Q&gpic=UID%3D00000df669624852%3AT%3D1714073159%3ART%3D1714073159%3AS%3DALNI_Ma6Wp_h5MQNE3CNX-FiY1eM1wF4Qw&abxe=1&dt=1714073186148&lmt=1714073186&adxs=-12245933&adys=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fearnandexcel.com%2Fhttps%3A%2Fearnandexcel.com%2Fcourse-category%2Faccounting%2F%3Ftutor-course-filter-category%3D16698&vis=2&psz=728x-1&msz=0x-1&fws=640&ohw=0&ga_vid=1040263935.1714073125&ga_sid=1714073186&ga_hid=53758575&ga_fc=true&td=1&topics=3&tps=3&htps=10&a3p=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..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1714073173750&idt=9713&ppid=b03b0fd7e0e41bad0667f61a661b1707fd854efb12a02011e91d89500d81a2d6&prev_scp=partnerLift%3DsmartmediaE4M2%26hb_bid%3Dno_bid%26slot_id%3Dadhesion_desktop%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3D1%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=site%3Dearn-and-excel%26path%3D%252Fhttps%253A%252Fearnandexcel.com%252Fcourse-category%26page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252Fhttps%253A%252Fearnandexcel.com%252Fcourse-category%252Faccounting%252F%253Ftutor-course-filter-category%253D16698%26secure%3D1%26sessiondepth%3D2%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D17%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D25%26month%3D4%26hour%3D19%26wrapper_group%3D3.1.15-1450-SwapCMP.5-beta-control%26wswy%3D0%26sessionId%3D1040263935%26page_view_id%3D001d121k0y05061c1l0r0a021p1o1j1f%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=1212450974&frm=20&eo_id_str=ID%3D665ab9e36e745c0d%3AT%3D1714073159%3ART%3D1714073159%3AS%3DAA-AfjYli1gEzKcDWdYlI535NnQ_
Preview:	{"/1030006/earnandexcel/adhesion":["html",0,null,null,1,100,970,0,1,null,null,null,1,null,[107205376836],[172149396],[29955756],[299148516],[98686],null,null,null,null,null,null,1,null,null,null,null,null,null,null,"CM674JuM3oUDFVrlKAUdoHwBHQ",null,null,null,null,null,null,null,null,["012404151833000"],null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,[]]}.<!doctype html><html amp4ads class=i-amphtml-inabox i-amphtml-layout i-amphtml-no-boilerplate lang=en><head><meta charset=utf-8><meta content="width=device-width,minimum-scale=1,initial-scale=1" name=viewport><style amp-runtime i-amphtml-version=012404151833000>html{overflow-x:hidden!important}html.i-amphtml-fie{height:100%!important;width:100%!important}html:not([amp4ads]),html:not([amp4ads]) body{height:auto!important}html:not([amp4ads]) body{margin:0!important}body{-webkit-text-size-adjust:100%;-moz-text-size-adjust:100%;-ms-text-size-adjust:100%;text-size-adju

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://eu-u.openx.net/w/1.0/sd?id=537113484&val=4033174624989640038
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7457), with no line terminators
Category:	downloaded
Size (bytes):	7457
Entropy (8bit):	5.031489054887161
Encrypted:	false
SSDEEP:	192:8WYzr5MQT3QIYqMQTqfLMbTIVUVVTMQTf2U:1G5McKqMcCLMHzTMcf1
MD5:	289D6CD3B5246FBDAED61BA580E1769E
SHA1:	388B1D644A8C70E8AE52C07B632A5022ADFE72A6
SHA-256:	19F1DD089B5AB99B77675824E7434AD6AB1E829D6280B6339267F9DBDE9BC708
SHA-512:	242AC9DE07CB138CD3EC1DED951FABB944BC85E89657F685829DB0CC1F7C7D4E177026129A16B8DE425FF448767DB05F1843A7518896C3611D01CFA7BD93D7A4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/login.min.js
Preview:	!function(l){"use strict";function r(e,a){this.ACTIVE_CLASS="open",this.init=function(){var a=this;e.on("click",".popup-overlay, .button-close-popup",function(e){e.preventDefault(),e.stopPropagation(),a.close()})},this.open=function(){l(".edumall-popup").EdumallPopup("close"),e.addClass(this.ACTIVE_CLASS)},this.close=function(){e.removeClass(this.ACTIVE_CLASS)}}l.fn.EdumallPopup=function(e){var a="string"==typeof e?e:void 0;if(a){var o=[];this.each(function(){var e=l(this).data("EdumallPopup");o.push(e)});var s=1<arguments.length?Array.prototype.slice.call(arguments,1):void 0,t=[];return this.each(function(e){e=o[e];if(!e)return console.warn("$.EdumallPopup not instantiated yet"),console.info(this),void t.push(void 0);"function"==typeof e[a]?(e=e[a].apply(e,s),t.push(e)):console.warn("Method '"+a+"' not defined in $.EdumallPopup")}),1<t.length?t:t[0]}var n="object"==typeof e?e:void 0;return this.each(function(){var e=l(this),a=new r(e);e.data("EdumallPopup",a),a.init()})}}(jQuery),func

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	122551
Entropy (8bit):	4.8457696903755405
Encrypted:	false
SSDEEP:	768:X6dGVImjBt2nfIPIhg9EbbmVHaDRatOF4bVFOzXdKgBfelnlyl4lN5QMRci3O6EB:qOsbbdSJO578926tmc3+5
MD5:	6015B425897597FBE0B591C092B5094C
SHA1:	6FAA993D15729AE6082412EC3B1F7D8EE41515D0
SHA-256:	E31B6CDB9670AA9D33CBA3AEBA677B51A0C8E602E0A542EA83C243CDA31DEEB6
SHA-512:	BF1819F810EE2E80FBCFEA846A269A5434A40387B12994D5D3624C5498643EEBA0FA52DF0591C36D208035CA5AF7D2B3D235EBA1BFB1A2B76E63347520B5EA58
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor/assets/css/tutor-front.min.css
Preview:	:root{--tutor-text-size: 16px;--tutor-color-white:.#ffffff;--tutor-color-success:.#24A148;--tutor-color-success-rgb:.36, 161, 72;--tutor-color-warning:.#ED9700;--tutor-color-warning-rgb:.237, 151, 0;--tutor-color-danger:.#F44337;--tutor-color-danger-rgb:.244, 67, 55;--tutor-color-secondary:.#41454F;--tutor-color-subdued:.#5B616F;--tutor-color-muted:.#757c8e;--tutor-color-gray:.#e3e5eb;--tutor-color-gray-10:.#eff1f6}.tutor-color-black{color:var(--tutor-body-color)}.tutor-color-white{color:#ffffff}.tutor-color-primary{color:var(--tutor-color-primary)}.tutor-color-success{color:#24A148}.tutor-color-warning{color:#ED9700}.tutor-color-danger{color:#F44337}.tutor-color-secondary{color:#41454F}.tutor-color-muted{color:#757c8e}.tutor-color-subdued{color:#5B616F}.tutor-color-gray-20{color:#e3e5eb}.tutor-color-gray-10{color:#eff1f6}.tutor-bg-black{background-color:var(--tutor-body-color)}.tutor-bg-white{background-color:#ffffff}.tutor-bg-primary{background-color:var(--tutor-color-primary)}.tutor

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3649)
Category:	downloaded
Size (bytes):	3809
Entropy (8bit):	5.26546774416706
Encrypted:	false
SSDEEP:	48:NFxSHoWgOx+2GYAIiyxvHAtXIAtJK6gUCygEgsH4MjgCouRQRcuya7eRTrfIyVpQ:Lxq62LdiYv+pGnX3O8KR3D/v5PFg
MD5:	892F026A252D12868BBB0D865CD5092F
SHA1:	4FB708E22419B1EA7B1B09594AFA936AD8B441B1
SHA-256:	DF871D59C5D7BD825DEB7A7E25B09B8618454F563B5C1FAE90D9781BE312E86C
SHA-512:	23CD3D8A8DB0EEF39D661D53B89C57B71128AB4AA3F62F8EBC039ED54C23EC9E1AF6E4876E5D341540C0CF886A4BE846AF6BC852D0E057139D9B6ADE667D0BE4
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/smooth-scroll/jquery.smooth-scroll.min.js
Preview:	/!. jQuery Smooth Scroll - v2.2.0 - 2017-05-05. * https://github.com/kswedberg/jquery-smooth-scroll. * Copyright (c) 2017 Karl Swedberg. * Licensed MIT. */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof module&&module.exports?require("jquery"):jQuery)}(function(a){var b={},c={exclude:[],excludeWithin:[],offset:0,direction:"top",delegateSelector:null,scrollElement:null,scrollTarget:null,autoFocus:!1,beforeScroll:function(){},afterScroll:function(){},easing:"swing",speed:400,autoCoefficient:2,preventDefault:!0},d=function(b){var c=[],d=!1,e=b.dir&&"left"===b.dir?"scrollLeft":"scrollTop";return this.each(function(){var b=a(this);if(this!==document&&this!==window)return!document.scrollingElement\|\|this!==document.documentElement&&this!==document.body?void(b[e]()>0?c.push(this):(b[e](1),d=b[e]()>0,d&&c.push(this),b[e](0))):(c.push(document.scrollingElement),!1)}),c.length\|\|this.each(function(){this===document.documentElement&&"smooth"===a(this).

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29516
Entropy (8bit):	7.983965723540391
Encrypted:	false
SSDEEP:	768:YgFI96o9aflJB+3AUn5d3Dg8hWAUct8PdkrwCaQwIoiTLL:xTqAmzFDgTL+8PLCkIoc
MD5:	C86B3A8F21090E6DF7C92A7F4382CFA0
SHA1:	C7B4D026FF009AC359C54C48DA857907E0CD6516
SHA-256:	78FD56847AFEF6EAC5B40529EC34384F5158CF064C1766C77AE796F066311436
SHA-512:	89E614F82FA362C6FD58EDFB857AA14A44C048080099C3B4FF0CCABC17B8C2B115C63CDDE0D7B318BA873B76E7F7066405EFB9C137CF6B002ACAD4BE471DADFF
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Copy-Numbers-in-Excel-Without-Formulas-240x142.png
Preview:	.PNG........IHDR..............}.#..s.IDATx..w...]...r.......m.E...'.q...H ..-...B.^..r/%..TRL.{.n.....j{o...y~....j...8..%.3g.3.\|.o.\|%.....C...{...W.....{..q...J.r.K....K..x.C..Y.~.bz..1..(.u..........q.(.l.k.T.`Y.l....HU~.;OK...n.Iff...1i.`.k3.. ....`.A.$.......e_p.8..A.H...M.@h...G.(..z..w.7>.q.....q...U.{g..?.A...<..3....8.w.g.`..W@......`..6,...G....BB......\._`..s....sb......$'H...z..!P.&..T.....]...KJ......$..;J.).Z.$..?.m...6........I...F...n..w....Y.-.K...$......!.....\p1$..2...^..j..E.w..a.H..,.7.x/yO...qPK&@i& s.l5.0s..g%.:....m..........).....?...?6\|C.U..w6.~..p..=.).r..bI.). ...^...e_....~.v..x".^}a......HO+.....M..V...tlMM.$.t$.].$.t......@4.R./y.4.K.2..R..ZD.c.g.KD..i......"L$.wT..0I.".....b.....bS.w-9u]GU.i...&.h..p.X,F<.@RTTEa.S.u.EQ.X..!.S....H."'...\.H2.......f.L...(.d.EQ.....4..LL:......)6.V5.K'H....W.......\|b...........R.......0M...3$3iV7.GSmW.`..<...=......]]...e%A.w..L&se..:......H...N..Kq.....d2.\|E..B.....

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4817)
Category:	downloaded
Size (bytes):	272607
Entropy (8bit):	5.565049473192844
Encrypted:	false
SSDEEP:	3072:0Ot/S/Qaf5qZ3fhO+81cl8YG1LceF2/ea8LR9Wk9AR6UOQPGA2hTnXDL9btIMvHE:0Ot/S/QX5N8aYLceF+vqTnXP9RIM16
MD5:	631BC03CEE9EE5D26D9742836373AAEE
SHA1:	7122F6035075B1F75DF1CB9B36CE1F0E02A38725
SHA-256:	4926AAA2930DB2A8051E372DE73507B0EC174C066510B741E5FD6B12D1E0708F
SHA-512:	CDB2B63EAFDED69E2F0247919FFEC76DE0A9C289084E8702D1413F9E3D7520081278AEDE260599FD0AFF4974CC7F9B7163EEB108C4CD5161C608B0DB1E9FD18D
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5QW6V5F
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"26",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_fieldsToSet":["list",["map","fieldName","allowLinker","value","true"]],"vtp_useHashAutoLink":false,"vtp_autoLinkDomains":"earnandexcel.com, earnandexcel.thrivecart.com, course.earnandexcel.com, earnandexcel.thinkific.com","vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-190016353-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__c","vtp_value":"5e40fa19-dd6c-4373-b1e0-df7865ef9034"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmpt

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072979&val=2MKo2Xc81S04Jb5
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5477)
Category:	downloaded
Size (bytes):	5629
Entropy (8bit):	5.064978927674849
Encrypted:	false
SSDEEP:	96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+
MD5:	3A56752B736635BF69CB069B8818CBFD
SHA1:	42E0951FE74BB3F56A30F51291823BCD4A84D76E
SHA-256:	FF4BD34AA98A0214833619D3D751838DB015722DFBBEC15CD14DADC66CD67869
SHA-512:	A255D61DE4E6CEC2084AAE0F027CCC0259039AEF62268A27072C8097D348D76BB725CA35563386CEB068387C9AD3AB0E331BD270BA754A38A2A2D33944F305F5
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/imagesloaded.min.js
Preview:	/! This file is auto-generated /./!. imagesLoaded PACKAGED v4.1.4. * JavaScript is all like "You images are done yet or what?". * MIT License. */..!function(e,t){"function"==typeof define&&define.amd?define("ev-emitter/ev-emitter",t):"object"==typeof module&&module.exports?module.exports=t():e.EvEmitter=t()}("undefined"!=typeof window?window:this,function(){function e(){}var t=e.prototype;return t.on=function(e,t){if(e&&t){var i=this._events=this._events\|\|{},n=i[e]=i[e]\|\|[];return n.indexOf(t)==-1&&n.push(t),this}},t.once=function(e,t){if(e&&t){this.on(e,t);var i=this._onceEvents=this._onceEvents\|\|{},n=i[e]=i[e]\|\|{};return n[t]=!0,this}},t.off=function(e,t){var i=this._events&&this._events[e];if(i&&i.length){var n=i.indexOf(t);return n!=-1&&i.splice(n,1),this}},t.emitEvent=function(e,t){var i=this._events&&this._events[e];if(i&&i.length){i=i.slice(0),t=t\|\|[];for(var n=this._onceEvents&&this._onceEvents[e],o=0;o<i.length;o++){var r=i[o],s=n&&n[r];s&&(this.off(e,r),delete n[r]),r.ap

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	142320
Entropy (8bit):	5.596620011704958
Encrypted:	false
SSDEEP:	3072:vOe03o4PwjWGXwMr1JCgc0NX3oXKzXXE2:vBWKwMrM0BYGE2
MD5:	819BAE32C531E7B58F2CB0CE08A0B478
SHA1:	778541C704FB07D61D7FBA1014DB18ABF9027514
SHA-256:	A869FE8CDDAF23F1EE50724C35748CEFB30C697095B2CF4A231033CB8F43B4AB
SHA-512:	82C52C30CCAB0F13CFC4D1A718D4C1A6B04422F751CA84E20C5BCB62D21A6C026A4FC28FD7BB5B525FCE158FCF37F9FF6DC309B62EC537B8A3F3C623EC64284A
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_c26a2.js
Preview:	(window["webpackJsonp.TiktTokAnalytics"]=window["webpackJsonp.TiktTokAnalytics"]\|\|[]).push([[1],{"6rls":function(d,t,e){"use strict";e.r(t),e.d(t,"getCookieDeprecationLabel",function(){return Ot}),e.d(t,"getAllTopics",function(){return mt}),e.d(t,"isHash",function(){return lt.c}),e.d(t,"sha256",function(){return n.sha256}),e.d(t,"parsePhoneNumberFromString",function(){return $t}),e.d(t,"validatePhoneNumberLength",function(){return ut}),e.d(t,"checkEmailFormat",function(){return lt.a}),e.d(t,"checkMDNEmailFormat",function(){return lt.b}),e.d(t,"genIdentifierLabelByUserProperties",function(){return Kt});var n=e("bCcq"),r={version:4,country_calling_codes:{1:["US","AG","AI","AS","BB","BM","BS","CA","DM","DO","GD","GU","JM","KN","KY","LC","MP","MS","PR","SX","TC","TT","VC","VG","VI"],7:["RU","KZ"],20:["EG"],27:["ZA"],30:["GR"],31:["NL"],32:["BE"],33:["FR"],34:["ES"],36:["HU"],39:["IT","VA"],40:["RO"],41:["CH"],43:["AT"],44:["GB","GG","IM","JE"],45:["DK"],46:["SE"],47:["NO","SJ"],48:["PL"],4

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/record?impkey=V1:sfzojCVjdVry0l4M:kGpntz8ndapQFGaa3sa7/QR1PSP61Q9v+cNgfk7gyHmRgEiOofNGxfuLS8iF/oyvvg==&slot=universalPlayer&site=earn-and-excel&path=/https:/earnandexcel.com/course-category&page_url=https://earnandexcel.com/https:/earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698&secure=1&sessiondepth=2&optout=&categories=hobbies-and-interests&generator=web&bucket=17&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=25&month=4&hour=19&wrapper_group=3.1.15-1450-SwapCMP.5-beta-control&wswy=0&sessionId=1040263935&page_view_id=001d121k0y05061c1l0r0a021p1o1j1f&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&partnerLift=smartmediaE4M2&hb_bid=no_bid&slot_id=universalPlayer&hb_bidder=no_bidder&hb_count=0&hb_pmp=0&UR=28&URP=138&OE=0&google=0&native=0&slot_number=1&slot=universalPlayer&arrival=0&refresh=0&bidFloor=0.28&ccpa=1---&psa=&timeout=universal_player_atf_d_2301&gid=0&inview=0&grow_state=4&grow_version=7.244.0&3pc=1&illr=0&gpp=0-0-0&pps=&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=universal_player&device=desktop&country=US&offeringId=1&adProduct=stickyOutstream&oCpm=undefined
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 699 x 380, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	12051
Entropy (8bit):	7.959061330793154
Encrypted:	false
SSDEEP:	192:7/B9FIEFliiHDtcEWGa+wpz6UjdFF6n8b6MMMfSPtuys/M5rz/s13qPvKGI:nFxFligcq0z6UJq6KtJs0z0xqH3I
MD5:	1995C078342FF7BBB9AD005C8867D470
SHA1:	905962C2633A234FECB6AF76F92FFC49EF3F3C72
SHA-256:	90D32CE4157A26333201F5865B2AED36FAFAAA0C0CEBCDFC0432AE5D204F4475
SHA-512:	CC46D26F50A443479A02A0C0EE6EE3047B7CFD188D74CFD5B325A7D919EB3634EDB3EF2074861F9B80DB3C7D802A8DE177E7282BE52BAC3C6C71C9957E34C862
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......\|........!....PLTE..........................................H..............J..........................F.....N..L.....M.................J..I..M....................P....................D.....N..............K..K...........K.....K..L.....M.....M.....L..L........M..N...........M..............N........M..I...........M.....K../.....J.......P.......(>........#................F................9.,..-...................9.3.."....%........Q.....7.. ....;.........C........F....JH.......H.....Hh......{....G.............'y.-}..J....x....o...a........ .............H?..<.....D.....A..6..3.....1..:..8..G.......\|.(z........I....$v...,~...I......K....I.BL...;..".-...........Y.....6..b...'..........o..5..N..@...i...:....._.H...9...sL..Q..U...../N......tRNS.M@p.4ZTix........"#..:G^ea..0..&....\|:,5...l~.)..t.....S....CO...K.>G.\.e.Wa..ri...m...v@.Gw..P.\|.......-..x.#.f..U.....D4..V3x.....$D...lC...o...9.U...rp.e......R.........Y.

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1660), with no line terminators
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.507128427013404
Encrypted:	false
SSDEEP:	24:pwA9zAG/aCcgtj0nf9zAG/D9sYqRUuQGbVEZGbSQGbn1:p19AGyBgtA9AGQRUuQGhKGWQGD1
MD5:	6B994EF0C7E6F72D2EFC4A365BCCA050
SHA1:	B732B390323A2628A0E5E979464E77EFFAADCD89
SHA-256:	76F62E84FD316E5707B83B012285587BF8183A3767C860587F845E053A150E16
SHA-512:	FEA456A89C70817C634FE96034C48F1B3A680F743225BA9B33A7342109704532C824C83E9A97ADF7291FF7DD6E3E93B069B18DD764515307C69DF6AE57F8E353
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/elementor/css/post-32613.css
Preview:	.elementor-32613 .elementor-element.elementor-element-ad0131f > .elementor-container > .elementor-row{align-items:stretch;}.elementor-32613 .elementor-element.elementor-element-4c3bc8c > .elementor-element-populated{margin:0px 0px 0px 0px;--e-column-margin-right:0px;--e-column-margin-left:0px;}.elementor-32613 .elementor-element.elementor-element-4c3bc8c > .elementor-element-populated.elementor-element-populated{padding:0px 0px 0px 0px;}.elementor-32613 .elementor-element.elementor-element-4a73692{text-align:left;}.elementor-32613 .elementor-element.elementor-element-4a73692 .tutor-course-details-title{color:#161616;}.elementor-32613 .elementor-element.elementor-element-f05b131 > .elementor-container > .elementor-row{align-items:stretch;}.elementor-32613 .elementor-element.elementor-element-326ac6b .tutor-course-sidebar-card-pricing{display:block !important;text-align:left;}.elementor-32613 .elementor-element.elementor-element-326ac6b .tutor-course-sidebar-card-pricing span{color:#2123

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13192)
Category:	downloaded
Size (bytes):	13227
Entropy (8bit):	5.399299125464342
Encrypted:	false
SSDEEP:	384:B2mezNzGLsNrF76bTurOKOrNffYlrgLc2GY7wRtEJG6:QmGHNrV6bSOdrWl1VY7Ws
MD5:	1ED41181A48D1B0C493D6B0B1A819487
SHA1:	870643E452A23115688241B64FD16F71DFBB2173
SHA-256:	2813BC3426AA29713C46D365AD6E8C1B01E3020B7DD44126EC6AACC13E2811A7
SHA-512:	EAA4E54D33DC5AC6BCBD747E6E4B90913D639A1E882F8D962E2BD58A50EB8CC22E01A9EAD9EB8088E14C96D8C7A837DF49558D4A1CD97F595A08E9B94A4BBF6C
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-admin/js/editor.min.js
Preview:	/! This file is auto-generated /.window.wp=window.wp\|\|{},function(l,g){g.editor=g.editor\|\|{},window.switchEditors=new function(){var h,v,t={};function e(){!h&&window.tinymce&&(h=window.tinymce,(v=h.$)(document).on("click",function(e){e=v(e.target);e.hasClass("wp-switch-editor")&&n(e.attr("data-wp-editor-id"),e.hasClass("switch-tmce")?"tmce":"html")}))}function b(e){e=v(".mce-toolbar-grp",e.getContainer())[0],e=e&&e.clientHeight;return e&&10<e&&e<200?parseInt(e,10):30}function n(e,t){t=t\|\|"toggle";var n,r,i,a,o,c,p,s,d,l,g=h.get(e=e\|\|"content"),u=v("#wp-"+e+"-wrap"),w=v("#"+e),f=w[0];if("tmce"===(t="toggle"===t?g&&!g.isHidden()?"html":"tmce":t)\|\|"tinymce"===t){if(g&&!g.isHidden())return!1;void 0!==window.QTags&&window.QTags.closeAllTags(e);var m=parseInt(f.style.height,10)\|\|0;(g?g.getParam("wp_keep_scroll_position"):window.tinyMCEPreInit.mceInit[e]&&window.tinyMCEPreInit.mceInit[e].wp_keep_scroll_position)&&(a=w)&&a.length&&(o=a[0],d=function(e,t){var n=t.cursorStart,r=t.cursorEnd,t=x

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5512), with no line terminators
Category:	downloaded
Size (bytes):	5512
Entropy (8bit):	4.982472700889003
Encrypted:	false
SSDEEP:	96:IUVKYantcSy10XIfmAwO5Gy2B6P7metlkkC9489WbuJ1WG:IqAYOE9zq5EbuJ1WG
MD5:	4D25F8332207CE2CF58BE1117FD7A675
SHA1:	10F8B00264F7ED0480CA277F687E398873CBF653
SHA-256:	7824A73895EC128219067E01501D5DA6017C73E71BE9641269ACCA92715E70A6
SHA-512:	996DA766FDC08F7D5891F59E284112B5B415993244B1D08C7CFB2220046BDC401BD40B2B2839D48F2E0D2CF111C0B7E4FC419CBE922B08E61B876477E8ECB568
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/headroom.min.js
Preview:	!function(t,o){"use strict";"function"==typeof define&&define.amd?define([],o):"object"==typeof exports?module.exports=o():t.Headroom=o()}(this,function(){"use strict";var t={bind:!!function(){}.bind,classList:"classList"in document.documentElement,rAF:!!(window.requestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.mozRequestAnimationFrame)};function o(t){this.callback=t,this.ticking=!1}function r(t){if(arguments.length<=0)throw new Error("Missing arguments in extend function");for(var o,i,n=t\|\|{},e=1;e<arguments.length;e++){var s=arguments[e]\|\|{};for(o in s)"object"!=typeof n[o]\|\|(i=n[o])&&"undefined"!=typeof window&&(i===window\|\|i.nodeType)?n[o]=n[o]\|\|s[o]:n[o]=r(n[o],s[o])}return n}function i(t,o){o=r(o,i.options),this.lastKnownScrollY=0,this.elem=t,this.tolerance=(t=o.tolerance)===Object(t)?t:{down:t,up:t},this.classes=o.classes,this.offset=o.offset,this.scroller=o.scroller,this.initialised=!1,this.onPin=o.onPin,this.onUnpin=o.onUnpin,this.onTop=o.onTop,this.onNotTop=o.

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3175
Entropy (8bit):	5.068287487741631
Encrypted:	false
SSDEEP:	48:e+oWNWl0S06T+rCGJztTxfhT0AB0B0liF/Fw0R8wl0fcsOEcwV5OEyiA4HgBXIR2:eTF+q+rCGrxZUF/F5YcsOEcw5OEVHO7
MD5:	420BD813080D140238B2DEA2D1DC304C
SHA1:	9A4559D544E96A15547B49665E3FC70DB517B8DF
SHA-256:	7D02E82904D98E90D762007C28D00C3BC3924161C75697BE36E840279B1D47A2
SHA-512:	04D960E13AB33773490C4EABEAD3D1D58988D9A0CDF374C9F73ABBF42C6F48C640BC69A166771987293C15F8413C75A3F7D1BE10943914EA42B1797000D70BEF
Malicious:	false
Reputation:	low
URL:	https://cdn.mediago.io/js/template/style/style_banner_4c0a52.css
Preview:	/. @Author: fangsimin.* @Date: 2020-06-01 15:31:54.* @Last Modified by: fangsimin.* @Last Modified time: 2020-06-01 15:31:54.*/..mediago-placement {. font-family: "Segoe UI Semilight", "Segoe WP Semilight", "Segoe WP", "Segoe UI", Arial, Sans-Serif;. white-space: normal;. background-color: white;.}..mediago-placement a {. text-decoration: none;. cursor: pointer;.}..mediago-placement ul {. list-style: none;.}..mediago-placement h3 {. color: #000;. font-weight: normal;. font-size: 24px;. line-height: 1.2;. max-height: 96px;. overflow: hidden;.}..fluid > .mediago-placement {. margin: 0 auto;.}...mediago-placement_4c0a52.c320x100_standard_4c0a52 {. position: relative;. box-sizing: border-box !important;. font-family: Segoe UI, Segoe UI Midlevel, Segoe WP, Arial, Sans-Serif !important;. background-color: #fff !important;. border: 1px solid rgba(0, 0, 0, 0.1) !important;. border-radius: 12px !important;.}..mediago-placement_4c0a52.c320x100_standard_4c0a52 a {. text-

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23530
Entropy (8bit):	5.497656132776961
Encrypted:	false
SSDEEP:	384:kM/aDTs87Jbt81zUbdLZNaAsoSfX/KPH7T3BZdeX2hGWNH0pKyzy4dYlkWyv7S/v:J/aXskJt8xEdLZNaNtfX/KPH712X2hGK
MD5:	7FBC48EABE9BB1BEF523CF346C9E5363
SHA1:	FAB1C4A60DD82A0EA5EC61EE75A9D3D9DBA2472B
SHA-256:	51586EC2D56DC12C32B65B0612D89695B3A5B7D0C91592ACAD6EC8A04F8701AA
SHA-512:	EC7DED2166D3A59AF2A7EF2D792753007F4F7C872FE1842D9340080580BB4C56951F2C5DBC4E4BA71BAC8D1B43CF961FC10BF3336BF7F5980DD972B559B2F43E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240424/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7428), with no line terminators
Category:	downloaded
Size (bytes):	7428
Entropy (8bit):	5.409240115582185
Encrypted:	false
SSDEEP:	192:QRGzDSUQ9vMigsOq/vUEgdPVY+1VKfBly/xN8:QRGzDSp9bqEUEg7fKfBE/xN8
MD5:	C03E20D1FA27C16CB3A66A066F034844
SHA1:	EF9DC469294C541484E5BDD41CF5D8EE5A1DE340
SHA-256:	6838FA6BC77E020C5B4FCB5EEBE44A01712ECB2D02DA338DD40D388CB0F2B92E
SHA-512:	04849DBD7BB2904E8674FB0AD09F88AF8CF71766B5B2B6F6735BBD37B21505A27565D3CDBC5DD7F51EAB4C3C296F8EAE2F24D66C526FFF5F72448F1A7AECCC4D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/smooth-scroll-for-web/SmoothScroll.min.js
Preview:	!function(){var s,i,c,a,o={frameRate:150,animationTime:400,stepSize:100,pulseAlgorithm:!0,pulseScale:4,pulseNormalize:1,accelerationDelta:50,accelerationMax:3,keyboardSupport:!0,arrowScroll:50,fixedBackground:!0,excluded:""},p=o,u=!1,d=!1,l={x:0,y:0},f=!1,m=document.documentElement,h=[],w=/^Mac/.test(navigator.platform),v={left:37,up:38,right:39,down:40,spacebar:32,pageup:33,pagedown:34,end:35,home:36},y={37:1,38:1,39:1,40:1};function b(){if(!f&&document.body){f=!0;var e=document.body,t=document.documentElement,o=window.innerHeight,n=e.scrollHeight;if(m=0<=document.compatMode.indexOf("CSS")?t:e,s=e,p.keyboardSupport&&Y("keydown",D),top!=self)d=!0;else if(Q&&o<n&&(e.offsetHeight<=o\|\|t.offsetHeight<=o)){var r,a=document.createElement("div");a.style.cssText="position:absolute; z-index:-10000; top:0; left:0; right:0; height:"+m.scrollHeight+"px",document.body.appendChild(a),c=function(){r\|\|(r=setTimeout(function(){u\|\|(a.style.height="0",a.style.height=m.scrollHeight+"px",r=null)},500))},se

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1914)
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	5.595477203583145
Encrypted:	false
SSDEEP:	96:eGZa44XCUq3ymv/YTW+sEn4xSqwadzuPxxLCpM:Lg4zUVoi94Aq0Ll
MD5:	E43B3F09EB323B895171E120791C2538
SHA1:	F44CC17A7110E2453C2FF9A250C0F27206203D5B
SHA-256:	CBA2CA327F62479DEC10ED7A52A1785154530F869E92AAC500528F7E7924C746
SHA-512:	5A0C55666812999A10A93C413773BBE9B45AF245D8E46AB84ABFBF69BBBB62F82D0B8C275FFBC72920F07C752D2D2BE895736B4E60BE0C566CB8A1F870E4D239
Malicious:	false
Reputation:	low
URL:	https://app.grow.me/iframe-login?siteId=a93bd662-05a1-4ce7-81ce-4c67bccef190&callback=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F
Preview:	<!DOCTYPE html><html><body><script>(()=>{var C="https://api.grow.me",I="grow-me-iframe-prod",c={BACKEND_BASE_URL:C,SNOWPLOW_TRACKER_NAMESPACE:I};function r(e){let n=document.cookie.match(`(^\|;)\\s${e}\\s=\\s([^;]+)`);return n?n.pop():""}function u(e){return new Date(Date.now()+Number(e)1e3).toUTCString()}var g="grow_unverified_reader_id",y="growme_has_logged_in",E="grow_check_third_party_cookie_support",l=window.location.hostname.split(".").slice(-2).join(".");l!=="localhost"&&(l=`.${l}`);function f({name:e,value:n}){let o=new Date;o.setTime(o.getTime()+15778463e4);let t=[`${e}=${n}`,`Domain=${l}`,"Path=/","SameSite=None","Secure",`Expires=${o.toUTCString()}`].filter(Boolean).join("; ");document.cookie=t}async function O(e,n){let{SNOWPLOW_COLLECTOR_URL:o,SNOWPLOW_APP_ID:t,SNOWPLOW_TRACKER_NAMESPACE:i}=n;try{await fetch(o,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({schema:"iglu:com.snowplowanalytics.snowplow/payload_data/

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.659771663013133
Encrypted:	false
SSDEEP:	3:Hd1PTDW948Egyj:uru
MD5:	0D86C6F9E787B1E0FF248EAAED97B297
SHA1:	80CD002C045CBF173D530A0F5A884369B7EE6765
SHA-256:	9F93DD0A204A74E06EF9A9E9856E6CC6AFE6BD9B88C7C64F4577B21D53FB75C3
SHA-512:	80E2980D6DE15503F12FB7579C931FA7865133F0D0FE68337F9190AA154A064BA631D990C2A969D04311221CA9DC17E147431F973B44B5DB5A29D262F5AA1C6F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnoKymHn51gNxIFDRM0Cs4SHgnjGGXYO1iZOhIFDf4DmOcSBQ1Gl3sWEgUNITuD6w==?alt=proto
Preview:	CgkKBw0TNArOGgAKGwoHDf4DmOcaAAoHDUaXexYaAAoHDSE7g+saAA==

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 16 tables, 1st "FFTM", 68 names, Macintosh
Category:	downloaded
Size (bytes):	125888
Entropy (8bit):	5.660568860553552
Encrypted:	false
SSDEEP:	1536:Rkm+UtyMHj0aKpandkRRHxQtmBd1gwcZhad/WU/OCBTu32Md8JSXASSS7qQ:JpbtWfxQtq1fcZhad/WU/Opd+SXArS7j
MD5:	8A85FA6FC211CFBEF765CD775328D469
SHA1:	19A51261741B249DC85571BC1B17EC90779CE520
SHA-256:	BF1B6DAF8AE3AEF777545DE00621F674F3619B97A99600C9D816E2B9232BEE3D
SHA-512:	45E1745A575D72CF8877FC6D89D3CDCE83F10B2A4B3BCEAE75500F48BA68BDAFFE2C42DFCB92BCEF4016CEF408F663B11C5B3E09C26A699A908680668B207BAD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/Gordita-Regular.ttf
Preview:	............FFTM.q.........OS/2N.n........`cmapn.).........feat@3.....`...dgasp............glyf..o.........head.%.........6hhea.Q.....D...$hmtxO0.t........kern.?.........Jloca.Y.....D....maxp.4.o...h... morx8v..........name.}....@...\post...8......dprop].jf.......X........P.U._.<...........`9......i..D.....b.................(.......D.............................l.................@...................X...K...X...^.2.@................P...........UKWN.@. ...(.....(.. .............. .....Z.....M.........T...?.=.(.o.2.`.'...5...?...6.......1.O.2...D...K...D...#...:.......7...1.....v.....<.a.&...:...7.&.K...N...(.k.N...S...".a.8.......m.E.6.).m...m.{.m.Y.6.<.m.,.m.A.....m.G.m...m.X.m...6...m...6...m.t.1.......c.....{.............$...g...!...%.M.6.........8.3...X.X.1...2._.1.g.....2.x.X...E.....!.X...X...X.x.X...1...X...2.\|.X...).\|...x.R.H...b...'...R............g...&.b.H...J.].6...<...;...&...f...2.N.....7.6.Q.7./...>.g.5.x.....6...G...B...5.......c...&.%.K.....0...+.S.1.G.^.$.g.$...+...

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17275)
Category:	downloaded
Size (bytes):	17337
Entropy (8bit):	5.394643796579886
Encrypted:	false
SSDEEP:	384:HrV7dxBJdLEdA2m46UDteprqxDToiCov1k6hCwFDw+L:LV7lJNEdA/RUJgrqxDdCodk6/U+L
MD5:	4627D04DF368C3051F6DB79345F9D469
SHA1:	4C7BA16E64CF6A0342AC43E773E44AF6F0CB7703
SHA-256:	9FC4DF9EA01826D898E15D519FA9F33DB168E11C34C8AC006351110F21C80B06
SHA-512:	F258F34DD20BD83284E4BF49D45462A0748C335037F304743A3037B4C49E831FDFE02391BD3AE54AF3E7E40D9EE933EAA533E0484FAC5CA14C1734EEC45E1B26
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/main.js
Preview:	/! For license information please see main.js.LICENSE.txt /.(()=>{"use strict";function t(t){var e=0;for(var r in t)t[r]&&e++;return e}var e=858;function r(r){var n,o,i,a=t(null===r\|\|void 0===r\|\|null===(n=r.purpose)\|\|void 0===n?void 0:n.consents),c=t(null===r\|\|void 0===r\|\|null===(o=r.purpose)\|\|void 0===o?void 0:o.legitimateInterests),u=null===r\|\|void 0===r\|\|null===(i=r.vendor)\|\|void 0===i\|\|null===(i=i.consents)\|\|void 0===i?void 0:i[e];return 10===a&&9===c&&u}function n(){return Math.floor(100*Math.random())}function o(t){const e={NODE_ENV:"production",PUBLIC_URL:"https://faves.grow.me",WDS_SOCKET_HOST:void 0,WDS_SOCKET_PATH:void 0,WDS_SOCKET_PORT:void 0,FAST_REFRESH:!0,REACT_APP_PACKAGE_VERSION:"7.245.4",SC_ATTR:"data-styled-grow-me",REACT_APP_BACKEND_BASE_URL:"https://api.grow.me",REACT_APP_FIREBASE_API_KEY:"AIzaSyC-jIuCQMNEDKPVWUI0QaC9ksxOrgTWigc",REACT_APP_GROW_LINKS_URL:"https://urls.grow.me",REACT_APP_LOGIN_IFRAME_URL:"https://app.grow.me/iframe-login",REACT_APP_LOGIN_REGISTER_B

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31398)
Category:	downloaded
Size (bytes):	104537
Entropy (8bit):	5.47397583324788
Encrypted:	false
SSDEEP:	1536:tYagKkecz5adbf0fT3+Zz8qV4dQcdnjtAP0wJFhRqSb6Cgn9hem+:B3uRfb+OqQpdnJ1wJF2KkheT
MD5:	7BE53F66BDF44D558733ED9981B68B8D
SHA1:	64AFC51982B5354564FDE75B80833BEB25E96F28
SHA-256:	1EB3D9CF83D497A5B9CEE415CC8399D3455B1553FD3F8E217C59667E4634CDD7
SHA-512:	E793DA2178DC4791DC1987039B84971A45D0541727EE5B64B20B0403C385866F8833B729B48CDF9DEC34B471281F624788AC5ABDC214E30DAC37E74436DE735B
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14301)
Category:	downloaded
Size (bytes):	14613
Entropy (8bit):	5.42072136912928
Encrypted:	false
SSDEEP:	384:Is9t0S/g8UoDthaNyvhCCVKTKWhKPKiX2BKIQNv+bPKlRCLJT9Kpw:X7/DLDth68X22RR8Tz
MD5:	120B4FD6B9D87E3DEE1FD71FF82137B7
SHA1:	D86A86A69AB7477F25377E253242D305DA6493D2
SHA-256:	9F5B814F698DA2F9AF4DD56034A54C48E457EC1F1301828769FAFC493062D9F1
SHA-512:	3692A96DF177DE54FEF873130EF2CB2A6946F41AA3D4DC77A48C296975C02623FC43E26FE2AE22A134F7FF62BBA08C63B78DEADC034D0D9242576BF09B98CD3D
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=earnandexcel.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.us5.us.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e=function(){return(e=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function n(r,s,a,l){return new(a=a\|\|Promise)(function(t,e){function n(t){try{o(l.next(t))}catch(t){e(t)}}function i(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.valu

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	110
Entropy (8bit):	4.337536763923197
Encrypted:	false
SSDEEP:	3:YXXL9AR3AEii6x2YoFXXqHL9ARxQEz6JGQN2ETAQgGL7:Yny3AEiTxhoFX6HyxpO7N2ETcm7
MD5:	EB115BED50B2627CEE601B94CE663FF7
SHA1:	88AD9DEC7CBB0D9CC3E781E8F1FE46E8BFD3B063
SHA-256:	512AB4BF1F2DDCD8AC5888DC2CF04EE7D0444181827EF1C806698ACBFB346449
SHA-512:	1258A8B98E09702F081F512AB7A3651DC6516B6AE61F341E616A4E7EF40014A53E33BFEC62B092B4EA236642831B288BE94805739C4C6E7DD7F442504D898E9A
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/custom-translations?language=en
Preview:	{"recsInContentReadMoreLinkText":"Read More","recsInContentTitle":"Recommended","createSaveButtonText":"Save"}

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	251682
Entropy (8bit):	5.609202066832163
Encrypted:	false
SSDEEP:	6144:0Q3cZn3froafkgGOUz3Xh4urAQKMLRYUfUeqK:0QcZnToafkgGOUz3XhJ
MD5:	42B6FC7E2E8D8703BA0B705D7BDE337D
SHA1:	71BB067960C0E4ACD30414014EB13D0F8898F80B
SHA-256:	014D2EC9DD6D055A46C50A13736877CE5E3CB1BE6B78F3AF1D2F2030E36ADF79
SHA-512:	46B243FD0807BEF375D667187364F6529427837D33AAE3DE977C150D882FED13CB2523665819332C83518B893E8D1056053C67BFAB5C06A0D3912FF2A3477EEE
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/420.56f02a32.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[420],{4388:(e,t,n)=>{n.d(t,{wN:()=>o,wv:()=>i});let i=function(e){return e.BookmarkCountDesc="bookmarkCountDesc",e.PublishedAtDesc="publishedAtDesc",e}({}),o=function(e){return e.BookmarkActionPack="bookmarkActionPack",e.ClickToSubscribe="clickToSubscribe",e.CreateActionPack="createActionPack",e.EmailLink="emailLink",e.ExclusiveContent="exclusiveContent",e.Imported="imported",e.LockedPrintDialog="lockedPrintDialog",e.LoginActionPack="loginActionPack",e.Resubscribed="resubscribed",e.SdkActionPack="sdkActionPack",e.SignUpActionPack="signUpActionPack",e.SmartLock="smartLock",e.Spotlight="spotlight",e}({})},6900:(e,t,n)=>{n.d(t,{c:()=>y});var i=n(2477),o=n(9924),r=n(3040),a=n(2984),l=n(9504),c=n(1272),s=n(6456),d=n(3852),u=n(1580),m=n(676),p=(0,i.cp)("div").withConfig({displayName:"AddedBookmarkTooltip___StyledDiv",componentId:"sc-1bzzq13-0"})(["",""],(e=>e._css2)),g=(0,i.cp)("div").withConf

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.247548241669875
Encrypted:	false
SSDEEP:	3:YAQ2qSABLpF2yh26RrU/qAwqSABHY:YAQV9pF2x6YxY
MD5:	6A9CA355F8CBE556999E1D90DE9D39E3
SHA1:	917477722E600955AE9CCAF8FCD1DB446DB3F042
SHA-256:	566C28DE671DDA53FA3C8742171D876B8A48A28D68DDFEFFA615A47527A5DC8A
SHA-512:	B643EDCCCCF69C7322A1677157428892F79A8A9DB1CE4E86316BB43111E9CBEC1CA5EA85E79A4230A17775309FE8A605D271A21F223BAB409F78E33CE0C8C6A1
Malicious:	false
Reputation:	low
Preview:	{"error": "Method not allowed.", "statusCode": 405, "statusMessage": "method not allowed"}

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	218938
Entropy (8bit):	5.415736669991316
Encrypted:	false
SSDEEP:	6144:vR9Um9Yw3sA5L7ncPidHslXWfXbl01A/d9S:PnOr4l0CfS
MD5:	856501D11FCD34EC85F3D45B2567CE92
SHA1:	54023FD129DB426E23556FBC52DCBC60E6F172E7
SHA-256:	B47638E2B3E5A0F28AC238700ECD6A54D333BD521A54B20BB873A565FEC58687
SHA-512:	F16252ABBED2559FBE8A44DC0095D0FC4F4F00BED9B73B422CB1D051D4A3B3302894A1922C3ACA83AADC9A3608F66DEAE426E5FD368A6B1E170A0AC03AD45E5C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(f,g){this.bh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.bh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=17404&endpoint=us-east
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	174
Entropy (8bit):	5.120823063561214
Encrypted:	false
SSDEEP:	3:jTqNHhOYNRjFETMLAtA9s3OYNRjFETMLAtA9kVRNiRZXURRfSkYeEZK8flfMeGDm:+hjNnojNnKriERK9FfMZDRFkiG
MD5:	E9A839EED71DACF4D025263590AA250B
SHA1:	EA4E4021674800CFEED4862F18505369AA30485A
SHA-256:	A9FB610D918134023F27F093F12F03A878DCC200E0B50CB8D3BFE32704BC6D92
SHA-512:	C17E42A4A136CBED115DC75CB9190167C1EA641475AB8A90C920C0F28E441D1C95B8873D45E6988AD9857514ECAB82F7E10EDA3B9B3FA3DFC908252BED092A77
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/144.4af86fd3.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[144],{2144:(e,s,a)=>{a.r(s),a.d(s,{default:()=>i});const i=a(6304).cp}}]);

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65461)
Category:	downloaded
Size (bytes):	342711
Entropy (8bit):	5.40369623003105
Encrypted:	false
SSDEEP:	6144:dmZxT0fCFGCBL2FwBwcHIemlzpP8vuFX+WiLiFTUG7aG7AG7DG79G74G7cOq:dmZxT0fCFGCBL2uwcHIe8xOWiLiFgG7m
MD5:	3DAFED237CB2B1466E254AF2B980A3C3
SHA1:	66F4C993172A9E4D273C7400D66995982494126F
SHA-256:	2CFE1B8BCCD49B898899E4D32C4E9D71E2F64A76B1E6D7F32DB95202EEB80264
SHA-512:	17A47E1E12E5BD09BD0DB641A56650DD06006875665B9720F04F163A96CD934D980ADAA693CBFA84483DC7F015ED50D661B90142E0869AD791ED00028131B474
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/76.fe88b68a.chunk.js
Preview:	/! For license information please see 76.fe88b68a.chunk.js.LICENSE.txt /.(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[76],{2700:e=>{var t={unlikelyCandidates:/-ad-\|ai2html\|banner\|breadcrumbs\|combx\|comment\|community\|cover-wrap\|disqus\|extra\|footer\|gdpr\|header\|legends\|menu\|related\|remark\|replies\|rss\|shoutbox\|sidebar\|skyscraper\|social\|sponsor\|supplemental\|ad-break\|agegate\|pagination\|pager\|popup\|yom-remote/i,okMaybeItsACandidate:/and\|article\|body\|column\|content\|main\|shadow/i};function n(e){return(!e.style\|\|"none"!=e.style.display)&&!e.hasAttribute("hidden")&&(!e.hasAttribute("aria-hidden")\|\|"true"!=e.getAttribute("aria-hidden")\|\|e.className&&e.className.indexOf&&-1!==e.className.indexOf("fallback-image"))}e.exports=function(e){let r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};"function"==typeof r&&(r={visibilityChecker:r});var o={minScore:20,minContentLength:140,visibilityChecker:n};r=Object.assign(o,r);var i=e.querySelectorAll("p, p

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 370 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	34965
Entropy (8bit):	7.982825391582505
Encrypted:	false
SSDEEP:	768:lAGpEVoliuyJe+WBG3GM847EO/tsEjml+BiwbQIPbfeTS7+vautXxB6xVtb8SGol:66izfWVM847vtjqlMXhPiTSe76ftASGG
MD5:	652DFF4BD9ADC70B30301491DD538D7A
SHA1:	300BD6733C3CD7F3A60F4CFB817BDF8C0F2E6D3F
SHA-256:	5EB4E2A7724ACDA72F3CB372A37DBC51BE191ABD5E28CAD9EDEF93389B02D455
SHA-512:	8B76D5BF0328187FCC5E52E88A3F5C2778655DF55F3E3643AEACB92C24A236B73BE40DC593CBF254DD7CD82463DFA01C30E325C9D7AE25336B8670956EB27059
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Copy-Same-Date-in-Excel-370x120.png
Preview:	.PNG........IHDR...r...x.......y.....IDATx..u...}...:..g..%..e.mY2cl..N..i.........m...6.5.8..1.l.bfZ.j....33.?..hWd..\|..+....gf>...\|I....#".....;g..?.}..V...#lz....+c..4.N.B......". ...A.&9..G.8..^..x../s."..'^..;{H.....^.oppv.Y.....+.'^.WG...%.^....j.y..Wd.i........~..Y.....#..........t....9.._..O8.a.g.`EI..i...$]._.go.f8s#_....dh;.D.@....g6...!..>..8..........w.@mx...e....%I.>..\|.c!....,K.`......Y.z%.. g....%\|......G.........u;.Re.O..........Iu`.:I.(.1~?..E...$-...w'.u..$m{_.G.'..W.......6E>..d..}$..'..>R..x.\|%..}...79.....Q.............D...B.I....h<PK....c...iT........Lau1yE)X...R.I.....a.+a.....^.G\|.v5._2..\|...;]7 .......l......._..w.j.#,;.e..I..Knf*nK...%T...a..N.".'.....H.@..e.Z......j1s,a.}c.B...R...o......\<..ln'.y.xj.....R5..v......d91K..C.O..v.n.fEx.I.....G......a2.g..2..(... ..n..,&...>.....z.;..}{:I]..........?..l\..k'......P..&n...m.I..........NDi......O.f..7...........1.@....).....U....y....N._]..%..H....U0....D...

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	4.345716594214023
Encrypted:	false
SSDEEP:	3:YIzJ6XnKm/DR0xy2/CF+X7IAm2Y:YIFiV0x/CFiIEY
MD5:	5BCD96DF69B201C99EA5E75151216076
SHA1:	D6F629D6168574DCD638DAA702F21E0DDDDB0A18
SHA-256:	69EED40DEB98731C799EEB501843942317AB1C8D04F7E7F55953F3674A92B694
SHA-512:	4FA145220D788F09A4A97F72B5363D453DFADF02476FD9D54E0B71CBBB2022F83F3D67BA70FE59CF0ED5EAFAAB73F676989A432B9C601BC919CDBE22EA9DF414
Malicious:	false
Reputation:	low
Preview:	{"message": "Number of recommendations must be provided (missing \"count\" parameter)"}

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1430), with no line terminators
Category:	downloaded
Size (bytes):	1430
Entropy (8bit):	5.002548173762459
Encrypted:	false
SSDEEP:	24:+UmI+iaPa8eQaPUV+Jy+ynIq7pGMStNvVWQKmB5mB/BKSBYZR4RYk+Too96:+U5lcG9PVJATAM2zKmyxpMrHTw
MD5:	7A8D865353609E480671C2D6224E3889
SHA1:	24F2CE1FE9DCDAD4AC093BAFDA4EA84B4A42D842
SHA-256:	B7EDEAACC39A2179E698F11841FEF321AB9431671AC83F90F296E396FDE18AA6
SHA-512:	F8D810C3B8DB876B2AF499F5F69D0C97548D010A5C70287CBBDE79EF4E8BFACEF2F76F1C87178101C1360415D722F196A131D50B19433157A0F2889B38920A25
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/growl/css/jquery.growl.min.css
Preview:	#growls-bc,#growls-bl,#growls-br,#growls-cc,#growls-cl,#growls-cr,#growls-default,#growls-tc,#growls-tl,#growls-tr,.ontop{z-index:50000;position:fixed}#growls-default,#growls-tr{top:10px;right:10px}#growls-tl{top:10px;left:10px}#growls-bl{bottom:10px;left:10px}#growls-br{bottom:10px;right:10px}#growls-tc{top:10px;right:10px;left:10px}#growls-bc{bottom:10px;right:10px;left:10px}#growls-cc{top:50%;left:50%;margin-left:-125px}#growls-cl{top:50%;left:10px}#growls-cr{top:50%;right:10px}#growls-bc .growl,#growls-tc .growl{margin-left:auto;margin-right:auto}.growl{opacity:.8;filter:alpha(opacity=80);position:relative;border-radius:4px;-webkit-transition:all .4s ease-in-out;-moz-transition:all .4s ease-in-out;transition:all .4s ease-in-out}.growl.growl-incoming,.growl.growl-outgoing{opacity:0;filter:alpha(opacity=0)}.growl.growl-small{width:200px;padding:5px;margin:5px}.growl.growl-medium{width:250px;padding:10px;margin:10px}.growl.growl-large{width:300px;padding:15px;margin:15px}.growl.growl-

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.1b7f3d0e.js", last modified: Tue Apr 23 21:28:13 2024, from Unix, original size modulo 2^32 70670
Category:	downloaded
Size (bytes):	23080
Entropy (8bit):	7.9913802967544
Encrypted:	true
SSDEEP:	384:d8oJAmWxXkqVzQi6rFUPfBrrQGvxQ/ZPV1FfSjA9xB7+q1MlkKiJZwM8DxftFy8b:KoKdXklBUXNsGvxQPMuxB7x1MlkKDMu7
MD5:	51780471BD680082C3977720B56DF64F
SHA1:	65CEBF33BB7DCD9D735E25CD3B83D846DB809FAB
SHA-256:	C7FB2D336F11F19DD6D39A97DE97857F56E733DF99A899FA7365201B333363B1
SHA-512:	CAB8885FED19182D2FF62BE9E46CF399E8A3527FC010721B04C0FB88CE0C929709C6B552B4BF6F09EA179F808B71B9648F46CDCFF0842E164F141EA2D9B95998
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.1b7f3d0e.js
Preview:	.....'(f..main.1b7f3d0e.js..\.o......b%...8.,.Hw3..[[..... Pl:..Py..,7.>.;..%..4....D......?.C.`Y.HRn3.p.g..>l.....B5.i.D.q;9...)^.$..:<.]..M..<\|.n]....x....lw.[_g.n...s9!.u...)s..&.sA+d.^.t.0.K..\|.....p...g...e.^v{`..fY\|.f!..b"d[..z.A.<X.Wo/...oX..}...L....=....%..k\|..w.....v...Z...b.-q.^..K.>..JQ....L.....>.;..Y.q_....$.t.O.T.`Q=........h.e..X0...5A..X.....%.......a...K..,.d.f...^.(..+.K\s-4D....2....M.)e..5...R&).)..zP...@....V.F8.b....8J....37YR..p.....v\|.i.P.r3`jN}.l.3..7.3J_.z.+X.......H...O....#R+%....~.....N~...../.}..........G..Q.{G.............;P.8..,..qv..5.W.4.`...V7Y.p..^.e.}o...XY...o...~K.8>..Pr....{..tU.1....Dw./..o(.P.DA.j.+m.....:.f#VI......Q.W...I^.@..@./YVKk.Y..T\.k)...L..Z............'..X'V...2.r......w]..%...z.....sO.p...z+...0....Z;c..WQy...b.../.K..51.j<QB.Q....2.../...Y..[D.fc.DE..J...W....=..2.`.Ev.F.c'..G.H).j%U.9..)....W...u2....<t....B....K..I...7..Rg.....Pi.W.$WK`'..........z........j.....<...F.....$X

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38715
Entropy (8bit):	4.53198678761757
Encrypted:	false
SSDEEP:	768:w9rgNd7z2CcPrhIbHPuLRwwGWdYhNFWQ9Aw33JZCkTrtSDrUS:w9rWd7XcP+vuLRwT8kTroDr7
MD5:	A34F554FCB862D27278678C3BEC5A00A
SHA1:	50004F14DEE5B70E6BC2B361F80BE5C13930B7BF
SHA-256:	9A373A2E3B3E8699F62C7D1B49CBC4C5B7CFC80ED5D989D21D7D085EDBC6D44A
SHA-512:	F8042108AD27B9300CE6F822B44ECB3A00CA3D87855F99D3E1D03E36D1604E64F4F45ED1DA2F8B8419793C8F1DD86C111622419C0B44E57C85FE0130495A8C35
Malicious:	false
Reputation:	low
Preview:	{"231750":true,"261165":true,"261167":true,"573450":true,"582548":true,"582549":true,"582550":true,"582551":true,"582552":true,"582599":true,"584858":true,"588634":true,"622955":true,"5185227":true,"5639483":true,"5639484":true,"5706980":true,"5707010":true,"5707021":true,"5742030":true,"5742041":true,"5742050":true,"5742059":true,"5742063":true,"5759613":true,"5759634":true,"5781680":true,"5781685":true,"5781695":true,"5873753":true,"6000231":true,"6000236":true,"6000241":true,"6017418":true,"6043989":true,"6043992":true,"6043995":true,"6060002":true,"6145708":true,"6153957":true,"6177059":true,"6177061":true,"6177066":true,"6196536":true,"6200077":true,"6226323":true,"6237662":true,"6238185":true,"6266029":true,"6266030":true,"6266031":true,"6278945":true,"6312645":true,"6318000":true,"6318005":true,"6318011":true,"6323417":true,"6323418":true,"6323421":true,"6323426":true,"6325391":true,"6347016":true,"6347018":true,"6351473":true,"6361249":true,"6369940":true,"6369942":true,"636994

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 370 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28547
Entropy (8bit):	7.976685959076351
Encrypted:	false
SSDEEP:	768:HZ8INCEGaa+MRhbnwkfY1YFV8RSMyPbiozh2uh5QjsYw:HDWaa+glnw5128Rtybiod2uIDw
MD5:	0A62F864A0E76CFE62F895DA7D086C94
SHA1:	07B439F2389EABB11A6A49B6B7738A48F035409E
SHA-256:	9E49196972037288B4E1C5B6F1C97AFA9C71ADB46903CE6C42B54267452DBC65
SHA-512:	A9ACB76FE132632E60EF986598F6C7EF4C41064F12B3CB5217C10293E57D879FDC7C352ED5922BFBE435CB26F13AA826B07A9C019CD0C00C3403AD3597C84CAE
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Is-Excel-a-Database-370x120.png
Preview:	.PNG........IHDR...r...x.......y...oJIDATx..w\|\.u...mz.`.+....Q.E..X..,..N....$.f7...w7yw.)k;..ql...e.,Y].)..{... z.`z...cf...`.......Z.;w.}......9.9.#....J(.:C........d2466.i\..Q...U.6N.j'..@.%V.^..b..X...i.V....R........[..\|...j_<.....,X....Nlv.>....O.O.uN.>.......n._p.L&.$I.<e{6.......A.CGQ,,^.........PZ#...u6..Nf...0X.n....A:..f.!......C...L;.8..R=......6.f.....hoo..u9}}..?~....b........._....."..###,\..]...B.l6R..uu....p.]w..........M.X.~=N.s^.+M..4m.222.[o.C.P..@...(a..]......~.3...eee.;v.`0....N....!dYf.E....i....<.....0<<..g..r.Z....3.=.\...vU..K.Q...A5..'xT.cyM3...&..Z..........:Dkk..$x..Z.,X..f.....'...-.......4...............P..o........$...M2.....k. ...x...............l...............a...........H...e..b.P[[Koo/.`...z.........6..D".....H.....!..Q^^>..v.Q...2...vTM..R.\p-GFF..........Z.TVVb.X...ett..0.....p..r.......l...a\.-]"...[.....w.._.@RdM...MB(\|...x...P..Q...9DQ......j$I.............4.~. .t:M+x..XQ.i...l.l.).=.,.@...Xp...-TU.

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8700), with no line terminators
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	4.901679221068419
Encrypted:	false
SSDEEP:	96:c7FZY7QB0zRHEFjedGgSrWN06CwuEUKj4vZPTxJpEMfHBE6J0/Pn07:uYNzRHIJgSaN06lj4BPl7E6O6JCk
MD5:	38F95416D5F7349B65699F64E6A587FD
SHA1:	2CA6F6F77481C3CDBCAACFC61A56C24F3C933ADE
SHA-256:	08756C47213D461BAA3B01F42448A76D11F524470C7A34F9018733889BD4F49C
SHA-512:	E855AB926916CC3A9AEF67E6BCAC01056180650710804624452F2D2ACB7CE5CE563FBDC5146D51FFE6607FBCDFF8D806765D4FE14C6316AE559BB0C6281EDAFA
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/cookie-notice/js/front.min.js
Preview:	!function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.prototype,window.CustomEvent=e}(),function(){var e=function(e){return RegExp("(^\| )"+e+"( \|$)")},t=function(e,t,n){for(var i=0;i<e.length;i++)t.call(n,e[i])};function n(e){this.element=e}n.prototype={add:function(){t(arguments,function(e){this.contains(e)\|\|(this.element.className+=this.element.className.length>0?" "+e:e)},this)},remove:function(){t(arguments,function(t){this.element.className=this.element.className.replace(e(t),"")},this)},toggle:function(e){return this.contains(e)?(this.remove(e),!1):(this.add(e),!0)},contains:function(t){return e(t).test(this.element.className)},replace:function(e,t){this.remove(e),this.add(t)}},"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lijit_dbm&google_hm=SWpVTkFMWkgwRXpwb3VPcVFrYTdmUVds&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	136
Entropy (8bit):	4.788950297650069
Encrypted:	false
SSDEEP:	3:YTyLSKlpn0neJpE2ZLlABqPVXDKm2HJHxlXGugTFMSuXF/Y:YWLSJkEoaB4dMLmMSuX+
MD5:	4532F617070C0101DD7D5A960D125226
SHA1:	679A96AD2F46B902DF9F187F86B48E6B53817931
SHA-256:	CDE21C6596C667A5762EC8A0A162763BFF25EB6E73AA356ACF1199631BD685E9
SHA-512:	6102D35F0E47794BF4840FDC5670C9FA506E3211F840016F49217EDD3DBF87689F1257581438F58ADC9446C9A525998887377EAA2D1F45B44FF4C43261464596
Malicious:	false
Reputation:	low
Preview:	{"version":"7.244.0","betas":[{"growLabs":true,"startedAt":"2024-04-23T21:14:07.746Z","trafficPercentage":40,"version":"form-density"}]}

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240424/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 728x90, components 3
Category:	dropped
Size (bytes):	69736
Entropy (8bit):	7.765580173115764
Encrypted:	false
SSDEEP:	768:dIDqLnc3Fxs+GD8jW9gQyhxxncTbz2O4oklKZPFqrfQsMGY9Uz5Qp49TiLQKUpJ6:UxK/CQSxKnrTYrWUVtTlO6bW2AW56
MD5:	B9F98E40ACE0FE37ED691D25341977E9
SHA1:	4E8EC0002C4B73B9A28A2B36724AF923AA11E102
SHA-256:	BD4FAA4D4204104CB9098EF21B302A78EC39FB49C9007A9C8199AC5F2BFA86FF
SHA-512:	1D50338C312AC78E7D6BDD4FAC2AEE26FF4228511CFFAC8B3ED2175F373B915D37E372AF383678DF9C69373176F116AD3481F09375AF0BB3693C2FA1EC44C4D1
Malicious:	false
Reputation:	low
Preview:	.............................................................................................................................................[....Adobe.d...........Z.....................................................................................................!."1A.Q.#2T....$aq.BD..%34b.9CRWrt......&'(8GHYdsvwx..................................!1..AQaq....."2....4RSr...#3B...$b.Cs...%&5Tt...0.http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="MediaBeacon XMP 1.0">..<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:iX="http://ns.adobe.com/iX/1.0/"><rdf:Description rdf:about="uuid:BCBF5005-18D1-4C00-AB78-524FE44E198A"><xap:MetadataDate xmlns:xap="http://ns.adobe.com/xap/1.0/">2020-06-04T20:35:21.771+02:00</xap:MetadataDate><xap:ModifyDate xmlns:xap="http://ns.adobe.com/xap/1.0/">2020-06-04</xap:ModifyDate><mbmm:rawFileSize xmlns:mbmm="http://mediabeacon.com/ns/default/1.0/">57415</mbm

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=gumgum
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	141
Entropy (8bit):	5.583541803082486
Encrypted:	false
SSDEEP:	3:YW/HWVJPwLNX9qjOdiOpsM++sSHzUsAdShpRX8P3n:YWeVBwpXMjOVpsIDzpAKMvn
MD5:	9724FF45F8924367E2B0E780382F2E87
SHA1:	B6F95AA2387AC8FD2A6F7855308004FDDBD87917
SHA-256:	E3CC962F22613216D6A75044F8D87A764878A3C556DA625C6F3FD389834F0BF7
SHA-512:	18E585DA05CDA9B22C1C6A895DFF10FA466C6E746C745E9942A5C4A550E7BB93B73AA9A7F033C7F354A06CF95E54D8E4DC27F091B26394D3A49042E95DB8C8D2
Malicious:	false
Reputation:	low
Preview:	{"s":"2mL1hZqPlnf+jdSLvPaTGritq/gzxhg8UUDxOSeWDNnspW/J26PhkmLhaf8=","t":"K6IITOMGlgthXuNnl0DMI7/bSyx78sulC4CMM0fexg4DLA==","kid":2,"ttl_s":9}

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-8Y0K4MPJV5&gacid=1040263935.1714073125&gtm=45je44o0v884867978z8835174253za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=1057499289
Preview:	<html></html>

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (578)
Category:	downloaded
Size (bytes):	597
Entropy (8bit):	5.331799076924946
Encrypted:	false
SSDEEP:	12:U7Dlf8IBbRT7Gs0CfbvbU795Y2PbKOHTRHwxThfCYKO+kFl+pfVfCYKbEebun:WDlf8vs0CfbT0tuoxeKO+kFlSnKbEean
MD5:	329164C85C06B7A5B7056387FE9162A6
SHA1:	C1EFFC8A030416A318826468A2CA9ECC118A3033
SHA-256:	D9F40B40AD035B0E24AB1FB14E56A88E5F8CEB86AFA52DA2D0058DC2CBD57590
SHA-512:	0CF11EBDE7A2E0416B0749EB185662B90F4C5220CD4389004F2F17D2EFCC8AAA64FDC6EF225519736ABBFA508BD909E406244F514A371CBEEA2B62305DBACA97
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&pid=eWu57J4Q2sVgL&cb=0&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1
Preview:	/* aax response */.apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JGzrSyXIe4wcARuIMRtxjsEAAAGPFriuSQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICD_QUUm","size":"728x90","meta":["slotID","mediaType","size"],"amznactt":"OPEN","amznsz":"728x90","slotID":"adhesion_desktop","amznp":"w3pr0g","mediaType":"d","amznbid":"id9ukg"}],"host":"https://aax-us-east.amazon-adsystem.com","cfe":true,"ev":true,"cfn":"bao-csm/direct/csm_othersv5.js","status":"ok","cb":"0","cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5"})

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39769)
Category:	downloaded
Size (bytes):	40821
Entropy (8bit):	5.660460101153473
Encrypted:	false
SSDEEP:	768:j/s1XRsV11EYout1SmoBBl1owmcCpaeSOpiUV8nBO6Zn:j/meFEJutDuBHHnOpT2dZ
MD5:	059E5B5148820182E80EC2850F06EE03
SHA1:	91DC5AE373E3C6FE06E01B1D856EBF948BC7021D
SHA-256:	B57851E56C4A3247F184F47721E89CBBCE3F1837850CD507CA26CAF10873A02B
SHA-512:	6FF24191AA96426E5A96F15354BF662BAB2845B3F5E4CB7DDAC16EE56127EFBCCC5863C84444A719B184DDD8815BEBAF1A2444B94A75EDDC2AF3B14C43AD7165
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/tXhR5WxKMkfxhPR3Ieicu84_GDeFDNUHyibK8QhzoCs.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function k(t){return t}var v=function(t,D,n,x,I){if(!(I=(x=Z.trustedTypes,n),x)\|\|!x.createPolicy)return I;try{I=x.createPolicy(D,{createHTML:f,createScript:f,createScriptURL:f})}catch(N){if(Z.console)Z.console[t](N.message)}return I},Z=this\|\|self,f=function(t){return k.call(this,t)};(0,eval)(function(t,D){return(D=v("error","bg",null))&&1===t.eval(D.createScript("1"))?function(n){return D.createScript(n)}:function(n){return""+n}}(Z)(Array(7824Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){/'

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	4.483866334172183
Encrypted:	false
SSDEEP:	3:C63mFq63ncVo63963TQVo63WAcJYWRefqkaF:C63163nP63963Tz63HcJYWRefqv
MD5:	29F66736822BAE8AF8ECC2B3F38F3BE0
SHA1:	78272007FB4C366334A5D66ECC5B5818926B3103
SHA-256:	45D07A7EDFC55ECBC8223BE626CF26339364E4F310709ED542B5D17D4C2B577D
SHA-512:	CFCCBF2018BDAF751D16DEB6DA539C051893A0D33C21BA95CF35D7FD5152DC4AE5CDB987234D2834237848754E273B37A691FCE3675D16B1348E277B3709BF6F
Malicious:	false
Reputation:	low
URL:	https://keywords.mediavine.com/keyword/web.keywords.js?pageUrl=https://earnandexcel.com/https:/earnandexcel.com/course-category/accounting/
Preview:	. window.$adManagementConfig = window.$adManagementConfig \|\| {};. window.$adManagementConfig.web = window.$adManagementConfig.web \|\| {};. window.$adManagementConfig.web.keywords = {"status":"INITIATED"};.

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACJw19Ps5QAwMVI5XdAAAAAAA&expiration=1714159563&google_cver=1&is_secure=true&google_gid=CAESEPVYYxhxz5uJfaMR_XsfrZU&google_push=AXcoOmQwfQ75gOt5qDKgow6YIk4OdmIHjEdv_hHDAme2sLFEN1J43bvhvDkKNMebD6Q0rj9WZqq1kqe8vVHmlsEEzpYFWxDHcpdN"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19082)
Category:	downloaded
Size (bytes):	19128
Entropy (8bit):	4.5664248896753055
Encrypted:	false
SSDEEP:	192:rF8XHGK+JRxSe6OSfNVsXZLUCpZETvebAmR+srfSbqkbQC4u/DUBMQh:CmK+JRQcx5ZETGNREmk4uA
MD5:	50BE31853049E4B4A10C277D5F95EB75
SHA1:	AC2DFFC0C65AD6B209FEDF2169D0C50EB4119A3E
SHA-256:	B651D87EF113CBA0C8EC8A33BFDB694171EFFEBA56B20BE12E3C77FC15F6AE9F
SHA-512:	D4E784C23393F5DEC68871A57EBE42BB7B44112010774602B4A4F97BAAE37C6A40D405F71A624183F2597136141B79E9AC902C4835D34BF09A122978F71F8D4E
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css
Preview:	/! elementor-icons - v5.15.0 - 30-01-2022 /.@font-face{font-family:eicons;src:url(../fonts/eicons.eot?5.15.0);src:url(../fonts/eicons.eot?5.15.0#iefix) format("embedded-opentype"),url(../fonts/eicons.woff2?5.15.0) format("woff2"),url(../fonts/eicons.woff?5.15.0) format("woff"),url(../fonts/eicons.ttf?5.15.0) format("truetype"),url(../fonts/eicons.svg?5.15.0#eicon) format("svg");font-weight:400;font-style:normal}[class*=" eicon-"],[class^=eicon]{display:inline-block;font-family:eicons;font-size:inherit;font-weight:400;font-style:normal;font-variant:normal;line-height:1;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}@keyframes a{0%{transform:rotate(0deg)}to{transform:rotate(359deg)}}.eicon-animation-spin{animation:a 2s infinite linear}.eicon-editor-link:before{content:'\e800'}.eicon-editor-unlink:before{content:'\e801'}.eicon-editor-external-link:before{content:'\e802'}.eicon-editor-close:before{content:'\e803'}.eicon-editor-list-ol:before{cont

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4129), with no line terminators
Category:	downloaded
Size (bytes):	4129
Entropy (8bit):	5.013246184837655
Encrypted:	false
SSDEEP:	96:5qtA0Vd8x8xcfOLNWc1eN/GXDFqQUbUWv7RIL:5g5IeEY1GsJbUbUWv72
MD5:	4C927B02EC9BC57017EAB8D7B6DCD2A0
SHA1:	25F442A5B700F6B8D7F11A1DF2F125E85E9236AF
SHA-256:	D8CD42778A4A221B675737A295CB352CFE7CC874F6113E84DAD416485ECC246E
SHA-512:	DCC83EDA7BD865A56C3192B64736CD0215A7849BF0C1004DA4E557ED6A05CCFB88325CE3EC1F261C831A6BC079942FF2AD71F520448B4E3D6D25053BA5D13147
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/tinymce/plugins/compat3x/plugin.min.js
Preview:	!function(u){var t;function l(){}function f(e){!t&&window&&window.console&&(t=!0,console.log("Deprecated TinyMCE API call: "+e))}function i(i,a,d,s){i=i\|\|this;var c=[];a?(this.add=function(o,r,e){function t(e){var t=[];if("string"==typeof d&&(d=d.split(" ")),d&&"function"!=typeof d)for(var n=0;n<d.length;n++)t.push(e[d[n]]);("function"!=typeof d\|\|(t=d(a,e,i)))&&(d\|\|(t=[e]),t.unshift(s\|\|i),!1===o.apply(r\|\|s\|\|i,t)&&e.stopImmediatePropagation())}f("<target>.on"+a+".add(..)"),i.on(a,t,e);var n={original:o,patched:t};return c.push(n),t},this.addToTop=function(e,t){this.add(e,t,!0)},this.remove=function(n){return c.forEach(function(e,t){if(e.original===n)return c.splice(t,1),i.off(a,e.patched)}),i.off(a,n)},this.dispatch=function(){return i.fire(a),!0}):this.add=this.addToTop=this.remove=this.dispatch=l}function n(s){function e(e,t){u.each(e.split(" "),function(e){s["on"+e]=new i(s,e,t)})}function n(e,t,n){return[t.level,n]}function o(n){return function(e,t){if(!t.selection&&!n\|\|t.selection=

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65493)
Category:	downloaded
Size (bytes):	210882
Entropy (8bit):	4.725067209881503
Encrypted:	false
SSDEEP:	1536:TYMp3bC2HuQYqUlwpR0/srS8rwkJkmkukxkOkNkekvkF:4zqRIsrSe5
MD5:	9943E6B1B94F179C4137136554C4D4DE
SHA1:	E3406D7926727D7E9BA894A6DB838C896F70F226
SHA-256:	68E46D074D88C5B45F552E28C2449F8361A2036B2767EA459F2C941AA6A43EBA
SHA-512:	B330577EB4C50C42520DFC2AC3134836F2833BB0390DFBB3FF05CCFF13B2D4A29CF2E4D548D48DA853F7709F118B504B8DBFBB41EC70E3318C2034D432FB6BFC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor-pro/assets/css/frontend.min.css
Preview:	/! elementor-pro - v3.2.2 - 05-05-2021 /.@charset "UTF-8";.elementor-bg-transform .elementor-bg{will-change:transform}.elementor-bg-transform-zoom-in:hover .elementor-bg{-webkit-transform:scale(1.2);-ms-transform:scale(1.2);transform:scale(1.2)}.elementor-bg-transform-zoom-out .elementor-bg{-webkit-transform:scale(1.2);-ms-transform:scale(1.2);transform:scale(1.2)}.elementor-bg-transform-zoom-out:hover .elementor-bg{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1)}.elementor-bg-transform-move-left .elementor-bg{-webkit-transform:scale(1.2) translateX(8%);-ms-transform:scale(1.2) translateX(8%);transform:scale(1.2) translateX(8%)}.elementor-bg-transform-move-left:hover .elementor-bg{-webkit-transform:scale(1.2) translateX(-8%);-ms-transform:scale(1.2) translateX(-8%);transform:scale(1.2) translateX(-8%)}.elementor-bg-transform-move-right .elementor-bg{-webkit-transform:scale(1.2) translateX(-8%);-ms-transform:scale(1.2) translateX(-8%);transform:scale(1.2) translat

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=3473854422107831099
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	290914
Entropy (8bit):	5.6089323897073555
Encrypted:	false
SSDEEP:	6144:Y4NQX5NzJ8YLceF+qKXjXP9RIM6TO5Y0SR:BN+xJ5ND/R
MD5:	9B4584D11D671C4DEC6332FD3D5AC189
SHA1:	C970F02FD87B2229DE74224E41D4CC70F9C8C334
SHA-256:	A1B9E26D771E3AB0022ADFF8AA077E124D5FF2F349C7578C1F3069DDC0AA7840
SHA-512:	61D80132293A5C85AF899B028722F9ABB044463D0ACE22EF8BBE017DA6D306D51492EB39CE182EBEC69E2C846349CB3195CF03FF1FCB7D58EF6D86ECA4B53C38
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-37L88V1J5W
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_email

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1273)
Category:	downloaded
Size (bytes):	1472
Entropy (8bit):	5.575610154651167
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIq9uNoMpvMrC2RS9NLu+tEIfiWfwpP+9KzN90lF+ORK2BWMAzSiRJ:2e2C6lIVuNoMpvMe79NXfiUcnGRBlAzf
MD5:	017EA695F3FA01847774AC00F3AECA1F
SHA1:	E6AB7D9CD2374FA82A714648AE0B9E112CD95201
SHA-256:	40460309831F40E640BAABAC8B6C47B1E5E54F872CA7C6258C6EFC91199046C5
SHA-512:	A8EE9C568CFBE0F94A46E535EECB85FC5BFAA971F120DEA13064609C24ADAC97FA7C313AE807DB5BAA9C32E069B6641D1BDEF90DB00A33C6C0926E725B4D8ED4
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=da332442-e224-02bf-2eb1-e5d2da7e20fa"><img src="https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=3abe37ae-8c9d-0f9a-1d89-c2fbff89b92e"><img src="https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D"><img src="https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID"><img src="https://ad.turn.com/r/cs?pid=9&gdpr=0"><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/80bdd263-c45b-a79a-7f79

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25300), with CRLF line terminators
Category:	downloaded
Size (bytes):	25333
Entropy (8bit):	5.171102345796244
Encrypted:	false
SSDEEP:	384:ACnffouNtwIXhqsXmcRxo3kfZNUF/UF1xcjhUrAXo2G2nyvuJisJv4HRVgyoL3HH:AC4uNtwIYsVAXQ3oLVl
MD5:	18B01F81D7D40F8A342235859BA27F16
SHA1:	9BAA91E753E8F266D8E92DE2B01159FF4216A928
SHA-256:	B6387E0A99E73501CC7E541AD21F2375188905D6E81071EEFC222653D653C9FA
SHA-512:	216028C53B7A57290AE7EB55F28DE80B32230B6C590CBA41360CB1F84276DC6FA61FAD23F704ECE2061B72F35F35D2C2A81B9E49FF5698329E7D3D1EB8068374
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js
Preview:	/* perfect-scrollbar v0.6.14 */..!function t(e,n,r){function o(i,s){if(!n[i]){if(!e[i]){var a="function"==typeof require&&require;if(!s&&a)return a(i,!0);if(l)return l(i,!0);var c=new Error("Cannot find module '"+i+"'");throw c.code="MODULE_NOT_FOUND",c}var u=n[i]={exports:{}};e[i][0].call(u.exports,function(t){var n=e[i][1][t];return o(n?n:t)},u,u.exports,t,e,n,r)}return n[i].exports}for(var l="function"==typeof require&&require,i=0;i<r.length;i++)o(r[i]);return o}({1:[function(t,e,n){"use strict";function r(t){t.fn.perfectScrollbar=function(t){return this.each(function(){if("object"==typeof t\|\|"undefined"==typeof t){var e=t;l.get(this)\|\|o.initialize(this,e)}else{var n=t;"update"===n?o.update(this):"destroy"===n&&o.destroy(this)}})}}var o=t("../main"),l=t("../plugin/instances");if("function"==typeof define&&define.amd)define(["jquery"],r);else{var i=window.jQuery?window.jQuery:window.$;"undefined"!=typeof i&&r(i)}e.exports=r},{"../main":7,"../plugin/instances":18}],2:[function(t,e,n){

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 370 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	34965
Entropy (8bit):	7.982825391582505
Encrypted:	false
SSDEEP:	768:lAGpEVoliuyJe+WBG3GM847EO/tsEjml+BiwbQIPbfeTS7+vautXxB6xVtb8SGol:66izfWVM847vtjqlMXhPiTSe76ftASGG
MD5:	652DFF4BD9ADC70B30301491DD538D7A
SHA1:	300BD6733C3CD7F3A60F4CFB817BDF8C0F2E6D3F
SHA-256:	5EB4E2A7724ACDA72F3CB372A37DBC51BE191ABD5E28CAD9EDEF93389B02D455
SHA-512:	8B76D5BF0328187FCC5E52E88A3F5C2778655DF55F3E3643AEACB92C24A236B73BE40DC593CBF254DD7CD82463DFA01C30E325C9D7AE25336B8670956EB27059
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...r...x.......y.....IDATx..u...}...:..g..%..e.mY2cl..N..i.........m...6.5.8..1.l.bfZ.j....33.?..hWd..\|..+....gf>...\|I....#".....;g..?.}..V...#lz....+c..4.N.B......". ...A.&9..G.8..^..x../s."..'^..;{H.....^.oppv.Y.....+.'^.WG...%.^....j.y..Wd.i........~..Y.....#..........t....9.._..O8.a.g.`EI..i...$]._.go.f8s#_....dh;.D.@....g6...!..>..8..........w.@mx...e....%I.>..\|.c!....,K.`......Y.z%.. g....%\|......G.........u;.Re.O..........Iu`.:I.(.1~?..E...$-...w'.u..$m{_.G.'..W.......6E>..d..}$..'..>R..x.\|%..}...79.....Q.............D...B.I....h<PK....c...iT........Lau1yE)X...R.I.....a.+a.....^.G\|.v5._2..\|...;]7 .......l......._..w.j.#,;.e..I..Knf*nK...%T...a..N.".'.....H.@..e.Z......j1s,a.}c.B...R...o......\<..ln'.y.xj.....R5..v......d91K..C.O..v.n.fEx.I.....G......a2.g..2..(... ..n..,&...>.....z.;..}{:I]..........?..l\..k'......P..&n...m.I..........NDi......O.f..7...........1.@....).....U....y....N._]..%..H....U0....D...

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 370 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28547
Entropy (8bit):	7.976685959076351
Encrypted:	false
SSDEEP:	768:HZ8INCEGaa+MRhbnwkfY1YFV8RSMyPbiozh2uh5QjsYw:HDWaa+glnw5128Rtybiod2uIDw
MD5:	0A62F864A0E76CFE62F895DA7D086C94
SHA1:	07B439F2389EABB11A6A49B6B7738A48F035409E
SHA-256:	9E49196972037288B4E1C5B6F1C97AFA9C71ADB46903CE6C42B54267452DBC65
SHA-512:	A9ACB76FE132632E60EF986598F6C7EF4C41064F12B3CB5217C10293E57D879FDC7C352ED5922BFBE435CB26F13AA826B07A9C019CD0C00C3403AD3597C84CAE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...r...x.......y...oJIDATx..w\|\.u...mz.`.+....Q.E..X..,..N....$.f7...w7yw.)k;..ql...e.,Y].)..{... z.`z...cf...`.......Z.;w.}......9.9.#....J(.:C........d2466.i\..Q...U.6N.j'..@.%V.^..b..X...i.V....R........[..\|...j_<.....,X....Nlv.>....O.O.uN.>.......n._p.L&.$I.<e{6.......A.CGQ,,^.........PZ#...u6..Nf...0X.n....A:..f.!......C...L;.8..R=......6.f.....hoo..u9}}..?~....b........._....."..###,\..]...B.l6R..uu....p.]w..........M.X.~=N.s^.+M..4m.222.[o.C.P..@...(a..]......~.3...eee.;v.`0....N....!dYf.E....i....<.....0<<..g..r.Z....3.=.\...vU..K.Q...A5..'xT.cyM3...&..Z..........:Dkk..$x..Z.,X..f.....'...-.......4...............P..o........$...M2.....k. ...x...............l...............a...........H...e..b.P[[Koo/.`...z.........6..D".....H.....!..Q^^>..v.Q...2...vTM..R.\p-GFF..........Z.TVVb.X...ett..0.....p..r.......l...a\.-]"...[.....w.._.@RdM...MB(\|...x...P..Q...9DQ......j$I.............4.~. .t:M+x..XQ.i...l.l.).=.,.@...Xp...-TU.

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmTvB-Y6ooBCuGLQyIwoGRBnrtjjr9a9YK0a-0nGxteVWxN2PZI3_hVk2I1dR2Y25gvIVAAAjAqm9TzFYvEtGvP2nbWerUmK&google_hm=IjUNALZH0EzpouOqQka7fQWl
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1859
Entropy (8bit):	4.77031710338976
Encrypted:	false
SSDEEP:	24:rUec0k3DERaxY/Sw/RVu3IVV6VcTFyAIXb0TPpGVcsMN85TNCjf:oel+gRaxYakO3In6VcTUv0TP0VljTcf
MD5:	F8FA751FC5693CA86934AE00B93965CD
SHA1:	60DD2823DA1D092A71C91F538136436E649E079E
SHA-256:	29B660E1245D6F585268794E05D6FE565CF07B383C9FDFB66AAF67A129A479C7
SHA-512:	7C09610E75373729F39380F67F69E2657216F7EAC9CB4A1474459D10833FF577D43A37E053236570362EA7456F1FF4D33DC62EE893756D6ACFA96D3FCA5BF87B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick.min.css
Preview:	/*. Minified by jsDelivr using clean-css v4.2.0.. */...slick-slider {. position: relative;. display: block;. box-sizing: border-box;. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. -webkit-touch-callout: none;. -khtml-user-select: none;. -ms-touch-action: pan-y;. touch-action: pan-y;. -webkit-tap-highlight-color: transparent.}...slick-list {. position: relative;. display: block;. overflow: hidden;. margin: 0;. padding: 0.}...slick-list:focus {. outline: 0.}...slick-list.dragging {. cursor: pointer;. cursor: hand.}...slick-slider .slick-list,..slick-slider .slick-track {. -webkit-transform: translate3d(0, 0, 0);. -moz-transform: translate3d(0, 0, 0);. -ms-transform: translate3d(0, 0, 0);. -o-transform: translate3d(0, 0, 0);. transform: translate3d(0, 0, 0).}...slick-track {. position: relative;. top: 0;. left: 0;. display: block;. margin-left: au

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	131021
Entropy (8bit):	4.758705090801324
Encrypted:	false
SSDEEP:	3072:ill+04aaYgghtcDMHi8fC/s7sS744jkSJlRgFLER7a83NsynBN:iG0JztRMk
MD5:	C108A32B592210538F0122D69787FC2C
SHA1:	F05180540A4C54D83E872F67503ACF1512D9F256
SHA-256:	2F034A1152B6FEAEA2A4F173B1987F2C349BD195D0005529F13C3DA1CBB8840F
SHA-512:	653BC4AAA9E72668C79848C29C70F6242CD286D958881695A1A30FA85289D0B5C0946A1F7F55BA4432DB275DBE353CFBB884AD8084205739E855EC6790393871
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/search-landing-page
Preview:	{"mostPopularPages":{"edges":[{"node":{"__typename":"Page","id":"UGFnZTpkMmRlYzFiNS00YWNhLTQ2OTUtYmJmOC1jZTNmYTY3ZTQwZTM=","title":"Skills For Professionals","url":"https://earnandexcel.com/","description":"Start to success Learn Skills That Will Make You Invaluable To Your Company Let experienced professionals pass on their skills and knowledge to you as you become your team.s MVP with our courses in Excel, Data Analysis, Business Intelligence, Microsoft Office , Data Science, Accounting, Digital Marketing & More! Search for: Search Most Popular Courses All Excel Premium Digital Marketing Accounting Office Data Science DA & BI All Excel Premium Digital Marketing Accounting Office Data Science DA & BI Let Us Help Finding Your Right Courses Get started Start to success Achieve Your Goals with Earn And Excel 1 + Students Enrolled 1 Classes Completed 0 % Learners report career benefits 0 + Courses from top instructors Some Of The Companies Our Students Work At Start Learning Testimonial

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4260), with no line terminators
Category:	downloaded
Size (bytes):	4260
Entropy (8bit):	5.2325094251409965
Encrypted:	false
SSDEEP:	96:Adv688T6RL6AvmBv8urxuvQM4OhW8JW5jFZ1no6l1I81tJtDg:Adn8OqB0urxum2JW5jFZ1no6l1IgvG
MD5:	D46DEBCB8F3F7620E64F816A9DE9397B
SHA1:	CD78E9F9CBF09C8F1F72BCE7ED151EB76CA46F46
SHA-256:	D50C891B8B6ECCBDD1021E2878C93B0AE180A21BE15A9C4996E811EC113F7DB7
SHA-512:	BCC712E606BFBE1BDEB5A02D81A024A3B38E2BB377B34152C6B84EF2AA81B79B4CF0E5ABFD0094837E33A65A72C21D358C3907A5102BB5A23E04170184B42906
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/grid-layout.min.js
Preview:	!function(L){"use strict";function s(E,t){this._isotopeOptions={itemSelector:".grid-item",percentPosition:!0,transitionDuration:0,packery:{columnWidth:".grid-sizer"},fitRows:{gutter:10}},this.init=function(){var t,o=this,i=E.find(".edumall-grid"),e=E.data("grid");0<i.length&&e&&void 0!==e.type?($edumall.isRTL&&(o._isotopeOptions.originLeft=!1),"masonry"===e.type\|\|"metro"===e.type?o._isotopeOptions.layoutMode="packery":o._isotopeOptions.layoutMode="fitRows",i.imagesLoaded(function(){o.calculateMasonrySize(),"grid"===e.type&&(i.children(".grid-item").matchHeight(),i.isotope("layout")),i.addClass("loaded")}).one("arrangeComplete",function(){o.handlerEntranceAnimation(),o.handlerTooltips()}),L(window).resize(function(){o.calculateMasonrySize(),clearTimeout(t),t=setTimeout(function(){o.calculateMasonrySize()},500)})):(i.addClass("loaded"),o.handlerEntranceAnimation(),o.handlerTooltips()),E.on("EdumallQueryEnd",function(t,i,e){o.update(e)})},this.update=function(t){var i=this,e=E.data("grid"

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	46796
Entropy (8bit):	5.49249921743214
Encrypted:	false
SSDEEP:	768:yBLBSB7BOBdBJB/vp/LXO9pQNN5YYFTVptg4TK2cCqJ34IaURijoByBfBABaBuBH:gc
MD5:	9ABEEE4EC31E36147F43FDB381C6FD4C
SHA1:	01CEF8EADCF8E0FA6BB0B78EF064794FB5DBFF15
SHA-256:	E8CC80BE6C43744AD0FA84933313CC74406E594583A351ED53963E6DBC72FCF1
SHA-512:	04D35F9A51C6CBB9B05DC5B3F6B87B6C7CD260809B38D854A0FFD2AD6C7B13B03E5CD4C4610D2255F42B052D830AE04B6C94E4905F946012D5582284DC7EA2FE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2) format('woff2');. unicod

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9052
Entropy (8bit):	5.178166748645426
Encrypted:	false
SSDEEP:	192:Qqkp5+VqrIgxqMGHRpqQEpz4d444a4O4O8yp5BmbqkQsG7:LxqrIgxqMGxpqQEpz4d444a4O4O8yjB7
MD5:	5CEC186FB803DEE57455356D0B2ADDF0
SHA1:	1A31AC36509EA589B2F9D9A48ACC2847BBD308B8
SHA-256:	5EBC7550313F51029CD86227709777FBE6CC2C8928C595583C579CD95580146B
SHA-512:	D90A18FED33D878008A092384D9B775F5A6AC29EC5CADDDA8369653D33A5F39740DA03B7187F8349ADDD6D069EF6E54CFE465FD889550E5404C2CE3718FF1F93
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css
Preview:	/* Elementor Custom Skin /./ https://www.dudaster.com /..ecs-post-loop .elementor-page-title{. display:block;.}...ecs-loop-preview{. height:100%;. width:100%;. background:lightgray;. border:solid 1px gray;. padding:5px;.}..ecs-loop-preview h3{. font-size:16px;. font-weight:500;. .}..ecs-loop-preview span{. font-size:12px;.}..ecs-loop-preview .ecs-image-holder{. width: 100%;. line-height: 113px;. background-color: #808080;. font-size: 45px;. text-align: center;. vertical-align: middle;. font-weight: 900;. color: #929191;.}...ecs-link-wrapper{. cursor: pointer;.}..elementor-widget-ele-loop-item, .elementor-widget-ele-loop-item > .elementor-widget-container,..elementor-element-edit-mode.elementor-widget-ele-loop-item, .elementor-element-edit-mode.elementor-widget-ele-loop-item > .elementor-widget-container{. . height: 100%;..}./ Fix for Elementor 3.4 /...elementor-widget-posts .ecs-posts .elementor-button-wrapper {. margin-top: 0;.}../

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.849223912390625
Encrypted:	false
SSDEEP:	3:jKC+IuJu:lGu
MD5:	2CF9C70D59CF58EA0DF1042EA8EB2CFC
SHA1:	73D3B76F00EB047E4FD3E88F6757A350DD1B4BA1
SHA-256:	E1C5C764F272B8D760C3DC6CA97FC3B22D0E3CE2BE43281CE2C6E8D89A6A8790
SHA-512:	7586B4286118F39D2D88605E0452B69E2325C3CF3687D5C11AAD0E305A049D600770D85D48530CA6D84E34C71B8C15F6CD1CEA73A8010CF19062E55D5657C71F
Malicious:	false
Reputation:	low
Preview:	Resource not available.

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	225866
Entropy (8bit):	5.379271278866028
Encrypted:	false
SSDEEP:	3072:hhwvwaC82wlbixov2mtFkSY+UV5xbScYy:hhwvwaDlmxy2+kDVvmcYy
MD5:	B89693E18ED17F9B649DDAF638E17A57
SHA1:	3C51EF5B0AB1367A91F3FC50F2AC7D31C264CB88
SHA-256:	BCCE269FE4E329E6AAC07BDA59F9F10948F0FF09A492146306F16BFC24A99E35
SHA-512:	0C24B146510FE8CF5F1697041A4FB22B9AC0A4DEBBD97D028BD1AFF0439BCAA167205B4D4FEE5D54976A80D93950DEEC9112BD2584CE2A20FE5C841A7467CE22
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.25f289cf2c430c5f1dfb.js
Preview:	/! For license information please see modules.25f289cf2c430c5f1dfb.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13009
Entropy (8bit):	4.874257356539289
Encrypted:	false
SSDEEP:	192:CdB1rktcyfhvnUcG2ZiLr2bK3pxRW0oLUnRGSGeVskDObrne1M+XN:VtnFUcNZiLhw0ZRPuXQl
MD5:	5A58D3320F1F9FA113731CBF68DAC977
SHA1:	ABEFB7CC00B2CF1A67F4587EF85369647CD4C7F4
SHA-256:	36D1285581A74AC578716F5441BDA867B81C1EC27112AA392453421C56A575D5
SHA-512:	49366DC6C95E25A0382486E23FCBAD001298217AF4FD9BCDBD0E2E2A0D924D12C13C99892EC68EEEE4D7B660F7FEB04B48D50F2AAB5477A105037C4A1F4D5845
Malicious:	false
Reputation:	low
Preview:	{. "accept": "Accept",. "account": "Account",. "backToSearch": "Back to Search Results",. "backToWebsite": "Back to website",. "bookmarkImportCTALoggedIn": "View your Bookmarks",. "bookmarkImportCTALoggedOut": "Sign up for Free",. "bookmarkImportDescriptionLoggedIn": "Head to your Grow account to start saving your favorite content from {{siteName}}",. "bookmarkImportDescriptionLoggedOut": "Create a Grow account to keep your bookmarks from {{siteName}}",. "bookmarkImportDescriptionLoggedOutDeadline": "Create a Grow account by {{bookmarkImportDeadline}} to keep your bookmarks from {{siteName}}",. "bookmarkImportDescriptionPendingBookmarksDeadline": "Head to your Grow account by {{bookmarkImportDeadline}} to keep your bookmarks from {{siteName}}",. "bookmarkImportTitle": "{{siteName}} has moved to Grow",. "bookmarkPage": "Bookmark page",. "bookmarkSavedToast": {. "description": "Successfully added to <bookmarkLink>bookmarks</bookmarkLink>!". },. "bookmarks": "Bookmarks",

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 416 x 26
Category:	dropped
Size (bytes):	15238
Entropy (8bit):	7.949051510520624
Encrypted:	false
SSDEEP:	384:4THgxWfUWshZ7ytfidOv7xrfo1bl2nklWYvYyDjqbRGpUPsTR:4TAxWfUWsL788Ov7x0bl2kxYyDmbRGiy
MD5:	CE2268030DD2151B63CDF4FFC2F626BA
SHA1:	15280F21EB43F5FA7838DCF011F67D79E301B15F
SHA-256:	6A486BB6036EA984D293AB009566E99E522ABC19F8833C5FD49630BE7EBA0135
SHA-512:	6164DAEF98D93DC1878BD776934C013F7E750CF7EF45959C17F12C0251C89FB0BCA26FFE0D2C1DEFECC8881105A42CCA0E61459A2A57639E75F26458301C67DC
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................!..NETSCAPE2.0.....!.......,.............DRi.h..l.p,.tm.x..\|...... ...r.l:.P'.@.0....(E .X\zl.X.i.......f..Zu.n...Yrt\|n~.Yz..d..........`w.........^...x..oE..%.............U.....~.................s..e..............s...............jF.....)........l...?...J4..a..'&.h1 D..%r...#..#.0$.0#J.#I.\|y0&.4).dY..I.6;.....L.;y.......P.J...L..X.f.3.kT.`.h.{...U!.%k..T. .jm..jZ.s..}../V.u..-.w/T.b..v+Xqa..7X\|.._.^-..\|...=.....Q.Z....[.c.^.....e.].....w...t.....}\.p..77..8.......{....?W..{....g..D....o`.#......^A}G...~..G.p..H`......}.1................v.`..\.!.....)rx.%.(!...........`..%:...D.X.A.....E..ciJ.4d.;.)V.LR..@.!..:Z.d.Y..%.S.)&.`.x&.ij.&.m..#.m.y_.:.%..).X..@....@.m......#.2......F..x..R..R.Z.j..j.)..........`.....+l..`a..........,..........F{....,..j.-..^.....,...Kl...Z...J./..K..../...K.......{.....\|K/......X 0

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	9757
Entropy (8bit):	4.36918192096247
Encrypted:	false
SSDEEP:	192:Pe2IGrnKxioC5xfn2dfNQbBH/mB8Oq0PAbkoztch4L6n2gf2S61Ky:PeFi10Abko84LSl8
MD5:	C9B1909FA492EFD7F0135E97A4A94985
SHA1:	7E4AC07A44F9D1897959F957782200C3CF38DDDE
SHA-256:	191F8157299042E385E66B25562A0CDD2333EF36C0933581DF55D1DB11544C48
SHA-512:	BF8AF685933C0D049F0078E65DFD54C139F2819865E948CE64FC878DDAB756BB80D180090D46E6F0F0C695D4FD0FEA39DBA3E0B6DE9910CC3AD8378D452597A4
Malicious:	false
Reputation:	low
URL:	https://cdn.mediago.io/js/interest_group.html
Preview:	<html lang="en">. <head>. Chrome origin trial token -->. ......meta........ -->. <meta. http-equiv="origin-trial". content="A7J/zKtS7Hsph6itQaA2r5SBTtC3uc4oScABQLufiLlqEQWr5O3/iQf3BLnF6J/UtumeRg8NEmHCu2wd7Tkt4AcAAACAeyJvcmlnaW4iOiJodHRwczovL21lZGlhZ28uaW86NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY5NTE2Nzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=". />. <meta. http-equiv="origin-trial". content="A0MT6XNKno63xkeDj6OjNq5NfeqgZgHBcH8VpgA7Ks8c1caAHFox2Bia19pl04nCAkIaWzb1oD6cfcDMuyBvrAgAAACEeyJvcmlnaW4iOiJodHRwczovL2Nkbi5tZWRpYWdvLmlvOjQ0MyIsImZlYXR1cmUiOiJQcml2YWN5U2FuZGJveEFkc0FQSXMiLCJleHBpcnkiOjE2OTUxNjc5OTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9". />. </head>. <body>. <script>. /*. ..url.....url....url. * @param {Object} param ...

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	118
Entropy (8bit):	4.574085241675804
Encrypted:	false
SSDEEP:	3:Y2AOQIgLVccVWtXwwWPXUvgO02VURiHJ2HWUsuXCWEGZn:Y2AOQIgL2xtXwjPXnd2uisCrWEGZ
MD5:	A8B1D59C9A94B46A30802376A8ABD647
SHA1:	D46DF49715C899D9CF82E0C51BFCFBE751135582
SHA-256:	8510809DFCC7C2681BB5A7E56E5FD298625C83995DEEF4E0CB6F66830C22BD98
SHA-512:	671BBDD0CCD0B1EF0D4AFB19CE84A323B1CE45A75A5E3B7C1A96865C4CD18CEB776443A139B6E8A4E6640332AAD5346D003DEB89024DED7B02B3E34B868CC23D
Malicious:	false
Reputation:	low
URL:	https://track.wickedreports.com/index.php?WickedClientID=3819&WickedEmail=&WickedTrackingDate=1714073134343&WickedURL=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&WickedReferrerURL=&WickedNullURL=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%26utm_term%3DOrganic%20traffic&WickedNullReferrerURL=
Preview:	{"SequenceNumber":"49648752392988234712500618323841236799482698498930901474","ShardId":"shardId-000000000030"} Tracked

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 80x80, components 3
Category:	downloaded
Size (bytes):	2637
Entropy (8bit):	7.785501497404626
Encrypted:	false
SSDEEP:	48:UfIFuERACi13EkzcGdYxY4gBNZLkP8cZkEHGC6/PAOk5IK2bK7:BMEOBEFGdYKzNVGZCEHHaTYubK7
MD5:	9DE8C28C6028DE09355431E6435015A5
SHA1:	976111D30D212E8A177BFC0EA613CAF3E14EB5D7
SHA-256:	991B89E27049FDB8D2DB1C46DB95B9809E5F5A7D2AFC3377634144CFEA680F70
SHA-512:	D520A19362C57DCE9AC0612651F88B7D1E9A3A8461D4EFFF95C22CB36B36522A288FEC8854107E50658429A8DC55384F964273E969435C80730741894F3EA67C
Malicious:	false
Reputation:	low
URL:	https://www.gravatar.com/avatar/00000000000000000000000000000000
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................P.P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(.........(.....f.....s.j...7....`.<.2..m... d.....{...........;.y..^.$......y..UtjOU....>.......J....+...^..O.......C5..1.zDyf...F...._s...x.9..V.&...d....................9B.+...d_.P.T..c.."m.IC..#...H..}C9\.....5....V..<]xP....k...bm+[...>!..L..%...W.G..<.Hm..(#..I......u.>.....O:.Ni...De.*..

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 728x90, components 3
Category:	dropped
Size (bytes):	23272
Entropy (8bit):	7.921011370329615
Encrypted:	false
SSDEEP:	384:KTf4DwJOaHCklQnV43ISvWeZz1b1IUDbIDTVWfRdqmxJLVz68580bL8v:KT4840aVWvVFQDTcZdqWN68H8v
MD5:	E5C33A1E649A886920320C8DDF60583F
SHA1:	AA5ED3BF6ACFD39F196DE1D472F9E0649E88308B
SHA-256:	A354897025A97F1F81419C2E7CF7EDCF4328264C7529E070888CD1A9FAFDF7F7
SHA-512:	F579DB122D8D9E92835185B47546231424E228F7332840A4F8FD728B3F2B2FB526A45673C4971E3C59BCA010A6412E26F64922CAFCAB3C4F96E4AA149F0A1C08
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....:Exif..MM.......Q...........Q...........Q..................C....................................................................C.......................................................................Z...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....d..C...).....hE..~...<..,.6....VA..A....m.[..8.SN.g.(..FP...D;.C..B.z....g.#o.g.[h...d(....fU...I=."......\|..x"..^0...{HY...._H...I..8.......J..2......H..._.g\..K..7LX....Ya.(.;G.f..\...n....X....<.......\|Z....zN.7.ld$.i.JQ.F..H0Y....x.\|d....5...jz..uu.F..d.NX..+?...$.4.cT.zV...X.....k.]>..~....

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1235
Entropy (8bit):	5.537854362175035
Encrypted:	false
SSDEEP:	24:TxSLumf3taVXg3T9Z/8kBLoAFKF1U7JN7Wg47:1SymPtaVgT9Z/8kBEAFKF1U7H7Wg47
MD5:	7EEA4CDCEA068413064B87A04D832F98
SHA1:	D8573795A1F15BD4A16CB2A1E120BDF58A626CE4
SHA-256:	0FD865A43C43416A6D20EB0798C385F1C60390DEC04183C9456C016DDA6C4565
SHA-512:	02A8B2A170A94BC5BB99092A316118952DB0A4B8F71C2A49F3A9CF35D0D807F056D7C3832A61A5A4C3C7C2039B292BD436F9688FDB8BED45EEFBB8144E3E55B9
Malicious:	false
Reputation:	low
Preview:	<html>. <head>. <title>Pixels</title>. </head>. <body>. <img src="https://s.ad.smaato.net/c/?adExInit=inmobi&gdpr=&gdpr_consent=">. <img src="https://tr.blismedia.com/v1/api/sync/inmobi?gdpr_consent=&gdpr=">. <img src="https://x.bidswitch.net/sync?ssp=aerserv&user_id=ID5-248f60d7-849a-4217-8f5e-76a1bd238764&gdpr=&gdpr_pd=&gdpr_consent=&us_privacy=&expires=30">. <img src="https://csync.loopme.me/?pubid=9724&gdpr=&gdpr_consent=&redirect=https%3A%2F%2Fsync.inmobi.com%2Fsetuid%3FbidderID%3D109%26dspUserId%3D%7Bviewer_token%7D">. <img src="https://cs.admanmedia.com/sync/partner?redir=https%3A%2F%2Fsync.inmobi.com%2Fsetuid%3FbidderID%3D149%26dspUserId%3D%7B%24UID%7D">. <img src="https://sync.1rx.io/usersync2/inmobi&gdpr=&gdpr_consent=">. <img src="https://cm.g.doubleclick.net/pixel?google_hm=OqbkO_di3EqUaXhCJqCf&google_push=AXcoOmRWxGCrYRZ1Lv8jzLpwWHtnWnTbpCg3FeJsi8ufqmRY2Rid1pXOkQnkkxF1RTmbN-BaFp2JYehnH1Z8ywPb7PcKayai7OYo&a

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29790
Entropy (8bit):	7.985961528805937
Encrypted:	false
SSDEEP:	768:/4kcroaFU4f/A/0MufunRDP/tw+3z12LL5cnPR7eVoR:wB8aeiYjuYJ/+UCqR7ooR
MD5:	7522CD2D0E442BCF4D1E3A236C05210F
SHA1:	253CDCC98452060EC8EC5D66C8AB44957C327C19
SHA-256:	0D688F681AB3A1FD6BC13AFA404A0BA9E5A30E5F008D556CF48184B8FAE6A159
SHA-512:	47DA1D736199440A607CF6B83B37D9253FA9F401713B691AFEF0EC4B7727F69B48703870970C661E9F405989F1BFF33E881774F9B14AAB95593B3CCE9ACC789D
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Change-All-Caps-to-Lowercase-in-Excel-1-240x142.png
Preview:	.PNG........IHDR..............}.#..t%IDATx..w\|&Wy..=S.....w.^0.l..@....H.$.$....5@...B ..0.`.....wi..]wo.....J..Vu.<...#{v.3g....u.q}P2......o.o..7M.........~c.^...m.._..W.}...........@b`../..^.Z...w=}..._{9..6..w.k....u..7.7Xp..\|....b>.u.._.Y...?..YM0......q.f....fX.n..E(8RN..L.F.H 2...>..R........#W.-...9\|.......U..$a.$.....I@/..h.M)..`I0.A..$LA.T.6.FMA.TH[..#....i..j..$..`;...\|.5.Q0.......o.e.Y\|....E.,N..r,Z{[.....Gg=v...&VC.....U...M.<.....".....o.&d.:h...J.._..U.....a.R..%KB..d-H...E.........J_Q%a.%.........!:...cT..../.........8yh.o&..g....5...9vy.B.!..Bbh..;.......%o.f1....W.5..prx.".PWV...C.....zV.D\%.n..\Vf.:dS.u....2.@.6.O/..L...H.!M.4pI..b...S..J./bJHY......S...I..Y... ._..mW....].;../..J..Hj..y.N.....>u..-..D}gn.B...0.U......n..{...[......@)...K.\..~.o8rzq#....D.....^P.T{...,..2.8f..p...u..R@..^..........W.B.....s.PK.....mp.`..V...d..Y.F.=`.5..NS.X..l6.ln.-....*...xh..........Y.+....)..q....m>...RdvJ..^..5\|..,....#......

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29790
Entropy (8bit):	7.985961528805937
Encrypted:	false
SSDEEP:	768:/4kcroaFU4f/A/0MufunRDP/tw+3z12LL5cnPR7eVoR:wB8aeiYjuYJ/+UCqR7ooR
MD5:	7522CD2D0E442BCF4D1E3A236C05210F
SHA1:	253CDCC98452060EC8EC5D66C8AB44957C327C19
SHA-256:	0D688F681AB3A1FD6BC13AFA404A0BA9E5A30E5F008D556CF48184B8FAE6A159
SHA-512:	47DA1D736199440A607CF6B83B37D9253FA9F401713B691AFEF0EC4B7727F69B48703870970C661E9F405989F1BFF33E881774F9B14AAB95593B3CCE9ACC789D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............}.#..t%IDATx..w\|&Wy..=S.....w.^0.l..@....H.$.$....5@...B ..0.`.....wi..]wo.....J..Vu.<...#{v.3g....u.q}P2......o.o..7M.........~c.^...m.._..W.}...........@b`../..^.Z...w=}..._{9..6..w.k....u..7.7Xp..\|....b>.u.._.Y...?..YM0......q.f....fX.n..E(8RN..L.F.H 2...>..R........#W.-...9\|.......U..$a.$.....I@/..h.M)..`I0.A..$LA.T.6.FMA.TH[..#....i..j..$..`;...\|.5.Q0.......o.e.Y\|....E.,N..r,Z{[.....Gg=v...&VC.....U...M.<.....".....o.&d.:h...J.._..U.....a.R..%KB..d-H...E.........J_Q%a.%.........!:...cT..../.........8yh.o&..g....5...9vy.B.!..Bbh..;.......%o.f1....W.5..prx.".PWV...C.....zV.D\%.n..\Vf.:dS.u....2.@.6.O/..L...H.!M.4pI..b...S..J./bJHY......S...I..Y... ._..mW....].;../..J..Hj..y.N.....>u..-..D}gn.B...0.U......n..{...[......@)...K.\..~.o8rzq#....D.....^P.T{...,..2.8f..p...u..R@..^..........W.B.....s.PK.....mp.`..V...d..Y.F.=`.5..NS.X..l6.ln.-....*...xh..........Y.+....)..q....m>...RdvJ..^..5\|..,....#......

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29516
Entropy (8bit):	7.983965723540391
Encrypted:	false
SSDEEP:	768:YgFI96o9aflJB+3AUn5d3Dg8hWAUct8PdkrwCaQwIoiTLL:xTqAmzFDgTL+8PLCkIoc
MD5:	C86B3A8F21090E6DF7C92A7F4382CFA0
SHA1:	C7B4D026FF009AC359C54C48DA857907E0CD6516
SHA-256:	78FD56847AFEF6EAC5B40529EC34384F5158CF064C1766C77AE796F066311436
SHA-512:	89E614F82FA362C6FD58EDFB857AA14A44C048080099C3B4FF0CCABC17B8C2B115C63CDDE0D7B318BA873B76E7F7066405EFB9C137CF6B002ACAD4BE471DADFF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............}.#..s.IDATx..w...]...r.......m.E...'.q...H ..-...B.^..r/%..TRL.{.n.....j{o...y~....j...8..%.3g.3.\|.o.\|%.....C...{...W.....{..q...J.r.K....K..x.C..Y.~.bz..1..(.u..........q.(.l.k.T.`Y.l....HU~.;OK...n.Iff...1i.`.k3.. ....`.A.$.......e_p.8..A.H...M.@h...G.(..z..w.7>.q.....q...U.{g..?.A...<..3....8.w.g.`..W@......`..6,...G....BB......\._`..s....sb......$'H...z..!P.&..T.....]...KJ......$..;J.).Z.$..?.m...6........I...F...n..w....Y.-.K...$......!.....\p1$..2...^..j..E.w..a.H..,.7.x/yO...qPK&@i& s.l5.0s..g%.:....m..........).....?...?6\|C.U..w6.~..p..=.).r..bI.). ...^...e_....~.v..x".^}a......HO+.....M..V...tlMM.$.t$.].$.t......@4.R./y.4.K.2..R..ZD.c.g.KD..i......"L$.wT..0I.".....b.....bS.w-9u]GU.i...&.h..p.X,F<.@RTTEa.S.u.EQ.X..!.S....H."'...\.H2.......f.L...(.d.EQ.....4..LL:......)6.V5.K'H....W.......\|b...........R.......0M...3$3iV7.GSmW.`..<...=......]]...e%A.w..L&se..:......H...N..Kq.....d2.\|E..B.....

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 148 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2472
Entropy (8bit):	7.422669617464948
Encrypted:	false
SSDEEP:	48:u/o/a9CTnV7AZZ2sQdYa6NgDcRObMdgu6mqCXqMnZ41v54sU:u/o/ACholY63bgu6lMnZ4XK
MD5:	D6D96B7B230E818D591FCA1DFAE99455
SHA1:	6239563443DFCA7244D5178D10EE9AD3740C453C
SHA-256:	D797B2044A96FF1A97E3D1E5DA44BB9B941B543284084E905D19A183C8CA2D49
SHA-512:	12898452BB0F65ACDE14464359964691D7DA8BB1CE6E510FE4A68B586D303FF34C48499F510E3F03C7EC974BCEF3498F28A2E5D79D3FEBE60FEE382C04B761C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.............PLTE...---((((((((((((((((((((((((((((((DDD((((((:::(((((((((.....R((((((((((((111...DDDDDD((((((DDD...DDD((((((..Q((((((...((((((DDD.....R(((DDD(((DDDDDDDDD(((DDD(((..R(((DDD(((((((((---DDD(((..R..R(((.....R((((((..R(((...(((DDD..R........R......DDDDDD...DDD(((..R........R.....RDDD(((((((((DDD...DDD........R........RDDD(((..R(((..RDDD..RDDD...DDD.....R(((..R(((..RDDD...(((DDD........R...DDD..R..R..R..R.....R..R..R...DDD...DDDDDD..RDDDDDDDDD!.P.....Q...........R..R..R...........R.....R.....R(((..R\|.......R...(((%.M....VU....tRNS......f.\........S&...-.....5....$...;...e....v...qRH...2!..P.........LDB..............zxjE@75&..........XJJ:0#........tlWK=4/#...........tkda]VB&......{kJ9.ohf..2....IDATX...W.A...H..(..L. ... `.(.).""EE.RT.(...{/..G:.I.]./.................._........?Z.l&..G.'~..c!..l....=...J-,...n.-..J.......6.`.W.@%Q..n...F.\|.&I..V.W.A...}h./.\.....Q.WJ...f.3>&f.d..#.'%..m~}3.0>...\nA..RH..K..4...5K.n[Fj.h..(....

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	38715
Entropy (8bit):	4.53198678761757
Encrypted:	false
SSDEEP:	768:w9rgNd7z2CcPrhIbHPuLRwwGWdYhNFWQ9Aw33JZCkTrtSDrUS:w9rWd7XcP+vuLRwT8kTroDr7
MD5:	A34F554FCB862D27278678C3BEC5A00A
SHA1:	50004F14DEE5B70E6BC2B361F80BE5C13930B7BF
SHA-256:	9A373A2E3B3E8699F62C7D1B49CBC4C5B7CFC80ED5D989D21D7D085EDBC6D44A
SHA-512:	F8042108AD27B9300CE6F822B44ECB3A00CA3D87855F99D3E1D03E36D1604E64F4F45ED1DA2F8B8419793C8F1DD86C111622419C0B44E57C85FE0130495A8C35
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/creativeBlocks
Preview:	{"231750":true,"261165":true,"261167":true,"573450":true,"582548":true,"582549":true,"582550":true,"582551":true,"582552":true,"582599":true,"584858":true,"588634":true,"622955":true,"5185227":true,"5639483":true,"5639484":true,"5706980":true,"5707010":true,"5707021":true,"5742030":true,"5742041":true,"5742050":true,"5742059":true,"5742063":true,"5759613":true,"5759634":true,"5781680":true,"5781685":true,"5781695":true,"5873753":true,"6000231":true,"6000236":true,"6000241":true,"6017418":true,"6043989":true,"6043992":true,"6043995":true,"6060002":true,"6145708":true,"6153957":true,"6177059":true,"6177061":true,"6177066":true,"6196536":true,"6200077":true,"6226323":true,"6237662":true,"6238185":true,"6266029":true,"6266030":true,"6266031":true,"6278945":true,"6312645":true,"6318000":true,"6318005":true,"6318011":true,"6323417":true,"6323418":true,"6323421":true,"6323426":true,"6325391":true,"6347016":true,"6347018":true,"6351473":true,"6361249":true,"6369940":true,"6369942":true,"636994

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	292794
Entropy (8bit):	5.609723720914264
Encrypted:	false
SSDEEP:	6144:V4DQX5NzJtYLceF+qKXjXP9RIMyTs5Y0SS:uD+xJkNltS
MD5:	94F5FA70030D676E77FF72B161C96E9B
SHA1:	57649BC783769ABCE19C4593221164C8F25BB480
SHA-256:	88240ABCD960C8AD73E2163F7B6D9D0466E9A6FC5537C056C89DF7E57D96D6EA
SHA-512:	740EBCB226184E34E0119DB763BACC8D5F468E890659006A0E3A78F2C3536EAE35CE9D2939C6791E1ABDCEFD29896932452F96ECCFC74262359F797EF9E22600
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-8Y0K4MPJV5&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"c"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","thrivecart\\.com"],"tag_id":19},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SE

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=147ab427-54f7-35d3-4eae-03f1682a4d47&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8354)
Category:	downloaded
Size (bytes):	8539
Entropy (8bit):	5.051633363365418
Encrypted:	false
SSDEEP:	192:WzLY1jWBoYf0/AgJbgmAGCkHYp5odNd882EeANEjCWe7:WzLSWBoYfqAgJLrHe5odNd882EeANEjK
MD5:	4B16E073282E3D8BBE1093B7CDAAEA84
SHA1:	15BC43DF0109106319412A19D535478234E12ED6
SHA-256:	69FC7BCAFEE09477B13DBDA32D00410BC15A3FAEB3E890CC15FEF46D7C84D432
SHA-512:	E159061E064257C9A9EEABEF77EEB9AA98E5ABA6FB4AA2981F4D22D3EE5E46EB3DBF15A3659CC103B3E446991FA7DDAC8ED24E0D10DEF3030C5C72C4CA6199E7
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/autocomplete.min.js
Preview:	/!. jQuery UI Autocomplete 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"function"==typeof define&&define.amd?define(["jquery","./menu","./core"],e):e(jQuery)}(function(o){return o.widget("ui.autocomplete",{version:"1.12.1",defaultElement:"<input>",options:{appendTo:null,autoFocus:!1,delay:300,minLength:1,position:{my:"left top",at:"left bottom",collision:"none"},source:null,change:null,close:null,focus:null,open:null,response:null,search:null,select:null},requestIndex:0,pending:0,_create:function(){var i,s,n,e=this.element[0].nodeName.toLowerCase(),t="textarea"===e,e="input"===e;this.isMultiLine=t\|\|!e&&this._isContentEditable(this.element),this.valueMethod=this.element[t\|\|e?"val":"text"],this.isNewMenu=!0,this._addClass("ui-autocomplete-input"),this.element.attr("autocomplete","off"),this._on(this.element,{keydown:function(e){if(this.element.prop("readOnly"))s=

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 300x175, components 3
Category:	downloaded
Size (bytes):	34711
Entropy (8bit):	7.945393558509256
Encrypted:	false
SSDEEP:	768:LvlKGt//WYdcMq12E98hJ8qDaBQYuSwWJ9nYWwV6e/:Lvlx//ROMq12a3phunWJ9YP/
MD5:	1717C7EC93A90CE5090CE12FDC063B2E
SHA1:	A3DD6D021DB4EB8BBCC5D42D470152A2A3188A8A
SHA-256:	ACFA52A33F860BAE40C3A8C1685C28E3A9E2706F0244B6881320A817663E7F7D
SHA-512:	7F5F1D0F947B22EF7437C2E740F2CFA6332890B945E20EBD0BB04A041ED5946FEFFE3ABE857329B527C54CE06486667D56C1083264A075EB133EECA4BCD1E6C5
Malicious:	false
Reputation:	low
URL:	https://images.mediago.io/ML/1dc59ba9d9073497010293a464f4ba32__scv1__300x175.png
Preview:	................................................................................................................................................,.."........................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz......................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..P..Z......H$_.".n.=^..^,.Q.Y........R8.....g..7rhSK.....Q...W>$......)S..SP.f\|..r.f....oO.C.>...T....i.%...#..+..9b{.s.+..Qq.Im...8.?.HS.V....Y/.wB.......N...a.0.]N....2`q.. ....s..Z=.O.....MP.......n........[.M..Xr...eh...y...]6..$owU..Y..yx..-.QF*Z...3k1..^xv.F..(.).d...).).5.o...o._i.f...r..-ni.'&h.bFi.d.=.tU..._G..v..w...7...O....]...eow.O,M..I.Jm.,."X.....$...Fk.Q.o/.....k....

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	142
Entropy (8bit):	5.585998045662056
Encrypted:	false
SSDEEP:	3:YW/iGWhPuXL9chSg4V0x7G70KszYxULcKNIcqG29LuEEhqJO8P1Y:YWwqGie7GhE3+cz1thMNY
MD5:	BCAB2FDA10C5D6DA41396392052FEEB1
SHA1:	9BFA2A699BBDBE02330009D6D1F94B54CCC20B6B
SHA-256:	23FA1A7DCD863D1FC1F5F82FA0AAC1ABC872F1440225D0B72992AA3D61E286EB
SHA-512:	B11E000ABCBA53E360EB6C133494BDBB69223C13DEF08EF7BC39BE13668DFDA470C38FA8CCDE0446AD3849994FE78BA306135E742077D5E0916C2993C7C76707
Malicious:	false
Reputation:	low
URL:	https://pdmp.papi-public.us-east-1.tagger.opecloud.com/v1/targeting?url=https%3A%2F%2Fearnandexcel.com%2Fhttps%3A%2Fearnandexcel.com%2Fcourse-category%2Faccounting%2F%3Ftutor-course-filter-category%3D16698&fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f&tenant=b4
Preview:	{"s":"4Ac3DxpdimFK21JIhm/h5YGUAtvsVYosDwHYXUOCin9lpp8/xFTFbaZG948=","t":"OIkyyl0TqanpjsEOa2WCJwho6yOFWAWSX8AWT37aaaC0QA==","kid":2,"ttl_s":75}

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35922)
Category:	downloaded
Size (bytes):	97316
Entropy (8bit):	5.580725148345421
Encrypted:	false
SSDEEP:	1536:oGRO6eJLSvQlapwxWKQwrFBAq5UhIyqkKmz4pI6fGpC6sH063/hvZewV0W:Y6ekaQw5+P1z4pI6fGpC6sH063/hvZem
MD5:	49E60D2937CE5CA826949089F6D30BA0
SHA1:	2EA09A0F4D1B3DC9AC7DCB638EF6D375C17C3FE6
SHA-256:	CB25E5C0165E465058C507FB1445413FE076AE018326800B269997BABF83E245
SHA-512:	8E1B43674220B698921331A8C865CBD39710E208F2B8ED68B04513F0224C1E82DC01CA00EB8A1F97999102AA21CF8C0EEBF1F5827E1EDFB0C4AB82878EA6EEA9
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=ea;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2356), with no line terminators
Category:	downloaded
Size (bytes):	2356
Entropy (8bit):	5.659321978221673
Encrypted:	false
SSDEEP:	48:CF8O38aQhsP8agrsGJdTgjN2mAeSsT77+C8t5nNa0BBTjq:CF8Y8aQhsP83syMN2xg7R8tW0q
MD5:	EC4A7103064D42BB387E07A3E4B2EF18
SHA1:	9A89D67E5825808F997A047E471F5236D1BB474E
SHA-256:	674A1FB06A23F9E0D22FADDCC8C03475683076DF234F7EBC5610A7AD082C3C8D
SHA-512:	7BF498968663094FCD3D5D5392723544ACEB207C910FAC353B5E616FD0CADFBE199081BC3B29D480BE6F886D16D9E37153EF045C52FA26CABD1DBFEDF04146D0
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=8224538&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=
Preview:	PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/712188.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://bcp.crwdcntrl.net/map/c=14701/tp=MTAI/tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7/gdpr=0/gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3203&partner_device_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=[PLACE YOUR PIGGYBACK COOKIES HERE]&gdpr=0&gdpr_consent=');P

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 193 x 228, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	7.91404381500215
Encrypted:	false
SSDEEP:	96:2OG7WV0Q64aAFYrUw1OZYbCW2bAg3txWcLZhOCivWTTmQ2UeBHUBp:g7WOQ65A+rZkZu2cg/1ZhOCwWTq12
MD5:	868B4D4397961A21CFBF9DCF25D29CF4
SHA1:	33D0EDCD2AEBD6DA53B98D4C5C23601728605C46
SHA-256:	17448CF50455859A4591B8566AE9334D4A57AD4060B891B8B797A219DBE84644
SHA-512:	5D417DC89DBD95BFE4002F4D403C1A28F7DAEB47F94F5947413405B898E40AC2AD66B319C7A4580848DB33F3B2155DACD87F088FAA574495ADB2944566320B4C
Malicious:	false
Reputation:	low
URL:	https://support.content.office.net/en-us/media/3a2d08e3-420b-4022-bee7-f1fb48d7901b.png
Preview:	.PNG........IHDR.............!#@.....sRGB.........gAMA......a.....pHYs...........k.....tEXtSoftware.Paint.NET v3.5.100.r.....IDATx^.......0p....I....X/p..AP.jR1..L!e.......((.K..RV/".HQ.Px)b...Q.q../XB."..e.cY......;;......S.5=...?....N..2`...s.q.!....>...z..i....s....O.>....k. .C.D.y.f5l.0g.>...!....\|......]}....U.w...=..G!Dp..1-.....v.r........}O.8...."@..dA.E@H.P..z......}.W..ub....81o.O.....?zi6..$U.'..1~p..5...8k.l.J5.;7:k.@..3....G...H..T)D.......P..z(.b=...;.$+z$.'...%d..Y.H....}M0..q...\....O......... .GO............8m....Sj..5.n.u....).:_:.V.=..g.R.....g...._...f.P..u..[^...M.S]y....8..9f..jw.^g......p]....w.U....N./.~.VlxK.......z..Jzl...........h.}#...N.[. .1a.-..y...?..>o.s..p..S.w.rb'..o.[2.2..!s.,.nfN..N.....t<2)."..........%.0...o}[..Wr..J[..C...O.<.:g....Lp.dt..;.:[..................Q..._.....?}..#.\|S/....qb.$7"H[.@J....H/.....!! .....E..D...d..;.?j/...a.w..W.u.D.._....}..-......!..W.....u%.K...A/...a:..y...hK...D.pm

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 720, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1162805
Entropy (8bit):	7.9448762704303455
Encrypted:	false
SSDEEP:	24576:NDCWOVJjk06sDN4FnTD7fttRds+hKIESVJEB9BHxLWD/Y4JSly:NsJjpeJv7fzLZhKJSUBRLWDd
MD5:	0279CF6E2348E2EBCE3FCA57D219C3F8
SHA1:	453FDC527BBB650C30ED4BE0754F81F99D3EDFD2
SHA-256:	952D2C420616C4CDBF85CBE7DDE65F2D36A15FDF48226BCD85FAA2E809713652
SHA-512:	1ABACCE48BE1F6C847F2290BF98307F0BC8B14F39C226B38E43472E9FC27481A9F7453C0E44B819EB62B2A8FEE547BD162E0280A023C356CF121F3C2249FE070
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/Price-banner-Earn-and-Excel.png
Preview:	.PNG........IHDR..............}.V...NeXIfMM..................>...........F.(.............................................g....iDOT...........h...(...h...h..^\|Y....@.IDATx..G......`...z3......3..^.0...0....L5.T].RI%.I,z..i.Lz2i.V.M&.0..6....>^D...3..9.~.EdRJJ...[\\..w.....9.~..n...g....}..wH.v[..s..o.F...oi..6.s._.m..e.Le......g.U?.o.....G...w.;.y.:....O..g...g..-.m~.._..a..f[X.)..);...^....G......M.w7...O..mf...i..n.4....S...r.S.O.O..?U..........es\..0m.v..........T/..R....D]w3..a.,......."?.h...D..O...a..6.v([RY..ui[.....;.....M..)\.lB.z>a.r.;..L......?5..-.kz.k..M............??.d.....E;..'&.j-....K..X..[.~.m....a..../7o.+..k..T.m..v..m{..M.7.x)...Vk.........f...;.....G.-=..~......?.w..njf....'p..&.?.\|...l}o.............]\|.o..E.?.E.=e.......U\|.DxJ.0~....;....\|.5."Oa...h#.i.L{K....y.3<.p....T...Qns...7.n:......c..'..w_n..ly..hW.Y.7.....MW.w.m^i.S;E....B.K;.y.......hs....\|...2.Ou....&n...#.....).xv..Us....je.j.....V.N.\.~.^O

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	10760
Entropy (8bit):	4.624388323602215
Encrypted:	false
SSDEEP:	192:xy1ZfCKf1yA0taJATuPWJKUOG83hYYJ67G/WSRQ9lC+skiE7RPSzuaob4y1ZvCCr:AZVfvJYJKavYSyVmZDfFJ+JSoRAr
MD5:	177D8F4FE4A521258FF58FB8047F6A39
SHA1:	FC9EB8A3C7FB52C8899CC109D63A714EA71858BA
SHA-256:	4F51A29BA7C884C2F730336B02987FF796BB8BA0D72FBDC15A11AD7CCBF90B40
SHA-512:	60E9799C06936AE81CE0BF5F638F89CF323049C52E4F2E33B9A10A1EC582A06175B10D009B7D2612987A8F2A7A54D2BDE44EC56FAAED8F72CED19FA7438DF9DA
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/page?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F
Preview:	{"page":{"bookmarkCount":1,"categories":[{"name":null,"description":null}],"dbId":"4a0d234a-a41e-428a-8b50-810331596236","description":"Are you looking to enhance the clarity and readability of your Excel charts? One powerful tool at your disposal is the legend feature in Excel. Legends provide a visual guide that helps viewers interpret the various data series or categories presented in your charts. Whether you are a data analyst, a business professional, or a student, understanding how to add a legend in Excel is a valuable skill that can elevate your data visualization and make your charts more impactful. In this comprehensive guide, we will walk you through the step-by-step process of adding a legend to your Excel charts, ensuring that you have the knowledge and expertise to create visually appealing and informative charts. From understanding the importance of legends to customizing their appearance, we will cover all the essential aspects to help you master this essential Excel fe

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MTA3MjA4MDY2MTk3OTc0NjcyMjI5MA%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35965)
Category:	downloaded
Size (bytes):	36148
Entropy (8bit):	5.313324616218112
Encrypted:	false
SSDEEP:	768:bRXXgeAYaCTydYicpah5LXNtUOZsTEzIhuuLpO+euiYWoa:b1XgeAYaCTydYicpahBUOZRLuiYWoa
MD5:	94347D976158326E48AFC6475778DE7B
SHA1:	02CEE0D97E46C9A2B9263B8B86D0334333C33E45
SHA-256:	60E04DCB9483E44801771AAB65DF07BFA3FABBAF9A4386FD05F568D0E4D8710D
SHA-512:	E3E127E9CAB90B261F8A5846FCCBF1E5A11DD1DD9458F11DC2D09F74B815FD0293603FD2F7A465EDB4D11C0586B5A37F661DE8C3409E4EF300AB262D911E090F
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/datepicker.min.js
Preview:	/!. jQuery UI Datepicker 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. */.!function(e){"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(M){var r;function e(){this._curInst=null,this._keyEvent=!1,this._disabledInputs=[],this._datepickerShowing=!1,this._inDialog=!1,this._mainDivId="ui-datepicker-div",this._inlineClass="ui-datepicker-inline",this._appendClass="ui-datepicker-append",this._triggerClass="ui-datepicker-trigger",this._dialogClass="ui-datepicker-dialog",this._disableClass="ui-datepicker-disabled",this._unselectableClass="ui-datepicker-unselectable",this._currentClass="ui-datepicker-current-day",this._dayOverClass="ui-datepicker-days-cell-over",this.regional=[],this.regional[""]={closeText:"Done",prevText:"Prev",nextText:"Next",currentText:"Today",monthNames:["January","February","March","April","May","June","July","August","Septembe

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64746)
Category:	downloaded
Size (bytes):	461624
Entropy (8bit):	5.509402401846826
Encrypted:	false
SSDEEP:	6144:qAKaxwb0YaG0S0x74Zc069AFsBwg64dQ9vGUFZ6t1qusdIOMBDBu1vqCrTXe:NTO4/S0x7l9whJkt1qpIvBu1vqmu
MD5:	6E8BFCBC0EDCBC32E851E36DE82AF2E9
SHA1:	1F8592DE26C264D2653DB6EBABF5EE6F737655D7
SHA-256:	64A6292AA44AC001A7C6026FF4E1A84752C43BB8BACECC61CF0CB1FEC6D2A98E
SHA-512:	B1C2F60FAF439EF1DF57DFD07794A9369A5C16D9CCA1D4ECD289388CD53225F0E8F2D3146526105B98C90F65C967A0D1D97F98D88D4BB28189E685D6511D4527
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202404220101/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. .*/ .var ba,ca,ja,ka,la,ma,oa,na,ta,ya,Ha,Ja,Ma,Oa,Qa,Va,Ua,Xa,Ya,Za,ab,bb,db,eb,fb,hb,jb,kb,lb,pb,qb,tb,vb,xb,Ab,Bb,Gb,Ib,Hb,Jb,Kb,Cb,Lb,Mb,Nb,Qb,Sb,Ub,Vb,Wb,Yb,bc,ic,kc,lc,nc,pc,rc,sc,uc,wc,xc,Bc,Dc,Ec,Fc,Oc,Pc,Vc

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
URL:	https://match.sharethrough.com/sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LVFMWCG3-S-CYEQ
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336)
Category:	downloaded
Size (bytes):	337
Entropy (8bit):	4.788588326626593
Encrypted:	false
SSDEEP:	6:PVR+8QSnJzOkRTR+8QXlOJbQTR+8QCAqJv:z+HSdP+HXau+HCFv
MD5:	C39482EA0D3E11E7A350E298EBA0F5AB
SHA1:	6844C07DE227913CAE4656B5322AB38C8CCD0DAA
SHA-256:	E51C01E9ADDE255CF2807C736AAF4782983A9A8623023D989544D79FA1BD3B65
SHA-512:	4E5322A83295E212607B21E7344BD04F1A36802B57A32683FF73FDC13FE3EBA32A57362310FF4D2E5FCE1040501ED37D5FD5BE7637368FCF71C5AA08A5B12FE5
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css
Preview:	@charset "UTF-8";@font-face{font-family:Gordita;src:url(Gordita-Regular.ttf) format('truetype');font-style:normal}@font-face{font-family:Gordita;src:url(Gordita-Medium.ttf) format('truetype');font-style:normal;font-weight:500}@font-face{font-family:Gordita;src:url(Gordita-Bold.ttf) format('truetype');font-style:normal;font-weight:700}.

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440)
Category:	downloaded
Size (bytes):	310652
Entropy (8bit):	5.285723126524862
Encrypted:	false
SSDEEP:	6144:z8PB32dS5k4DKPp0yrJkN5ctYJm3YlfcNZ:z8PWS5k4DKPRrSNKt2fcP
MD5:	2972FFD0C9787E6772A94009915BBAE7
SHA1:	1BB1AA17F868127D84E7C8EBA5C67D467B528742
SHA-256:	115DD9A89CD382D6FAC999147CDB983D20BFB54BC98A491B966A52B7CAF9D7E8
SHA-512:	05E25A8117A069A429465E75C8B2EBF65289DE87DAE3E7CE2AAA3AF0711C0CFEA126DD9D5FF9683918154449AAFB7EAB893FD51308E9664913F2B3560BDA34ED
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! @amzn/apswebapstaglibrary - web-client-bundle - v24.418.2211 - 2024-04-18 22:11:24 /.!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&(t[n]=e[n])},t(e,n)};function e(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function o(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(o.prototype=n.prototype,new o)}var n=function(){return n=Object.assign\|\|function(t){for(var e,n=1,o=arguments.length;n<o;n++)for(var r in e=arguments[n])Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r]);return t},n.apply(this,arguments)};function o(t,e,n,o){var r,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,n,o);else for(var c=t.length-1

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6482), with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=NjFlNDNmODYxZTE3OTc0ODkwMjFjZjRkMTZkODkwNTNlZWE2ZjE4Yg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	5.483723505091279
Encrypted:	false
SSDEEP:	3:duGbvHEhQBNLEs1jNP5sM+H8hqA5QQrY:dus/1hxtqwqV4Y
MD5:	154668975BDBF75F83B01CB48ECCB1E1
SHA1:	500ADF81DFE2874D3ADFF707288B07FE279131C7
SHA-256:	AE2045A6B0C596BBBAA8F3CEBA6F1493FF4812D98385FE991EB06AAF1000D295
SHA-512:	499BB2F0D8949A67E0344A59650992D530497503A203EACD357CA485C0F3181117DA2EC8FB7B9E8DEB9A593F347F2501DC7128CC131FADA5D6F3696B9E5B05FE
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/sk?domain=earnandexcel.com
Preview:	V1:KKcbCiVfEgsfdrMV:R+W/OS9eShmwEgTxyDEJvn/zBeyW1Jc/Qj1Tg0dx4dlDrQmZbRYiXyicRiDhsceelqZejLcHANBY5w==

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	672
Entropy (8bit):	4.88738061447812
Encrypted:	false
SSDEEP:	12:hYYLVKwFHCIaI1ByLc2VfTgDAM7QBDM75DM7hkgaPAxRW09eXM7yarBBxNtsbRz+:hYeU4iIaI1UDrCQB050AARW09dDrBnzj
MD5:	67B95267FEC9BF5EE45786BEF9D2B01A
SHA1:	346659BA1E68F661B9A0D897D15B9B38A3C1331D
SHA-256:	6501140033C3BB20DA4B5AC73C90F687BA8A2053C4BA37C4B6F5275166DB7FA6
SHA-512:	F5BECF4F2345D6E382665F700AFB5558AAA3CFD6B7A1336FA0592C303607AAD95FD724E8A3C5D52BB5FD37A8CB60AF31D20582C7B3FC5FEBC8BF9BB0F93A9C3E
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bc2dc1e1-c043-4115-b003-10863bafdb69&u_sclid=23642ee4-9521-4f89-8751-3f4f3aa963a9
Preview:	<!DOCTYPE html>.<html>.<head>. <script>. (function(win, doc, sdk_url){. if(win.snaptr) return;. var tr=win.snaptr=function(){. tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments);. };. tr.queue = [];. var s='script';. var new_script_section=doc.createElement(s);. new_script_section.async=!0;. new_script_section.src=sdk_url;. var insert_pos=doc.getElementsByTagName(s)[0];. insert_pos.parentNode.insertBefore(new_script_section, insert_pos);. })(window, document, 'https://sc-static.net/scevent.min.js');. snaptr('cm', { 'sync_modes': [140] });. </script>.</head>.</html>.

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2314)
Category:	downloaded
Size (bytes):	4043
Entropy (8bit):	5.403398189872564
Encrypted:	false
SSDEEP:	96:NY7YNYMj8UazlKarsW1SPKTBxj6kDxx1vlsyS159O84+SGyAZTxSf0v:686BbldnMSTflDBvQB4+PXVxScv
MD5:	DB68CE1DB64EC5895355EF8870D44DFF
SHA1:	39CABE6D5EDDC7A76B282E8AE6D026E26B5FF611
SHA-256:	36BE4F9EEE63AF832548F73B3116ED38059E64867B036714A0A272B6406AC3F8
SHA-512:	25763A4EF87441C49E9DC13EFA977473363715B4BE81C38FD74FF4E31220A0F729B5D5D8DAEB65B0160C6B18CCB540ADB26760A8E45608B8833443D6D14307FF
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .var g={};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function k(a){return-1===a.toString().indexOf("`")}const l=k(a=>a``)\|\|k(a=>a`\0`)\|\|k(a=>a`\n`)\|\|k(a=>a`\u0000`),m=h``&&h`\0`&&h`\n`&&h`\u0000`;var n;var q=class{constructor(a){if(p!==p)throw Error("TrustedResourceUrl is not meant to be built directly");this.j=a}toString(){return this.j+""}},p={},r=function(a){if(void 0===n){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}n=b}a=(b=n)?b.createScriptURL(a):a;return new q(a)};var t=class{constructor(a){if(g!==g)throw Error("Bad secret");this.l=a}toString(){return this.l}};new t("about:blank");new t("about:invalid#zClosurez");const u=[];var v=a=>{console.warn(`A

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	30692
Entropy (8bit):	7.981349781017551
Encrypted:	false
SSDEEP:	768:O003aalL0DejKkkIq4fqq3TYNhgN3tN4rM+Ae0g:XDrUqMTKgN3/oMBg
MD5:	70BC9B842F9C2877F7E606DDA8C8865D
SHA1:	E25E102824BB84293FACB1663D416E23B285CCE6
SHA-256:	42B92FEBD16C1931533E7C44B0B0A6CF1DA026E05860A6729A32020439B29C6E
SHA-512:	25724EDB4E966191F787FD61F5259B9D6E4B85311A5DCADDF83F69FF9DEC2E9D611CC535B8C59394C1617E243ABB3838F43B390CBB35219DCFBD2ECF00A41BFC
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-240x142.png
Preview:	.PNG........IHDR..............}.#..w.IDATx..w.$gu...;...a'l.A.UDB..@$....l.....?g.0...1..$.. .....qvvr...+}.Tw....j.D.{...............6X.{.x.<vb/.e...n.K....W..C.'...UH...c,.,..Wd...].....:HE.......o\|.......?...eY~AD....;=...\...D.eY~.D.....^..MoC.. ,?.eY..%..G$Q.E.v..k_t\|....W!...S].e.Y.X.%.S...}...u..G..CV..+_.+.-z..#..}_.0..,..3.......V&..\|.../F.A.4w!K2he........Q.J.N.-....OtY..g(....(.\.j..b...GO.gAD..zdzY.eY~......eY~.}.... ..J...\.e.E.p{....E.Z..\|......,./......6_.H.7........,J.c.\........Y~..,?G.k..8\.~....0<?Y..g..6.$./H...2..y\|..-..........G.\D3..'.,.n..".e.?......T!..D..9E.D.....Q..^..../y.H...W.-....i..b..X.....Gq....r..Q..LDA..Q%.E.q.N...V.\^A/,.....'.J...s...}..3#...#.O...4.8..... .H2QW..20,.I......8d....ME.P.+h..a......f..k...,.....>...aUC.79d.iA.zY~...Kv.s..E.g. .2.IA.e.%..DA.);.8.D]A.<a.=....r........y..\|.~L3t>~....yY~.....F"...Ie6....U.- ...A..z.s....?.e*.,!n....5lhY.SVI.s<9....=...eY.".R..Z.d.(..,.".>..uM=.t

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3201)
Category:	downloaded
Size (bytes):	49869
Entropy (8bit):	4.945543589518102
Encrypted:	false
SSDEEP:	768:Sp/3rjxqaw8Jah8oSXIaPYuQlRNQjEwYNaqWrUidgRjCL0YB1cSFqKj5LTUKLnhn:raHRhnZZfx
MD5:	126C9F6515DA47DAE9FCFD49DC3EA7D3
SHA1:	4F02B0ECFABD78CC0E9D9A7E79AAF257E9EF1E78
SHA-256:	EC9B0FB6087E2E7293D66596BF7A019575BB3A0BC70BBB50E55E608C21DFC3CB
SHA-512:	8A1551EFA30D689EA9DFCB1ED0F47929A14B861DA8B26296CCAEADB5B91D0EA935C37618DE3A90AF9E474AF90B1465BE5AF9548C4C8BACCB83F3605E487BCCDE
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/tutor-lms-elementor-addons/assets/js/slick.min.js
Preview:	! function(i) { "use strict"; "function" == typeof define && define.amd ? define(["jquery"], i) : "undefined" != typeof exports ? module.exports = i(require("jquery")) : i(jQuery) }(function(i) { "use strict"; var e = window.Slick \|\| {};. (e = function() { var e = 0; return function(t, o) { var s, n = this;. n.defaults = { accessibility: !0, adaptiveHeight: !1, appendArrows: i(t), appendDots: i(t), arrows: !0, asNavFor: null, prevArrow: '<button class="slick-prev" aria-label="Previous" type="button">Previous</button>', nextArrow: '<button class="slick-next" aria-label="Next" type="button">Next</button>', autoplay: !1, autoplaySpeed: 3e3, centerMode: !1, centerPadding: "50px", cssEase: "ease", customPaging: function(e, t) { return i('<button type="button" />').text(t + 1) }, dots: !1, dotsClass: "slick-dots", draggable: !0, easing: "linear", edgeFriction: .35, fade: !1, focusOnSelect: !1, focusOnChange: !1, infinite: !0, initialSlide: 0, lazyLoad: "ondemand", mobileFirst:

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537116306&val=R35CAB_1148B1422_6EA26C92
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13766)
Category:	downloaded
Size (bytes):	13805
Entropy (8bit):	4.575451966573203
Encrypted:	false
SSDEEP:	192:n0QO/bxqyhZRRJHh5DXAZSj08ZxZZxPRxI2:OnXAZSFw2
MD5:	A7C548CD7B57461962FE6655C52ED84F
SHA1:	87B74401AE850FE62F520BEF66B1E3750313E4BF
SHA-256:	39849BBF85DAC8D094EA97225410408A1ADD1709B7E6B38B3BCF389598B17293
SHA-512:	F93CD914D12578F136EDDEEC68CB09E643091A6C03D3333BC0013EC121D73AAEA317FD3CD677FE7ECA4E2BC94695C5E56849871397FEB9911C194A6F124FFDFA
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/elementor/assets/css/frontend-legacy.min.css
Preview:	/! elementor - v3.6.0 - 21-03-2022 /..elementor-bc-flex-widget .elementor-section-content-top>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:start;-ms-flex-align:start;align-items:flex-start}.elementor-bc-flex-widget .elementor-section-content-middle>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:center;-ms-flex-align:center;align-items:center}.elementor-bc-flex-widget .elementor-section-content-bottom>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:end;-ms-flex-align:end;align-items:flex-end}.elementor-column-gap-narrow>.elementor-row>.elementor-column>.elementor-element-populated>.elementor-widget-wrap{padding:5px}.elementor-column-gap-default>.elementor-row>.elementor-column>.elementor-element-populated>.elementor-widget-wrap{padding:10px}.elementor-column-gap-extended>.elementor-row>.elementor-column>.elementor-element-populated>.elementor

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	3.9297954712258907
Encrypted:	false
SSDEEP:	3:YWQRAA2neiI:YWQmveiI
MD5:	D31320B41A6A283815FB2F490B9F227F
SHA1:	E21F339A128F97ED4F85AA079661CEC810089DC6
SHA-256:	435B1ECE4A55F4F8D06866B32C1AEE3CC4661EB905265894795F15A57BF1B33D
SHA-512:	F6AEAB24B8BE1A17B061DFBD89EF67E669E9A57B4A39E6051467A4974C854E87DACDBCDAC9F4F129C5EDB3739BBE06D27E0D94528D8C6229FDC3848A43BCB047
Malicious:	false
Reputation:	low
Preview:	{"succeeded":false,"error":"Cookied User"}

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2090), with no line terminators
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	5.24163333269938
Encrypted:	false
SSDEEP:	48:b+ovc0Qm9qjgB+cafqM2fA7nBOCRbHDTAw0fsFrKP8f:Scce9qjXsbA7nBOmbHf0fsFi8f
MD5:	6D29CF1B6C1E71DC1A988B86F5D2102F
SHA1:	5078FFFD279F1C4160F4715AF1A8E5203A5C6D53
SHA-256:	ED77FC2CBBCF4CD716FBF7F4ACE9C8D1612BF6140A5996E4F38F8CAA142EDCB8
SHA-512:	6A1A197872278A2019EF15D120E9BAA2A4DA61CFFC710005839C6AC76EEF4B5285E75613DFECFC6A4E678F198AB5EA5BA89F6F344EBAC41B303DE832495E8311
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.min.js
Preview:	!function(){if(window.TVE_Dash=window.TVE_Dash\|\|{},!e\|\|!e.$j){var a=window.$,e={$j:jQuery.noConflict()};a&&(window.$=a)}!function(a){TVE_Dash.ajax_sent=!1;var t={},s={};TVE_Dash.add_load_item=function(e,n,o){var r;if("function"!=typeof o&&(o=a.noop),TVE_Dash.ajax_sent){var i={},_={};return i[e]=n,_[e]=o,this.send_ajax(i,_),!0}return n?(t[e]&&"function"==typeof(null===(r=console)\|\|void 0===r?void 0:r.warn)&&console.warn(e+" ajax action already defined"),t[e]=n,s[e]=o,!0):(console.error&&console.error("missing ajax data"),!1)},TVE_Dash.ajax_load_css=function(e){a.each(e,(function(e,t){a("link#"+(e+="-css")).length\|\|a('<link rel="stylesheet" id="'+e+'" type="text/css" href="'+t+'"/>').appendTo("head")}))},TVE_Dash.ajax_load_js=function(e){var t=document.body;a.each(e,(function(s,n){if(-1!==s.indexOf("_before"))return!0;var o=document.createElement("script");e[s+"_before"]&&a('<script type="text/javascript">'+e[s+"_before"]+"<\/script>").after(t.lastChild),s&&(o.id=s+"-script"),o.src=n,t.a

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFZGTVdDRzMtUy1DWUVR&google_push=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.200601260429725
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM09/Woz59tVp:6v/lhPfZM09tzjTp
MD5:	C4A2B870062C2BB98C500BC1526C0498
SHA1:	528666CCDB12997358077BC8FCDBFB6B825C7788
SHA-256:	2AA4FA20701CDD6D8D56046069001186B5267E3EE7D0EF618AD2F4A683723E11
SHA-512:	2F1A3ABCD12125F7EF18D61A960901C0FD6F82DD02EA2B8041859E6D5F0A7F08DB17CC110DC6D8A3F7D0D1BA790C4BCCA2506D3C60EDFEB5CB29433E9F4F762E
Malicious:	false
Reputation:	low
URL:	https://a.audrte.com/p
Preview:	.PNG........IHDR....................IDATx.c`...............IEND.B`.

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1126
Entropy (8bit):	5.418564249260416
Encrypted:	false
SSDEEP:	12:kxPw9uRFNhzPi3hM/oQfCYKWXUhO+EHEdQ3+sUZ1v2o2cqEcG+l+sUD/DlDWDOOK:kC9uZhbixMnKWk4Q6ccEcGuml7O7bWKo
MD5:	4C57294BA40C4ACC65A17299BC7D1661
SHA1:	A92138B8402CD8A6328A2910D93F8EB653F9FB97
SHA-256:	B168BF7621D6E600806D7F1BC6BDD1291D752BFDC434608117A9E6CB28E21BBD
SHA-512:	0F738F059D43975E6E78662008BE9B3A19DA7696677C198FB50FD8448FCB87B8FE07C91AF2E19387794252B2D8F5F0217032D4A59820B0272C15F17E4A089D4F
Malicious:	false
Reputation:	low
URL:	https://ssbsync.smartadserver.com/api/sync?callerId=8
Preview:	<html><head></head><body><img src="//exchange.mediavine.com/usersync/redirect?partner=smartmedia&partnerId=5382283141381983659&gdpr=0&gdpr_consent=" />.<img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fdcm%3Fpid%3Df7a5db36-1d5c-4c26-81b6-b4d0807faffb%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent=" />.<img src="https://a.audrte.com/get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent=" />.<img src="https://visitor.omnitagjs.com/visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=0&gdpr_consent=" />.<img src="https://dis.criteo.com/dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.c

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/416707819?random=1714073133449&cv=11&fst=1714073133449&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&hn=www.googleadservices.com&frm=0&tiba=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=1676511191.1714073129&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1284
Entropy (8bit):	4.944665015403759
Encrypted:	false
SSDEEP:	24:4WYgwaGcMUYxxgFP5Gt24hJyCtByYVDiSYRe5V0/KUnA4CVn82:48VtYeAB8YPUe5qS4CN
MD5:	B2C61756EA779224B601B9769546188B
SHA1:	CF2240AADACC795FE95DE23434373242ACE5E48F
SHA-256:	C1293DA48E1B2AF732AD29577374B26A63BEB097B44A3C9D011C90C446691142
SHA-512:	FCBFF22301CED9C5F8EAF20D1A48CF58A5A96A258C558953EB0C3ADA37B17D34F7E16BEE0DF3309A2F133AE816C0AE6CE4D7AFD85D0D7B79020E4658A6A52B8D
Malicious:	false
Reputation:	low
URL:	https://sda.fyi/topics/
Preview:	.<!DOCTYPE html>.<html>. <head>. <meta http-equiv="origin-trial" content="Ajm9ltDXBX1372/v/oN7k0jqTZ9U9xKCjugeZWjMJDxrF65GjE76aL1JPv0uneNh3TIQYGW54bTNM0bLyF1FtggAAABWeyJvcmlnaW4iOiJodHRwczovL3NkYS5meWk6NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY2MTI5OTE5OX0=">. </head>. <body>. <script>. (function() { . if (!('browsingTopics' in document && document.featurePolicy.allowsFeature('browsing-topics'))) {. window.parent.postMessage(JSON.stringify({ log: 'Topics feature not enabled', message: 'topicsLog'}), '');. return. }.. document.browsingTopics(). .then(function(topics) {. if (!topics \|\| !topics.length) {. window.parent.postMessage(JSON.stringify({ log: 'No topics returned', message: 'topicsLog'}), '');. return. }.. window.parent.postMessage(JSON.stringify

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3245
Entropy (8bit):	4.951746735226564
Encrypted:	false
SSDEEP:	48:Yui6RR+1R5IWvYCZCfbaQIJSJEhL3SsqVTmKigjYLQU+uKi6Jw:n2dwQS0q5t8MbO
MD5:	5DFD02CD48A37F5496C3B73AB7C12009
SHA1:	DEB9DEE1A3EABC51AFB40BA2D871F56E3903AFCC
SHA-256:	DDC0506ACE28040C4627D77507F3765B9611803F3750E001235EE79109D113D9
SHA-512:	81AD7C69BB82EA58FA19E3B2907E0408ED1A60F68BC3FB0920A6E29C8D4CB010BB1412B659EAB09C1882860DEA3FD016D00B43C7E069FE672448AA5F8890FFDF
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/sites/a93bd662-05a1-4ce7-81ce-4c67bccef190/config
Preview:	{"id":"a93bd662-05a1-4ce7-81ce-4c67bccef190","dbId":"a93bd662-05a1-4ce7-81ce-4c67bccef190","name":"Earn and Excel","domains":["earnandexcel.com"],"domainObjects":[{"domain":"earnandexcel.com","isVerified":true}],"googleAnalyticsId":"278709754","growEnabled":true,"hasPages":true,"deletedAt":null,"siteConfig":{"actionColor":"","alignment":"right","bookmarkImportCtaEnabled":false,"bookmarkImportCtaDeadline":null,"bookmarkImportCtaImageUrl":null,"avoidSelectors":[],"colorMode":"light","contentSelector":"","copyLinkShare":null,"defaultSearchSelectors":false,"defaultPopupWidgetId":null,"defaultSpotlightWidgetId":null,"defaultMostValuableContentWidgetId":null,"dynamicPageUrls":[],"facebookShare":true,"fullPageActionColor":"","fullPageBackgroundColor":"","fullPageHeaderBackgroundColor":"","fullPageHeaderTextColor":"","fullPageTextColor":"","googleAnalyticsEnabled":false,"growLabs":false,"hideSelectors":[],"horizontalOffset":15,"inputBackgroundColor":"","inputTextColor":"","inviewDesktopOffset"

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9778), with no line terminators
Category:	downloaded
Size (bytes):	9778
Entropy (8bit):	5.069614713818546
Encrypted:	false
SSDEEP:	192:YTTw2RyoeDkA0dfoUIWgkbpQWQwMiCgIE2fVeq:Yg2S0dfoUIwbpQWN2fVeq
MD5:	3418461B9E8AC9A61AFCF610E266C0DE
SHA1:	CA3A451F8A17E0E26F1525C619B5719CC18FD60D
SHA-256:	FAC2E74A33DB1487176291C1DA3ABF7FF89AFE045B3716CC90A8F54EB021C201
SHA-512:	24EA3F8DB1D77E0FB82927500951BEC2C261A814A53962FA96FB410157C84E055F3CF314596A29381384AF528C0C473AFA2330E39A7A0BD1E5CC1F662C9CF816
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/js/main.min.js
Preview:	!function(s){"use strict";var a,r=s(window),d=s("html"),u=s("body"),c=s("#page-header"),i=s("#page-header-inner"),o=(s("#page-content"),parseInt($edumall.header_sticky_height),200),t=window.innerWidth;function m(e){return e.attr("href")\|\|e.data("href")}function h(e){return!!e.match(/^([.#])(.+)/)}function p(e){var n=function(){if(a)return a;var e,n=window.innerWidth;return a=0,1==$edumall.header_sticky_enable&&0<c.length&&"1"==i.data("sticky")&&(e=i.height(),("1"!=i.data("header-vertical")\|\|n<$edumall.mobile_menu_breakpoint)&&(a+=e)),600<n&&(n=s("#wpadminbar").height(),a+=n),0<a&&(a=-a),a}();s.smoothScroll({offset:n,scrollTarget:s(e),speed:600,easing:"linear"})}function f(){u.removeClass("page-mobile-menu-opened"),d.css({overflow:""}),s(document).trigger("mobileMenuClose")}function g(){var e=$edumall.mobile_menu_breakpoint;t<=e?u.removeClass("desktop-menu").addClass("mobile-menu"):u.addClass("desktop-menu").removeClass("mobile-menu")}function l(){var e,n,a,o=c.children(".page-header-pl

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2615)
Category:	downloaded
Size (bytes):	2650
Entropy (8bit):	5.253268835305795
Encrypted:	false
SSDEEP:	48:Q77MG9I0xY6ZT4RbWHZWSz90UnGz6BEkyOysdyaynYqCEbWW1No3/IbpYypt6Mb/:jGCgcBW5XGUnGz6qkyOysdyg3Cpno0pf
MD5:	86416405AC27771F1B23363FBEF777B1
SHA1:	48997D55402F59ED52E7F31E439AABD8A5C94163
SHA-256:	8BCF66EAC40610369D712B0A299BB4F21706C568785F5C196C83616454D8A190
SHA-512:	9ACC86520BFD951B872ED9777C1206A3FFBA283D67383492344F2E4108C368744EDA2A463699EAD9E7760EAF20888F780AE3120F6B494D700E1400B3A0FE8F2B
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/shortcode.min.js
Preview:	/! This file is auto-generated /.window.wp=window.wp\|\|{},wp.shortcode={next:function(t,e,n){var s=wp.shortcode.regexp(t);if(s.lastIndex=n\|\|0,n=s.exec(e))return"["===n[1]&&"]"===n[7]?wp.shortcode.next(t,e,s.lastIndex):(s={index:n.index,content:n[0],shortcode:wp.shortcode.fromMatch(n)},n[1]&&(s.content=s.content.slice(1),s.index++),n[7]&&(s.content=s.content.slice(0,-1)),s)},replace:function(t,e,h){return e.replace(wp.shortcode.regexp(t),function(t,e,n,s,r,o,i,c){if("["===e&&"]"===c)return t;var a=h(wp.shortcode.fromMatch(arguments));return a?e+a+c:t})},string:function(t){return new wp.shortcode(t).string()},regexp:_.memoize(function(t){return new RegExp("\\[(\\[?)("+t+")(?![\\w-])([^\\]\\/](?:\\/(?!\\])[^\\]\\/])?)(?:(\\/)\\]\|\\](?:([^\\[](?:\\[(?!\\/\\2\\])[^\\[]))(\\[\\/\\2\\]))?)(\\]?)","g")}),attrs:_.memoize(function(t){var e,n={},s=[],r=/([\w-]+)\s=\s"([^"])"(?:\s\|$)\|([\w-]+)\s=\s'([^'])'(?:\s\|$)\|([\w-]+)\s=\s([^\s'"]+)(?:\s\|$)\|"([^"])"(?:\s\|$)\|'([^'])'(?:\s\|$)\|(\

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16010)
Category:	downloaded
Size (bytes):	16045
Entropy (8bit):	5.126324377314635
Encrypted:	false
SSDEEP:	384:R2rjVXPfHMYfSCSy5ZMdn01dcs/qQavic0cz68Be:RyVX3C8rEi+za
MD5:	203EEB8DD53E84FB53B7AEFFB562D825
SHA1:	B4B4361A61EE78717BDCFFE5C46EA79CDC3E04AE
SHA-256:	6CD0D6897B3D4779F7D88CE72531F22FBF75851B195FB14E6F3F23D051B3D1E9
SHA-512:	4CCB1643EE93B0245002FD7EBD31D515D9E67F00DB3ED1EA506E09CE30E725DD1C49860F90B8036FB8A3F0554CFDCB89D7198A46267EF9DB456D23F116896682
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/underscore.min.js
Preview:	/! This file is auto-generated /.!function(){function t(){}var n=this,r=n._,e=Array.prototype,o=Object.prototype,u=Function.prototype,i=e.push,c=e.slice,l=o.toString,a=o.hasOwnProperty,f=Array.isArray,s=Object.keys,p=u.bind,h=Object.create,v=function(n){return n instanceof v?n:this instanceof v?void(this._wrapped=n):new v(n)};"undefined"!=typeof exports?(exports="undefined"!=typeof module&&module.exports?module.exports=v:exports)._=v:n._=v,v.VERSION="1.8.3";var y=function(u,i,n){if(void 0===i)return u;switch(null==n?3:n){case 1:return function(n){return u.call(i,n)};case 2:return function(n,t){return u.call(i,n,t)};case 3:return function(n,t,r){return u.call(i,n,t,r)};case 4:return function(n,t,r,e){return u.call(i,n,t,r,e)}}return function(){return u.apply(i,arguments)}},d=function(n,t,r){return null==n?v.identity:v.isFunction(n)?y(n,t,r):v.isObject(n)?v.matcher(n):v.property(n)};v.iteratee=function(n,t){return d(n,t,1/0)};function g(n){return v.isObject(n)?h?h(n):(t.prototype=n,n=n

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5632
Entropy (8bit):	5.16335599702109
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNWrRf9PaQxJbBXq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdNWrJ9ieJBX5
MD5:	7FA34FDA529CE93CC28B758F7443DD03
SHA1:	D388555D64EBD00674B05E568B741195DA11EC15
SHA-256:	A1864E76D4B1B3CA86924F3A1F93047C663002CAD0523DE65488D5DC16D669FC
SHA-512:	A067F33329F0A8E29D80192C8DEACE56B767F8219103DE3220759A55013177133CD3169E46E6B96DC5E1E8C35278181BE0A3C6D6BB3A0E7BB0F06D0652A81B66
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyNi1kMjU1YWM2NDM3ZDg=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7985
Entropy (8bit):	4.946230308181587
Encrypted:	false
SSDEEP:	192:arPwPgiR9V/uDCkTeU2IPBDlMa+h69ZOZ5ZXZ9ZbZiZsZ+3ZUE5oMYta8P4/B:O3gr1vJE649B
MD5:	D7F595BC23833B3CA45FD6A6F837F82E
SHA1:	4AD012C0A1ECD191F1987C471BA8390F182AAA4B
SHA-256:	6D692187F1D1A46A22C379311E679154C96A404325FADA8C231BF3BC2D9884AC
SHA-512:	4B4A6C6F88B9A02F0633CE28D38BED2ED78F5DECA032CD48F35D1D9739485C40E972EAB2383F0C38353AF80D613A76A0B3C5D98CDCEED67FC80F9E0E09BADE15
Malicious:	false
Reputation:	low
Preview:	{"productionVersion":"3.1.15","videoVersion":"9.1.11","ampVersion":"3.0.0","betas":[{"trafficPercentage":2,"version":"3.1.15-ab"},{"trafficPercentage":6,"version":"3.1.15-paMark"},{"trafficPercentage":6,"version":"3.1.15-identityHub"},{"trafficPercentage":0,"version":"3.0.0-fixGGLoad"},{"trafficPercentage":2,"version":"3.1.15-adUnitRefact"},{"trafficPercentage":8,"version":"3.1.15-noTAM"},{"trafficPercentage":0,"version":"3.1.9-rogerV2szSwap"},{"trafficPercentage":0,"version":"3.1.9-rogerV2sz177100"},{"trafficPercentage":0,"version":"3.1.9-rogerV2sz256144"},{"trafficPercentage":4,"version":"3.1.15-1450-SwapCMP.5"},{"trafficPercentage":4,"version":"3.1.15-1957-pageTargetLIF"},{"trafficPercentage":4,"version":"3.1.15-growHouseUpdate"},{"trafficPercentage":6,"version":"3.1.15-1822-amMV"},{"trafficPercentage":10,"version":"3.1.15-densityExp"},{"trafficPercentage":8,"version":"3.1.15-genericSettings"},{"trafficPercentage":4,"version":"3.1.15-1968-dwellTime.1"},{"trafficPercentage":2,"versio

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26252), with no line terminators
Category:	downloaded
Size (bytes):	26252
Entropy (8bit):	5.466037582329784
Encrypted:	false
SSDEEP:	768:LA+2IGvqmMm26lxtUF4DsMP+nVi451Vo/3h+AzKDWHiURdork:8nImeVsP
MD5:	5586C387E379A3214BE103DE4F5A87D5
SHA1:	468532DBBE1C0C897E47920DF5ED9C15A1971A9E
SHA-256:	E8D8BC065083156D496DA0AD03CE872FEF2AEA90166B3A6FE2B7AF74FFE95B39
SHA-512:	F86796AEEF803DDBC26BA3ED565B3D9044009DFF6A308201AC1CA67AB083E8E35E2405B82499157409900DF1DC44D2802FC010CBF9763DB8486B4875AADFAFC0
Malicious:	false
Reputation:	low
URL:	https://faves.grow.me/17.ab8a5c5f.chunk.js
Preview:	"use strict";(self.webpackChunk_mediavine_faves_ui=self.webpackChunk_mediavine_faves_ui\|\|[]).push([[17],{8368:(e,t,n)=>{n.d(t,{c:()=>r});var i=n(1580),o=n(8527);const r=function(){const[e]=(0,i.useState)((()=>{const e=o.cp.getItem("grow-faves:recentlyViewedPageIds");try{if(e){const t=JSON.parse(e);if(Array.isArray(t))return t}}catch(t){o.cp.removeItem("grow-faves:recentlyViewedPageIds")}return[]}));return e}},5017:(e,t,n)=>{n.r(t),n.d(t,{default:()=>$e});var i=n(8880),o=n(1580),r=n(9504),s=n(6456),l=n(744),c=n(4476),a=n(2477),d=n(2984),m=n(2256),g=n(9528),u=n(376),p=n(5344),h=n(5036),f=n(7256),_=n(3852),w=n(1272),y=n(7900);function v(e){const t=(0,y.m0)(),n=(0,r.sT)("grow_links");try{const o=[t?"".concat(w.GA,"=").concat(t):null,"growSource=recs"].filter(i.kb).join("&"),r=(0,i.O4)(e,o);return n?(0,_.O4)(r):r}catch(o){return e}}var b=n(9924),x=n(5464),S=n(676);const C=450,k=700,I={unmounted:"0",entering:"25em",entered:"initial",exiting:"25em",exited:"0"},R={unmounted:"-15em",entering:"0

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537082476&val=MBqnvcOAVHZk1_2R0gb5ubmYQuY
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2642)
Category:	downloaded
Size (bytes):	126184
Entropy (8bit):	5.541649764189475
Encrypted:	false
SSDEEP:	3072:+kzqGs0f909/mu3GltArX7Qn7oNEGmjIxe32:+pKDsq7oNEGmZG
MD5:	C5049672906126175CFFDF8C94E24515
SHA1:	F0965C95BA831D9D7395870E305795A6A961B276
SHA-256:	646357CD3E137370BB2486F2ABDFD10B82443A07B669BB3E8C56EA80F34C7C8F
SHA-512:	CECE210E2C2350D17C2CF841BE20F1674226B00CEA076A06C9442367C2FEB29E79D5977EBAB27CD1A31AAAE169BB429A467257197A0F7B048B2AED331E282947
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WP3CMPSG
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..,"blob":{"1":"1"}.........};...var aa,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==ty

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.493270155702426
Encrypted:	false
SSDEEP:	3:YCB9ACSdRMQE7XMIwdHr4:YCcTdNE7cIwFr4
MD5:	003290622A7198B3D640D383C0EF63DB
SHA1:	600BB3300697E4C5E5E15B264526B793CF88F08E
SHA-256:	3FFC8899ECC2573B2CC716BD79F62BCC44939A4EC053BE82B9D33F38913CC7D7
SHA-512:	0A563843002C1DE258E48949F3C3B136309E4AF20E6B09646D7C44722BEF52B88DA5399051F9951E8FED5412E3C361F3BB4F6E3A1E52C3CAC1A3C5B23ED1BF12
Malicious:	false
Reputation:	low
Preview:	{"gdprApplies":false,"isAdditionalPrivacyState":false,"countryCode":"US"}

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14672), with no line terminators
Category:	downloaded
Size (bytes):	14672
Entropy (8bit):	5.925455306050134
Encrypted:	false
SSDEEP:	384:SiDfhv6DgTWFLwMNqaRRt4ir7dnvcxcZPyxtsy9yP1HcjDWiFj:SiDfhv6DgTWCMQfmvcx+6xlcP1Hti9
MD5:	8EF75C4F102F97D3707604854B622AF7
SHA1:	5C099A44A813877603BEC2930D9FA12C7DC842CB
SHA-256:	54D73AD2C6C7F353BBB28D257F8297EBC48560C48E477210465404159E710F4E
SHA-512:	B38DD309149F3C0608C95538FEC1BB672DDE9162BA13E5E83EFF30170F38A3F988D51CABF2CDFA046C32A0609DC26D2A9D1CFEBE1FC0FD3109CF38B99C29FAFC
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/2726/92d464ebb831c67416d8.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[2726],{5182:(t,e,i)=>{i.d(e,{Dn:()=>g});var g=(t=>(t["3gpp"]="video/3gpp",t["3gpp2"]="video/3gpp2",t.flash="application/x-shockwave-flash",t.flv="video/x-flv",t.javascript="application/javascript",t.m4v="video/x-m4v",t.mp4="video/mp4",t.mpeg="video/mpeg",t.ogg="video/ogg",t.quicktime="video/quicktime",t.webm="video/webm",t.wmv="video/x-ms-wmv",t))(g\|\|{})},2415:(t,e,i)=>{i.d(e,{q:()=>M});var g=i(6039),s=i(2946),I=i(5182),n=i(5595),o=i(1507),a=Object.getPrototypeOf,l=Reflect.get,r=(t,e,i)=>l(a(t),i,e),d=(t,e,i)=>new Promise(((g,s)=>{var I=t=>{try{o(i.next(t))}catch(t){s(t)}},n=t=>{try{o(i.throw(t))}catch(t){s(t)}},o=t=>t.done?g(t.value):Promise.resolve(t.value).then(I,n);o((i=i.apply(t,e)).next())}));const u="debug"===(0,n.Ph)("loglevel",window.location.search)?"https://imasdk.googleapis.com/js/sdkloader/ima3_debug.js":"https://imasdk.googleapis.com/js/sdkloader/ima3.js";function M(t,e){return class e extends t{validate(){

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	5.932806175058245
Encrypted:	false
SSDEEP:	6:YVgNomdULt3VHSRkzgK0yUK9k3u7mHqVniDFtMbrUGVdbw5wy17:YKNoDLtVHlT59k3u7mHqkI8G4j
MD5:	DD8AF35BB13639AAC8FCA8EAD951B983
SHA1:	44F5F73FC5E43C588CD58E51AFF162AC86A8A556
SHA-256:	0644506D53E2BE66D5834B5175646BD06506D10C50F76EF33EDB1474F48B5F31
SHA-512:	0AC91F3F682782E7A8E98B7701C85B1A533A0C135B62DCDD711614152544E5B729B2F05F36317B8A3010E3E25FFC10695A88582016950E7F1E03EA85F7DDDEEE
Malicious:	false
Reputation:	low
URL:	https://imp-dev.mediavine.com/impkey?&bidder=&cpm=0.28&adId=&sk=V1:KKcbCiVfEgsfdrMV:R+W/OS9eShmwEgTxyDEJvn/zBeyW1Jc/Qj1Tg0dx4dlDrQmZbRYiXyicRiDhsceelqZejLcHANBY5w==
Preview:	{"hb":"V1:OkITh2gxaC87r8vo:hJhJcHFnTvEa3aFPvWqRKQxr9ikeH9VQU8P47EIqDTZ/XF0rIDgMAKU/k3RoYoDi","adx":"V1:ibzLpGQs2tds02tt:qrki9zAVbsXlHCU+SDqPRgHiBCxCnW0m9AS2uc0aolF6CI0ACnRFz2uqbudg2cKfpwrX2qWXq00L4Fz4prc2+gRfKeWj","unf":"V1:VDxzwY6byZOudela:Ypydor5w0Un3wYS1Rg3EWbN6zY8DWtL2vbLnbWJG7KEz5nrHTD4GWF9gGSkLDtbssg=="}

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48717)
Category:	downloaded
Size (bytes):	48764
Entropy (8bit):	5.395825148287821
Encrypted:	false
SSDEEP:	768:HQCVA6UzsMj0yEkxdhbgsbSXmYlehFtGhrnov4Sf4bnR0Ok+4FODJ3BIf218P1CQ:avFj4ViXFOaB1WqeXd5WY8I/q
MD5:	54CCEAC2F07941E4E7A774C7D14555F0
SHA1:	6E2813069E2935E85AE19A0B9E08A35284FF4540
SHA-256:	D148A0F8F702F28E4D386D07E548684BF137D803A21132C7A56E0A69C00B8096
SHA-512:	97CE80F3B68B1F4C5B5AC9B5799C69F26B07C89314BFE08A951D8E5E508655956DD689382A545668452F7D8D6504E25AE6955B7FC6E007A1CE5DBD50F91B5A59
Malicious:	false
Reputation:	low
URL:	https://nitroscripts.com/pduMCfIcykwhScUJcEDohxbyURefMehM
Preview:	(async NitroPack=>{if(NitroPack.scriptReady){console.warn("NitroPack: "+(document.currentScript?.src\|\|"Nitro Script")+" is already initialized. The execution will be skipped.");return}if(NitroPack.scriptReady=!0,localStorage.getItem("nitroDebugScript")){console.warn("NitroPack: Debug mode is enabled."),eval(localStorage.getItem("nitroDebugScript"));return}if(localStorage.getItem("nitroDebugScriptUrl")){console.warn("NitroPack: Debug mode is enabled."),await fetch(localStorage.getItem("nitroDebugScriptUrl")).then(t=>t.text()).then(script=>eval(script));return}!function(){"use strict";function e(e,t,n,r){return new(n\|\|(n=Promise))((function(i,o){function a(e){try{s(r.next(e))}catch(e){o(e)}}function l(e){try{s(r.throw(e))}catch(e){o(e)}}function s(e){var t;e.done?i(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(a,l)}s((r=r.apply(e,t\|\|[])).next())}))}"function"==typeof SuppressedError&&SuppressedError;const t="navaidebug",n=()=>document.cookie.includes(t),r=(e,r)=>{

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10909)
Category:	downloaded
Size (bytes):	11158
Entropy (8bit):	5.212753134589008
Encrypted:	false
SSDEEP:	192:ullrohY5DYoiNIAAmeFLEZmP2CLSk4+la4X+LY5RvnOjx9nHKHObLwWwKwJlQYx4:ullrom5Dg/C3XdMXHKHOb2QPuwFq36gm
MD5:	91AE8747F42F925DFEC227C3C534DD2E
SHA1:	7320805D91C9B7962FE06E850D0D404FB5654762
SHA-256:	853E1C1560D5E9759067FACD7A8793D75EBE3ABCBD4AA94FCE8282E78CBD3E95
SHA-512:	561AF9B60AD63448FC0EACAF2031072F68FE765F7B1A53DA5407FC589449B23D562E5AE6253F0B655134B34A809375ECC14EBF0DEA1D6A3D152C6DE01248C347
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/assets/libs/powertip/js/jquery.powertip.min.js
Preview:	/!. PowerTip v1.3.1 (2018-04-15). https://stevenbenner.github.io/jquery-powertip/. Copyright (c) 2018 Steven Benner (http://stevenbenner.com/).. Released under MIT license.. https://raw.github.com/stevenbenner/jquery-powertip/master/LICENSE.txt./.!function(e,t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof module&&module.exports?module.exports=t(require("jquery")):t(e.jQuery)}(this,function(h){var v=h(document),n=h(window),e=h("body"),m="displayController",T="hasActiveHover",g="forcedOpen",i="hasMouseMove",y="mouseOnToPopup",a="originalTitle",b="powertip",H="powertipjq",k="powertiptarget",P=".powertip",O=180/Math.PI,t=["click","dblclick","mousedown","mouseup","mousemove","mouseover","mouseout","mouseenter","mouseleave","contextmenu"],I={elements:null,tooltips:null,isTipOpen:!1,isFixedTipOpen:!1,isClosing:!1,tipOpenImminent:!1,activeHover:null,currentX:0,currentY:0,previousX:0,previousY:0,desyncTimeout:null,closeDelayTimeout:null,mouseTrackingActive:!1,de

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://bpi.rtactivate.com/tag/?id=20909&user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.759931920084126
Encrypted:	false
SSDEEP:	3:YxhA3DPmFiAo9/hshCNNpAcANQDxPjfXQGY:YnEOiAeshWAcANQtPjZY
MD5:	E5DE256DD265C70467EF49FC2FCADC06
SHA1:	E4EF758CA1191FCB68796C37E602FE157B8DDB5D
SHA-256:	D9A6DD1635A010BEF24FCF2BDD2F917891B976B8C15227CF2A1F27C83CC2D3EE
SHA-512:	41A9F376D1A3AFB52008F46C3ECAF182C9DAD1C2C601236452FC4DA168C5132908A3B834EDD172C3D77830B5EF177D597EE19118442C3280315F76A27FE06DA3
Malicious:	false
Reputation:	low
Preview:	{"TDID":"500c5aec-af13-42d6-a7ea-250f9438d1fe","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-03-25T19:25:47"}

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5939), with no line terminators
Category:	downloaded
Size (bytes):	5939
Entropy (8bit):	5.843843908694944
Encrypted:	false
SSDEEP:	96:l/WLiPM6X5ZqHKZcTXm9KhuES87iRydrIIkZ/D1HgDJXWxFMZ8pT89xhCoZyT/iF:l/RM8Qqoh03RnTpADJGMeqDoG1N997nN
MD5:	D7254ABB6956B44E4DFA4583BD9C0B16
SHA1:	D21B243A558D28726A75AB9B09D5EB521CCFF778
SHA-256:	6B495A2645D8D78810848A50473470B6E351B3CB83E8355AEDA52B90DD2D7293
SHA-512:	C6BDC2334890009077C9DC32C822A986A10C8D5A747D4B94702D3571ACCB8517BA4DFF16B8E72392FEA23D30C29DEBD2B153A5638E5A5EB882714ACC0A608A77
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/3706/960c85452fb5731e69f0.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[3706],{9383:(e,t,i)=>{i.d(t,{H:()=>a});var s=i(6469),n=i(5595),d=Object.getPrototypeOf,o=Reflect.get;const a=(e,t)=>class t extends e{constructor(e,t){super(e,t)}adunits(){return e=this,a=null,r=function*(){const e=yield(a=t.prototype,r=this,M="adunits",o(d(a),M,r)).call(this);var a,r,M;if(!this.model.mv_native_enabled&&!(0,n.DY)("test","nativeTestAd")&&!(0,n.DY)("test","nativeTestVideoAd"))return e;const[{buildRequestFromTemplate:l},{getTemplate:u}]=yield Promise.all([i.e(9300).then(i.bind(i,9300)),i.e(6409).then(i.bind(i,6409))]),c=u(this),h=(0,s.X)(this.model.bidRequests.native);h.map((e=>e.isNative=!0));const N=l(c);return[...e,{code:this.id,bids:h,mediaTypes:{native:N}}]},new Promise(((t,i)=>{var s=e=>{try{d(r.next(e))}catch(e){i(e)}},n=e=>{try{d(r.throw(e))}catch(e){i(e)}},d=e=>e.done?t(e.value):Promise.resolve(e.value).then(s,n);d((r=r.apply(e,a)).next())}));var e,a,r}}},3706:(e,t,i)=>{i.r(t),i.d(t,{Adhesion:()=>I

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	151302
Entropy (8bit):	6.026924585215748
Encrypted:	false
SSDEEP:	3072:2+5VruJF3l3OfbLOdE8LEidsVjbLOdEnB+GMo+yMo+9Mo+2Mo+qnhMo+F:7TrublMLLxLL8o
MD5:	F04C4BA5E372780B1AC1BEA88371465B
SHA1:	C40F86B7373CCE9F795E6DF1EE62F64F0E1DFD84
SHA-256:	B910D5C435919A4754212EEFD2EFFA1826F91223A35B2A7D70B66EF9365502C4
SHA-512:	6EACD74457151B0E53A20722B89020176B7D4FCA28301961F3F82972D14229A3E4ABB02AD0534216A9296989BB47F88B3095DED2B2B12C2B611EC7BB404647A0
Malicious:	false
Reputation:	low
Preview:	{"/1030006/earnandexcel/sticky_sidebar":["html",0,null,null,0,250,300,0,0,null,null,null,1,[["ID=fe39bf2200dc1501:T=1714073169:RT=1714073169:S=ALNI_MbBbtQYJcCNHn47IP9PMcOPoeNc5g",1747769169,"/","earnandexcel.com",1],["UID=00000df6682d3ebb:T=1714073169:RT=1714073169:S=ALNI_MYFznN32OwyI03CfiCZ8AtH-K_Epw",1747769169,"/","earnandexcel.com",2]],[138423627657],[5466240466],[4861501641],[2740741575],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslDLW0vdjWKSKfjYOWgCLxEjdkBqfQmM8xhLNVk1BvxBPp21ZeH7veF37N-Ab4GOSXJ9ZUI9Sq2hxHuoEfG4Nw","CK-k_pKM3oUDFTLPKAUdOzAGiw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"2",null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,[["ID=29a2890e9cbd2e6b:T=1714073169:RT=1714073169:S=AA-AfjYkX9KnJ82BFsvGCvippWCK",1729625169,"/","earnandexcel.com"]],[]]}.<!doctype html><html><head><script>var jscVersion = 'r20240424';</script><script>var google_casm=[];</script><style>a { color: #00

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9354)
Category:	downloaded
Size (bytes):	9531
Entropy (8bit):	5.016514932736511
Encrypted:	false
SSDEEP:	192:F+VgksRTuuE2mBrcPgfMGFTsPWl7h12JyF:F1duuE7xhxsPS0A
MD5:	65941CBC22665FE5913213A865679E12
SHA1:	8BB14561F9AF47C0B965D0216B9C4DDC39DA9FF0
SHA-256:	E94B12CB948D3D2EFF43ADDF04700F8611BA383C00892652DC294A76BEC2A105
SHA-512:	C5DEB96E36CE773C5B3BFAB85A1D8D1A4DC1FB43B9A5767E29A2B12D1EC80F3CF2E652D7C4B1BBCDECD0A7E76F578541C5BB07B1995DB4F835258A60DB494391
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/js/jquery/ui/menu.min.js
Preview:	/!. jQuery UI Menu 1.12.1. * http://jqueryui.com. . Copyright jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(e){"function"==typeof define&&define.amd?define(["jquery","./core"],e):e(jQuery)}(function(a){return a.widget("ui.menu",{version:"1.12.1",defaultElement:"<ul>",delay:300,options:{icons:{submenu:"ui-icon-caret-1-e"},items:"> ",menus:"ul",position:{my:"left top",at:"right top"},role:"menu",blur:null,focus:null,select:null},_create:function(){this.activeMenu=this.element,this.mouseHandled=!1,this.element.uniqueId().attr({role:this.options.role,tabIndex:0}),this._addClass("ui-menu","ui-widget ui-widget-content"),this._on({"mousedown .ui-menu-item":function(e){e.preventDefault()},"click .ui-menu-item":function(e){var t=a(e.target),i=a(a.ui.safeActiveElement(this.document[0]));!this.mouseHandled&&t.not(".ui-state-disabled").length&&(this.select(e),e.isPropagationStopped()\|\|(this.mouseHandled=!0),t.has(".ui-

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://pmp.mxptint.net/sn.ashx?ak=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7789)
Category:	downloaded
Size (bytes):	8944
Entropy (8bit):	5.361410352020359
Encrypted:	false
SSDEEP:	192:bbvcZunH54wHePBCUEqkYPBJB54f7KiT2fIOi8yLfkZ:bbvcuCseyYPZQrLfkZ
MD5:	5D93CF8A17C399B7AAFA6EA0AB2C2CC7
SHA1:	FA099ADF7AD28E04C599CB4C91FA1F22B0CE876F
SHA-256:	CE96B844A71612DB6C3827699D6432DD7A66F7E60AC09CAF73D213ACEAB4D50F
SHA-512:	D08800958F1FF7FFCF94CCC73F53E5AB751BEE01D961518A768885741F89FE2FDD318A1399460FFD5A1C4EEA55E06616DBA29156BC3E5FF6867683C508A2E391
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-2832943.js?sv=6
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":2832943,"r":0.23526529348544978,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":true,"legal_name":"","privacy_policy_url":"","deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"google_optimize":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["settings.billing_v2","survey.embeddable_widget","feedback.widgetV2","survey.type_button","survey.screenshots","sur

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65046)
Category:	downloaded
Size (bytes):	450342
Entropy (8bit):	5.004956196883799
Encrypted:	false
SSDEEP:	1536:16Afn7do/Nd8wXh/dpkzh7rgUIrBhZtFXukXhTriUY5+KwHCAD1DGvThrfUpxr+q:SNd8wbLf/Es
MD5:	09644037D4C6FF20CEC8441291B4287C
SHA1:	B3CC20970E0D605048EA304BFDAA0C4E305B87AF
SHA-256:	BA18806F3B3B77DBEAF768B2B4FD539B327616F10CB7EF54CC7092D87A011742
SHA-512:	738C29FC105170196D2AF53AA6AE09CB5D87C6905D92DBA9D14CD6EBAF1F7BE64C79333353D97DB75FFCAF31139C945132DFD29D7DD8729B6A31CAC15B14CBBD
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/themes/edumall/style.css
Preview:	@charset "UTF-8";...../!.Theme Name: Edumall.Theme URI: https://edumall.thememove.com.Author: ThemeMove.Author URI: https://thememove.com.Description: Edumall . Professional LMS Education Center WordPress Theme.Version: 2.4.1.License: GNU General Public License v2 or later.License URI: https://www.gnu.org/licenses/gpl-2.0.html.Text Domain: edumall.Tags: editor-style, featured-images, microformats, post-formats, rtl-language-support, sticky-post, threaded-comments, translation-ready./.archive-layout-switcher .switcher-item:after,.archive-layout-switcher .switcher-item:before,.archive-top-filter-content .count,.blog-nav-links .inner .hover-bg,.blog-nav-links .inner h6:before,.button,.course-caption-style-01 .course-wrapper,.dialog-widget .dialog-close-button i,.edumall-accordion .accordion-header,.edumall-accordion .accordion-icon,.edumall-accordion .accordion-section,.edumall-accordion .accordion-title,.edumall-blog-overlay-style-float .post-overlay-background,.edumall-blog .post-wr

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.807835504675156
Encrypted:	false
SSDEEP:	3:YxhA3DPmFiAo9/hshCNN7kYCiNQDxP9UlXQ6Yn:YnEOiAeshEkYCiNQtPGlY
MD5:	E60D18136364565DA88D7722CB3D989E
SHA1:	2B8450DD613842D87864F98FCF3FC90332D9E7EC
SHA-256:	2C93A7D9F0DBD716B49B2D09224000099A1E14FD32392AFD10E9EDD7D1C7FA5C
SHA-512:	7A68581F8C9A01A0D3E18FEF2613FD34EE9A2D1A22382FB636E4DEC35B842B7E960AD38D5C182062F0039BE507FC5A9CBE9D9C1D8F8927EC627E9DA11D820D5A
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/rid?ttd_pid=sne7dew&fmt=json
Preview:	{"TDID":"500c5aec-af13-42d6-a7ea-250f9438d1fe","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-25T19:25:43"}

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://imp-dev.mediavine.com/record?impkey=V1:P15E9uvXlwC+VsTc:HMnWTn94wUkRdL+FADHKlZKEvcikQifZnUFTMkshpUEAmz2s1OldlepaDw1zTNoy0/9Wkup+iL3vHK/3lbyr6C42m68r&slot=sidebar_btf&site=earn-and-excel&path=/blog/how-to-add-a-legend-in-excel-a-com&page_url=https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/&secure=1&sessiondepth=1&optout=&categories=hobbies-and-interests&generator=web&bucket=93&referrer_url=DIRECT&utm_source=&utm_campaign=&dow=4&day=25&month=4&hour=19&wrapper_group=3.1.15-1450-SwapCMP.5-beta-control&wswy=0&sessionId=1040263935&page_view_id=0e0d1c1c0a0l170s0x0i1n0u140x0h03&groupm=1&browser=Chrome&os=Windows&lang=en-US&s2sVersion=production&velocity=&maxVelocity=801&partnerLift=amazonE6M2&hb_bid=no_bid&slot_id=sidebar_btf&hb_bidder=no_bidder&hb_count=0&hb_pmp=0&UR=28&URP=138&OE=0&google=1&native=1&slot_number=1&slot=sidebar_btf&arrival=0&refresh=0&bidFloor=0.28&ccpa=1---&psa=6,12,3&timeout=sticky_sidebar_lazy_d_1701&gid=0&inview=0&grow_state=4&grow_version=7.244.0&3pc=timedOut&illr=0&gpp=0-0-0&pps=&pair_id=0&deprecationLabel=na&parent_adunit_name=earnandexcel&slotName=sticky_sidebar&device=desktop&country=US&offeringId=1&adProduct=display&oCpm=undefined"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17265)
Category:	downloaded
Size (bytes):	38651
Entropy (8bit):	4.568139112213242
Encrypted:	false
SSDEEP:	192:CS8FCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6I6JsyBrrYjBcD0NS6H0S6MSV1o:kqRDUxBu2HWq
MD5:	A4DFB23786E753BC737669331353153B
SHA1:	8285CD566905D30FD32DDF2BAAC06EB9F022472D
SHA-256:	1AC8AA7A403C546A3E48D10935A617961245480A3D057FA5483318922EDD654A
SHA-512:	91780ADA74AED5A55DF0385648B9FABAF4F8D6505F69F605A05D885C28073D808A2056488C935BAFAE5826AA7038922902FBE8EF95BD4CE3293799061897D260
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-content/uploads/elementor/css/global.css
Preview:	.elementor-widget-heading .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-heading.elementor-widget-heading .elementor-heading-title a:hover{color:var( --e-global-color-primary );}.elementor-widget-image .widget-image-caption{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-text-editor{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:var( --e-global-color-primary );}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap, .elementor-widget-text-editor.eleme

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 826

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
URL:	https://aax.amazon-adsystem.com/e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fhttps%3A%2Fearnandexcel.com%2Fcourse-category%2Faccounting%2F%3Ftutor-course-filter-category%3D16698&pid=BR98xz1PjTcQV&cb=0&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fhttps%3A%2Fearnandexcel.com%2Fcourse-category%2Faccounting%2F%3Ftutor-course-filter-category%3D16698%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1
Preview:	apstag.punt({"cb":"0"})

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1115)
Category:	downloaded
Size (bytes):	1195
Entropy (8bit):	5.136352788493526
Encrypted:	false
SSDEEP:	24:Ce4cZUH2ogoZAz4F7ky8v757uHAdivgF7d7RLQ7RGR5bPQkfcwa8fA4v75Q2XIpN:Cez2HbN+zaleVOgF5mQPQkfla8oMPXI7
MD5:	6BD342E07CE454DF76037B5A2632F56E
SHA1:	861031276B9473A4F738F456A0AC0B88ACE2CA1F
SHA-256:	E388E19CA38C825B329E762C79C66BBD41BD334F18312C5E97FDE0A8F64BCA36
SHA-512:	54C8CAA5EB1F859510D94F2AB783409EB1BF40526FA99CCC2156B4CCC74459F961F20C9B9736E7823F0F4A9EF5E6A3F86BF14834D64012E88B7FC3C0EBEC899A
Malicious:	false
Reputation:	low
URL:	https://invstatic101.creativecdn.com/encrypted-signals/encrypted-tag-g.js
Preview:	/*. ESP - RTBHouse. * @version v1.2.5. * @link https://www.rtbhouse.com/. */.!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),o=pbjs.getUserIds()?.pubcid;return signal_decrypted={domain:encodeURIComponent(window.location.href)},e&&(signal_decrypted["rtbhouse-esp"]=e),o&&(signal_decrypted.EID=o),"browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")&&(e=await document.browsingTopics(),signal_decrypted.topics=JSON.stringify(e)),n&&(signal_decrypted.segments=n),document.referrer&&(signal_decrypted.referrer=encodeURIComponent(document.referrer)),async function(e){return(await(await fetch("https://esp.rtbhouse.com/encrypt",{method:"POST",body:JSON.stringify({publisher_id:"rtbhouse",signal:e}),headers:{"Content-Type":"text/plain"}})).json()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.secureSignalProviders\|

Chrome Cache Entry: 828

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41941), with no line terminators
Category:	downloaded
Size (bytes):	41941
Entropy (8bit):	5.444848836643231
Encrypted:	false
SSDEEP:	768:uCviPrrODV5LHyVac3rV1F9IVv5+hi+UppHqqCZKNqOCdCntk0zoUKslGU9hPv3A:u1oTLHKV9Nhi+UrqqCzOGsu3EtRNby
MD5:	E76EEDC914521A11AA4E68C36FF66DF8
SHA1:	D50C0BD18278EE05CC678FC2937AD20D05D8C3F7
SHA-256:	5ADFD4A68B65A9BD3F8FFF31737E574A50597D5ADB241F15A2BA1377364B8519
SHA-512:	77BCA1DE1672CF6BBFC5FD5DC46FBA0594E2F0B943DBB0369F90556EFECD63EE817DFB332DAEB98B34FC102FEBF064FF19F67DF981E10591D23089E6164E4A87
Malicious:	false
Reputation:	low
URL:	https://scripts.mediavine.com/tags/4420/bc05153bc2e6fb5e37bb.min.js
Preview:	"use strict";(self.mvWrapperJsonp=self.mvWrapperJsonp\|\|[]).push([[4420,999],{6500:(t,e,i)=>{i.r(e),i.d(e,{GPP:()=>_});var s=i(8473),r=i(3583),n=i(6643),o=i(4441),a=i(3528),l=i(2932),p=i(6921),d=(t,e,i)=>new Promise(((s,r)=>{var n=t=>{try{a(i.next(t))}catch(t){r(t)}},o=t=>{try{a(i.throw(t))}catch(t){r(t)}},a=t=>t.done?s(t.value):Promise.resolve(t.value).then(n,o);a((i=i.apply(t,e)).next())}));let c,h;function u(){return d(this,null,(function*(){if(!h){const{GDPR:t}=yield Promise.all([i.e(1011),i.e(8262)]).then(i.bind(i,1353));h=new t}return h}))}var m=(t=>(t.US="US",t.EU="EU",t))(m\|\|{}),g=(t=>(t[t.TCFEUV2=2]="TCFEUV2",t[t.TCFCAV1=5]="TCFCAV1",t[t.USPV1=6]="USPV1",t[t.USPNATV1=7]="USPNATV1",t[t.USPCAV1=8]="USPCAV1",t[t.USPVAV1=9]="USPVAV1",t[t.USPCOV1=10]="USPCOV1",t[t.USPUTV1=11]="USPUTV1",t[t.USPCTV1=12]="USPCTV1",t))(g\|\|{}),y=i(9399);const f=new Map;f.set("US",m.US);for(const t in y.g)f.set(t,m.EU);var S=(t=>(t.NOT_APPLICABLE="BqgAAAAAAgA",t.APPLIES="BqgAAAAAAgA",t.NOTIFIED="BVQqAAAAA

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	73
Entropy (8bit):	4.493270155702426
Encrypted:	false
SSDEEP:	3:YCB9ACSdRMQE7XMIwdHr4:YCcTdNE7cIwFr4
MD5:	003290622A7198B3D640D383C0EF63DB
SHA1:	600BB3300697E4C5E5E15B264526B793CF88F08E
SHA-256:	3FFC8899ECC2573B2CC716BD79F62BCC44939A4EC053BE82B9D33F38913CC7D7
SHA-512:	0A563843002C1DE258E48949F3C3B136309E4AF20E6B09646D7C44722BEF52B88DA5399051F9951E8FED5412E3C361F3BB4F6E3A1E52C3CAC1A3C5B23ED1BF12
Malicious:	false
Reputation:	low
URL:	https://api.grow.me/location-privacy-info
Preview:	{"gdprApplies":false,"isAdditionalPrivacyState":false,"countryCode":"US"}

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29677)
Category:	downloaded
Size (bytes):	58171
Entropy (8bit):	4.952248562448469
Encrypted:	false
SSDEEP:	384:T2vicPcBZDn/KRM34XMX6cD+d+AwlVHI+LQ3R+T55GPh5IIINXTXlx:AXMX6E+d+AwlxI+LQ3RC4h5DwTVx
MD5:	B5D1E2C87B60CE71C3FD90CA27073250
SHA1:	B65E3890EF1565F98971B344B4C85866A5F33860
SHA-256:	2CD9DE3DD26246204749CFF259BC34E8E6A47AE5D6E4528B9B28C75D68D50CDE
SHA-512:	0698905368E41D22F1026DCC64F716BE70BFDE1BC05BC85918242AF9C30351166726B4DC4426898E9EF0428EF0A2F875D8FED54BBC8B925289363A39FABBA165
Malicious:	false
Reputation:	low
URL:	https://earnandexcel.com/wp-includes/css/dist/block-library/style.min.css
Preview:	@charset "UTF-8";#start-resizable-editor-section{display:none}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{color:#fff;background-color:#32373c;border:none;border-radius:1.55em;box-shadow:none;cursor:pointer;display:inline-block;font-size:1.125em;padding:.667em 1.333em;text-align:center;text-decoration:none;overflow-wrap:break-word}.wp-block-button__link:active,.wp-block-button__link:focus,.wp-block-button__link:hover,.wp-block-button__link:visited{color:#fff}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-block-buttons>.wp-block-button.wp-block-button__width-25{width:calc(25% - .5em)}.wp-block-buttons>.wp-block-button.wp-block-button__width-50{width:calc(50% - .5em)}.wp-block-buttons>.wp-bl

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1662
Entropy (8bit):	5.019887540191818
Encrypted:	false
SSDEEP:	24:hYkCn0Xi5rXW9jgFi5GtZYAWnyfdWiaM/Njv3igeHa/UfbJijCV6/MBggE4NkIM:BnSxmBAsfM/N7JZ/UfdijCY/MB53N5M
MD5:	B47E18B9602901B4442894ACF9EFA708
SHA1:	7BDC44B5C2D6ED73405A512A0D25D096C6F6068B
SHA-256:	C16A536E9381A97C5D473A2B70AA9057BCEEBE38F05BB7D90360C96BFF579033
SHA-512:	4C58D58D21E66682EF6B9DEB3821BEB89834F69EDA4CD7471AD132B698A6E11E8E6B2D04620DFDD6B6B9A06CA6DFAC36C96AD12233A359CF1F02329CDEA917DD
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/topics/topics_frame.html?bidder=pubmatic
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <title>Topics demo</title>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta http-equiv="origin-trial". content="AseYc2DtZGb//W5XVWgcoP6UF3L+dzpvN5W30ZfyW0aY9GPRVT9CgZXlFz8KHt25ohltfnkuImnAY3JETFGc+AgAAABfeyJvcmlnaW4iOiJodHRwczovL2Fkcy5wdWJtYXRpYy5jb206NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY4ODA4MzE5OX0=">. <link href="favicon.ico" rel="shortcut icon">. <script>. async function getTopics() {. try {. if (. "browsingTopics" in document &&. document.featurePolicy.allowsFeature("browsing-topics"). ) {. const topics = await document.browsingTopics();. console.log(. "Called iframe:",. window.location.hostname,. topics,. "\nNumber of topics: ",. topics.length. );. return Promise.re

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.403590365002627
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+/B6dS8p:6v/lhPfA/UJ63p
MD5:	EDB2AA47631C67A43709D4CCD2501E33
SHA1:	87475B448C53CF32FFE78AB121DB8BAB41D478E0
SHA-256:	6019C3C9E47DC991F8D9937DEAFBB0740C2E61E321324798CB508773B0814824
SHA-512:	65820EEAF261F01988570AFE7866D9B83901950DFBD89542009A1FAAAE520E1AF2FA08789B7E94A64B0E1A3BDC39256354EFE1D38856621851DD65E80505DBB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c........o.......IEND.B`.

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 240 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17176
Entropy (8bit):	7.97344865139521
Encrypted:	false
SSDEEP:	384:Tbs8Pq/cFA/1KihHgghXSMvYYBrivUVZ6w9j17By/sgjCJb:vs8SEFALh1iMAYB6Uz6mx7By/Vgb
MD5:	190DF34F6B93135477C878614DD55903
SHA1:	3E8B3228C2BD0E66F58DB1C468944947CB2E99D5
SHA-256:	FCA7F436DB4CFEEAAF2CAC6A65ED7DE582835106E4C1DF7D35DA60A3FC3700A4
SHA-512:	2DE330953BE0B0A5D3772C177ACAC6206C5438DE19893CCE7E8E786D77408DAC3C925C6FFF49EAAAC2B5907775A2061C9DEEC50230C7265DB3EC0EAA86359D48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............}.#..B.IDATx..w.dWy....r..t..43...e!$$!#..,..1..c...x1x..,.a..d`.X...BF(!.F...M.s.]....q...gF....>..t.=...;.s....?Y+..".....S>..v..'6.mN..4!....^!I.v.,gw?....?..a....5>..6d..z~!.^....qQ.Ix..A8\|}>?!..0.)LA....A.....'.E.......8.Z..n..;...(.E..4!...+.~......`.^.BA.r..#..D(...oy.S..v.G.8\W.a\..P.........t...2^...3...hve.K%..+O.....H2..!9..<...\|}.O..o. ..2...4I.R..=.K!...$..W._B.$..t....T....[.A]a.._s.v.vI..0.t].....=.H$BWW.......K&^<...].......$F..V..ql.\|....ic.?v....(......=D....Iu}-...h.XZ[H<4..n..P....r.....S?..%..~GFzh....y1.......~..[EsU!..^N.t#{.h./.u.>...e^..i..+........ARO... ..pC.\|l...CC.l........GqQ1...,..$I..6....\..9.4..'OBC...r.cI%c.#Q....d..;6.2...r..t.<.U.1.{...1<...P.u...=r._Y.>9...../..d..v.-XH.K...v..8D.QL}E...0...l?LK.F@..s(JA....[xs.I.....=..up`.N."....l..k.\|E.z.0$..F..J.V.q..r$.--.....e.l.B.T..X..x.\|w.3.t.SRR.......((,8.m ....g..?...3.q.-[...k[....@...vF...1A{....hllb.......u.. .C.....

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=33across&endpoint=us-east&us_privacy=1---
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28360)
Category:	downloaded
Size (bytes):	45911
Entropy (8bit):	5.50390226766743
Encrypted:	false
SSDEEP:	768:lIemuoTiQKPcQx28J54S5KjRtJBr1ji4RPtidM6kRsy0:lI1EcQFhKjRfrjpRPtidM6k2d
MD5:	B63285518F1BC28F01CFE8BFB4E6CA47
SHA1:	850CF5957261D3D7BC5484797F5EA6F32630F52F
SHA-256:	DAC99C71E943D58B4FAC29E7BED45DA2FC55CEEC4D6627ECCE863DEC95A520AA
SHA-512:	0AEA2B88D4C09C7E829B27DB1DF56EB8AA22556A100A0E9FA4DF1B8592C2A0661ADD2C7B5FC7451BDA6A27775EA16B262349EA119CB409C91FE5D9D61A90DE34
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 21:25:13.834999084 CEST	192.168.2.5	1.1.1.1	0xa024	Standard query (0)	earnandexcel.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:13.835189104 CEST	192.168.2.5	1.1.1.1	0xc77d	Standard query (0)	earnandexcel.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:14.771538019 CEST	192.168.2.5	1.1.1.1	0x5a2f	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:14.772341013 CEST	192.168.2.5	1.1.1.1	0x9be6	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:14.981942892 CEST	192.168.2.5	1.1.1.1	0xdfcc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:14.982563019 CEST	192.168.2.5	1.1.1.1	0x6964	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:20.217875004 CEST	192.168.2.5	1.1.1.1	0x2b5	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:20.218060970 CEST	192.168.2.5	1.1.1.1	0x675d	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:21.436573029 CEST	192.168.2.5	1.1.1.1	0xfced	Standard query (0)	earnandexcel.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:21.484698057 CEST	192.168.2.5	1.1.1.1	0x9fcd	Standard query (0)	earnandexcel.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:21.949007034 CEST	192.168.2.5	1.1.1.1	0xd754	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:21.949337959 CEST	192.168.2.5	1.1.1.1	0x861e	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:23.725922108 CEST	192.168.2.5	1.1.1.1	0x1a61	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:23.726196051 CEST	192.168.2.5	1.1.1.1	0xfaf5	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:26.949609041 CEST	192.168.2.5	1.1.1.1	0x8f48	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:26.950102091 CEST	192.168.2.5	1.1.1.1	0xf14b	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:27.739150047 CEST	192.168.2.5	1.1.1.1	0x780f	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:27.739700079 CEST	192.168.2.5	1.1.1.1	0x1959	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:30.083906889 CEST	192.168.2.5	1.1.1.1	0x4227	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.084229946 CEST	192.168.2.5	1.1.1.1	0xa6a2	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:30.514508009 CEST	192.168.2.5	1.1.1.1	0x5678	Standard query (0)	nitroscripts.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.558626890 CEST	192.168.2.5	1.1.1.1	0x2471	Standard query (0)	nitroscripts.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:32.232335091 CEST	192.168.2.5	1.1.1.1	0x3134	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.232599020 CEST	192.168.2.5	1.1.1.1	0xc42d	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:32.796497107 CEST	192.168.2.5	1.1.1.1	0x9ad7	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.797261953 CEST	192.168.2.5	1.1.1.1	0x59d6	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:32.798368931 CEST	192.168.2.5	1.1.1.1	0x33c2	Standard query (0)	keywords.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.798681021 CEST	192.168.2.5	1.1.1.1	0x7c6e	Standard query (0)	keywords.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:32.867539883 CEST	192.168.2.5	1.1.1.1	0xfa5e	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.867858887 CEST	192.168.2.5	1.1.1.1	0xbc45	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:32.870639086 CEST	192.168.2.5	1.1.1.1	0x3373	Standard query (0)	support.content.office.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.870945930 CEST	192.168.2.5	1.1.1.1	0x5dfa	Standard query (0)	support.content.office.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:33.435161114 CEST	192.168.2.5	1.1.1.1	0x977a	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.435297966 CEST	192.168.2.5	1.1.1.1	0xb8c4	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:33.561909914 CEST	192.168.2.5	1.1.1.1	0xa732	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.562062025 CEST	192.168.2.5	1.1.1.1	0x3afa	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:33.685189962 CEST	192.168.2.5	1.1.1.1	0x78f7	Standard query (0)	widget.wickedreports.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.685446024 CEST	192.168.2.5	1.1.1.1	0xdd9c	Standard query (0)	widget.wickedreports.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:33.828962088 CEST	192.168.2.5	1.1.1.1	0xc1cf	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.829250097 CEST	192.168.2.5	1.1.1.1	0x5263	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:33.833295107 CEST	192.168.2.5	1.1.1.1	0x1f1a	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.833712101 CEST	192.168.2.5	1.1.1.1	0x4c4b	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:33.929456949 CEST	192.168.2.5	1.1.1.1	0xcd1d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.929656982 CEST	192.168.2.5	1.1.1.1	0x5aa1	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:33.930144072 CEST	192.168.2.5	1.1.1.1	0xc75c	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.930279970 CEST	192.168.2.5	1.1.1.1	0xcb3e	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:34.375385046 CEST	192.168.2.5	1.1.1.1	0x35ed	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.375534058 CEST	192.168.2.5	1.1.1.1	0xa913	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:34.567523956 CEST	192.168.2.5	1.1.1.1	0xac09	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.567671061 CEST	192.168.2.5	1.1.1.1	0x675d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:34.611732006 CEST	192.168.2.5	1.1.1.1	0x485f	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.611871958 CEST	192.168.2.5	1.1.1.1	0xa774	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:34.855448961 CEST	192.168.2.5	1.1.1.1	0xda1d	Standard query (0)	vc.hotjar.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.855618954 CEST	192.168.2.5	1.1.1.1	0x7148	Standard query (0)	vc.hotjar.io	65	IN (0x0001)	false
Apr 25, 2024 21:25:35.077158928 CEST	192.168.2.5	1.1.1.1	0x6f27	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.077419996 CEST	192.168.2.5	1.1.1.1	0x8751	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:35.198369980 CEST	192.168.2.5	1.1.1.1	0xfdcd	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.198656082 CEST	192.168.2.5	1.1.1.1	0x7de5	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:35.284260988 CEST	192.168.2.5	1.1.1.1	0x8e11	Standard query (0)	track.wickedreports.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.284499884 CEST	192.168.2.5	1.1.1.1	0x9c67	Standard query (0)	track.wickedreports.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:35.671943903 CEST	192.168.2.5	1.1.1.1	0xe4c	Standard query (0)	faves.grow.me	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.672354937 CEST	192.168.2.5	1.1.1.1	0xaf9a	Standard query (0)	faves.grow.me	65	IN (0x0001)	false
Apr 25, 2024 21:25:35.676441908 CEST	192.168.2.5	1.1.1.1	0xbf01	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.676743984 CEST	192.168.2.5	1.1.1.1	0x52c8	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.180933952 CEST	192.168.2.5	1.1.1.1	0x7029	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.181078911 CEST	192.168.2.5	1.1.1.1	0x4f56	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.203864098 CEST	192.168.2.5	1.1.1.1	0x14e1	Standard query (0)	track.wickedreports.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.204029083 CEST	192.168.2.5	1.1.1.1	0xdead	Standard query (0)	track.wickedreports.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.277375937 CEST	192.168.2.5	1.1.1.1	0x6aeb	Standard query (0)	api.grow.me	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.277540922 CEST	192.168.2.5	1.1.1.1	0xc5a7	Standard query (0)	api.grow.me	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.640263081 CEST	192.168.2.5	1.1.1.1	0x2d6a	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.640615940 CEST	192.168.2.5	1.1.1.1	0x32fb	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.794044018 CEST	192.168.2.5	1.1.1.1	0x8487	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.794188023 CEST	192.168.2.5	1.1.1.1	0xcb9d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.866173029 CEST	192.168.2.5	1.1.1.1	0xfcb4	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.866333961 CEST	192.168.2.5	1.1.1.1	0x2587	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.867639065 CEST	192.168.2.5	1.1.1.1	0x78	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.867840052 CEST	192.168.2.5	1.1.1.1	0xf189	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.889586926 CEST	192.168.2.5	1.1.1.1	0xb032	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.889730930 CEST	192.168.2.5	1.1.1.1	0x20fa	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:36.947583914 CEST	192.168.2.5	1.1.1.1	0x7822	Standard query (0)	api.grow.me	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.947721004 CEST	192.168.2.5	1.1.1.1	0xcd80	Standard query (0)	api.grow.me	65	IN (0x0001)	false
Apr 25, 2024 21:25:37.316742897 CEST	192.168.2.5	1.1.1.1	0x2838	Standard query (0)	tr6.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:37.317137003 CEST	192.168.2.5	1.1.1.1	0x5617	Standard query (0)	tr6.snapchat.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:37.430630922 CEST	192.168.2.5	1.1.1.1	0x71f1	Standard query (0)	analytics.pangle-ads.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:37.430901051 CEST	192.168.2.5	1.1.1.1	0x35da	Standard query (0)	analytics.pangle-ads.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:37.467557907 CEST	192.168.2.5	1.1.1.1	0xe0bc	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:37.467886925 CEST	192.168.2.5	1.1.1.1	0xbd3b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:37.950453043 CEST	192.168.2.5	1.1.1.1	0x1ed2	Standard query (0)	app.grow.me	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:37.950855017 CEST	192.168.2.5	1.1.1.1	0x3190	Standard query (0)	app.grow.me	65	IN (0x0001)	false
Apr 25, 2024 21:25:37.970825911 CEST	192.168.2.5	1.1.1.1	0xa673	Standard query (0)	some.growplow.events	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:37.971194029 CEST	192.168.2.5	1.1.1.1	0x7802	Standard query (0)	some.growplow.events	65	IN (0x0001)	false
Apr 25, 2024 21:25:40.840936899 CEST	192.168.2.5	1.1.1.1	0xf48a	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:40.840936899 CEST	192.168.2.5	1.1.1.1	0x46d1	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Apr 25, 2024 21:25:40.841677904 CEST	192.168.2.5	1.1.1.1	0xba82	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:40.841871977 CEST	192.168.2.5	1.1.1.1	0xee8b	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.253068924 CEST	192.168.2.5	1.1.1.1	0x87bf	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.253232002 CEST	192.168.2.5	1.1.1.1	0xa10e	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.442388058 CEST	192.168.2.5	1.1.1.1	0xa3a9	Standard query (0)	imp-dev.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.442725897 CEST	192.168.2.5	1.1.1.1	0xbe50	Standard query (0)	imp-dev.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.443969011 CEST	192.168.2.5	1.1.1.1	0x2020	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.444245100 CEST	192.168.2.5	1.1.1.1	0xad1f	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.450243950 CEST	192.168.2.5	1.1.1.1	0x6fb1	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.450709105 CEST	192.168.2.5	1.1.1.1	0xb8da	Standard query (0)	api.rlcdn.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.451596975 CEST	192.168.2.5	1.1.1.1	0x7c96	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.451837063 CEST	192.168.2.5	1.1.1.1	0x870f	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.453185081 CEST	192.168.2.5	1.1.1.1	0xef9f	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.453542948 CEST	192.168.2.5	1.1.1.1	0xf592	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.567519903 CEST	192.168.2.5	1.1.1.1	0x3956	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.567671061 CEST	192.168.2.5	1.1.1.1	0x209c	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.623348951 CEST	192.168.2.5	1.1.1.1	0x63bf	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.623754978 CEST	192.168.2.5	1.1.1.1	0x68b0	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.936809063 CEST	192.168.2.5	1.1.1.1	0x3342	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.937345982 CEST	192.168.2.5	1.1.1.1	0x5cf0	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:42.937828064 CEST	192.168.2.5	1.1.1.1	0x5273	Standard query (0)	sda.fyi	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.937956095 CEST	192.168.2.5	1.1.1.1	0x90dc	Standard query (0)	sda.fyi	65	IN (0x0001)	false
Apr 25, 2024 21:25:44.768384933 CEST	192.168.2.5	1.1.1.1	0xf5bd	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:44.768855095 CEST	192.168.2.5	1.1.1.1	0xd75c	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.634917974 CEST	192.168.2.5	1.1.1.1	0xc8cf	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.635149956 CEST	192.168.2.5	1.1.1.1	0xbabd	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.635921955 CEST	192.168.2.5	1.1.1.1	0x73b1	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.636087894 CEST	192.168.2.5	1.1.1.1	0xd4b2	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.636883020 CEST	192.168.2.5	1.1.1.1	0x5985	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.637057066 CEST	192.168.2.5	1.1.1.1	0x300e	Standard query (0)	acdn.adnxs.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.637661934 CEST	192.168.2.5	1.1.1.1	0x1e29	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.638056993 CEST	192.168.2.5	1.1.1.1	0xb02b	Standard query (0)	u.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.638632059 CEST	192.168.2.5	1.1.1.1	0x7dd4	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.638772011 CEST	192.168.2.5	1.1.1.1	0x5d3c	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.639467955 CEST	192.168.2.5	1.1.1.1	0x22c6	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.639755964 CEST	192.168.2.5	1.1.1.1	0x92ed	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.640507936 CEST	192.168.2.5	1.1.1.1	0x6023	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.640880108 CEST	192.168.2.5	1.1.1.1	0xdb8c	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.641479015 CEST	192.168.2.5	1.1.1.1	0xd235	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.641824007 CEST	192.168.2.5	1.1.1.1	0x9fdc	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.642291069 CEST	192.168.2.5	1.1.1.1	0xfb18	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.642426968 CEST	192.168.2.5	1.1.1.1	0x1730	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.642776966 CEST	192.168.2.5	1.1.1.1	0xb5a3	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.643110991 CEST	192.168.2.5	1.1.1.1	0x744d	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.643554926 CEST	192.168.2.5	1.1.1.1	0x7dd0	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.643975019 CEST	192.168.2.5	1.1.1.1	0x19b1	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.644454956 CEST	192.168.2.5	1.1.1.1	0x9d55	Standard query (0)	sync.colossusssp.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.644871950 CEST	192.168.2.5	1.1.1.1	0xb8fe	Standard query (0)	sync.colossusssp.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.645315886 CEST	192.168.2.5	1.1.1.1	0xd4b3	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.645734072 CEST	192.168.2.5	1.1.1.1	0xa7b2	Standard query (0)	ssc-cms.33across.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.646357059 CEST	192.168.2.5	1.1.1.1	0x9643	Standard query (0)	e.chicoryapp.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.646661997 CEST	192.168.2.5	1.1.1.1	0xa771	Standard query (0)	e.chicoryapp.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.647173882 CEST	192.168.2.5	1.1.1.1	0x6656	Standard query (0)	exchange.journeymv.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.647371054 CEST	192.168.2.5	1.1.1.1	0x4361	Standard query (0)	exchange.journeymv.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.648052931 CEST	192.168.2.5	1.1.1.1	0x458e	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.648317099 CEST	192.168.2.5	1.1.1.1	0xb9fb	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.650794983 CEST	192.168.2.5	1.1.1.1	0x8236	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.651056051 CEST	192.168.2.5	1.1.1.1	0xf2e7	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.651897907 CEST	192.168.2.5	1.1.1.1	0x15d1	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.652034998 CEST	192.168.2.5	1.1.1.1	0x42ef	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.652669907 CEST	192.168.2.5	1.1.1.1	0xf431	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.653095007 CEST	192.168.2.5	1.1.1.1	0x90a6	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.653676033 CEST	192.168.2.5	1.1.1.1	0x435f	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.653831005 CEST	192.168.2.5	1.1.1.1	0x57c6	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:45.939621925 CEST	192.168.2.5	1.1.1.1	0x5c38	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.939749956 CEST	192.168.2.5	1.1.1.1	0x3da	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.312614918 CEST	192.168.2.5	1.1.1.1	0xd533	Standard query (0)	imp-dev.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.313654900 CEST	192.168.2.5	1.1.1.1	0xa135	Standard query (0)	imp-dev.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.316250086 CEST	192.168.2.5	1.1.1.1	0x6ba4	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.316453934 CEST	192.168.2.5	1.1.1.1	0xd231	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.318892956 CEST	192.168.2.5	1.1.1.1	0x13dd	Standard query (0)	lexicon.33across.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.319077969 CEST	192.168.2.5	1.1.1.1	0xcdeb	Standard query (0)	lexicon.33across.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.319983959 CEST	192.168.2.5	1.1.1.1	0x6a6a	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.320338011 CEST	192.168.2.5	1.1.1.1	0x60e9	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.471606016 CEST	192.168.2.5	1.1.1.1	0x6808	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.471959114 CEST	192.168.2.5	1.1.1.1	0xb562	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.672194004 CEST	192.168.2.5	1.1.1.1	0x61f1	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.672338963 CEST	192.168.2.5	1.1.1.1	0xe704	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.674289942 CEST	192.168.2.5	1.1.1.1	0x5315	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.674443960 CEST	192.168.2.5	1.1.1.1	0xe038	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.675077915 CEST	192.168.2.5	1.1.1.1	0x40e	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.675220013 CEST	192.168.2.5	1.1.1.1	0x3827	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.675463915 CEST	192.168.2.5	1.1.1.1	0x5e27	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.675858974 CEST	192.168.2.5	1.1.1.1	0xddc3	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.676280975 CEST	192.168.2.5	1.1.1.1	0x42e3	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.676589012 CEST	192.168.2.5	1.1.1.1	0xfb8b	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.677268028 CEST	192.168.2.5	1.1.1.1	0x86cc	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.677407980 CEST	192.168.2.5	1.1.1.1	0xb87d	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.678220034 CEST	192.168.2.5	1.1.1.1	0xfc4a	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.678369999 CEST	192.168.2.5	1.1.1.1	0x786e	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.679138899 CEST	192.168.2.5	1.1.1.1	0xf9b1	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.679291010 CEST	192.168.2.5	1.1.1.1	0xaa71	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.679817915 CEST	192.168.2.5	1.1.1.1	0xbcf0	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.679941893 CEST	192.168.2.5	1.1.1.1	0x633f	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.681345940 CEST	192.168.2.5	1.1.1.1	0x82fd	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.681582928 CEST	192.168.2.5	1.1.1.1	0x5a44	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.682194948 CEST	192.168.2.5	1.1.1.1	0xd8ca	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.682545900 CEST	192.168.2.5	1.1.1.1	0xa86b	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.683474064 CEST	192.168.2.5	1.1.1.1	0xfb78	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.683657885 CEST	192.168.2.5	1.1.1.1	0xdc62	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.684458971 CEST	192.168.2.5	1.1.1.1	0x235b	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.684617996 CEST	192.168.2.5	1.1.1.1	0x2271	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.685153961 CEST	192.168.2.5	1.1.1.1	0xa8db	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.685446024 CEST	192.168.2.5	1.1.1.1	0x3a38	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.693259954 CEST	192.168.2.5	1.1.1.1	0x7ad3	Standard query (0)	cdn.lijit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.693444014 CEST	192.168.2.5	1.1.1.1	0xe7a4	Standard query (0)	cdn.lijit.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.758548021 CEST	192.168.2.5	1.1.1.1	0x88d	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.832225084 CEST	192.168.2.5	1.1.1.1	0xc259	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.882828951 CEST	192.168.2.5	1.1.1.1	0xb145	Standard query (0)	faves.grow.me	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.883008003 CEST	192.168.2.5	1.1.1.1	0x1f37	Standard query (0)	faves.grow.me	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.884478092 CEST	192.168.2.5	1.1.1.1	0x750a	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.884727001 CEST	192.168.2.5	1.1.1.1	0x5fb1	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.927201986 CEST	192.168.2.5	1.1.1.1	0xa569	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.927361012 CEST	192.168.2.5	1.1.1.1	0x21aa	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.941778898 CEST	192.168.2.5	1.1.1.1	0x6203	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.941951036 CEST	192.168.2.5	1.1.1.1	0x3c27	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.942361116 CEST	192.168.2.5	1.1.1.1	0x138	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.942758083 CEST	192.168.2.5	1.1.1.1	0xdecc	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.943496943 CEST	192.168.2.5	1.1.1.1	0x95e5	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.943778992 CEST	192.168.2.5	1.1.1.1	0x3f76	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:46.945519924 CEST	192.168.2.5	1.1.1.1	0x9a84	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.945730925 CEST	192.168.2.5	1.1.1.1	0xde86	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.236437082 CEST	192.168.2.5	1.1.1.1	0xd627	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.236654043 CEST	192.168.2.5	1.1.1.1	0x1485	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.240411997 CEST	192.168.2.5	1.1.1.1	0x7471	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.240664005 CEST	192.168.2.5	1.1.1.1	0x6014	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.241559982 CEST	192.168.2.5	1.1.1.1	0x181f	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.241823912 CEST	192.168.2.5	1.1.1.1	0x33d0	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.243153095 CEST	192.168.2.5	1.1.1.1	0x1fd3	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.243356943 CEST	192.168.2.5	1.1.1.1	0xb890	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.257888079 CEST	192.168.2.5	1.1.1.1	0x27a2	Standard query (0)	hde.tynt.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.258014917 CEST	192.168.2.5	1.1.1.1	0xca5f	Standard query (0)	hde.tynt.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.311671019 CEST	192.168.2.5	1.1.1.1	0x8168	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.311834097 CEST	192.168.2.5	1.1.1.1	0xf937	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.622037888 CEST	192.168.2.5	1.1.1.1	0xa431	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.622364998 CEST	192.168.2.5	1.1.1.1	0x7824	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.653009892 CEST	192.168.2.5	1.1.1.1	0xf7dc	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.653309107 CEST	192.168.2.5	1.1.1.1	0x6655	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.692122936 CEST	192.168.2.5	1.1.1.1	0x257c	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.692380905 CEST	192.168.2.5	1.1.1.1	0xe56d	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.697943926 CEST	192.168.2.5	1.1.1.1	0xcc15	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.698085070 CEST	192.168.2.5	1.1.1.1	0x241c	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.700844049 CEST	192.168.2.5	1.1.1.1	0xd768	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.701105118 CEST	192.168.2.5	1.1.1.1	0xc19f	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.732918024 CEST	192.168.2.5	1.1.1.1	0x2e3a	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.733252048 CEST	192.168.2.5	1.1.1.1	0xbb6d	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.829319954 CEST	192.168.2.5	1.1.1.1	0x3052	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.829621077 CEST	192.168.2.5	1.1.1.1	0x191	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.859159946 CEST	192.168.2.5	1.1.1.1	0x8517	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.859440088 CEST	192.168.2.5	1.1.1.1	0x1bf7	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:47.859827042 CEST	192.168.2.5	1.1.1.1	0xa826	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.860260010 CEST	192.168.2.5	1.1.1.1	0xa89f	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.060731888 CEST	192.168.2.5	1.1.1.1	0x2a59	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.060884953 CEST	192.168.2.5	1.1.1.1	0xbdee	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.128814936 CEST	192.168.2.5	1.1.1.1	0x5703	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.128962040 CEST	192.168.2.5	1.1.1.1	0x873c	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.316623926 CEST	192.168.2.5	1.1.1.1	0xf341	Standard query (0)	invstatic101.creativecdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.317059994 CEST	192.168.2.5	1.1.1.1	0xd48b	Standard query (0)	invstatic101.creativecdn.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.435376883 CEST	192.168.2.5	1.1.1.1	0xd6b6	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.435791969 CEST	192.168.2.5	1.1.1.1	0x362d	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.522064924 CEST	192.168.2.5	1.1.1.1	0x6027	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.522384882 CEST	192.168.2.5	1.1.1.1	0x93e5	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.523304939 CEST	192.168.2.5	1.1.1.1	0x7806	Standard query (0)	oa.openxcdn.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.523439884 CEST	192.168.2.5	1.1.1.1	0xcadf	Standard query (0)	oa.openxcdn.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.579616070 CEST	192.168.2.5	1.1.1.1	0xd2d5	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.579830885 CEST	192.168.2.5	1.1.1.1	0xc173	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.580897093 CEST	192.168.2.5	1.1.1.1	0xff06	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.580897093 CEST	192.168.2.5	1.1.1.1	0xc8c3	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.584872961 CEST	192.168.2.5	1.1.1.1	0xafe4	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.585100889 CEST	192.168.2.5	1.1.1.1	0x7e3b	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.699198961 CEST	192.168.2.5	1.1.1.1	0x9018	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.699350119 CEST	192.168.2.5	1.1.1.1	0x94f9	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.729955912 CEST	192.168.2.5	1.1.1.1	0x8aab	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.730221033 CEST	192.168.2.5	1.1.1.1	0x820	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.731683016 CEST	192.168.2.5	1.1.1.1	0xc22e	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.732086897 CEST	192.168.2.5	1.1.1.1	0x610d	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.778393984 CEST	192.168.2.5	1.1.1.1	0x7387	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.778702021 CEST	192.168.2.5	1.1.1.1	0x1650	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.869262934 CEST	192.168.2.5	1.1.1.1	0xbff8	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.869388103 CEST	192.168.2.5	1.1.1.1	0x1261	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:48.885370970 CEST	192.168.2.5	1.1.1.1	0x36e9	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.885540009 CEST	192.168.2.5	1.1.1.1	0x18ee	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:49.177124023 CEST	192.168.2.5	1.1.1.1	0x360d	Standard query (0)	esp.rtbhouse.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:49.177473068 CEST	192.168.2.5	1.1.1.1	0x3384	Standard query (0)	esp.rtbhouse.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:49.361037016 CEST	192.168.2.5	1.1.1.1	0xc9f8	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:49.361454964 CEST	192.168.2.5	1.1.1.1	0xedda	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:49.771167994 CEST	192.168.2.5	1.1.1.1	0xf46	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:49.771420002 CEST	192.168.2.5	1.1.1.1	0xc9b0	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.031636953 CEST	192.168.2.5	1.1.1.1	0x902f	Standard query (0)	google-bidout-d.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.031761885 CEST	192.168.2.5	1.1.1.1	0x5984	Standard query (0)	google-bidout-d.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.031975985 CEST	192.168.2.5	1.1.1.1	0xeabc	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.032073021 CEST	192.168.2.5	1.1.1.1	0x42bd	Standard query (0)	pippio.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.437306881 CEST	192.168.2.5	1.1.1.1	0x1a65	Standard query (0)	dmp.adform.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.437535048 CEST	192.168.2.5	1.1.1.1	0x1481	Standard query (0)	dmp.adform.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.443412066 CEST	192.168.2.5	1.1.1.1	0xd01a	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.443557978 CEST	192.168.2.5	1.1.1.1	0x9934	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.530291080 CEST	192.168.2.5	1.1.1.1	0x918c	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.530906916 CEST	192.168.2.5	1.1.1.1	0xe8f5	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.653527021 CEST	192.168.2.5	1.1.1.1	0x5f77	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.654654980 CEST	192.168.2.5	1.1.1.1	0xe0be	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.743415117 CEST	192.168.2.5	1.1.1.1	0x168	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.743731022 CEST	192.168.2.5	1.1.1.1	0x7116	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.748632908 CEST	192.168.2.5	1.1.1.1	0x1526	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.750850916 CEST	192.168.2.5	1.1.1.1	0x5ae8	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.751929045 CEST	192.168.2.5	1.1.1.1	0x996f	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.752384901 CEST	192.168.2.5	1.1.1.1	0x1847	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.754004002 CEST	192.168.2.5	1.1.1.1	0x9962	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.754481077 CEST	192.168.2.5	1.1.1.1	0xe4f8	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.808391094 CEST	192.168.2.5	1.1.1.1	0xd913	Standard query (0)	pghub.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.809276104 CEST	192.168.2.5	1.1.1.1	0x21d6	Standard query (0)	pghub.io	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.816037893 CEST	192.168.2.5	1.1.1.1	0xb931	Standard query (0)	cdn.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.816704988 CEST	192.168.2.5	1.1.1.1	0xf21	Standard query (0)	cdn.opecloud.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.919035912 CEST	192.168.2.5	1.1.1.1	0xb922	Standard query (0)	client-rapi-mediavine.recombee.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.919377089 CEST	192.168.2.5	1.1.1.1	0xa7b8	Standard query (0)	client-rapi-mediavine.recombee.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:50.996562958 CEST	192.168.2.5	1.1.1.1	0x37d9	Standard query (0)	config.aps.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.996896982 CEST	192.168.2.5	1.1.1.1	0x2a2b	Standard query (0)	config.aps.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:51.026134968 CEST	192.168.2.5	1.1.1.1	0x7633	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.026376009 CEST	192.168.2.5	1.1.1.1	0xe880	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:51.028775930 CEST	192.168.2.5	1.1.1.1	0x5a0a	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.029047012 CEST	192.168.2.5	1.1.1.1	0x2018	Standard query (0)	sync.technoratimedia.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:51.100075960 CEST	192.168.2.5	1.1.1.1	0x3fa6	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.100541115 CEST	192.168.2.5	1.1.1.1	0xd0d6	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:51.100975037 CEST	192.168.2.5	1.1.1.1	0x5dd	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.101428986 CEST	192.168.2.5	1.1.1.1	0xe29f	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:51.113924026 CEST	192.168.2.5	1.1.1.1	0x774a	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.114341974 CEST	192.168.2.5	1.1.1.1	0x5e00	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:51.662905931 CEST	192.168.2.5	1.1.1.1	0xa020	Standard query (0)	pixel-us-east.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.663196087 CEST	192.168.2.5	1.1.1.1	0xc2b5	Standard query (0)	pixel-us-east.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:51.687283039 CEST	192.168.2.5	1.1.1.1	0xbe30	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.687915087 CEST	192.168.2.5	1.1.1.1	0xc866	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.275461912 CEST	192.168.2.5	1.1.1.1	0x14a7	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.275856972 CEST	192.168.2.5	1.1.1.1	0x7263	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.276678085 CEST	192.168.2.5	1.1.1.1	0x735e	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.276916981 CEST	192.168.2.5	1.1.1.1	0x6a13	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.324636936 CEST	192.168.2.5	1.1.1.1	0x9b04	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.324798107 CEST	192.168.2.5	1.1.1.1	0x12d2	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.497143984 CEST	192.168.2.5	1.1.1.1	0xb6cf	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.497315884 CEST	192.168.2.5	1.1.1.1	0xb2ea	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.564361095 CEST	192.168.2.5	1.1.1.1	0x76ef	Standard query (0)	pdmp.dcapi.dmp.3lift.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.564762115 CEST	192.168.2.5	1.1.1.1	0x8a7	Standard query (0)	pdmp.dcapi.dmp.3lift.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.622539997 CEST	192.168.2.5	1.1.1.1	0x6289	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.624820948 CEST	192.168.2.5	1.1.1.1	0x5996	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.627717972 CEST	192.168.2.5	1.1.1.1	0xc2f	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.627959967 CEST	192.168.2.5	1.1.1.1	0x383b	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.630500078 CEST	192.168.2.5	1.1.1.1	0xe224	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.630821943 CEST	192.168.2.5	1.1.1.1	0xcb8d	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.734086990 CEST	192.168.2.5	1.1.1.1	0xed62	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.734549046 CEST	192.168.2.5	1.1.1.1	0x869b	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.736735106 CEST	192.168.2.5	1.1.1.1	0x93e0	Standard query (0)	esp.rtbhouse.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.737150908 CEST	192.168.2.5	1.1.1.1	0x60ca	Standard query (0)	esp.rtbhouse.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.749121904 CEST	192.168.2.5	1.1.1.1	0xd156	Standard query (0)	oajs.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.749428034 CEST	192.168.2.5	1.1.1.1	0xa8c9	Standard query (0)	oajs.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.757349968 CEST	192.168.2.5	1.1.1.1	0x91e3	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.757643938 CEST	192.168.2.5	1.1.1.1	0xca6e	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.764653921 CEST	192.168.2.5	1.1.1.1	0x5f5d	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.770560980 CEST	192.168.2.5	1.1.1.1	0x4ce8	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.771771908 CEST	192.168.2.5	1.1.1.1	0x1e89	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.772186995 CEST	192.168.2.5	1.1.1.1	0x3933	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.774934053 CEST	192.168.2.5	1.1.1.1	0x335e	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.775432110 CEST	192.168.2.5	1.1.1.1	0x614d	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.782890081 CEST	192.168.2.5	1.1.1.1	0xdcf6	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.783359051 CEST	192.168.2.5	1.1.1.1	0xffbe	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.791553020 CEST	192.168.2.5	1.1.1.1	0xca86	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.791867018 CEST	192.168.2.5	1.1.1.1	0x7496	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:52.793526888 CEST	192.168.2.5	1.1.1.1	0x9518	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.793852091 CEST	192.168.2.5	1.1.1.1	0x4039	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:53.410413027 CEST	192.168.2.5	1.1.1.1	0xe26b	Standard query (0)	a.sportradarserving.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:53.410573959 CEST	192.168.2.5	1.1.1.1	0x5458	Standard query (0)	a.sportradarserving.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:56.803565025 CEST	192.168.2.5	1.1.1.1	0x7a01	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:56.803695917 CEST	192.168.2.5	1.1.1.1	0xd24b	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.182023048 CEST	192.168.2.5	1.1.1.1	0xb347	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.182684898 CEST	192.168.2.5	1.1.1.1	0x2c16	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.183592081 CEST	192.168.2.5	1.1.1.1	0xeeeb	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.183953047 CEST	192.168.2.5	1.1.1.1	0xf6fa	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.185681105 CEST	192.168.2.5	1.1.1.1	0xb5b	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.186158895 CEST	192.168.2.5	1.1.1.1	0xda4c	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.188556910 CEST	192.168.2.5	1.1.1.1	0xf45a	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.189624071 CEST	192.168.2.5	1.1.1.1	0xe017	Standard query (0)	sync.mathtag.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.190294027 CEST	192.168.2.5	1.1.1.1	0x9848	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.190763950 CEST	192.168.2.5	1.1.1.1	0x671d	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.192694902 CEST	192.168.2.5	1.1.1.1	0x3391	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.193428040 CEST	192.168.2.5	1.1.1.1	0xce20	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.194478989 CEST	192.168.2.5	1.1.1.1	0xc862	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.195745945 CEST	192.168.2.5	1.1.1.1	0x32de	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.212768078 CEST	192.168.2.5	1.1.1.1	0xa331	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.212898016 CEST	192.168.2.5	1.1.1.1	0xedad	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.213282108 CEST	192.168.2.5	1.1.1.1	0x899	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.233170986 CEST	192.168.2.5	1.1.1.1	0x2e7e	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.238396883 CEST	192.168.2.5	1.1.1.1	0xcbf4	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.238553047 CEST	192.168.2.5	1.1.1.1	0xe791	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.240087032 CEST	192.168.2.5	1.1.1.1	0x80b9	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.240447998 CEST	192.168.2.5	1.1.1.1	0xc78b	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.241069078 CEST	192.168.2.5	1.1.1.1	0xa76	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.241471052 CEST	192.168.2.5	1.1.1.1	0x43a7	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.243845940 CEST	192.168.2.5	1.1.1.1	0x6ad1	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.244221926 CEST	192.168.2.5	1.1.1.1	0xa8b5	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.599385977 CEST	192.168.2.5	1.1.1.1	0x8486	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.599508047 CEST	192.168.2.5	1.1.1.1	0xf88f	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.600493908 CEST	192.168.2.5	1.1.1.1	0x2643	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.600610018 CEST	192.168.2.5	1.1.1.1	0x569a	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.600852966 CEST	192.168.2.5	1.1.1.1	0x90a6	Standard query (0)	sync.bfmio.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.601083040 CEST	192.168.2.5	1.1.1.1	0xf2f2	Standard query (0)	sync.bfmio.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.601464033 CEST	192.168.2.5	1.1.1.1	0x4361	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.601643085 CEST	192.168.2.5	1.1.1.1	0xa73	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.602739096 CEST	192.168.2.5	1.1.1.1	0x1608	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.602850914 CEST	192.168.2.5	1.1.1.1	0x3824	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.603060961 CEST	192.168.2.5	1.1.1.1	0xfae4	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.603167057 CEST	192.168.2.5	1.1.1.1	0x8efc	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.604018927 CEST	192.168.2.5	1.1.1.1	0xe299	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.604139090 CEST	192.168.2.5	1.1.1.1	0xea47	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.604559898 CEST	192.168.2.5	1.1.1.1	0x62ff	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.604903936 CEST	192.168.2.5	1.1.1.1	0x3d5c	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.605150938 CEST	192.168.2.5	1.1.1.1	0x773f	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.605266094 CEST	192.168.2.5	1.1.1.1	0xe68e	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.629434109 CEST	192.168.2.5	1.1.1.1	0xf07e	Standard query (0)	feed.pghub.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.629615068 CEST	192.168.2.5	1.1.1.1	0xc9a5	Standard query (0)	feed.pghub.io	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.731199026 CEST	192.168.2.5	1.1.1.1	0x3a9c	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.731465101 CEST	192.168.2.5	1.1.1.1	0xe9e	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:58.732215881 CEST	192.168.2.5	1.1.1.1	0xe514	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.732367992 CEST	192.168.2.5	1.1.1.1	0xf524	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:59.170018911 CEST	192.168.2.5	1.1.1.1	0x4f41	Standard query (0)	prebid.a-mo.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.170278072 CEST	192.168.2.5	1.1.1.1	0x7799	Standard query (0)	prebid.a-mo.net	65	IN (0x0001)	false
Apr 25, 2024 21:25:59.263118029 CEST	192.168.2.5	1.1.1.1	0x7ec6	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.263662100 CEST	192.168.2.5	1.1.1.1	0x4a2b	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:59.342458010 CEST	192.168.2.5	1.1.1.1	0x8893	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.342849016 CEST	192.168.2.5	1.1.1.1	0x8056	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:59.528918982 CEST	192.168.2.5	1.1.1.1	0x5773	Standard query (0)	pandg.tapad.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.529066086 CEST	192.168.2.5	1.1.1.1	0xa300	Standard query (0)	pandg.tapad.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:59.537436962 CEST	192.168.2.5	1.1.1.1	0x7859	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.537594080 CEST	192.168.2.5	1.1.1.1	0x9445	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:59.935857058 CEST	192.168.2.5	1.1.1.1	0x8b02	Standard query (0)	cs.iqzone.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.936058044 CEST	192.168.2.5	1.1.1.1	0xb1e9	Standard query (0)	cs.iqzone.com	65	IN (0x0001)	false
Apr 25, 2024 21:25:59.952810049 CEST	192.168.2.5	1.1.1.1	0xf899	Standard query (0)	gocm.c.appier.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.953207970 CEST	192.168.2.5	1.1.1.1	0x9aa5	Standard query (0)	gocm.c.appier.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:00.377868891 CEST	192.168.2.5	1.1.1.1	0x4d2b	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.378034115 CEST	192.168.2.5	1.1.1.1	0xccd1	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:00.399007082 CEST	192.168.2.5	1.1.1.1	0xb7b0	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.399193048 CEST	192.168.2.5	1.1.1.1	0x76b2	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:00.737457037 CEST	192.168.2.5	1.1.1.1	0xbf9b	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.737582922 CEST	192.168.2.5	1.1.1.1	0x1007	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:00.884222031 CEST	192.168.2.5	1.1.1.1	0xb8a3	Standard query (0)	cdn.mediago.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.884704113 CEST	192.168.2.5	1.1.1.1	0x34ce	Standard query (0)	cdn.mediago.io	65	IN (0x0001)	false
Apr 25, 2024 21:26:00.886625051 CEST	192.168.2.5	1.1.1.1	0x61a3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.886764050 CEST	192.168.2.5	1.1.1.1	0xbbdd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:01.069096088 CEST	192.168.2.5	1.1.1.1	0x9469	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.069350004 CEST	192.168.2.5	1.1.1.1	0x8ab2	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:01.088838100 CEST	192.168.2.5	1.1.1.1	0x5402	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.088962078 CEST	192.168.2.5	1.1.1.1	0xa622	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
Apr 25, 2024 21:26:01.368705988 CEST	192.168.2.5	1.1.1.1	0x99e8	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.369016886 CEST	192.168.2.5	1.1.1.1	0x6dda	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:01.374548912 CEST	192.168.2.5	1.1.1.1	0x3e64	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.374768019 CEST	192.168.2.5	1.1.1.1	0xca02	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:01.570487022 CEST	192.168.2.5	1.1.1.1	0x83	Standard query (0)	images.mediago.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.570727110 CEST	192.168.2.5	1.1.1.1	0xf174	Standard query (0)	images.mediago.io	65	IN (0x0001)	false
Apr 25, 2024 21:26:01.746598005 CEST	192.168.2.5	1.1.1.1	0xa020	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.747036934 CEST	192.168.2.5	1.1.1.1	0x6a68	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Apr 25, 2024 21:26:02.493129969 CEST	192.168.2.5	1.1.1.1	0xe535	Standard query (0)	dclk-match.dotomi.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.493477106 CEST	192.168.2.5	1.1.1.1	0x7926	Standard query (0)	dclk-match.dotomi.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:02.506230116 CEST	192.168.2.5	1.1.1.1	0x88fd	Standard query (0)	aid.send.microad.jp	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.506581068 CEST	192.168.2.5	1.1.1.1	0x20dd	Standard query (0)	aid.send.microad.jp	65	IN (0x0001)	false
Apr 25, 2024 21:26:02.509412050 CEST	192.168.2.5	1.1.1.1	0x4e5	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.509705067 CEST	192.168.2.5	1.1.1.1	0xbd79	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:02.510277987 CEST	192.168.2.5	1.1.1.1	0x9f15	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.510765076 CEST	192.168.2.5	1.1.1.1	0x19c	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:02.511141062 CEST	192.168.2.5	1.1.1.1	0xcc41	Standard query (0)	sync.inmobi.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.511486053 CEST	192.168.2.5	1.1.1.1	0x4602	Standard query (0)	sync.inmobi.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:03.170201063 CEST	192.168.2.5	1.1.1.1	0x74ac	Standard query (0)	router.infolinks.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:03.170464993 CEST	192.168.2.5	1.1.1.1	0xacc7	Standard query (0)	router.infolinks.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.013535023 CEST	192.168.2.5	1.1.1.1	0xf5b4	Standard query (0)	gtrace.mediago.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.014128923 CEST	192.168.2.5	1.1.1.1	0x3df0	Standard query (0)	gtrace.mediago.io	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.076699018 CEST	192.168.2.5	1.1.1.1	0x9f65	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.076967001 CEST	192.168.2.5	1.1.1.1	0xac8c	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.078942060 CEST	192.168.2.5	1.1.1.1	0xf8a	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.079484940 CEST	192.168.2.5	1.1.1.1	0x5a38	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.091207981 CEST	192.168.2.5	1.1.1.1	0xd245	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.305366993 CEST	192.168.2.5	1.1.1.1	0x63fd	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.309777021 CEST	192.168.2.5	1.1.1.1	0xe066	Standard query (0)	io.narrative.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.310537100 CEST	192.168.2.5	1.1.1.1	0x79b4	Standard query (0)	io.narrative.io	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.338443041 CEST	192.168.2.5	1.1.1.1	0xe77d	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.338771105 CEST	192.168.2.5	1.1.1.1	0x22cd	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.375932932 CEST	192.168.2.5	1.1.1.1	0x3467	Standard query (0)	client-rapi-mediavine.recombee.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.376241922 CEST	192.168.2.5	1.1.1.1	0x44cb	Standard query (0)	client-rapi-mediavine.recombee.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.376779079 CEST	192.168.2.5	1.1.1.1	0xefe6	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.377079964 CEST	192.168.2.5	1.1.1.1	0x8a9a	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.377727032 CEST	192.168.2.5	1.1.1.1	0x244c	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.377861023 CEST	192.168.2.5	1.1.1.1	0xa00a	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.381365061 CEST	192.168.2.5	1.1.1.1	0x91b0	Standard query (0)	aax.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.381650925 CEST	192.168.2.5	1.1.1.1	0xfafb	Standard query (0)	aax.amazon-adsystem.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.382761955 CEST	192.168.2.5	1.1.1.1	0xb0dd	Standard query (0)	prebid-server.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.383193970 CEST	192.168.2.5	1.1.1.1	0x990	Standard query (0)	prebid-server.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.385422945 CEST	192.168.2.5	1.1.1.1	0x7ae9	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.385639906 CEST	192.168.2.5	1.1.1.1	0x8157	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.386697054 CEST	192.168.2.5	1.1.1.1	0xdf60	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.386902094 CEST	192.168.2.5	1.1.1.1	0x181	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:05.387639999 CEST	192.168.2.5	1.1.1.1	0xef19	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.387933016 CEST	192.168.2.5	1.1.1.1	0xb01b	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.240674973 CEST	192.168.2.5	1.1.1.1	0xc1bf	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.240807056 CEST	192.168.2.5	1.1.1.1	0x6a4	Standard query (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.241298914 CEST	192.168.2.5	1.1.1.1	0x3bbf	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.241410971 CEST	192.168.2.5	1.1.1.1	0x1c4a	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.243510962 CEST	192.168.2.5	1.1.1.1	0x6dd0	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.243705034 CEST	192.168.2.5	1.1.1.1	0x9499	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.244071960 CEST	192.168.2.5	1.1.1.1	0x9f	Standard query (0)	pdmp.dcapi.dmp.3lift.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.244201899 CEST	192.168.2.5	1.1.1.1	0x6730	Standard query (0)	pdmp.dcapi.dmp.3lift.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.244693995 CEST	192.168.2.5	1.1.1.1	0x81b1	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.244827986 CEST	192.168.2.5	1.1.1.1	0x9b40	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.245182991 CEST	192.168.2.5	1.1.1.1	0x2be7	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.245326042 CEST	192.168.2.5	1.1.1.1	0x5f87	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.248178005 CEST	192.168.2.5	1.1.1.1	0xd6a1	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.248322010 CEST	192.168.2.5	1.1.1.1	0xc4d9	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.259053946 CEST	192.168.2.5	1.1.1.1	0xfbe7	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.259562969 CEST	192.168.2.5	1.1.1.1	0xde4e	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.260087967 CEST	192.168.2.5	1.1.1.1	0x3c6	Standard query (0)	synchroscript.deliveryengine.adswizz.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.260297060 CEST	192.168.2.5	1.1.1.1	0x7248	Standard query (0)	synchroscript.deliveryengine.adswizz.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.261426926 CEST	192.168.2.5	1.1.1.1	0x7f12	Standard query (0)	events-ssc.33across.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.261622906 CEST	192.168.2.5	1.1.1.1	0x7ba7	Standard query (0)	events-ssc.33across.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.263772011 CEST	192.168.2.5	1.1.1.1	0xdf1d	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.263920069 CEST	192.168.2.5	1.1.1.1	0x1d8	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:06.268294096 CEST	192.168.2.5	1.1.1.1	0xa45d	Standard query (0)	ads.creative-serving.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.268532991 CEST	192.168.2.5	1.1.1.1	0x5949	Standard query (0)	ads.creative-serving.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.350142956 CEST	192.168.2.5	1.1.1.1	0x392e	Standard query (0)	loada.exelator.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.350475073 CEST	192.168.2.5	1.1.1.1	0xbb52	Standard query (0)	loada.exelator.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.372948885 CEST	192.168.2.5	1.1.1.1	0x9810	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.373198032 CEST	192.168.2.5	1.1.1.1	0xd73f	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.379265070 CEST	192.168.2.5	1.1.1.1	0x8bf2	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.379477024 CEST	192.168.2.5	1.1.1.1	0x96c1	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.380151033 CEST	192.168.2.5	1.1.1.1	0x891	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.380289078 CEST	192.168.2.5	1.1.1.1	0x31e0	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.381455898 CEST	192.168.2.5	1.1.1.1	0x2b87	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.381836891 CEST	192.168.2.5	1.1.1.1	0xaf27	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.382620096 CEST	192.168.2.5	1.1.1.1	0x70e7	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.383034945 CEST	192.168.2.5	1.1.1.1	0x8f31	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.392237902 CEST	192.168.2.5	1.1.1.1	0x7427	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.393187046 CEST	192.168.2.5	1.1.1.1	0x7ec0	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.393928051 CEST	192.168.2.5	1.1.1.1	0x5d36	Standard query (0)	images.mediago.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.394344091 CEST	192.168.2.5	1.1.1.1	0x29e7	Standard query (0)	images.mediago.io	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.396888971 CEST	192.168.2.5	1.1.1.1	0x9cff	Standard query (0)	trace.mediago.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.397332907 CEST	192.168.2.5	1.1.1.1	0x170c	Standard query (0)	trace.mediago.io	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.399074078 CEST	192.168.2.5	1.1.1.1	0x7ec2	Standard query (0)	sync.inmobi.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.399352074 CEST	192.168.2.5	1.1.1.1	0x1a91	Standard query (0)	sync.inmobi.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:08.400165081 CEST	192.168.2.5	1.1.1.1	0x4f5	Standard query (0)	aid.send.microad.jp	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.400430918 CEST	192.168.2.5	1.1.1.1	0x83e3	Standard query (0)	aid.send.microad.jp	65	IN (0x0001)	false
Apr 25, 2024 21:26:11.005589962 CEST	192.168.2.5	1.1.1.1	0xec8e	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.008295059 CEST	192.168.2.5	1.1.1.1	0xffc9	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:11.010401011 CEST	192.168.2.5	1.1.1.1	0x6de9	Standard query (0)	router.infolinks.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.010946035 CEST	192.168.2.5	1.1.1.1	0xdafd	Standard query (0)	router.infolinks.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:11.035217047 CEST	192.168.2.5	1.1.1.1	0xbf47	Standard query (0)	pmp.mxptint.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.035357952 CEST	192.168.2.5	1.1.1.1	0xfd77	Standard query (0)	pmp.mxptint.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:11.045325041 CEST	192.168.2.5	1.1.1.1	0xf3a5	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.045604944 CEST	192.168.2.5	1.1.1.1	0x611d	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:11.053010941 CEST	192.168.2.5	1.1.1.1	0x4e30	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.053324938 CEST	192.168.2.5	1.1.1.1	0xecb5	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:11.054965973 CEST	192.168.2.5	1.1.1.1	0x7ba2	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.055414915 CEST	192.168.2.5	1.1.1.1	0x256b	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:11.056020021 CEST	192.168.2.5	1.1.1.1	0x3d3c	Standard query (0)	bpi.rtactivate.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.056255102 CEST	192.168.2.5	1.1.1.1	0xc2f9	Standard query (0)	bpi.rtactivate.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:12.076131105 CEST	192.168.2.5	1.1.1.1	0x6e5f	Standard query (0)	to.getnitropack.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.076277971 CEST	192.168.2.5	1.1.1.1	0x9f66	Standard query (0)	to.getnitropack.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:12.203737974 CEST	192.168.2.5	1.1.1.1	0xc11d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.206393957 CEST	192.168.2.5	1.1.1.1	0x9439	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:12.278902054 CEST	192.168.2.5	1.1.1.1	0x43e4	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.279027939 CEST	192.168.2.5	1.1.1.1	0x434b	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:12.323993921 CEST	192.168.2.5	1.1.1.1	0xeefe	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.324356079 CEST	192.168.2.5	1.1.1.1	0x6d76	Standard query (0)	pippio.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:14.701385021 CEST	192.168.2.5	1.1.1.1	0x643	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:14.701513052 CEST	192.168.2.5	1.1.1.1	0x53bf	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:15.163260937 CEST	192.168.2.5	1.1.1.1	0xd5da	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:15.163393021 CEST	192.168.2.5	1.1.1.1	0x4d57	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:15.762527943 CEST	192.168.2.5	1.1.1.1	0x244c	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:15.762661934 CEST	192.168.2.5	1.1.1.1	0xfdfc	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:16.019157887 CEST	192.168.2.5	1.1.1.1	0x10b2	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:16.019273043 CEST	192.168.2.5	1.1.1.1	0xf7ae	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:19.663068056 CEST	192.168.2.5	1.1.1.1	0x5133	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.663340092 CEST	192.168.2.5	1.1.1.1	0xfba6	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:19.694525003 CEST	192.168.2.5	1.1.1.1	0xa112	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.694679976 CEST	192.168.2.5	1.1.1.1	0x769c	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:20.173438072 CEST	192.168.2.5	1.1.1.1	0x5ae5	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:20.174065113 CEST	192.168.2.5	1.1.1.1	0xb88e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:20.289453983 CEST	192.168.2.5	1.1.1.1	0x8d44	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:20.289453983 CEST	192.168.2.5	1.1.1.1	0x4	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:20.290875912 CEST	192.168.2.5	1.1.1.1	0x1e5c	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:20.291045904 CEST	192.168.2.5	1.1.1.1	0xde22	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:20.849972963 CEST	192.168.2.5	1.1.1.1	0x3ffe	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:20.850274086 CEST	192.168.2.5	1.1.1.1	0x11fc	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:20.851445913 CEST	192.168.2.5	1.1.1.1	0xc940	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:20.851732016 CEST	192.168.2.5	1.1.1.1	0xe20e	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:20.920106888 CEST	192.168.2.5	1.1.1.1	0x6755	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:20.920250893 CEST	192.168.2.5	1.1.1.1	0xab4e	Standard query (0)	pool.admedo.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:21.355853081 CEST	192.168.2.5	1.1.1.1	0xf4ef	Standard query (0)	data.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.356074095 CEST	192.168.2.5	1.1.1.1	0x431e	Standard query (0)	data.adsrvr.org	65	IN (0x0001)	false
Apr 25, 2024 21:26:21.784372091 CEST	192.168.2.5	1.1.1.1	0x8c04	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.784595013 CEST	192.168.2.5	1.1.1.1	0x8392	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:21.786436081 CEST	192.168.2.5	1.1.1.1	0xc58f	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.786587954 CEST	192.168.2.5	1.1.1.1	0x2cfe	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:23.862447977 CEST	192.168.2.5	1.1.1.1	0x83f0	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:23.862620115 CEST	192.168.2.5	1.1.1.1	0xf9e0	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:24.516035080 CEST	192.168.2.5	1.1.1.1	0xe210	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:24.516035080 CEST	192.168.2.5	1.1.1.1	0x60a	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:24.787230015 CEST	192.168.2.5	1.1.1.1	0x7258	Standard query (0)	scripts.mediavine.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:24.787439108 CEST	192.168.2.5	1.1.1.1	0x421e	Standard query (0)	scripts.mediavine.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:26.187930107 CEST	192.168.2.5	1.1.1.1	0xb182	Standard query (0)	oxp.mxptint.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.187931061 CEST	192.168.2.5	1.1.1.1	0x70e6	Standard query (0)	oxp.mxptint.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:26.188800097 CEST	192.168.2.5	1.1.1.1	0x1780	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.189027071 CEST	192.168.2.5	1.1.1.1	0x3f67	Standard query (0)	i.w55c.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:26.522208929 CEST	192.168.2.5	1.1.1.1	0x3766	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.522208929 CEST	192.168.2.5	1.1.1.1	0x61a4	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:26.731556892 CEST	192.168.2.5	1.1.1.1	0x12a3	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.731849909 CEST	192.168.2.5	1.1.1.1	0xad9f	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:26.734164000 CEST	192.168.2.5	1.1.1.1	0xb7d4	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.734467983 CEST	192.168.2.5	1.1.1.1	0xbca9	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:26.757041931 CEST	192.168.2.5	1.1.1.1	0x111a	Standard query (0)	inv-nets.admixer.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.757169962 CEST	192.168.2.5	1.1.1.1	0x6c4a	Standard query (0)	inv-nets.admixer.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:27.104032993 CEST	192.168.2.5	1.1.1.1	0xe4b0	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.104171038 CEST	192.168.2.5	1.1.1.1	0x1c9c	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:27.599947929 CEST	192.168.2.5	1.1.1.1	0x8126	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.600095034 CEST	192.168.2.5	1.1.1.1	0xae1	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:28.327436924 CEST	192.168.2.5	1.1.1.1	0x3c93	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.327780962 CEST	192.168.2.5	1.1.1.1	0x38e5	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:28.333344936 CEST	192.168.2.5	1.1.1.1	0x1d84	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.333344936 CEST	192.168.2.5	1.1.1.1	0xcdef	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
Apr 25, 2024 21:26:28.527756929 CEST	192.168.2.5	1.1.1.1	0xe281	Standard query (0)	cdn.ampproject.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.528002977 CEST	192.168.2.5	1.1.1.1	0x5ba3	Standard query (0)	cdn.ampproject.org	65	IN (0x0001)	false
Apr 25, 2024 21:26:28.955425978 CEST	192.168.2.5	1.1.1.1	0x7a27	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.955588102 CEST	192.168.2.5	1.1.1.1	0xac51	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:29.049331903 CEST	192.168.2.5	1.1.1.1	0x61cb	Standard query (0)	hb.yahoo.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:29.049504042 CEST	192.168.2.5	1.1.1.1	0x6d5d	Standard query (0)	hb.yahoo.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:31.155095100 CEST	192.168.2.5	1.1.1.1	0x1b69	Standard query (0)	serve-va.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:31.156795979 CEST	192.168.2.5	1.1.1.1	0xb699	Standard query (0)	serve-va.acuityplatform.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:31.782762051 CEST	192.168.2.5	1.1.1.1	0x244d	Standard query (0)	rtb.adstanding.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:31.782881021 CEST	192.168.2.5	1.1.1.1	0xdd72	Standard query (0)	rtb.adstanding.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:31.913511038 CEST	192.168.2.5	1.1.1.1	0xda6d	Standard query (0)	z.moatads.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:31.913789988 CEST	192.168.2.5	1.1.1.1	0xa66c	Standard query (0)	z.moatads.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:31.914436102 CEST	192.168.2.5	1.1.1.1	0x3319	Standard query (0)	cdn.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:31.914561033 CEST	192.168.2.5	1.1.1.1	0xb4ff	Standard query (0)	cdn.acuityplatform.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:31.915358067 CEST	192.168.2.5	1.1.1.1	0x220f	Standard query (0)	metrics.getrockerbox.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:31.915508032 CEST	192.168.2.5	1.1.1.1	0x8fc1	Standard query (0)	metrics.getrockerbox.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:32.309451103 CEST	192.168.2.5	1.1.1.1	0x8668	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.309655905 CEST	192.168.2.5	1.1.1.1	0xb2f5	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:32.570064068 CEST	192.168.2.5	1.1.1.1	0xf68a	Standard query (0)	metrics.getrockerbox.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.570365906 CEST	192.168.2.5	1.1.1.1	0xfe91	Standard query (0)	metrics.getrockerbox.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:32.571214914 CEST	192.168.2.5	1.1.1.1	0xb9fb	Standard query (0)	cdn.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.571430922 CEST	192.168.2.5	1.1.1.1	0x4929	Standard query (0)	cdn.acuityplatform.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:33.059932947 CEST	192.168.2.5	1.1.1.1	0x514d	Standard query (0)	dsp.adkernel.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.060112953 CEST	192.168.2.5	1.1.1.1	0x1fa	Standard query (0)	dsp.adkernel.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:33.061132908 CEST	192.168.2.5	1.1.1.1	0xea1d	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Apr 25, 2024 21:26:33.061132908 CEST	192.168.2.5	1.1.1.1	0xc265	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.062544107 CEST	192.168.2.5	1.1.1.1	0xea76	Standard query (0)	cookies.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.063750982 CEST	192.168.2.5	1.1.1.1	0x8e7f	Standard query (0)	cookies.nextmillmedia.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:33.705869913 CEST	192.168.2.5	1.1.1.1	0x747a	Standard query (0)	cookies.nextmillmedia.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.705995083 CEST	192.168.2.5	1.1.1.1	0x88c0	Standard query (0)	cookies.nextmillmedia.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:33.787818909 CEST	192.168.2.5	1.1.1.1	0xba02	Standard query (0)	serve-va.acuityplatform.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.787950039 CEST	192.168.2.5	1.1.1.1	0xeb4f	Standard query (0)	serve-va.acuityplatform.com	65	IN (0x0001)	false
Apr 25, 2024 21:26:33.957109928 CEST	192.168.2.5	1.1.1.1	0xb37	Standard query (0)	image8.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.957217932 CEST	192.168.2.5	1.1.1.1	0x3ed8	Standard query (0)	image8.pubmatic.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 21:25:13.947246075 CEST	1.1.1.1	192.168.2.5	0xa024	No error (0)	earnandexcel.com		162.159.135.42	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:14.882911921 CEST	1.1.1.1	192.168.2.5	0x5a2f	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:14.883356094 CEST	1.1.1.1	192.168.2.5	0x9be6	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:15.092432976 CEST	1.1.1.1	192.168.2.5	0xdfcc	No error (0)	www.google.com		64.233.185.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:15.092432976 CEST	1.1.1.1	192.168.2.5	0xdfcc	No error (0)	www.google.com		64.233.185.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:15.092432976 CEST	1.1.1.1	192.168.2.5	0xdfcc	No error (0)	www.google.com		64.233.185.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:15.092432976 CEST	1.1.1.1	192.168.2.5	0xdfcc	No error (0)	www.google.com		64.233.185.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:15.092432976 CEST	1.1.1.1	192.168.2.5	0xdfcc	No error (0)	www.google.com		64.233.185.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:15.092432976 CEST	1.1.1.1	192.168.2.5	0xdfcc	No error (0)	www.google.com		64.233.185.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:15.093206882 CEST	1.1.1.1	192.168.2.5	0x6964	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 21:25:20.328190088 CEST	1.1.1.1	192.168.2.5	0x2b5	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:21.547426939 CEST	1.1.1.1	192.168.2.5	0xfced	No error (0)	earnandexcel.com		162.159.135.42	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:22.060688972 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:22.060688972 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	securepubads46.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:22.060688972 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	securepubads46.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:22.060688972 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	securepubads46.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:22.060688972 CEST	1.1.1.1	192.168.2.5	0xd754	No error (0)	securepubads46.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:22.061647892 CEST	1.1.1.1	192.168.2.5	0x861e	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:23.836838961 CEST	1.1.1.1	192.168.2.5	0x1a61	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:23.837368965 CEST	1.1.1.1	192.168.2.5	0xfaf5	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:26.955852985 CEST	1.1.1.1	192.168.2.5	0x8834	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:26.955852985 CEST	1.1.1.1	192.168.2.5	0x8834	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:27.061655998 CEST	1.1.1.1	192.168.2.5	0x8f48	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:27.149177074 CEST	1.1.1.1	192.168.2.5	0x346e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:27.149177074 CEST	1.1.1.1	192.168.2.5	0x346e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:27.849467993 CEST	1.1.1.1	192.168.2.5	0x780f	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.193897963 CEST	1.1.1.1	192.168.2.5	0x4227	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:30.193897963 CEST	1.1.1.1	192.168.2.5	0x4227	No error (0)	static-cdn.hotjar.com		3.161.188.46	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.193897963 CEST	1.1.1.1	192.168.2.5	0x4227	No error (0)	static-cdn.hotjar.com		3.161.188.14	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.193897963 CEST	1.1.1.1	192.168.2.5	0x4227	No error (0)	static-cdn.hotjar.com		3.161.188.54	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.193897963 CEST	1.1.1.1	192.168.2.5	0x4227	No error (0)	static-cdn.hotjar.com		3.161.188.128	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.195056915 CEST	1.1.1.1	192.168.2.5	0xa6a2	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:30.625700951 CEST	1.1.1.1	192.168.2.5	0x5678	No error (0)	nitroscripts.com		172.64.154.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.625700951 CEST	1.1.1.1	192.168.2.5	0x5678	No error (0)	nitroscripts.com		104.18.33.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:30.669105053 CEST	1.1.1.1	192.168.2.5	0x2471	No error (0)	nitroscripts.com			65	IN (0x0001)	false
Apr 25, 2024 21:25:32.342622995 CEST	1.1.1.1	192.168.2.5	0xc42d	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:32.344461918 CEST	1.1.1.1	192.168.2.5	0x3134	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:32.906605959 CEST	1.1.1.1	192.168.2.5	0x9ad7	No error (0)	exchange.mediavine.com		44.210.232.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.906605959 CEST	1.1.1.1	192.168.2.5	0x9ad7	No error (0)	exchange.mediavine.com		3.223.118.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.906605959 CEST	1.1.1.1	192.168.2.5	0x9ad7	No error (0)	exchange.mediavine.com		34.235.48.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.909132004 CEST	1.1.1.1	192.168.2.5	0x33c2	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:32.909835100 CEST	1.1.1.1	192.168.2.5	0x7c6e	No error (0)	keywords.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:32.977804899 CEST	1.1.1.1	192.168.2.5	0xfa5e	No error (0)	sc-static.net		108.139.23.251	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:32.981113911 CEST	1.1.1.1	192.168.2.5	0x5dfa	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:32.983448982 CEST	1.1.1.1	192.168.2.5	0x3373	No error (0)	support.content.office.net	support.content.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.545066118 CEST	1.1.1.1	192.168.2.5	0x977a	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.545066118 CEST	1.1.1.1	192.168.2.5	0x977a	No error (0)	scontent.xx.fbcdn.net		31.13.88.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.545650005 CEST	1.1.1.1	192.168.2.5	0xb8c4	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.672096014 CEST	1.1.1.1	192.168.2.5	0xa732	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.672096014 CEST	1.1.1.1	192.168.2.5	0xa732	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.672096014 CEST	1.1.1.1	192.168.2.5	0xa732	No error (0)	dualstack.pinterest.map.fastly.net		151.101.12.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.672563076 CEST	1.1.1.1	192.168.2.5	0x3afa	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.672563076 CEST	1.1.1.1	192.168.2.5	0x3afa	No error (0)	s-pinimg-com.gslb.pinterest.com	static.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.672563076 CEST	1.1.1.1	192.168.2.5	0x3afa	No error (0)	static.gslb.pinterest.net	s.pinimg.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.798599958 CEST	1.1.1.1	192.168.2.5	0x78f7	No error (0)	widget.wickedreports.com		99.84.108.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.798599958 CEST	1.1.1.1	192.168.2.5	0x78f7	No error (0)	widget.wickedreports.com		99.84.108.73	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.798599958 CEST	1.1.1.1	192.168.2.5	0x78f7	No error (0)	widget.wickedreports.com		99.84.108.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.798599958 CEST	1.1.1.1	192.168.2.5	0x78f7	No error (0)	widget.wickedreports.com		99.84.108.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.939440966 CEST	1.1.1.1	192.168.2.5	0x5263	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.939440966 CEST	1.1.1.1	192.168.2.5	0x5263	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.939502954 CEST	1.1.1.1	192.168.2.5	0xc1cf	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.939502954 CEST	1.1.1.1	192.168.2.5	0xc1cf	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:33.943275928 CEST	1.1.1.1	192.168.2.5	0x1f1a	No error (0)	script.hotjar.com		18.64.236.18	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.943275928 CEST	1.1.1.1	192.168.2.5	0x1f1a	No error (0)	script.hotjar.com		18.64.236.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.943275928 CEST	1.1.1.1	192.168.2.5	0x1f1a	No error (0)	script.hotjar.com		18.64.236.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:33.943275928 CEST	1.1.1.1	192.168.2.5	0x1f1a	No error (0)	script.hotjar.com		18.64.236.128	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.039679050 CEST	1.1.1.1	192.168.2.5	0xcd1d	No error (0)	td.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.039679050 CEST	1.1.1.1	192.168.2.5	0xcd1d	No error (0)	td.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.039679050 CEST	1.1.1.1	192.168.2.5	0xcd1d	No error (0)	td.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.039679050 CEST	1.1.1.1	192.168.2.5	0xcd1d	No error (0)	td.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.040316105 CEST	1.1.1.1	192.168.2.5	0xc75c	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.040316105 CEST	1.1.1.1	192.168.2.5	0xc75c	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.040316105 CEST	1.1.1.1	192.168.2.5	0xc75c	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.040752888 CEST	1.1.1.1	192.168.2.5	0xcb3e	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.040752888 CEST	1.1.1.1	192.168.2.5	0xcb3e	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.485449076 CEST	1.1.1.1	192.168.2.5	0x35ed	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.485449076 CEST	1.1.1.1	192.168.2.5	0x35ed	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.485449076 CEST	1.1.1.1	192.168.2.5	0x35ed	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.485737085 CEST	1.1.1.1	192.168.2.5	0xa913	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.485737085 CEST	1.1.1.1	192.168.2.5	0xa913	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.678028107 CEST	1.1.1.1	192.168.2.5	0x675d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 21:25:34.678457975 CEST	1.1.1.1	192.168.2.5	0xac09	No error (0)	googleads.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.678457975 CEST	1.1.1.1	192.168.2.5	0xac09	No error (0)	googleads.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.678457975 CEST	1.1.1.1	192.168.2.5	0xac09	No error (0)	googleads.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.678457975 CEST	1.1.1.1	192.168.2.5	0xac09	No error (0)	googleads.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.722213984 CEST	1.1.1.1	192.168.2.5	0x485f	No error (0)	sc-static.net		108.139.23.251	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.966459036 CEST	1.1.1.1	192.168.2.5	0xda1d	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:34.966459036 CEST	1.1.1.1	192.168.2.5	0xda1d	No error (0)	vc-live-cf.hotjar.io		3.163.115.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.966459036 CEST	1.1.1.1	192.168.2.5	0xda1d	No error (0)	vc-live-cf.hotjar.io		3.163.115.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.966459036 CEST	1.1.1.1	192.168.2.5	0xda1d	No error (0)	vc-live-cf.hotjar.io		3.163.115.68	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.966459036 CEST	1.1.1.1	192.168.2.5	0xda1d	No error (0)	vc-live-cf.hotjar.io		3.163.115.114	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:34.966757059 CEST	1.1.1.1	192.168.2.5	0x7148	No error (0)	vc.hotjar.io	vc-live-cf.hotjar.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188975096 CEST	1.1.1.1	192.168.2.5	0x8751	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188975096 CEST	1.1.1.1	192.168.2.5	0x8751	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188975096 CEST	1.1.1.1	192.168.2.5	0x8751	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188996077 CEST	1.1.1.1	192.168.2.5	0x6f27	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188996077 CEST	1.1.1.1	192.168.2.5	0x6f27	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188996077 CEST	1.1.1.1	192.168.2.5	0x6f27	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188996077 CEST	1.1.1.1	192.168.2.5	0x6f27	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188996077 CEST	1.1.1.1	192.168.2.5	0x6f27	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188996077 CEST	1.1.1.1	192.168.2.5	0x6f27	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.188996077 CEST	1.1.1.1	192.168.2.5	0x6f27	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.312474012 CEST	1.1.1.1	192.168.2.5	0x7de5	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.312474012 CEST	1.1.1.1	192.168.2.5	0x7de5	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.312814951 CEST	1.1.1.1	192.168.2.5	0xfdcd	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.312814951 CEST	1.1.1.1	192.168.2.5	0xfdcd	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.312814951 CEST	1.1.1.1	192.168.2.5	0xfdcd	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.395517111 CEST	1.1.1.1	192.168.2.5	0x8e11	No error (0)	track.wickedreports.com		3.226.98.213	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.395517111 CEST	1.1.1.1	192.168.2.5	0x8e11	No error (0)	track.wickedreports.com		34.192.234.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.786264896 CEST	1.1.1.1	192.168.2.5	0xe4c	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.786283016 CEST	1.1.1.1	192.168.2.5	0xaf9a	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.790729046 CEST	1.1.1.1	192.168.2.5	0xbf01	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.790729046 CEST	1.1.1.1	192.168.2.5	0xbf01	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.790729046 CEST	1.1.1.1	192.168.2.5	0xbf01	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.790729046 CEST	1.1.1.1	192.168.2.5	0xbf01	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.790729046 CEST	1.1.1.1	192.168.2.5	0xbf01	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.790729046 CEST	1.1.1.1	192.168.2.5	0xbf01	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.790729046 CEST	1.1.1.1	192.168.2.5	0xbf01	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:35.793236971 CEST	1.1.1.1	192.168.2.5	0x52c8	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.793236971 CEST	1.1.1.1	192.168.2.5	0x52c8	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.793236971 CEST	1.1.1.1	192.168.2.5	0x52c8	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:35.793236971 CEST	1.1.1.1	192.168.2.5	0x52c8	No error (0)	www.gslb.pinterest.net	www.pinterest.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:36.291019917 CEST	1.1.1.1	192.168.2.5	0x4f56	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 21:25:36.291338921 CEST	1.1.1.1	192.168.2.5	0x7029	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.291338921 CEST	1.1.1.1	192.168.2.5	0x7029	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.291338921 CEST	1.1.1.1	192.168.2.5	0x7029	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.291338921 CEST	1.1.1.1	192.168.2.5	0x7029	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.291338921 CEST	1.1.1.1	192.168.2.5	0x7029	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.291338921 CEST	1.1.1.1	192.168.2.5	0x7029	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.318031073 CEST	1.1.1.1	192.168.2.5	0x14e1	No error (0)	track.wickedreports.com		3.131.125.53	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.318031073 CEST	1.1.1.1	192.168.2.5	0x14e1	No error (0)	track.wickedreports.com		13.59.127.174	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.388175964 CEST	1.1.1.1	192.168.2.5	0x6aeb	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:36.388720036 CEST	1.1.1.1	192.168.2.5	0xc5a7	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:36.750427961 CEST	1.1.1.1	192.168.2.5	0x2d6a	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.904445887 CEST	1.1.1.1	192.168.2.5	0x8487	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.904445887 CEST	1.1.1.1	192.168.2.5	0x8487	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.904445887 CEST	1.1.1.1	192.168.2.5	0x8487	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.904445887 CEST	1.1.1.1	192.168.2.5	0x8487	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.904445887 CEST	1.1.1.1	192.168.2.5	0x8487	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.904445887 CEST	1.1.1.1	192.168.2.5	0x8487	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.904864073 CEST	1.1.1.1	192.168.2.5	0xcb9d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 21:25:36.976488113 CEST	1.1.1.1	192.168.2.5	0xfcb4	No error (0)	analytics.google.com		64.233.176.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.976488113 CEST	1.1.1.1	192.168.2.5	0xfcb4	No error (0)	analytics.google.com		64.233.176.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.976488113 CEST	1.1.1.1	192.168.2.5	0xfcb4	No error (0)	analytics.google.com		64.233.176.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.976488113 CEST	1.1.1.1	192.168.2.5	0xfcb4	No error (0)	analytics.google.com		64.233.176.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.976488113 CEST	1.1.1.1	192.168.2.5	0xfcb4	No error (0)	analytics.google.com		64.233.176.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.976488113 CEST	1.1.1.1	192.168.2.5	0xfcb4	No error (0)	analytics.google.com		64.233.176.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.976872921 CEST	1.1.1.1	192.168.2.5	0x2587	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:36.977618933 CEST	1.1.1.1	192.168.2.5	0x78	No error (0)	stats.g.doubleclick.net		172.217.215.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.977618933 CEST	1.1.1.1	192.168.2.5	0x78	No error (0)	stats.g.doubleclick.net		172.217.215.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.977618933 CEST	1.1.1.1	192.168.2.5	0x78	No error (0)	stats.g.doubleclick.net		172.217.215.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.977618933 CEST	1.1.1.1	192.168.2.5	0x78	No error (0)	stats.g.doubleclick.net		172.217.215.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:36.999947071 CEST	1.1.1.1	192.168.2.5	0xb032	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:36.999947071 CEST	1.1.1.1	192.168.2.5	0xb032	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:37.000926971 CEST	1.1.1.1	192.168.2.5	0x20fa	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.058571100 CEST	1.1.1.1	192.168.2.5	0xcd80	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.060833931 CEST	1.1.1.1	192.168.2.5	0x7822	No error (0)	api.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.426899910 CEST	1.1.1.1	192.168.2.5	0x2838	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.426899910 CEST	1.1.1.1	192.168.2.5	0x2838	No error (0)	usc1-gcp-v61.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:37.427084923 CEST	1.1.1.1	192.168.2.5	0x5617	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.542071104 CEST	1.1.1.1	192.168.2.5	0x35da	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.542303085 CEST	1.1.1.1	192.168.2.5	0x71f1	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.578155041 CEST	1.1.1.1	192.168.2.5	0xbd3b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.579123020 CEST	1.1.1.1	192.168.2.5	0xe0bc	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:37.579123020 CEST	1.1.1.1	192.168.2.5	0xe0bc	No error (0)	star-mini.c10r.facebook.com		31.13.65.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:38.061392069 CEST	1.1.1.1	192.168.2.5	0x1ed2	No error (0)	app.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:38.062829971 CEST	1.1.1.1	192.168.2.5	0x3190	No error (0)	app.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:38.080746889 CEST	1.1.1.1	192.168.2.5	0xa673	No error (0)	some.growplow.events		172.67.175.48	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:38.080746889 CEST	1.1.1.1	192.168.2.5	0xa673	No error (0)	some.growplow.events		104.21.40.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:38.081021070 CEST	1.1.1.1	192.168.2.5	0x7802	No error (0)	some.growplow.events			65	IN (0x0001)	false
Apr 25, 2024 21:25:40.951453924 CEST	1.1.1.1	192.168.2.5	0xba82	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:40.951453924 CEST	1.1.1.1	192.168.2.5	0xba82	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:40.951888084 CEST	1.1.1.1	192.168.2.5	0xf48a	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:40.951888084 CEST	1.1.1.1	192.168.2.5	0xf48a	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:40.952277899 CEST	1.1.1.1	192.168.2.5	0x46d1	No error (0)	sda.fyi			65	IN (0x0001)	false
Apr 25, 2024 21:25:40.953459978 CEST	1.1.1.1	192.168.2.5	0xee8b	No error (0)	sda.fyi			65	IN (0x0001)	false
Apr 25, 2024 21:25:41.484982967 CEST	1.1.1.1	192.168.2.5	0x21e1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:41.484982967 CEST	1.1.1.1	192.168.2.5	0x21e1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.363404036 CEST	1.1.1.1	192.168.2.5	0xa10e	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:42.363761902 CEST	1.1.1.1	192.168.2.5	0x87bf	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:42.363761902 CEST	1.1.1.1	192.168.2.5	0x87bf	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.553797960 CEST	1.1.1.1	192.168.2.5	0xbe50	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:42.553915977 CEST	1.1.1.1	192.168.2.5	0x2020	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:42.555226088 CEST	1.1.1.1	192.168.2.5	0xa3a9	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:42.557111025 CEST	1.1.1.1	192.168.2.5	0xad1f	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:42.560664892 CEST	1.1.1.1	192.168.2.5	0x6fb1	No error (0)	api.rlcdn.com		34.107.165.188	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.562922955 CEST	1.1.1.1	192.168.2.5	0x7c96	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.562922955 CEST	1.1.1.1	192.168.2.5	0x7c96	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.562922955 CEST	1.1.1.1	192.168.2.5	0x7c96	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.562922955 CEST	1.1.1.1	192.168.2.5	0x7c96	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.563354015 CEST	1.1.1.1	192.168.2.5	0xef9f	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.677598000 CEST	1.1.1.1	192.168.2.5	0x3956	No error (0)	exchange.mediavine.com		34.235.48.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.677598000 CEST	1.1.1.1	192.168.2.5	0x3956	No error (0)	exchange.mediavine.com		44.210.232.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.677598000 CEST	1.1.1.1	192.168.2.5	0x3956	No error (0)	exchange.mediavine.com		3.223.118.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.733689070 CEST	1.1.1.1	192.168.2.5	0x63bf	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.733689070 CEST	1.1.1.1	192.168.2.5	0x63bf	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:42.733791113 CEST	1.1.1.1	192.168.2.5	0x68b0	No error (0)	sda.fyi			65	IN (0x0001)	false
Apr 25, 2024 21:25:43.047271967 CEST	1.1.1.1	192.168.2.5	0x3342	No error (0)	exchange.mediavine.com		44.210.232.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:43.047271967 CEST	1.1.1.1	192.168.2.5	0x3342	No error (0)	exchange.mediavine.com		3.223.118.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:43.047271967 CEST	1.1.1.1	192.168.2.5	0x3342	No error (0)	exchange.mediavine.com		34.235.48.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:43.048244953 CEST	1.1.1.1	192.168.2.5	0x5273	No error (0)	sda.fyi		104.21.41.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:43.048244953 CEST	1.1.1.1	192.168.2.5	0x5273	No error (0)	sda.fyi		172.67.164.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:43.048738003 CEST	1.1.1.1	192.168.2.5	0x90dc	No error (0)	sda.fyi			65	IN (0x0001)	false
Apr 25, 2024 21:25:44.878676891 CEST	1.1.1.1	192.168.2.5	0xf5bd	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:44.878915071 CEST	1.1.1.1	192.168.2.5	0xd75c	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745480061 CEST	1.1.1.1	192.168.2.5	0xbabd	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745480061 CEST	1.1.1.1	192.168.2.5	0xbabd	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745518923 CEST	1.1.1.1	192.168.2.5	0xc8cf	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745518923 CEST	1.1.1.1	192.168.2.5	0xc8cf	No error (0)	lga-bh.contextweb.com	lga-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745518923 CEST	1.1.1.1	192.168.2.5	0xc8cf	No error (0)	lga-direct-bgp.contextweb.com		198.148.27.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.86.118.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.213.117.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		44.197.125.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.21.5.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		23.20.238.207	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.206.116.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		18.208.0.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.745794058 CEST	1.1.1.1	192.168.2.5	0x73b1	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.203.174.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.746321917 CEST	1.1.1.1	192.168.2.5	0xd4b2	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.746321917 CEST	1.1.1.1	192.168.2.5	0xd4b2	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.746321917 CEST	1.1.1.1	192.168.2.5	0xd4b2	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.746941090 CEST	1.1.1.1	192.168.2.5	0x5985	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.746941090 CEST	1.1.1.1	192.168.2.5	0x5985	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.746941090 CEST	1.1.1.1	192.168.2.5	0x5985	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.746941090 CEST	1.1.1.1	192.168.2.5	0x5985	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.746941090 CEST	1.1.1.1	192.168.2.5	0x5985	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.747605085 CEST	1.1.1.1	192.168.2.5	0x1e29	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.747605085 CEST	1.1.1.1	192.168.2.5	0x1e29	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.748641968 CEST	1.1.1.1	192.168.2.5	0x5d3c	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.748687029 CEST	1.1.1.1	192.168.2.5	0x7dd4	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750006914 CEST	1.1.1.1	192.168.2.5	0x22c6	No error (0)	rtb.gumgum.com		3.212.57.127	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750006914 CEST	1.1.1.1	192.168.2.5	0x22c6	No error (0)	rtb.gumgum.com		34.226.54.46	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750006914 CEST	1.1.1.1	192.168.2.5	0x22c6	No error (0)	rtb.gumgum.com		34.199.236.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750006914 CEST	1.1.1.1	192.168.2.5	0x22c6	No error (0)	rtb.gumgum.com		52.204.110.178	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750006914 CEST	1.1.1.1	192.168.2.5	0x22c6	No error (0)	rtb.gumgum.com		18.214.155.136	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750006914 CEST	1.1.1.1	192.168.2.5	0x22c6	No error (0)	rtb.gumgum.com		34.236.124.74	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750006914 CEST	1.1.1.1	192.168.2.5	0x22c6	No error (0)	rtb.gumgum.com		67.202.6.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750006914 CEST	1.1.1.1	192.168.2.5	0x22c6	No error (0)	rtb.gumgum.com		54.90.236.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750993967 CEST	1.1.1.1	192.168.2.5	0xdb8c	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750993967 CEST	1.1.1.1	192.168.2.5	0xdb8c	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.750993967 CEST	1.1.1.1	192.168.2.5	0xdb8c	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw.yieldmo.com	us-east-1.world.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	us-east-1.world.rw.yieldmo.com	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		107.23.208.6	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		3.224.162.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.157.121.109	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		52.206.254.33	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.237.177.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.88.246.74	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		54.83.177.201	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751189947 CEST	1.1.1.1	192.168.2.5	0x6023	No error (0)	rw-yieldmo-com-1233107411.us-east-1.elb.amazonaws.com		44.215.15.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751530886 CEST	1.1.1.1	192.168.2.5	0xd235	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751530886 CEST	1.1.1.1	192.168.2.5	0xd235	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751530886 CEST	1.1.1.1	192.168.2.5	0xd235	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.751530886 CEST	1.1.1.1	192.168.2.5	0xd235	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.752178907 CEST	1.1.1.1	192.168.2.5	0xfb18	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.752178907 CEST	1.1.1.1	192.168.2.5	0xfb18	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.752795935 CEST	1.1.1.1	192.168.2.5	0x1730	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 21:25:45.753262997 CEST	1.1.1.1	192.168.2.5	0x744d	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.753262997 CEST	1.1.1.1	192.168.2.5	0x744d	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.753706932 CEST	1.1.1.1	192.168.2.5	0x9fdc	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.753706932 CEST	1.1.1.1	192.168.2.5	0x9fdc	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.753822088 CEST	1.1.1.1	192.168.2.5	0x7dd0	No error (0)	contextual.media.net		23.54.200.27	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.754906893 CEST	1.1.1.1	192.168.2.5	0x9d55	No error (0)	sync.colossusssp.com		172.240.155.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.754906893 CEST	1.1.1.1	192.168.2.5	0x9d55	No error (0)	sync.colossusssp.com		172.240.155.116	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.754906893 CEST	1.1.1.1	192.168.2.5	0x9d55	No error (0)	sync.colossusssp.com		172.240.155.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.754906893 CEST	1.1.1.1	192.168.2.5	0x9d55	No error (0)	sync.colossusssp.com		172.240.155.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.754906893 CEST	1.1.1.1	192.168.2.5	0x9d55	No error (0)	sync.colossusssp.com		172.240.155.68	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.754906893 CEST	1.1.1.1	192.168.2.5	0x9d55	No error (0)	sync.colossusssp.com		172.240.155.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.755737066 CEST	1.1.1.1	192.168.2.5	0xa7b2	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.756112099 CEST	1.1.1.1	192.168.2.5	0xd4b3	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.756112099 CEST	1.1.1.1	192.168.2.5	0xd4b3	No error (0)	pixel.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.756112099 CEST	1.1.1.1	192.168.2.5	0xd4b3	No error (0)	pixel.33across.com		67.202.105.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.756464958 CEST	1.1.1.1	192.168.2.5	0x9643	No error (0)	e.chicoryapp.com		34.36.130.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.757711887 CEST	1.1.1.1	192.168.2.5	0x458e	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.757711887 CEST	1.1.1.1	192.168.2.5	0x458e	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.757711887 CEST	1.1.1.1	192.168.2.5	0x458e	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.757711887 CEST	1.1.1.1	192.168.2.5	0x458e	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.757711887 CEST	1.1.1.1	192.168.2.5	0x458e	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.758404016 CEST	1.1.1.1	192.168.2.5	0xb9fb	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.758404016 CEST	1.1.1.1	192.168.2.5	0xb9fb	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.758404016 CEST	1.1.1.1	192.168.2.5	0xb9fb	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.758687019 CEST	1.1.1.1	192.168.2.5	0x6656	No error (0)	exchange.journeymv.com		34.204.143.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.758687019 CEST	1.1.1.1	192.168.2.5	0x6656	No error (0)	exchange.journeymv.com		54.158.78.245	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.758687019 CEST	1.1.1.1	192.168.2.5	0x6656	No error (0)	exchange.journeymv.com		18.213.14.90	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.760653973 CEST	1.1.1.1	192.168.2.5	0x8236	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.760653973 CEST	1.1.1.1	192.168.2.5	0x8236	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.760653973 CEST	1.1.1.1	192.168.2.5	0x8236	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.760653973 CEST	1.1.1.1	192.168.2.5	0x8236	No error (0)	crb.kargo.com		34.203.5.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.760653973 CEST	1.1.1.1	192.168.2.5	0x8236	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.760653973 CEST	1.1.1.1	192.168.2.5	0x8236	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	na-ice.360yield.com		3.227.113.146	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	na-ice.360yield.com		3.222.156.128	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	na-ice.360yield.com		3.209.148.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	na-ice.360yield.com		3.208.44.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	na-ice.360yield.com		72.44.34.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	na-ice.360yield.com		23.23.249.11	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	na-ice.360yield.com		54.197.192.75	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761609077 CEST	1.1.1.1	192.168.2.5	0x15d1	No error (0)	na-ice.360yield.com		35.168.150.191	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.761971951 CEST	1.1.1.1	192.168.2.5	0x42ef	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763135910 CEST	1.1.1.1	192.168.2.5	0xf431	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763719082 CEST	1.1.1.1	192.168.2.5	0x435f	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:45.763719082 CEST	1.1.1.1	192.168.2.5	0x435f	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:45.764307022 CEST	1.1.1.1	192.168.2.5	0x57c6	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.049959898 CEST	1.1.1.1	192.168.2.5	0x5c38	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.049959898 CEST	1.1.1.1	192.168.2.5	0x5c38	No error (0)	securepubads46.g.doubleclick.net		173.194.219.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.049959898 CEST	1.1.1.1	192.168.2.5	0x5c38	No error (0)	securepubads46.g.doubleclick.net		173.194.219.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.049959898 CEST	1.1.1.1	192.168.2.5	0x5c38	No error (0)	securepubads46.g.doubleclick.net		173.194.219.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.049959898 CEST	1.1.1.1	192.168.2.5	0x5c38	No error (0)	securepubads46.g.doubleclick.net		173.194.219.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.050412893 CEST	1.1.1.1	192.168.2.5	0x3da	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.423760891 CEST	1.1.1.1	192.168.2.5	0xd533	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.424979925 CEST	1.1.1.1	192.168.2.5	0xa135	No error (0)	imp-dev.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.426409006 CEST	1.1.1.1	192.168.2.5	0x6ba4	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.426409006 CEST	1.1.1.1	192.168.2.5	0x6ba4	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.426409006 CEST	1.1.1.1	192.168.2.5	0x6ba4	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.426409006 CEST	1.1.1.1	192.168.2.5	0x6ba4	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.430056095 CEST	1.1.1.1	192.168.2.5	0x13dd	No error (0)	lexicon.33across.com		35.244.193.51	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.430162907 CEST	1.1.1.1	192.168.2.5	0x60e9	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.430226088 CEST	1.1.1.1	192.168.2.5	0x6a6a	No error (0)	gum.criteo.com	gum.da1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.430226088 CEST	1.1.1.1	192.168.2.5	0x6a6a	No error (0)	gum.da1.vip.prod.criteo.com		74.119.118.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.582108974 CEST	1.1.1.1	192.168.2.5	0x6808	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.582108974 CEST	1.1.1.1	192.168.2.5	0x6808	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.782033920 CEST	1.1.1.1	192.168.2.5	0x61f1	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.782805920 CEST	1.1.1.1	192.168.2.5	0xe704	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.784501076 CEST	1.1.1.1	192.168.2.5	0x5315	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.785170078 CEST	1.1.1.1	192.168.2.5	0x40e	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.785170078 CEST	1.1.1.1	192.168.2.5	0x40e	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.785384893 CEST	1.1.1.1	192.168.2.5	0x5e27	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.785384893 CEST	1.1.1.1	192.168.2.5	0x5e27	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.785952091 CEST	1.1.1.1	192.168.2.5	0x3827	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.786252975 CEST	1.1.1.1	192.168.2.5	0x42e3	No error (0)	sync.srv.stackadapt.com		54.211.105.244	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.786252975 CEST	1.1.1.1	192.168.2.5	0x42e3	No error (0)	sync.srv.stackadapt.com		54.209.31.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.786252975 CEST	1.1.1.1	192.168.2.5	0x42e3	No error (0)	sync.srv.stackadapt.com		54.224.106.220	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.786252975 CEST	1.1.1.1	192.168.2.5	0x42e3	No error (0)	sync.srv.stackadapt.com		52.55.65.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.786252975 CEST	1.1.1.1	192.168.2.5	0x42e3	No error (0)	sync.srv.stackadapt.com		54.198.23.122	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.786252975 CEST	1.1.1.1	192.168.2.5	0x42e3	No error (0)	sync.srv.stackadapt.com		54.147.21.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.786252975 CEST	1.1.1.1	192.168.2.5	0x42e3	No error (0)	sync.srv.stackadapt.com		54.162.219.39	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.786252975 CEST	1.1.1.1	192.168.2.5	0x42e3	No error (0)	sync.srv.stackadapt.com		54.209.244.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.787734032 CEST	1.1.1.1	192.168.2.5	0xb87d	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.787820101 CEST	1.1.1.1	192.168.2.5	0x86cc	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.787820101 CEST	1.1.1.1	192.168.2.5	0x86cc	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.236.60.188	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.787820101 CEST	1.1.1.1	192.168.2.5	0x86cc	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.236.160.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.787820101 CEST	1.1.1.1	192.168.2.5	0x86cc	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.196.142.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.787820101 CEST	1.1.1.1	192.168.2.5	0x86cc	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.226.11.144	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.788134098 CEST	1.1.1.1	192.168.2.5	0xfc4a	No error (0)	sync.ipredictive.com		52.7.87.144	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.788134098 CEST	1.1.1.1	192.168.2.5	0xfc4a	No error (0)	sync.ipredictive.com		52.73.143.187	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.788134098 CEST	1.1.1.1	192.168.2.5	0xfc4a	No error (0)	sync.ipredictive.com		52.86.77.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.788134098 CEST	1.1.1.1	192.168.2.5	0xfc4a	No error (0)	sync.ipredictive.com		54.157.127.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.788134098 CEST	1.1.1.1	192.168.2.5	0xfc4a	No error (0)	sync.ipredictive.com		52.86.120.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.788134098 CEST	1.1.1.1	192.168.2.5	0xfc4a	No error (0)	sync.ipredictive.com		54.158.85.236	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.788134098 CEST	1.1.1.1	192.168.2.5	0xfc4a	No error (0)	sync.ipredictive.com		54.156.122.54	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.788134098 CEST	1.1.1.1	192.168.2.5	0xfc4a	No error (0)	sync.ipredictive.com		54.157.219.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.789037943 CEST	1.1.1.1	192.168.2.5	0xf9b1	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.789037943 CEST	1.1.1.1	192.168.2.5	0xf9b1	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.789037943 CEST	1.1.1.1	192.168.2.5	0xf9b1	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.789037943 CEST	1.1.1.1	192.168.2.5	0xf9b1	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.789037943 CEST	1.1.1.1	192.168.2.5	0xf9b1	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.790266991 CEST	1.1.1.1	192.168.2.5	0xbcf0	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.790266991 CEST	1.1.1.1	192.168.2.5	0xbcf0	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.790266991 CEST	1.1.1.1	192.168.2.5	0xbcf0	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.790266991 CEST	1.1.1.1	192.168.2.5	0xbcf0	No error (0)	chidc2.outbrain.org		64.74.236.31	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.790312052 CEST	1.1.1.1	192.168.2.5	0x633f	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.790312052 CEST	1.1.1.1	192.168.2.5	0x633f	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.790312052 CEST	1.1.1.1	192.168.2.5	0x633f	No error (0)	zemanta-nychi2.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.791834116 CEST	1.1.1.1	192.168.2.5	0x5a44	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.791861057 CEST	1.1.1.1	192.168.2.5	0x82fd	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.792388916 CEST	1.1.1.1	192.168.2.5	0xd8ca	No error (0)	cm.g.doubleclick.net		173.194.219.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.792388916 CEST	1.1.1.1	192.168.2.5	0xd8ca	No error (0)	cm.g.doubleclick.net		173.194.219.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.792388916 CEST	1.1.1.1	192.168.2.5	0xd8ca	No error (0)	cm.g.doubleclick.net		173.194.219.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.792388916 CEST	1.1.1.1	192.168.2.5	0xd8ca	No error (0)	cm.g.doubleclick.net		173.194.219.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794145107 CEST	1.1.1.1	192.168.2.5	0xfb78	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794145107 CEST	1.1.1.1	192.168.2.5	0xfb78	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794145107 CEST	1.1.1.1	192.168.2.5	0xfb78	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794145107 CEST	1.1.1.1	192.168.2.5	0xfb78	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794472933 CEST	1.1.1.1	192.168.2.5	0x235b	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.794678926 CEST	1.1.1.1	192.168.2.5	0x2271	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.795672894 CEST	1.1.1.1	192.168.2.5	0xa8db	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.804578066 CEST	1.1.1.1	192.168.2.5	0x7ad3	No error (0)	cdn.lijit.com	d27c6x3b3mm9so.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.804578066 CEST	1.1.1.1	192.168.2.5	0x7ad3	No error (0)	d27c6x3b3mm9so.cloudfront.net		108.139.47.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.804578066 CEST	1.1.1.1	192.168.2.5	0x7ad3	No error (0)	d27c6x3b3mm9so.cloudfront.net		108.139.47.63	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.804578066 CEST	1.1.1.1	192.168.2.5	0x7ad3	No error (0)	d27c6x3b3mm9so.cloudfront.net		108.139.47.115	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.804578066 CEST	1.1.1.1	192.168.2.5	0x7ad3	No error (0)	d27c6x3b3mm9so.cloudfront.net		108.139.47.30	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.805176020 CEST	1.1.1.1	192.168.2.5	0xe7a4	No error (0)	cdn.lijit.com	d27c6x3b3mm9so.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.868212938 CEST	1.1.1.1	192.168.2.5	0x88d	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.868212938 CEST	1.1.1.1	192.168.2.5	0x88d	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.868212938 CEST	1.1.1.1	192.168.2.5	0x88d	No error (0)	pugm-nje1.pubmnet.com		207.65.37.181	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.942598104 CEST	1.1.1.1	192.168.2.5	0xc259	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.942598104 CEST	1.1.1.1	192.168.2.5	0xc259	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.993632078 CEST	1.1.1.1	192.168.2.5	0xb145	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:46.994781017 CEST	1.1.1.1	192.168.2.5	0x750a	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.994781017 CEST	1.1.1.1	192.168.2.5	0x750a	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.994781017 CEST	1.1.1.1	192.168.2.5	0x750a	No error (0)	crb.kargo.com		34.203.5.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.994781017 CEST	1.1.1.1	192.168.2.5	0x750a	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.994781017 CEST	1.1.1.1	192.168.2.5	0x750a	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.994781017 CEST	1.1.1.1	192.168.2.5	0x750a	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:46.994879007 CEST	1.1.1.1	192.168.2.5	0x1f37	No error (0)	faves.grow.me	l2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.037519932 CEST	1.1.1.1	192.168.2.5	0xa569	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052352905 CEST	1.1.1.1	192.168.2.5	0x138	No error (0)	a.audrte.com		52.215.143.51	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052352905 CEST	1.1.1.1	192.168.2.5	0x138	No error (0)	a.audrte.com		63.33.13.151	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052352905 CEST	1.1.1.1	192.168.2.5	0x138	No error (0)	a.audrte.com		52.215.59.81	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052352905 CEST	1.1.1.1	192.168.2.5	0x138	No error (0)	a.audrte.com		52.17.231.33	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052352905 CEST	1.1.1.1	192.168.2.5	0x138	No error (0)	a.audrte.com		54.229.19.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052352905 CEST	1.1.1.1	192.168.2.5	0x138	No error (0)	a.audrte.com		52.209.193.199	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052365065 CEST	1.1.1.1	192.168.2.5	0x3c27	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.052467108 CEST	1.1.1.1	192.168.2.5	0x6203	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor-us-west-2.omnitagjs.com		52.32.62.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor-us-west-2.omnitagjs.com		54.71.143.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor-us-west-2.omnitagjs.com		52.88.64.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor-us-west-2.omnitagjs.com		54.70.167.86	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor-us-west-2.omnitagjs.com		52.34.249.26	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor-us-west-2.omnitagjs.com		44.238.188.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor-us-west-2.omnitagjs.com		44.241.202.18	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053601980 CEST	1.1.1.1	192.168.2.5	0x95e5	No error (0)	visitor-us-west-2.omnitagjs.com		44.239.90.162	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.053663969 CEST	1.1.1.1	192.168.2.5	0x3f76	No error (0)	visitor.omnitagjs.com	visitor-us-west-2.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.055670977 CEST	1.1.1.1	192.168.2.5	0x9a84	No error (0)	dis.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.055670977 CEST	1.1.1.1	192.168.2.5	0x9a84	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.056001902 CEST	1.1.1.1	192.168.2.5	0xde86	No error (0)	dis.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.347167015 CEST	1.1.1.1	192.168.2.5	0x1485	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.347167015 CEST	1.1.1.1	192.168.2.5	0x1485	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.347167015 CEST	1.1.1.1	192.168.2.5	0x1485	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.347824097 CEST	1.1.1.1	192.168.2.5	0xd627	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.347824097 CEST	1.1.1.1	192.168.2.5	0xd627	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.347824097 CEST	1.1.1.1	192.168.2.5	0xd627	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.347824097 CEST	1.1.1.1	192.168.2.5	0xd627	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.347824097 CEST	1.1.1.1	192.168.2.5	0xd627	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.350738049 CEST	1.1.1.1	192.168.2.5	0x6014	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.350999117 CEST	1.1.1.1	192.168.2.5	0x7471	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.351702929 CEST	1.1.1.1	192.168.2.5	0x181f	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.351702929 CEST	1.1.1.1	192.168.2.5	0x181f	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.351702929 CEST	1.1.1.1	192.168.2.5	0x181f	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.351898909 CEST	1.1.1.1	192.168.2.5	0x33d0	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.351898909 CEST	1.1.1.1	192.168.2.5	0x33d0	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.351898909 CEST	1.1.1.1	192.168.2.5	0x33d0	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.354794025 CEST	1.1.1.1	192.168.2.5	0x1fd3	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.368387938 CEST	1.1.1.1	192.168.2.5	0x27a2	No error (0)	hde.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.368387938 CEST	1.1.1.1	192.168.2.5	0x27a2	No error (0)	hde.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.421864986 CEST	1.1.1.1	192.168.2.5	0xf937	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.422477007 CEST	1.1.1.1	192.168.2.5	0x8168	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.732503891 CEST	1.1.1.1	192.168.2.5	0xa431	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.732503891 CEST	1.1.1.1	192.168.2.5	0xa431	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.732503891 CEST	1.1.1.1	192.168.2.5	0xa431	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.732503891 CEST	1.1.1.1	192.168.2.5	0xa431	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.732503891 CEST	1.1.1.1	192.168.2.5	0xa431	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.763453007 CEST	1.1.1.1	192.168.2.5	0x6655	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.767767906 CEST	1.1.1.1	192.168.2.5	0xf7dc	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.767767906 CEST	1.1.1.1	192.168.2.5	0xf7dc	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.200.31.123	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.767767906 CEST	1.1.1.1	192.168.2.5	0xf7dc	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		3.230.94.159	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.767767906 CEST	1.1.1.1	192.168.2.5	0xf7dc	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		107.22.164.25	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.767767906 CEST	1.1.1.1	192.168.2.5	0xf7dc	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.239.32.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.801866055 CEST	1.1.1.1	192.168.2.5	0x257c	No error (0)	exchange.mediavine.com		34.235.48.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.801866055 CEST	1.1.1.1	192.168.2.5	0x257c	No error (0)	exchange.mediavine.com		3.223.118.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.801866055 CEST	1.1.1.1	192.168.2.5	0x257c	No error (0)	exchange.mediavine.com		44.210.232.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.808368921 CEST	1.1.1.1	192.168.2.5	0xcc15	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.808368921 CEST	1.1.1.1	192.168.2.5	0xcc15	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.808368921 CEST	1.1.1.1	192.168.2.5	0xcc15	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.808368921 CEST	1.1.1.1	192.168.2.5	0xcc15	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.808368921 CEST	1.1.1.1	192.168.2.5	0xcc15	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.811147928 CEST	1.1.1.1	192.168.2.5	0xd768	No error (0)	aax-eu.amazon-adsystem.com		54.239.38.253	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.845151901 CEST	1.1.1.1	192.168.2.5	0x2e3a	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.939096928 CEST	1.1.1.1	192.168.2.5	0x3052	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.939096928 CEST	1.1.1.1	192.168.2.5	0x3052	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.160.83.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.939528942 CEST	1.1.1.1	192.168.2.5	0x191	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.969177008 CEST	1.1.1.1	192.168.2.5	0x8517	No error (0)	sync.intentiq.com		3.163.101.59	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.969177008 CEST	1.1.1.1	192.168.2.5	0x8517	No error (0)	sync.intentiq.com		3.163.101.15	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.969177008 CEST	1.1.1.1	192.168.2.5	0x8517	No error (0)	sync.intentiq.com		3.163.101.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.969177008 CEST	1.1.1.1	192.168.2.5	0x8517	No error (0)	sync.intentiq.com		3.163.101.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:47.970144033 CEST	1.1.1.1	192.168.2.5	0xa89f	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.970196009 CEST	1.1.1.1	192.168.2.5	0xa826	No error (0)	static.criteo.net	static.us5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:47.970196009 CEST	1.1.1.1	192.168.2.5	0xa826	No error (0)	static.us5.vip.prod.criteo.net		74.119.117.4	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.171154976 CEST	1.1.1.1	192.168.2.5	0xbdee	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.173629999 CEST	1.1.1.1	192.168.2.5	0x2a59	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.173629999 CEST	1.1.1.1	192.168.2.5	0x2a59	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		107.20.103.201	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.173629999 CEST	1.1.1.1	192.168.2.5	0x2a59	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.193.26.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.173629999 CEST	1.1.1.1	192.168.2.5	0x2a59	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.196.59.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.173629999 CEST	1.1.1.1	192.168.2.5	0x2a59	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.236.60.188	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.238724947 CEST	1.1.1.1	192.168.2.5	0x5703	No error (0)	match.prod.bidr.io		54.147.231.117	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.238724947 CEST	1.1.1.1	192.168.2.5	0x5703	No error (0)	match.prod.bidr.io		54.158.15.7	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.238724947 CEST	1.1.1.1	192.168.2.5	0x5703	No error (0)	match.prod.bidr.io		54.160.85.202	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.238724947 CEST	1.1.1.1	192.168.2.5	0x5703	No error (0)	match.prod.bidr.io		52.73.25.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.238724947 CEST	1.1.1.1	192.168.2.5	0x5703	No error (0)	match.prod.bidr.io		52.87.53.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.238724947 CEST	1.1.1.1	192.168.2.5	0x5703	No error (0)	match.prod.bidr.io		54.165.92.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.238724947 CEST	1.1.1.1	192.168.2.5	0x5703	No error (0)	match.prod.bidr.io		54.156.161.169	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.238724947 CEST	1.1.1.1	192.168.2.5	0x5703	No error (0)	match.prod.bidr.io		54.156.79.83	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.427004099 CEST	1.1.1.1	192.168.2.5	0xf341	No error (0)	invstatic101.creativecdn.com		34.96.70.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.547204018 CEST	1.1.1.1	192.168.2.5	0xd6b6	No error (0)	sync1.intentiq.com		18.160.18.79	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.547204018 CEST	1.1.1.1	192.168.2.5	0xd6b6	No error (0)	sync1.intentiq.com		18.160.18.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.547204018 CEST	1.1.1.1	192.168.2.5	0xd6b6	No error (0)	sync1.intentiq.com		18.160.18.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.547204018 CEST	1.1.1.1	192.168.2.5	0xd6b6	No error (0)	sync1.intentiq.com		18.160.18.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.632759094 CEST	1.1.1.1	192.168.2.5	0x93e5	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.632759094 CEST	1.1.1.1	192.168.2.5	0x93e5	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.633346081 CEST	1.1.1.1	192.168.2.5	0x6027	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.633346081 CEST	1.1.1.1	192.168.2.5	0x6027	No error (0)	simage2v2.pubmnet.com	pug-sv3c.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.633346081 CEST	1.1.1.1	192.168.2.5	0x6027	No error (0)	pug-sv3c.pubmnet.com		204.237.133.120	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.634542942 CEST	1.1.1.1	192.168.2.5	0x7806	No error (0)	oa.openxcdn.net		34.102.146.192	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	idaas-ext.cph.liveintent.com		34.204.109.177	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	idaas-ext.cph.liveintent.com		34.206.227.129	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	idaas-ext.cph.liveintent.com		3.227.178.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	idaas-ext.cph.liveintent.com		54.211.215.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	idaas-ext.cph.liveintent.com		107.21.236.181	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	idaas-ext.cph.liveintent.com		3.210.155.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	idaas-ext.cph.liveintent.com		3.237.57.79	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.689759970 CEST	1.1.1.1	192.168.2.5	0xd2d5	No error (0)	idaas-ext.cph.liveintent.com		44.219.73.112	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.690294981 CEST	1.1.1.1	192.168.2.5	0xc173	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.691987991 CEST	1.1.1.1	192.168.2.5	0xff06	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.694605112 CEST	1.1.1.1	192.168.2.5	0xafe4	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.694605112 CEST	1.1.1.1	192.168.2.5	0xafe4	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.694605112 CEST	1.1.1.1	192.168.2.5	0xafe4	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.810517073 CEST	1.1.1.1	192.168.2.5	0x9018	No error (0)	usersync.gumgum.com		3.214.33.241	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.810517073 CEST	1.1.1.1	192.168.2.5	0x9018	No error (0)	usersync.gumgum.com		52.207.45.55	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.810517073 CEST	1.1.1.1	192.168.2.5	0x9018	No error (0)	usersync.gumgum.com		54.87.127.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.810517073 CEST	1.1.1.1	192.168.2.5	0x9018	No error (0)	usersync.gumgum.com		35.172.99.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.810517073 CEST	1.1.1.1	192.168.2.5	0x9018	No error (0)	usersync.gumgum.com		3.213.224.199	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.840229988 CEST	1.1.1.1	192.168.2.5	0x8aab	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.840229988 CEST	1.1.1.1	192.168.2.5	0x8aab	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842382908 CEST	1.1.1.1	192.168.2.5	0xc22e	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.842664957 CEST	1.1.1.1	192.168.2.5	0x610d	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.888670921 CEST	1.1.1.1	192.168.2.5	0x7387	No error (0)	cm.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.888670921 CEST	1.1.1.1	192.168.2.5	0x7387	No error (0)	cm.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.888670921 CEST	1.1.1.1	192.168.2.5	0x7387	No error (0)	cm.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.888670921 CEST	1.1.1.1	192.168.2.5	0x7387	No error (0)	cm.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.980360985 CEST	1.1.1.1	192.168.2.5	0xbff8	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.980360985 CEST	1.1.1.1	192.168.2.5	0xbff8	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.980360985 CEST	1.1.1.1	192.168.2.5	0xbff8	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.980384111 CEST	1.1.1.1	192.168.2.5	0x1261	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.980384111 CEST	1.1.1.1	192.168.2.5	0x1261	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.995336056 CEST	1.1.1.1	192.168.2.5	0x36e9	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:48.995336056 CEST	1.1.1.1	192.168.2.5	0x36e9	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:48.996764898 CEST	1.1.1.1	192.168.2.5	0x18ee	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:49.287700891 CEST	1.1.1.1	192.168.2.5	0x360d	No error (0)	esp.rtbhouse.com		35.190.39.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:49.470968008 CEST	1.1.1.1	192.168.2.5	0xc9f8	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:49.470968008 CEST	1.1.1.1	192.168.2.5	0xc9f8	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:49.884085894 CEST	1.1.1.1	192.168.2.5	0xc9b0	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:49.884222984 CEST	1.1.1.1	192.168.2.5	0xf46	No error (0)	gum.criteo.com	gum.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:49.884222984 CEST	1.1.1.1	192.168.2.5	0xf46	No error (0)	gum.us5.vip.prod.criteo.com		74.119.117.17	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.141889095 CEST	1.1.1.1	192.168.2.5	0x902f	No error (0)	google-bidout-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.141889095 CEST	1.1.1.1	192.168.2.5	0x902f	No error (0)	google-bidout-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.143026114 CEST	1.1.1.1	192.168.2.5	0xeabc	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.547771931 CEST	1.1.1.1	192.168.2.5	0x1a65	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.552448988 CEST	1.1.1.1	192.168.2.5	0x1481	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.553281069 CEST	1.1.1.1	192.168.2.5	0xd01a	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.553281069 CEST	1.1.1.1	192.168.2.5	0xd01a	No error (0)	image4-v2.pubmnet.com	spug-nje1pb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.553281069 CEST	1.1.1.1	192.168.2.5	0xd01a	No error (0)	spug-nje1pb.pubmnet.com		207.65.37.182	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.553822041 CEST	1.1.1.1	192.168.2.5	0x9934	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.553822041 CEST	1.1.1.1	192.168.2.5	0x9934	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.640909910 CEST	1.1.1.1	192.168.2.5	0xe8f5	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.642411947 CEST	1.1.1.1	192.168.2.5	0x918c	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.763639927 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	sb.scorecardresearch.com		18.160.78.75	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.763639927 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	sb.scorecardresearch.com		18.160.78.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.763639927 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	sb.scorecardresearch.com		18.160.78.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.763639927 CEST	1.1.1.1	192.168.2.5	0x5f77	No error (0)	sb.scorecardresearch.com		18.160.78.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.853810072 CEST	1.1.1.1	192.168.2.5	0x168	No error (0)	sync1.intentiq.com		18.160.18.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.853810072 CEST	1.1.1.1	192.168.2.5	0x168	No error (0)	sync1.intentiq.com		18.160.18.79	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.853810072 CEST	1.1.1.1	192.168.2.5	0x168	No error (0)	sync1.intentiq.com		18.160.18.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.853810072 CEST	1.1.1.1	192.168.2.5	0x168	No error (0)	sync1.intentiq.com		18.160.18.76	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.859591961 CEST	1.1.1.1	192.168.2.5	0x1526	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.859591961 CEST	1.1.1.1	192.168.2.5	0x1526	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.859591961 CEST	1.1.1.1	192.168.2.5	0x1526	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.859591961 CEST	1.1.1.1	192.168.2.5	0x1526	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.861233950 CEST	1.1.1.1	192.168.2.5	0x5ae8	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.861233950 CEST	1.1.1.1	192.168.2.5	0x5ae8	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.861963034 CEST	1.1.1.1	192.168.2.5	0x996f	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.864195108 CEST	1.1.1.1	192.168.2.5	0x9962	No error (0)	rtb.gumgum.com		67.202.6.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.864195108 CEST	1.1.1.1	192.168.2.5	0x9962	No error (0)	rtb.gumgum.com		34.199.236.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.864195108 CEST	1.1.1.1	192.168.2.5	0x9962	No error (0)	rtb.gumgum.com		3.212.57.127	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.864195108 CEST	1.1.1.1	192.168.2.5	0x9962	No error (0)	rtb.gumgum.com		34.236.124.74	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.864195108 CEST	1.1.1.1	192.168.2.5	0x9962	No error (0)	rtb.gumgum.com		34.226.54.46	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.864195108 CEST	1.1.1.1	192.168.2.5	0x9962	No error (0)	rtb.gumgum.com		54.90.236.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.864195108 CEST	1.1.1.1	192.168.2.5	0x9962	No error (0)	rtb.gumgum.com		18.214.155.136	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.864195108 CEST	1.1.1.1	192.168.2.5	0x9962	No error (0)	rtb.gumgum.com		52.204.110.178	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.918703079 CEST	1.1.1.1	192.168.2.5	0xd913	No error (0)	pghub.io		35.241.45.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.925750971 CEST	1.1.1.1	192.168.2.5	0xb931	No error (0)	cdn.opecloud.com	dta23xhexutk5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:50.925750971 CEST	1.1.1.1	192.168.2.5	0xb931	No error (0)	dta23xhexutk5.cloudfront.net		108.139.15.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.925750971 CEST	1.1.1.1	192.168.2.5	0xb931	No error (0)	dta23xhexutk5.cloudfront.net		108.139.15.3	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.925750971 CEST	1.1.1.1	192.168.2.5	0xb931	No error (0)	dta23xhexutk5.cloudfront.net		108.139.15.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.925750971 CEST	1.1.1.1	192.168.2.5	0xb931	No error (0)	dta23xhexutk5.cloudfront.net		108.139.15.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:50.927690983 CEST	1.1.1.1	192.168.2.5	0xf21	No error (0)	cdn.opecloud.com	dta23xhexutk5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.029277086 CEST	1.1.1.1	192.168.2.5	0xb922	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.249	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.029277086 CEST	1.1.1.1	192.168.2.5	0xb922	No error (0)	client-rapi-mediavine.recombee.com		188.40.16.146	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.029277086 CEST	1.1.1.1	192.168.2.5	0xb922	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.029277086 CEST	1.1.1.1	192.168.2.5	0xb922	No error (0)	client-rapi-mediavine.recombee.com		148.251.217.242	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.029277086 CEST	1.1.1.1	192.168.2.5	0xb922	No error (0)	client-rapi-mediavine.recombee.com		46.4.4.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.029277086 CEST	1.1.1.1	192.168.2.5	0xb922	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.247	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.107187986 CEST	1.1.1.1	192.168.2.5	0x37d9	No error (0)	config.aps.amazon-adsystem.com		13.33.4.68	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.107187986 CEST	1.1.1.1	192.168.2.5	0x37d9	No error (0)	config.aps.amazon-adsystem.com		13.33.4.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.107187986 CEST	1.1.1.1	192.168.2.5	0x37d9	No error (0)	config.aps.amazon-adsystem.com		13.33.4.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.107187986 CEST	1.1.1.1	192.168.2.5	0x37d9	No error (0)	config.aps.amazon-adsystem.com		13.33.4.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.137837887 CEST	1.1.1.1	192.168.2.5	0x7633	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.137837887 CEST	1.1.1.1	192.168.2.5	0x7633	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.137861967 CEST	1.1.1.1	192.168.2.5	0xe880	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.137861967 CEST	1.1.1.1	192.168.2.5	0xe880	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.138715982 CEST	1.1.1.1	192.168.2.5	0x5a0a	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.138715982 CEST	1.1.1.1	192.168.2.5	0x5a0a	No error (0)	adserver.technoratimedia.com		193.122.130.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.139180899 CEST	1.1.1.1	192.168.2.5	0x2018	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.210758924 CEST	1.1.1.1	192.168.2.5	0x3fa6	No error (0)	aorta.clickagy.com		34.198.78.192	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.210758924 CEST	1.1.1.1	192.168.2.5	0x3fa6	No error (0)	aorta.clickagy.com		34.228.243.82	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.210758924 CEST	1.1.1.1	192.168.2.5	0x3fa6	No error (0)	aorta.clickagy.com		34.195.172.166	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.210758924 CEST	1.1.1.1	192.168.2.5	0x3fa6	No error (0)	aorta.clickagy.com		34.237.72.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.210841894 CEST	1.1.1.1	192.168.2.5	0x5dd	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.210841894 CEST	1.1.1.1	192.168.2.5	0x5dd	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.225193977 CEST	1.1.1.1	192.168.2.5	0x774a	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.773298979 CEST	1.1.1.1	192.168.2.5	0xa020	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.773904085 CEST	1.1.1.1	192.168.2.5	0xc2b5	No error (0)	pixel-us-east.rubiconproject.com	pixel-us-east.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.797599077 CEST	1.1.1.1	192.168.2.5	0xbe30	No error (0)	d.turn.com	d.turncdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.797599077 CEST	1.1.1.1	192.168.2.5	0xbe30	No error (0)	d.turncdn.com	d-iad1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.797599077 CEST	1.1.1.1	192.168.2.5	0xbe30	No error (0)	d-iad1.turn.com	presentation-iad1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.797599077 CEST	1.1.1.1	192.168.2.5	0xbe30	No error (0)	presentation-iad1.turn.com		69.194.242.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:51.798305035 CEST	1.1.1.1	192.168.2.5	0xc866	No error (0)	d.turn.com	d.turncdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.798305035 CEST	1.1.1.1	192.168.2.5	0xc866	No error (0)	d.turncdn.com	d-iad1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:51.798305035 CEST	1.1.1.1	192.168.2.5	0xc866	No error (0)	d-iad1.turn.com	presentation-iad1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.385840893 CEST	1.1.1.1	192.168.2.5	0x14a7	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.385840893 CEST	1.1.1.1	192.168.2.5	0x14a7	No error (0)	image4-v2.pubmnet.com	spug-nje1pb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.385840893 CEST	1.1.1.1	192.168.2.5	0x14a7	No error (0)	spug-nje1pb.pubmnet.com		207.65.37.182	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386580944 CEST	1.1.1.1	192.168.2.5	0x7263	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386580944 CEST	1.1.1.1	192.168.2.5	0x7263	No error (0)	image4-v2.pubmnet.com	spug-nje1pb.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386776924 CEST	1.1.1.1	192.168.2.5	0x735e	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386776924 CEST	1.1.1.1	192.168.2.5	0x735e	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386776924 CEST	1.1.1.1	192.168.2.5	0x735e	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386776924 CEST	1.1.1.1	192.168.2.5	0x735e	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.160.83.122	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386794090 CEST	1.1.1.1	192.168.2.5	0x6a13	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386794090 CEST	1.1.1.1	192.168.2.5	0x6a13	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.386794090 CEST	1.1.1.1	192.168.2.5	0x6a13	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.434912920 CEST	1.1.1.1	192.168.2.5	0x9b04	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.434912920 CEST	1.1.1.1	192.168.2.5	0x9b04	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.160.83.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.434931993 CEST	1.1.1.1	192.168.2.5	0x12d2	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.607672930 CEST	1.1.1.1	192.168.2.5	0xb2ea	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 21:25:52.608073950 CEST	1.1.1.1	192.168.2.5	0xb6cf	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.608073950 CEST	1.1.1.1	192.168.2.5	0xb6cf	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.674201012 CEST	1.1.1.1	192.168.2.5	0x76ef	No error (0)	pdmp.dcapi.dmp.3lift.com		3.218.216.11	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.674201012 CEST	1.1.1.1	192.168.2.5	0x76ef	No error (0)	pdmp.dcapi.dmp.3lift.com		3.214.195.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.674201012 CEST	1.1.1.1	192.168.2.5	0x76ef	No error (0)	pdmp.dcapi.dmp.3lift.com		54.89.105.23	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.732840061 CEST	1.1.1.1	192.168.2.5	0x6289	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.732840061 CEST	1.1.1.1	192.168.2.5	0x6289	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.732840061 CEST	1.1.1.1	192.168.2.5	0x6289	No error (0)	gob-pairb-nje1.pubmnet.com		207.65.37.179	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.735410929 CEST	1.1.1.1	192.168.2.5	0x5996	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.735410929 CEST	1.1.1.1	192.168.2.5	0x5996	No error (0)	hbprebid-v3.pubmnet.com	gob-pairb-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.738022089 CEST	1.1.1.1	192.168.2.5	0x383b	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.738265991 CEST	1.1.1.1	192.168.2.5	0xc2f	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.740912914 CEST	1.1.1.1	192.168.2.5	0xe224	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.740912914 CEST	1.1.1.1	192.168.2.5	0xe224	No error (0)	us-east-tlx.3lift.com		3.226.121.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.740912914 CEST	1.1.1.1	192.168.2.5	0xe224	No error (0)	us-east-tlx.3lift.com		3.233.167.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.740912914 CEST	1.1.1.1	192.168.2.5	0xe224	No error (0)	us-east-tlx.3lift.com		54.158.18.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.740912914 CEST	1.1.1.1	192.168.2.5	0xe224	No error (0)	us-east-tlx.3lift.com		34.192.42.219	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.740912914 CEST	1.1.1.1	192.168.2.5	0xe224	No error (0)	us-east-tlx.3lift.com		3.208.175.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.742175102 CEST	1.1.1.1	192.168.2.5	0xcb8d	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.843983889 CEST	1.1.1.1	192.168.2.5	0xed62	No error (0)	aax-eu.amazon-adsystem.com		52.95.126.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.846935034 CEST	1.1.1.1	192.168.2.5	0x93e0	No error (0)	esp.rtbhouse.com		35.190.39.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.859250069 CEST	1.1.1.1	192.168.2.5	0xd156	No error (0)	oajs.openx.net		34.120.135.53	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.859250069 CEST	1.1.1.1	192.168.2.5	0xd156	No error (0)	oajs.openx.net		34.120.107.143	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.867971897 CEST	1.1.1.1	192.168.2.5	0xca6e	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.868416071 CEST	1.1.1.1	192.168.2.5	0x91e3	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.875471115 CEST	1.1.1.1	192.168.2.5	0x5f5d	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.875471115 CEST	1.1.1.1	192.168.2.5	0x5f5d	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	cdn.w55c.net		54.166.33.239	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	cdn.w55c.net		52.205.65.239	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	cdn.w55c.net		54.145.239.252	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	cdn.w55c.net		52.4.157.85	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	cdn.w55c.net		52.72.148.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	cdn.w55c.net		54.165.249.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	cdn.w55c.net		54.205.149.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881491899 CEST	1.1.1.1	192.168.2.5	0x1e89	No error (0)	cdn.w55c.net		52.5.14.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881685972 CEST	1.1.1.1	192.168.2.5	0x4ce8	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.881685972 CEST	1.1.1.1	192.168.2.5	0x4ce8	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.882314920 CEST	1.1.1.1	192.168.2.5	0x3933	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.885137081 CEST	1.1.1.1	192.168.2.5	0x335e	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.885137081 CEST	1.1.1.1	192.168.2.5	0x335e	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.885137081 CEST	1.1.1.1	192.168.2.5	0x335e	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.885137081 CEST	1.1.1.1	192.168.2.5	0x335e	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.885137081 CEST	1.1.1.1	192.168.2.5	0x335e	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.885137081 CEST	1.1.1.1	192.168.2.5	0x335e	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.885533094 CEST	1.1.1.1	192.168.2.5	0x614d	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.885533094 CEST	1.1.1.1	192.168.2.5	0x614d	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.893162966 CEST	1.1.1.1	192.168.2.5	0xffbe	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.893162966 CEST	1.1.1.1	192.168.2.5	0xffbe	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.896236897 CEST	1.1.1.1	192.168.2.5	0xdcf6	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.896236897 CEST	1.1.1.1	192.168.2.5	0xdcf6	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.901293993 CEST	1.1.1.1	192.168.2.5	0xca86	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.901763916 CEST	1.1.1.1	192.168.2.5	0x7496	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.904247999 CEST	1.1.1.1	192.168.2.5	0x9518	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	papi-public.us-east-1.us.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:52.904247999 CEST	1.1.1.1	192.168.2.5	0x9518	No error (0)	papi-public.us-east-1.us.tagger.opecloud.com		3.226.156.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.904247999 CEST	1.1.1.1	192.168.2.5	0x9518	No error (0)	papi-public.us-east-1.us.tagger.opecloud.com		44.205.60.178	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.904247999 CEST	1.1.1.1	192.168.2.5	0x9518	No error (0)	papi-public.us-east-1.us.tagger.opecloud.com		54.227.210.117	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:52.905889034 CEST	1.1.1.1	192.168.2.5	0x4039	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	papi-public.us-east-1.us.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:53.520842075 CEST	1.1.1.1	192.168.2.5	0x5458	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:53.520842075 CEST	1.1.1.1	192.168.2.5	0x5458	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:53.521729946 CEST	1.1.1.1	192.168.2.5	0xe26b	No error (0)	a.sportradarserving.com	zagreb.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:53.521729946 CEST	1.1.1.1	192.168.2.5	0xe26b	No error (0)	zagreb.geo.iponweb.net	pool-use.zagreb.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:53.521729946 CEST	1.1.1.1	192.168.2.5	0xe26b	No error (0)	pool-use.zagreb.iponweb.net		35.211.233.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.292150021 CEST	1.1.1.1	192.168.2.5	0xb347	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.292150021 CEST	1.1.1.1	192.168.2.5	0xb347	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.292983055 CEST	1.1.1.1	192.168.2.5	0x2c16	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Apr 25, 2024 21:25:58.294785023 CEST	1.1.1.1	192.168.2.5	0xeeeb	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.295742035 CEST	1.1.1.1	192.168.2.5	0xb5b	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.295742035 CEST	1.1.1.1	192.168.2.5	0xb5b	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.296271086 CEST	1.1.1.1	192.168.2.5	0xda4c	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.298819065 CEST	1.1.1.1	192.168.2.5	0xf45a	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.298819065 CEST	1.1.1.1	192.168.2.5	0xf45a	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.298819065 CEST	1.1.1.1	192.168.2.5	0xf45a	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.298819065 CEST	1.1.1.1	192.168.2.5	0xf45a	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.300343037 CEST	1.1.1.1	192.168.2.5	0xe017	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.300741911 CEST	1.1.1.1	192.168.2.5	0x9848	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.250.120	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.226.31	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.130.251	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.196.176	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.215.158	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.221.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.181.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.219.242	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.204.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303025961 CEST	1.1.1.1	192.168.2.5	0x3391	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.221.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.303740025 CEST	1.1.1.1	192.168.2.5	0xce20	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.304575920 CEST	1.1.1.1	192.168.2.5	0xc862	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.322734118 CEST	1.1.1.1	192.168.2.5	0xa331	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.322734118 CEST	1.1.1.1	192.168.2.5	0xa331	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.322734118 CEST	1.1.1.1	192.168.2.5	0xa331	No error (0)	spug-vac.pubmnet.com		8.28.7.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.322823048 CEST	1.1.1.1	192.168.2.5	0xedad	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.322823048 CEST	1.1.1.1	192.168.2.5	0xedad	No error (0)	image4-v2.pubmnet.com	spug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.323652983 CEST	1.1.1.1	192.168.2.5	0x899	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.323652983 CEST	1.1.1.1	192.168.2.5	0x899	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.323652983 CEST	1.1.1.1	192.168.2.5	0x899	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.344057083 CEST	1.1.1.1	192.168.2.5	0x2e7e	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.344057083 CEST	1.1.1.1	192.168.2.5	0x2e7e	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.348520041 CEST	1.1.1.1	192.168.2.5	0xe791	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.348700047 CEST	1.1.1.1	192.168.2.5	0xcbf4	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.351092100 CEST	1.1.1.1	192.168.2.5	0xc78b	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.351092100 CEST	1.1.1.1	192.168.2.5	0xc78b	No error (0)	simage2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.351113081 CEST	1.1.1.1	192.168.2.5	0x80b9	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.351113081 CEST	1.1.1.1	192.168.2.5	0x80b9	No error (0)	simage2v2.pubmnet.com	nje1pugpairb.pubmatic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.351113081 CEST	1.1.1.1	192.168.2.5	0x80b9	No error (0)	nje1pugpairb.pubmatic.com		207.65.37.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.351466894 CEST	1.1.1.1	192.168.2.5	0x43a7	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.352016926 CEST	1.1.1.1	192.168.2.5	0xa76	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.356386900 CEST	1.1.1.1	192.168.2.5	0x6ad1	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.709985018 CEST	1.1.1.1	192.168.2.5	0x8486	No error (0)	thrtle.com		34.225.69.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.709985018 CEST	1.1.1.1	192.168.2.5	0x8486	No error (0)	thrtle.com		34.207.25.255	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.709985018 CEST	1.1.1.1	192.168.2.5	0x8486	No error (0)	thrtle.com		34.236.2.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.709985018 CEST	1.1.1.1	192.168.2.5	0x8486	No error (0)	thrtle.com		52.22.203.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.709985018 CEST	1.1.1.1	192.168.2.5	0x8486	No error (0)	thrtle.com		18.211.82.251	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.709985018 CEST	1.1.1.1	192.168.2.5	0x8486	No error (0)	thrtle.com		18.205.199.174	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711106062 CEST	1.1.1.1	192.168.2.5	0x2643	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711106062 CEST	1.1.1.1	192.168.2.5	0x2643	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711106062 CEST	1.1.1.1	192.168.2.5	0x2643	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711106062 CEST	1.1.1.1	192.168.2.5	0x2643	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711106062 CEST	1.1.1.1	192.168.2.5	0x2643	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711106062 CEST	1.1.1.1	192.168.2.5	0x2643	No error (0)	crb.kargo.com		34.203.5.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.21.82.215	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.16.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.44.174.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.45.185.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.72.131.222	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.4.136.74	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		54.144.116.53	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711148024 CEST	1.1.1.1	192.168.2.5	0x90a6	No error (0)	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		52.23.141.19	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.711879015 CEST	1.1.1.1	192.168.2.5	0xa73	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.712342024 CEST	1.1.1.1	192.168.2.5	0xf2f2	No error (0)	sync.bfmio.com	io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.712640047 CEST	1.1.1.1	192.168.2.5	0xfae4	No error (0)	rtb.adentifi.com		3.214.176.164	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.712640047 CEST	1.1.1.1	192.168.2.5	0xfae4	No error (0)	rtb.adentifi.com		34.224.116.50	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.712640047 CEST	1.1.1.1	192.168.2.5	0xfae4	No error (0)	rtb.adentifi.com		3.91.136.197	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.712640047 CEST	1.1.1.1	192.168.2.5	0xfae4	No error (0)	rtb.adentifi.com		52.86.59.129	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.712640047 CEST	1.1.1.1	192.168.2.5	0xfae4	No error (0)	rtb.adentifi.com		3.223.18.196	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.712640047 CEST	1.1.1.1	192.168.2.5	0xfae4	No error (0)	rtb.adentifi.com		3.213.112.36	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.713433027 CEST	1.1.1.1	192.168.2.5	0x4361	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.714016914 CEST	1.1.1.1	192.168.2.5	0x1608	No error (0)	pmp.mxptint.net		38.68.201.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.714170933 CEST	1.1.1.1	192.168.2.5	0xe299	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.714170933 CEST	1.1.1.1	192.168.2.5	0xe299	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.49	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.714170933 CEST	1.1.1.1	192.168.2.5	0xe299	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.714170933 CEST	1.1.1.1	192.168.2.5	0xe299	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.715073109 CEST	1.1.1.1	192.168.2.5	0x773f	No error (0)	bcp.crwdcntrl.net		52.20.151.97	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.715073109 CEST	1.1.1.1	192.168.2.5	0x773f	No error (0)	bcp.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.715073109 CEST	1.1.1.1	192.168.2.5	0x773f	No error (0)	bcp.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.715073109 CEST	1.1.1.1	192.168.2.5	0x773f	No error (0)	bcp.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.715073109 CEST	1.1.1.1	192.168.2.5	0x773f	No error (0)	bcp.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.715073109 CEST	1.1.1.1	192.168.2.5	0x773f	No error (0)	bcp.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.715073109 CEST	1.1.1.1	192.168.2.5	0x773f	No error (0)	bcp.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.715073109 CEST	1.1.1.1	192.168.2.5	0x773f	No error (0)	bcp.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.716227055 CEST	1.1.1.1	192.168.2.5	0x62ff	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.739495993 CEST	1.1.1.1	192.168.2.5	0xf07e	No error (0)	feed.pghub.io		34.102.243.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		174.129.112.91	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.88.165.28	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.81.49.146	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.0.240.249	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		107.20.88.0	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.196.30.89	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.214.122.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.841869116 CEST	1.1.1.1	192.168.2.5	0x3a9c	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.195.106.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:58.842135906 CEST	1.1.1.1	192.168.2.5	0xe514	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.842463970 CEST	1.1.1.1	192.168.2.5	0xe9e	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.842463970 CEST	1.1.1.1	192.168.2.5	0xe9e	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:58.842698097 CEST	1.1.1.1	192.168.2.5	0xf524	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:59.280421972 CEST	1.1.1.1	192.168.2.5	0x4f41	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:59.280421972 CEST	1.1.1.1	192.168.2.5	0x4f41	No error (0)	ny5-prebid.a-mx.net		147.75.198.144	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.280421972 CEST	1.1.1.1	192.168.2.5	0x4f41	No error (0)	ny5-prebid.a-mx.net		147.75.195.77	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.280421972 CEST	1.1.1.1	192.168.2.5	0x4f41	No error (0)	ny5-prebid.a-mx.net		147.75.195.55	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.280462027 CEST	1.1.1.1	192.168.2.5	0x7799	No error (0)	prebid.a-mo.net	ny5-prebid.a-mx.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match-us-east-1-ecs.sharethrough.com		44.209.20.160	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match-us-east-1-ecs.sharethrough.com		184.72.228.207	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match-us-east-1-ecs.sharethrough.com		35.169.243.49	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match-us-east-1-ecs.sharethrough.com		34.232.218.180	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match-us-east-1-ecs.sharethrough.com		34.202.147.20	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match-us-east-1-ecs.sharethrough.com		50.16.138.64	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match-us-east-1-ecs.sharethrough.com		34.194.99.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.373200893 CEST	1.1.1.1	192.168.2.5	0x7ec6	No error (0)	match-us-east-1-ecs.sharethrough.com		52.20.207.59	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.374527931 CEST	1.1.1.1	192.168.2.5	0x4a2b	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:25:59.427635908 CEST	1.1.1.1	192.168.2.5	0xc131	No error (0)	pagead-googlehosted.l.google.com		173.194.219.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.452721119 CEST	1.1.1.1	192.168.2.5	0x8893	No error (0)	live.rezync.com		3.161.136.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.452721119 CEST	1.1.1.1	192.168.2.5	0x8893	No error (0)	live.rezync.com		3.161.136.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.452721119 CEST	1.1.1.1	192.168.2.5	0x8893	No error (0)	live.rezync.com		3.161.136.27	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.452721119 CEST	1.1.1.1	192.168.2.5	0x8893	No error (0)	live.rezync.com		3.161.136.118	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.639516115 CEST	1.1.1.1	192.168.2.5	0x5773	No error (0)	pandg.tapad.com		34.102.243.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.648147106 CEST	1.1.1.1	192.168.2.5	0x9445	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Apr 25, 2024 21:25:59.648567915 CEST	1.1.1.1	192.168.2.5	0x7859	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:25:59.648567915 CEST	1.1.1.1	192.168.2.5	0x7859	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.047640085 CEST	1.1.1.1	192.168.2.5	0x8b02	No error (0)	cs.iqzone.com		8.2.111.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.064575911 CEST	1.1.1.1	192.168.2.5	0xf899	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:00.064594984 CEST	1.1.1.1	192.168.2.5	0x9aa5	No error (0)	gocm.c.appier.net	gocm-geo.c.appier.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:00.489084959 CEST	1.1.1.1	192.168.2.5	0x4d2b	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.509502888 CEST	1.1.1.1	192.168.2.5	0x76b2	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:00.511337042 CEST	1.1.1.1	192.168.2.5	0xb7b0	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:00.511337042 CEST	1.1.1.1	192.168.2.5	0xb7b0	No error (0)	1.cpm.ak-is2.net		174.137.133.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.847656965 CEST	1.1.1.1	192.168.2.5	0xbf9b	No error (0)	s0.2mdn.net		142.250.105.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.847656965 CEST	1.1.1.1	192.168.2.5	0xbf9b	No error (0)	s0.2mdn.net		142.250.105.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.994092941 CEST	1.1.1.1	192.168.2.5	0xb8a3	No error (0)	cdn.mediago.io		3.162.125.35	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.994092941 CEST	1.1.1.1	192.168.2.5	0xb8a3	No error (0)	cdn.mediago.io		3.162.125.63	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.994092941 CEST	1.1.1.1	192.168.2.5	0xb8a3	No error (0)	cdn.mediago.io		3.162.125.37	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.994092941 CEST	1.1.1.1	192.168.2.5	0xb8a3	No error (0)	cdn.mediago.io		3.162.125.116	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.997227907 CEST	1.1.1.1	192.168.2.5	0x61a3	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.997227907 CEST	1.1.1.1	192.168.2.5	0x61a3	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.997227907 CEST	1.1.1.1	192.168.2.5	0x61a3	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.997227907 CEST	1.1.1.1	192.168.2.5	0x61a3	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.997227907 CEST	1.1.1.1	192.168.2.5	0x61a3	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.997227907 CEST	1.1.1.1	192.168.2.5	0x61a3	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:00.997502089 CEST	1.1.1.1	192.168.2.5	0xbbdd	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:01.179531097 CEST	1.1.1.1	192.168.2.5	0x9469	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.200227976 CEST	1.1.1.1	192.168.2.5	0x5402	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.200227976 CEST	1.1.1.1	192.168.2.5	0x5402	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.480374098 CEST	1.1.1.1	192.168.2.5	0x99e8	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:01.481199980 CEST	1.1.1.1	192.168.2.5	0x6dda	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:01.485429049 CEST	1.1.1.1	192.168.2.5	0x3e64	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:01.485429049 CEST	1.1.1.1	192.168.2.5	0x3e64	No error (0)	sync.1rx.io		69.194.240.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.485584974 CEST	1.1.1.1	192.168.2.5	0xca02	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:01.680598974 CEST	1.1.1.1	192.168.2.5	0x83	No error (0)	images.mediago.io		34.111.60.239	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:01.859231949 CEST	1.1.1.1	192.168.2.5	0xa020	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.604587078 CEST	1.1.1.1	192.168.2.5	0xe535	No error (0)	dclk-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.605118990 CEST	1.1.1.1	192.168.2.5	0x7926	No error (0)	dclk-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.617547035 CEST	1.1.1.1	192.168.2.5	0x88fd	No error (0)	aid.send.microad.jp		202.233.84.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619883060 CEST	1.1.1.1	192.168.2.5	0xbd79	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619883060 CEST	1.1.1.1	192.168.2.5	0xbd79	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619883060 CEST	1.1.1.1	192.168.2.5	0xbd79	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	vap.lijit.com	nase.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	nase.vap.lijit.com	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		107.22.223.223	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.239.215.57	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		100.24.227.202	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.21.5.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		52.73.231.222	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		34.231.89.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.94.28.45	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.619940996 CEST	1.1.1.1	192.168.2.5	0x4e5	No error (0)	blackbird-prd-ue1-alb-1973039460.us-east-1.elb.amazonaws.com		3.209.51.183	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.621051073 CEST	1.1.1.1	192.168.2.5	0x4602	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:02.621068954 CEST	1.1.1.1	192.168.2.5	0x9f15	No error (0)	s.ad.smaato.net		3.163.80.51	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.621068954 CEST	1.1.1.1	192.168.2.5	0x9f15	No error (0)	s.ad.smaato.net		3.163.80.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.621068954 CEST	1.1.1.1	192.168.2.5	0x9f15	No error (0)	s.ad.smaato.net		3.163.80.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.621068954 CEST	1.1.1.1	192.168.2.5	0x9f15	No error (0)	s.ad.smaato.net		3.163.80.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:02.621733904 CEST	1.1.1.1	192.168.2.5	0xcc41	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:03.280427933 CEST	1.1.1.1	192.168.2.5	0xacc7	No error (0)	router.infolinks.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:03.280765057 CEST	1.1.1.1	192.168.2.5	0x74ac	No error (0)	router.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:03.280765057 CEST	1.1.1.1	192.168.2.5	0x74ac	No error (0)	router.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.125978947 CEST	1.1.1.1	192.168.2.5	0xf5b4	No error (0)	gtrace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.187139034 CEST	1.1.1.1	192.168.2.5	0x9f65	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.189007044 CEST	1.1.1.1	192.168.2.5	0xf8a	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.189007044 CEST	1.1.1.1	192.168.2.5	0xf8a	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.242.78.179	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.189007044 CEST	1.1.1.1	192.168.2.5	0xf8a	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		18.215.41.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.189007044 CEST	1.1.1.1	192.168.2.5	0xf8a	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.230.229.237	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.189007044 CEST	1.1.1.1	192.168.2.5	0xf8a	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.145.52.81	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.189393044 CEST	1.1.1.1	192.168.2.5	0x5a38	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.201860905 CEST	1.1.1.1	192.168.2.5	0xd245	No error (0)	sync.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.201860905 CEST	1.1.1.1	192.168.2.5	0xd245	No error (0)	sync.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.201860905 CEST	1.1.1.1	192.168.2.5	0xd245	No error (0)	sync.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.201860905 CEST	1.1.1.1	192.168.2.5	0xd245	No error (0)	sync.crwdcntrl.net		54.91.74.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.201860905 CEST	1.1.1.1	192.168.2.5	0xd245	No error (0)	sync.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.201860905 CEST	1.1.1.1	192.168.2.5	0xd245	No error (0)	sync.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.201860905 CEST	1.1.1.1	192.168.2.5	0xd245	No error (0)	sync.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.201860905 CEST	1.1.1.1	192.168.2.5	0xd245	No error (0)	sync.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.421391010 CEST	1.1.1.1	192.168.2.5	0xe066	No error (0)	io.narrative.io		44.210.158.2	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.421391010 CEST	1.1.1.1	192.168.2.5	0xe066	No error (0)	io.narrative.io		52.54.212.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.421391010 CEST	1.1.1.1	192.168.2.5	0xe066	No error (0)	io.narrative.io		52.45.209.214	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.421391010 CEST	1.1.1.1	192.168.2.5	0xe066	No error (0)	io.narrative.io		54.172.245.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.421391010 CEST	1.1.1.1	192.168.2.5	0xe066	No error (0)	io.narrative.io		54.156.151.140	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.421391010 CEST	1.1.1.1	192.168.2.5	0xe066	No error (0)	io.narrative.io		52.0.173.158	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.448796988 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.448796988 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.448796988 CEST	1.1.1.1	192.168.2.5	0xe77d	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.486913919 CEST	1.1.1.1	192.168.2.5	0x3467	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.249	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.486913919 CEST	1.1.1.1	192.168.2.5	0x3467	No error (0)	client-rapi-mediavine.recombee.com		148.251.217.242	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.486913919 CEST	1.1.1.1	192.168.2.5	0x3467	No error (0)	client-rapi-mediavine.recombee.com		188.40.16.146	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.486913919 CEST	1.1.1.1	192.168.2.5	0x3467	No error (0)	client-rapi-mediavine.recombee.com		46.4.4.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.486913919 CEST	1.1.1.1	192.168.2.5	0x3467	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.247	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.486913919 CEST	1.1.1.1	192.168.2.5	0x3467	No error (0)	client-rapi-mediavine.recombee.com		5.9.235.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.487164021 CEST	1.1.1.1	192.168.2.5	0xefe6	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.487164021 CEST	1.1.1.1	192.168.2.5	0xefe6	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.487371922 CEST	1.1.1.1	192.168.2.5	0x8a9a	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:05.487957954 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.487957954 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	us-east-tlx.3lift.com		34.192.42.219	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.487957954 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	us-east-tlx.3lift.com		3.226.121.246	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.487957954 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	us-east-tlx.3lift.com		54.158.18.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.487957954 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	us-east-tlx.3lift.com		3.208.175.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.487957954 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	us-east-tlx.3lift.com		3.233.167.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.488087893 CEST	1.1.1.1	192.168.2.5	0xa00a	No error (0)	tlx.3lift.com	us-east-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.491485119 CEST	1.1.1.1	192.168.2.5	0xfafb	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.491485119 CEST	1.1.1.1	192.168.2.5	0xfafb	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.491485119 CEST	1.1.1.1	192.168.2.5	0xfafb	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.491919041 CEST	1.1.1.1	192.168.2.5	0x91b0	No error (0)	aax.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.491919041 CEST	1.1.1.1	192.168.2.5	0x91b0	No error (0)	aax-dtb-cf.amazon-adsystem.com	aax-dtb-cf.amazon-adsystem.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.491919041 CEST	1.1.1.1	192.168.2.5	0x91b0	No error (0)	aax-dtb-cf.amazon-adsystem.amazon.com	d1jvc9b8z3vcjs.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.491919041 CEST	1.1.1.1	192.168.2.5	0x91b0	No error (0)	d1jvc9b8z3vcjs.cloudfront.net		18.64.153.203	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.492846012 CEST	1.1.1.1	192.168.2.5	0xb0dd	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.493545055 CEST	1.1.1.1	192.168.2.5	0x990	No error (0)	prebid-server.rubiconproject.com	prebid-server.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.495851040 CEST	1.1.1.1	192.168.2.5	0x8157	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.495887995 CEST	1.1.1.1	192.168.2.5	0x7ae9	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.495887995 CEST	1.1.1.1	192.168.2.5	0x7ae9	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.495887995 CEST	1.1.1.1	192.168.2.5	0x7ae9	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.119	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.495887995 CEST	1.1.1.1	192.168.2.5	0x7ae9	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.495887995 CEST	1.1.1.1	192.168.2.5	0x7ae9	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.91	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.496731997 CEST	1.1.1.1	192.168.2.5	0xdf60	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.496731997 CEST	1.1.1.1	192.168.2.5	0xdf60	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497381926 CEST	1.1.1.1	192.168.2.5	0x181	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.497673988 CEST	1.1.1.1	192.168.2.5	0xef19	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:05.907216072 CEST	1.1.1.1	192.168.2.5	0x2559	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:05.907216072 CEST	1.1.1.1	192.168.2.5	0x2559	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.350918055 CEST	1.1.1.1	192.168.2.5	0x6a4	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	papi-public.us-east-1.us.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.351313114 CEST	1.1.1.1	192.168.2.5	0xc1bf	No error (0)	pdmp.papi-public.us-east-1.tagger.opecloud.com	papi-public.us-east-1.us.tagger.opecloud.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.351313114 CEST	1.1.1.1	192.168.2.5	0xc1bf	No error (0)	papi-public.us-east-1.us.tagger.opecloud.com		3.226.156.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.351313114 CEST	1.1.1.1	192.168.2.5	0xc1bf	No error (0)	papi-public.us-east-1.us.tagger.opecloud.com		54.227.210.117	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.351313114 CEST	1.1.1.1	192.168.2.5	0xc1bf	No error (0)	papi-public.us-east-1.us.tagger.opecloud.com		44.205.60.178	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.351855993 CEST	1.1.1.1	192.168.2.5	0x1c4a	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.351891994 CEST	1.1.1.1	192.168.2.5	0x3bbf	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.353785038 CEST	1.1.1.1	192.168.2.5	0x6dd0	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.353785038 CEST	1.1.1.1	192.168.2.5	0x6dd0	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.353933096 CEST	1.1.1.1	192.168.2.5	0x9499	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.353933096 CEST	1.1.1.1	192.168.2.5	0x9499	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.354717970 CEST	1.1.1.1	192.168.2.5	0x81b1	No error (0)	match.prod.bidr.io		52.72.24.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.354717970 CEST	1.1.1.1	192.168.2.5	0x81b1	No error (0)	match.prod.bidr.io		54.158.106.27	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.354717970 CEST	1.1.1.1	192.168.2.5	0x81b1	No error (0)	match.prod.bidr.io		54.159.154.40	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.354717970 CEST	1.1.1.1	192.168.2.5	0x81b1	No error (0)	match.prod.bidr.io		54.146.215.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.354717970 CEST	1.1.1.1	192.168.2.5	0x81b1	No error (0)	match.prod.bidr.io		54.156.79.83	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.354717970 CEST	1.1.1.1	192.168.2.5	0x81b1	No error (0)	match.prod.bidr.io		54.152.125.5	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.354717970 CEST	1.1.1.1	192.168.2.5	0x81b1	No error (0)	match.prod.bidr.io		54.147.251.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.354717970 CEST	1.1.1.1	192.168.2.5	0x81b1	No error (0)	match.prod.bidr.io		52.87.53.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.355343103 CEST	1.1.1.1	192.168.2.5	0x2be7	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.356009960 CEST	1.1.1.1	192.168.2.5	0x9f	No error (0)	pdmp.dcapi.dmp.3lift.com		3.218.216.11	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.356009960 CEST	1.1.1.1	192.168.2.5	0x9f	No error (0)	pdmp.dcapi.dmp.3lift.com		3.214.195.124	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.356009960 CEST	1.1.1.1	192.168.2.5	0x9f	No error (0)	pdmp.dcapi.dmp.3lift.com		54.89.105.23	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.356827021 CEST	1.1.1.1	192.168.2.5	0x5f87	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.358875036 CEST	1.1.1.1	192.168.2.5	0xd6a1	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.358875036 CEST	1.1.1.1	192.168.2.5	0xd6a1	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.370162964 CEST	1.1.1.1	192.168.2.5	0xfbe7	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.370217085 CEST	1.1.1.1	192.168.2.5	0xde4e	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.371191978 CEST	1.1.1.1	192.168.2.5	0x7f12	No error (0)	events-ssc.33across.com		34.117.239.71	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.371325970 CEST	1.1.1.1	192.168.2.5	0x3c6	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.47	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.371325970 CEST	1.1.1.1	192.168.2.5	0x3c6	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.371325970 CEST	1.1.1.1	192.168.2.5	0x3c6	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.371325970 CEST	1.1.1.1	192.168.2.5	0x3c6	No error (0)	synchroscript.deliveryengine.adswizz.com		18.160.10.49	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		44.216.253.69	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.222.64.51	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.81.49.146	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.93.160.126	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.88.165.28	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.85.41.141	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		52.0.240.249	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.373887062 CEST	1.1.1.1	192.168.2.5	0xdf1d	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.195.106.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:06.374129057 CEST	1.1.1.1	192.168.2.5	0x1d8	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.374129057 CEST	1.1.1.1	192.168.2.5	0x1d8	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.379492998 CEST	1.1.1.1	192.168.2.5	0x5949	No error (0)	ads.creative-serving.com	httplb-gce-va-clickdistrict.clickdistrict.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.379621029 CEST	1.1.1.1	192.168.2.5	0xa45d	No error (0)	ads.creative-serving.com	httplb-gce-va-clickdistrict.clickdistrict.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:06.379621029 CEST	1.1.1.1	192.168.2.5	0xa45d	No error (0)	httplb-gce-va-clickdistrict.clickdistrict.iponweb.net		35.212.23.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match-us-east-1-ecs.sharethrough.com		52.20.207.59	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match-us-east-1-ecs.sharethrough.com		44.217.108.225	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match-us-east-1-ecs.sharethrough.com		3.229.108.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match-us-east-1-ecs.sharethrough.com		35.169.243.49	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match-us-east-1-ecs.sharethrough.com		23.21.103.244	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match-us-east-1-ecs.sharethrough.com		54.156.7.178	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match-us-east-1-ecs.sharethrough.com		34.196.207.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.482944965 CEST	1.1.1.1	192.168.2.5	0x9810	No error (0)	match-us-east-1-ecs.sharethrough.com		184.72.228.207	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.483417034 CEST	1.1.1.1	192.168.2.5	0xd73f	No error (0)	match.sharethrough.com	match-us-east-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.490390062 CEST	1.1.1.1	192.168.2.5	0x891	No error (0)	sync.srv.stackadapt.com		54.211.105.244	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.490390062 CEST	1.1.1.1	192.168.2.5	0x891	No error (0)	sync.srv.stackadapt.com		54.198.23.122	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.490390062 CEST	1.1.1.1	192.168.2.5	0x891	No error (0)	sync.srv.stackadapt.com		54.172.144.20	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.490390062 CEST	1.1.1.1	192.168.2.5	0x891	No error (0)	sync.srv.stackadapt.com		54.158.42.6	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.490390062 CEST	1.1.1.1	192.168.2.5	0x891	No error (0)	sync.srv.stackadapt.com		54.166.67.31	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.490390062 CEST	1.1.1.1	192.168.2.5	0x891	No error (0)	sync.srv.stackadapt.com		54.209.244.95	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.490390062 CEST	1.1.1.1	192.168.2.5	0x891	No error (0)	sync.srv.stackadapt.com		54.147.38.202	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.490390062 CEST	1.1.1.1	192.168.2.5	0x891	No error (0)	sync.srv.stackadapt.com		52.73.12.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.491456032 CEST	1.1.1.1	192.168.2.5	0x2b87	No error (0)	bcp.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.491456032 CEST	1.1.1.1	192.168.2.5	0x2b87	No error (0)	bcp.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.491456032 CEST	1.1.1.1	192.168.2.5	0x2b87	No error (0)	bcp.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.491456032 CEST	1.1.1.1	192.168.2.5	0x2b87	No error (0)	bcp.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.491456032 CEST	1.1.1.1	192.168.2.5	0x2b87	No error (0)	bcp.crwdcntrl.net		54.91.74.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.491456032 CEST	1.1.1.1	192.168.2.5	0x2b87	No error (0)	bcp.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.491456032 CEST	1.1.1.1	192.168.2.5	0x2b87	No error (0)	bcp.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.491456032 CEST	1.1.1.1	192.168.2.5	0x2b87	No error (0)	bcp.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.492110014 CEST	1.1.1.1	192.168.2.5	0x8bf2	No error (0)	thrtle.com		52.22.203.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.492110014 CEST	1.1.1.1	192.168.2.5	0x8bf2	No error (0)	thrtle.com		18.205.199.174	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.492110014 CEST	1.1.1.1	192.168.2.5	0x8bf2	No error (0)	thrtle.com		18.211.82.251	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.492110014 CEST	1.1.1.1	192.168.2.5	0x8bf2	No error (0)	thrtle.com		34.207.25.255	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.492110014 CEST	1.1.1.1	192.168.2.5	0x8bf2	No error (0)	thrtle.com		34.225.69.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.492110014 CEST	1.1.1.1	192.168.2.5	0x8bf2	No error (0)	thrtle.com		34.236.2.13	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.493285894 CEST	1.1.1.1	192.168.2.5	0x8f31	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.493524075 CEST	1.1.1.1	192.168.2.5	0x70e7	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.493524075 CEST	1.1.1.1	192.168.2.5	0x70e7	No error (0)	securepubads46.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.493524075 CEST	1.1.1.1	192.168.2.5	0x70e7	No error (0)	securepubads46.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.493524075 CEST	1.1.1.1	192.168.2.5	0x70e7	No error (0)	securepubads46.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.493524075 CEST	1.1.1.1	192.168.2.5	0x70e7	No error (0)	securepubads46.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.499586105 CEST	1.1.1.1	192.168.2.5	0xbb52	No error (0)	loada.exelator.com	us-central.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.499586105 CEST	1.1.1.1	192.168.2.5	0xbb52	No error (0)	us-central.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502624989 CEST	1.1.1.1	192.168.2.5	0x392e	No error (0)	loada.exelator.com	us-central.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502624989 CEST	1.1.1.1	192.168.2.5	0x392e	No error (0)	us-central.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502624989 CEST	1.1.1.1	192.168.2.5	0x392e	No error (0)	load-use1.exelator.com		34.229.3.43	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502705097 CEST	1.1.1.1	192.168.2.5	0x7427	No error (0)	a.audrte.com		52.215.143.51	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502705097 CEST	1.1.1.1	192.168.2.5	0x7427	No error (0)	a.audrte.com		63.33.13.151	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502705097 CEST	1.1.1.1	192.168.2.5	0x7427	No error (0)	a.audrte.com		52.17.231.33	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502705097 CEST	1.1.1.1	192.168.2.5	0x7427	No error (0)	a.audrte.com		52.209.193.199	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502705097 CEST	1.1.1.1	192.168.2.5	0x7427	No error (0)	a.audrte.com		52.215.59.81	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.502705097 CEST	1.1.1.1	192.168.2.5	0x7427	No error (0)	a.audrte.com		54.229.19.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.506078959 CEST	1.1.1.1	192.168.2.5	0x5d36	No error (0)	images.mediago.io		34.111.60.239	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.507395983 CEST	1.1.1.1	192.168.2.5	0x9cff	No error (0)	trace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:08.509470940 CEST	1.1.1.1	192.168.2.5	0x1a91	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.511008978 CEST	1.1.1.1	192.168.2.5	0x7ec2	No error (0)	sync.inmobi.com	pixel-sync.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:08.511131048 CEST	1.1.1.1	192.168.2.5	0x4f5	No error (0)	aid.send.microad.jp		202.233.84.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.115813017 CEST	1.1.1.1	192.168.2.5	0xec8e	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.120444059 CEST	1.1.1.1	192.168.2.5	0x6de9	No error (0)	router.infolinks.com		172.66.42.247	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.120444059 CEST	1.1.1.1	192.168.2.5	0x6de9	No error (0)	router.infolinks.com		172.66.41.9	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.121207952 CEST	1.1.1.1	192.168.2.5	0xdafd	No error (0)	router.infolinks.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:11.145761967 CEST	1.1.1.1	192.168.2.5	0xbf47	No error (0)	pmp.mxptint.net		38.98.69.175	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.155592918 CEST	1.1.1.1	192.168.2.5	0xf3a5	No error (0)	s0.2mdn.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.155592918 CEST	1.1.1.1	192.168.2.5	0xf3a5	No error (0)	s0.2mdn.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.163100958 CEST	1.1.1.1	192.168.2.5	0x4e30	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:11.163100958 CEST	1.1.1.1	192.168.2.5	0x4e30	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.80	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.163100958 CEST	1.1.1.1	192.168.2.5	0x4e30	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.78	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.163100958 CEST	1.1.1.1	192.168.2.5	0x4e30	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.91	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.163100958 CEST	1.1.1.1	192.168.2.5	0x4e30	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.119	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.163733006 CEST	1.1.1.1	192.168.2.5	0xecb5	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165386915 CEST	1.1.1.1	192.168.2.5	0x7ba2	No error (0)	sync.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165386915 CEST	1.1.1.1	192.168.2.5	0x7ba2	No error (0)	sync.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165386915 CEST	1.1.1.1	192.168.2.5	0x7ba2	No error (0)	sync.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165386915 CEST	1.1.1.1	192.168.2.5	0x7ba2	No error (0)	sync.crwdcntrl.net		54.91.74.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165386915 CEST	1.1.1.1	192.168.2.5	0x7ba2	No error (0)	sync.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165386915 CEST	1.1.1.1	192.168.2.5	0x7ba2	No error (0)	sync.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165386915 CEST	1.1.1.1	192.168.2.5	0x7ba2	No error (0)	sync.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165386915 CEST	1.1.1.1	192.168.2.5	0x7ba2	No error (0)	sync.crwdcntrl.net		52.20.151.97	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165972948 CEST	1.1.1.1	192.168.2.5	0x3d3c	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165972948 CEST	1.1.1.1	192.168.2.5	0x3d3c	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		34.230.229.237	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165972948 CEST	1.1.1.1	192.168.2.5	0x3d3c	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.242.78.179	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165972948 CEST	1.1.1.1	192.168.2.5	0x3d3c	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		54.145.52.81	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.165972948 CEST	1.1.1.1	192.168.2.5	0x3d3c	No error (0)	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		18.215.41.58	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:11.167282104 CEST	1.1.1.1	192.168.2.5	0xc2f9	No error (0)	bpi.rtactivate.com	rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:12.186252117 CEST	1.1.1.1	192.168.2.5	0x9f66	No error (0)	to.getnitropack.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:12.186913013 CEST	1.1.1.1	192.168.2.5	0x6e5f	No error (0)	to.getnitropack.com		172.64.150.163	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.186913013 CEST	1.1.1.1	192.168.2.5	0x6e5f	No error (0)	to.getnitropack.com		104.18.37.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.313908100 CEST	1.1.1.1	192.168.2.5	0xc11d	No error (0)	googleads.g.doubleclick.net		142.250.9.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.313908100 CEST	1.1.1.1	192.168.2.5	0xc11d	No error (0)	googleads.g.doubleclick.net		142.250.9.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.313908100 CEST	1.1.1.1	192.168.2.5	0xc11d	No error (0)	googleads.g.doubleclick.net		142.250.9.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.313908100 CEST	1.1.1.1	192.168.2.5	0xc11d	No error (0)	googleads.g.doubleclick.net		142.250.9.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.316823006 CEST	1.1.1.1	192.168.2.5	0x9439	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 21:26:12.389260054 CEST	1.1.1.1	192.168.2.5	0x43e4	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:12.389260054 CEST	1.1.1.1	192.168.2.5	0x43e4	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:12.389295101 CEST	1.1.1.1	192.168.2.5	0x434b	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:12.434850931 CEST	1.1.1.1	192.168.2.5	0xeefe	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:14.811618090 CEST	1.1.1.1	192.168.2.5	0x643	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:14.811618090 CEST	1.1.1.1	192.168.2.5	0x643	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:14.811618090 CEST	1.1.1.1	192.168.2.5	0x643	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:14.812674999 CEST	1.1.1.1	192.168.2.5	0x53bf	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:15.273334026 CEST	1.1.1.1	192.168.2.5	0x4d57	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 25, 2024 21:26:15.274964094 CEST	1.1.1.1	192.168.2.5	0xd5da	No error (0)	googleads.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:15.274964094 CEST	1.1.1.1	192.168.2.5	0xd5da	No error (0)	googleads.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:15.274964094 CEST	1.1.1.1	192.168.2.5	0xd5da	No error (0)	googleads.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:15.274964094 CEST	1.1.1.1	192.168.2.5	0xd5da	No error (0)	googleads.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:15.872554064 CEST	1.1.1.1	192.168.2.5	0x244c	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:15.873279095 CEST	1.1.1.1	192.168.2.5	0xfdfc	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:16.128995895 CEST	1.1.1.1	192.168.2.5	0x10b2	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:16.128995895 CEST	1.1.1.1	192.168.2.5	0x10b2	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:16.128995895 CEST	1.1.1.1	192.168.2.5	0x10b2	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:16.129915953 CEST	1.1.1.1	192.168.2.5	0xf7ae	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:19.774272919 CEST	1.1.1.1	192.168.2.5	0xfba6	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:19.774585009 CEST	1.1.1.1	192.168.2.5	0x5133	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.774585009 CEST	1.1.1.1	192.168.2.5	0x5133	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.774585009 CEST	1.1.1.1	192.168.2.5	0x5133	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.804430008 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:19.804430008 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:19.804430008 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:19.804430008 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.804430008 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.804430008 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.804430008 CEST	1.1.1.1	192.168.2.5	0xa112	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:19.805811882 CEST	1.1.1.1	192.168.2.5	0x769c	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:19.805811882 CEST	1.1.1.1	192.168.2.5	0x769c	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:19.805811882 CEST	1.1.1.1	192.168.2.5	0x769c	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:20.283737898 CEST	1.1.1.1	192.168.2.5	0x5ae5	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:20.400284052 CEST	1.1.1.1	192.168.2.5	0x8d44	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:20.400304079 CEST	1.1.1.1	192.168.2.5	0x4	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:20.400892019 CEST	1.1.1.1	192.168.2.5	0x1e5c	No error (0)	cs.krushmedia.com		8.2.110.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:20.960630894 CEST	1.1.1.1	192.168.2.5	0x11fc	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:20.961159945 CEST	1.1.1.1	192.168.2.5	0x3ffe	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:20.962060928 CEST	1.1.1.1	192.168.2.5	0xc940	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:20.962060928 CEST	1.1.1.1	192.168.2.5	0xc940	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:20.962717056 CEST	1.1.1.1	192.168.2.5	0xe20e	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:20.962717056 CEST	1.1.1.1	192.168.2.5	0xe20e	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:21.031207085 CEST	1.1.1.1	192.168.2.5	0x6755	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:21.031207085 CEST	1.1.1.1	192.168.2.5	0x6755	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:21.031207085 CEST	1.1.1.1	192.168.2.5	0x6755	No error (0)	adizio.geo.iponweb.net		35.210.53.219	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.032844067 CEST	1.1.1.1	192.168.2.5	0xab4e	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:21.032844067 CEST	1.1.1.1	192.168.2.5	0xab4e	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:21.465862989 CEST	1.1.1.1	192.168.2.5	0xf4ef	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:21.465862989 CEST	1.1.1.1	192.168.2.5	0xf4ef	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.465862989 CEST	1.1.1.1	192.168.2.5	0xf4ef	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.465862989 CEST	1.1.1.1	192.168.2.5	0xf4ef	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.465862989 CEST	1.1.1.1	192.168.2.5	0xf4ef	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.465971947 CEST	1.1.1.1	192.168.2.5	0x431e	No error (0)	data.adsrvr.org	match.adsrvr.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:21.894305944 CEST	1.1.1.1	192.168.2.5	0x8c04	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:21.897027016 CEST	1.1.1.1	192.168.2.5	0xc58f	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:21.897826910 CEST	1.1.1.1	192.168.2.5	0x2cfe	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:23.972309113 CEST	1.1.1.1	192.168.2.5	0x83f0	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:23.972309113 CEST	1.1.1.1	192.168.2.5	0x83f0	No error (0)	idaas6.cph.liveintent.com		34.193.32.57	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:23.972309113 CEST	1.1.1.1	192.168.2.5	0x83f0	No error (0)	idaas6.cph.liveintent.com		3.209.78.31	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:23.972309113 CEST	1.1.1.1	192.168.2.5	0x83f0	No error (0)	idaas6.cph.liveintent.com		3.215.218.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:23.972538948 CEST	1.1.1.1	192.168.2.5	0xf9e0	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:24.549596071 CEST	1.1.1.1	192.168.2.5	0xdfe9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:24.549596071 CEST	1.1.1.1	192.168.2.5	0xdfe9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:24.626225948 CEST	1.1.1.1	192.168.2.5	0xe210	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:24.626225948 CEST	1.1.1.1	192.168.2.5	0xe210	No error (0)	idaas6.cph.liveintent.com		3.209.78.31	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:24.626225948 CEST	1.1.1.1	192.168.2.5	0xe210	No error (0)	idaas6.cph.liveintent.com		34.193.32.57	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:24.626225948 CEST	1.1.1.1	192.168.2.5	0xe210	No error (0)	idaas6.cph.liveintent.com		3.215.218.131	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:24.626280069 CEST	1.1.1.1	192.168.2.5	0x60a	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:24.897408962 CEST	1.1.1.1	192.168.2.5	0x7258	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:24.898310900 CEST	1.1.1.1	192.168.2.5	0x421e	No error (0)	scripts.mediavine.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:26.298911095 CEST	1.1.1.1	192.168.2.5	0xb182	No error (0)	oxp.mxptint.net		165.254.203.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.299645901 CEST	1.1.1.1	192.168.2.5	0x3f67	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	cdn.w55c.net		52.4.157.85	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	cdn.w55c.net		52.205.65.239	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	cdn.w55c.net		54.165.249.206	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	cdn.w55c.net		54.145.239.252	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	cdn.w55c.net		54.205.149.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	cdn.w55c.net		52.5.14.134	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	cdn.w55c.net		54.165.171.153	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.302700996 CEST	1.1.1.1	192.168.2.5	0x1780	No error (0)	cdn.w55c.net		52.72.148.93	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.632194042 CEST	1.1.1.1	192.168.2.5	0x61a4	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:26.632194042 CEST	1.1.1.1	192.168.2.5	0x61a4	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:26.632714987 CEST	1.1.1.1	192.168.2.5	0x3766	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:26.632714987 CEST	1.1.1.1	192.168.2.5	0x3766	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:26.841885090 CEST	1.1.1.1	192.168.2.5	0x12a3	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.841885090 CEST	1.1.1.1	192.168.2.5	0x12a3	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.844614983 CEST	1.1.1.1	192.168.2.5	0xb7d4	No error (0)	contextual.media.net		184.25.164.23	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:26.867043972 CEST	1.1.1.1	192.168.2.5	0x111a	No error (0)	inv-nets.admixer.net		216.219.92.22	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.214207888 CEST	1.1.1.1	192.168.2.5	0x1c9c	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:27.214344025 CEST	1.1.1.1	192.168.2.5	0xe4b0	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:27.214344025 CEST	1.1.1.1	192.168.2.5	0xe4b0	No error (0)	securepubads46.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.214344025 CEST	1.1.1.1	192.168.2.5	0xe4b0	No error (0)	securepubads46.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.214344025 CEST	1.1.1.1	192.168.2.5	0xe4b0	No error (0)	securepubads46.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.214344025 CEST	1.1.1.1	192.168.2.5	0xe4b0	No error (0)	securepubads46.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.232831001 CEST	1.1.1.1	192.168.2.5	0x1a33	No error (0)	pagead-googlehosted.l.google.com		142.251.15.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.709670067 CEST	1.1.1.1	192.168.2.5	0x8126	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:27.709670067 CEST	1.1.1.1	192.168.2.5	0x8126	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.194252014 CEST	1.1.1.1	192.168.2.5	0x952e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.194252014 CEST	1.1.1.1	192.168.2.5	0x952e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.441564083 CEST	1.1.1.1	192.168.2.5	0x3c93	No error (0)	hb.yahoo.net		96.7.224.83	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.441564083 CEST	1.1.1.1	192.168.2.5	0x3c93	No error (0)	hb.yahoo.net		96.7.224.32	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.447138071 CEST	1.1.1.1	192.168.2.5	0x1d84	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:28.447138071 CEST	1.1.1.1	192.168.2.5	0x1d84	No error (0)	d2wcz8sc48ztgm.cloudfront.net		3.161.163.30	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.447138071 CEST	1.1.1.1	192.168.2.5	0x1d84	No error (0)	d2wcz8sc48ztgm.cloudfront.net		3.161.163.8	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.447138071 CEST	1.1.1.1	192.168.2.5	0x1d84	No error (0)	d2wcz8sc48ztgm.cloudfront.net		3.161.163.19	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.447138071 CEST	1.1.1.1	192.168.2.5	0x1d84	No error (0)	d2wcz8sc48ztgm.cloudfront.net		3.161.163.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.448144913 CEST	1.1.1.1	192.168.2.5	0xcdef	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:28.638319969 CEST	1.1.1.1	192.168.2.5	0xe281	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:28.638319969 CEST	1.1.1.1	192.168.2.5	0xe281	No error (0)	cdn-content.ampproject.org		64.233.185.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:28.638341904 CEST	1.1.1.1	192.168.2.5	0x5ba3	No error (0)	cdn.ampproject.org	cdn-content.ampproject.org		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:29.068032026 CEST	1.1.1.1	192.168.2.5	0x7a27	No error (0)	sync.intentiq.com		3.163.101.59	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:29.068032026 CEST	1.1.1.1	192.168.2.5	0x7a27	No error (0)	sync.intentiq.com		3.163.101.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:29.068032026 CEST	1.1.1.1	192.168.2.5	0x7a27	No error (0)	sync.intentiq.com		3.163.101.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:29.068032026 CEST	1.1.1.1	192.168.2.5	0x7a27	No error (0)	sync.intentiq.com		3.163.101.15	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:29.160540104 CEST	1.1.1.1	192.168.2.5	0x61cb	No error (0)	hb.yahoo.net		173.223.239.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:29.160540104 CEST	1.1.1.1	192.168.2.5	0x61cb	No error (0)	hb.yahoo.net		173.223.239.161	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:29.160540104 CEST	1.1.1.1	192.168.2.5	0x61cb	No error (0)	hb.yahoo.net		173.223.239.167	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:29.160540104 CEST	1.1.1.1	192.168.2.5	0x61cb	No error (0)	hb.yahoo.net		173.223.239.142	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:31.265857935 CEST	1.1.1.1	192.168.2.5	0x1b69	No error (0)	serve-va.acuityplatform.com		69.90.254.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:31.894257069 CEST	1.1.1.1	192.168.2.5	0x244d	No error (0)	rtb.adstanding.com		3.213.119.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:31.894257069 CEST	1.1.1.1	192.168.2.5	0x244d	No error (0)	rtb.adstanding.com		34.202.94.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.023825884 CEST	1.1.1.1	192.168.2.5	0xda6d	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:32.024281979 CEST	1.1.1.1	192.168.2.5	0xa66c	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:32.025135994 CEST	1.1.1.1	192.168.2.5	0x3319	No error (0)	cdn.acuityplatform.com		69.90.254.75	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.026319027 CEST	1.1.1.1	192.168.2.5	0x8fc1	No error (0)	metrics.getrockerbox.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:32.026976109 CEST	1.1.1.1	192.168.2.5	0x220f	No error (0)	metrics.getrockerbox.com		104.26.8.177	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.026976109 CEST	1.1.1.1	192.168.2.5	0x220f	No error (0)	metrics.getrockerbox.com		104.26.9.177	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.026976109 CEST	1.1.1.1	192.168.2.5	0x220f	No error (0)	metrics.getrockerbox.com		172.67.71.65	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.421781063 CEST	1.1.1.1	192.168.2.5	0x8668	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.681148052 CEST	1.1.1.1	192.168.2.5	0xfe91	No error (0)	metrics.getrockerbox.com			65	IN (0x0001)	false
Apr 25, 2024 21:26:32.681854963 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	metrics.getrockerbox.com		172.67.71.65	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.681854963 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	metrics.getrockerbox.com		104.26.9.177	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.681854963 CEST	1.1.1.1	192.168.2.5	0xf68a	No error (0)	metrics.getrockerbox.com		104.26.8.177	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:32.682415962 CEST	1.1.1.1	192.168.2.5	0xb9fb	No error (0)	cdn.acuityplatform.com		69.90.254.75	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.170217991 CEST	1.1.1.1	192.168.2.5	0x514d	No error (0)	dsp.adkernel.com		174.137.133.49	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.171154976 CEST	1.1.1.1	192.168.2.5	0xc265	No error (0)	cs.media.net		23.207.52.22	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		34.235.38.62	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		34.204.103.94	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		18.210.119.97	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		35.173.171.15	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		34.234.43.221	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.230.80.37	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.212.198.223	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.172714949 CEST	1.1.1.1	192.168.2.5	0xea76	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.226.126.247	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.174905062 CEST	1.1.1.1	192.168.2.5	0x8e7f	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.212.198.223	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		3.230.80.37	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.83.235.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		23.23.107.111	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		35.173.171.15	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		34.228.93.73	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		54.226.126.247	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.817500114 CEST	1.1.1.1	192.168.2.5	0x747a	No error (0)	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		44.220.100.144	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:33.818846941 CEST	1.1.1.1	192.168.2.5	0x88c0	No error (0)	cookies.nextmillmedia.com	nmm-use1-prod-alb-pbs-cookiesync-1017292304.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:33.898993969 CEST	1.1.1.1	192.168.2.5	0xba02	No error (0)	serve-va.acuityplatform.com		69.90.254.72	A (IP address)	IN (0x0001)	false
Apr 25, 2024 21:26:34.067193031 CEST	1.1.1.1	192.168.2.5	0x3ed8	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:34.067193031 CEST	1.1.1.1	192.168.2.5	0x3ed8	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:34.068128109 CEST	1.1.1.1	192.168.2.5	0xb37	No error (0)	image8.pubmatic.com	image8-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:34.068128109 CEST	1.1.1.1	192.168.2.5	0xb37	No error (0)	image8-v2.pubmnet.com	imagesync-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 21:26:34.068128109 CEST	1.1.1.1	192.168.2.5	0xb37	No error (0)	imagesync-vac.pubmnet.com		8.28.7.82	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:14 UTC	715	OUT	GET /blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:14 UTC	1345	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7c4f971adde-ATL CF-Cache-Status: MISS Cache-Control: public, max-age=0, s-maxage=2592000 Last-Modified: Thu, 25 Apr 2024 19:25:14 GMT Link: <https://earnandexcel.com/wp-json/>; rel="https://api.w.org/", <https://earnandexcel.com/wp-json/wp/v2/posts/39085>; rel="alternate"; type="application/json", <https://earnandexcel.com/?p=39085>; rel=shortlink Vary: Accept-Encoding accept-ch: Sec-CH-UA-Mobile Cache-Tag: 2b83a4e6-d195-4d43-8593-11c2c85261d1,fe3500f309a316357f03a071019e2e10ec8443b7be8cb3270fb070cd08744e6d content-security-policy: block-all-mixed-content ki-Cache-Tag: 2b83a4e6-d195-4d43-8593-11c2c85261d1,fe3500f309a316357f03a071019e2e10ec8443b7be8cb3270fb070cd08744e6d ki-cache-type: Edge Ki-CF-Cache-Status: SAVING ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: HIT x-nitro-cache: MISS x-pingback: https://earnandexcel.com/xmlrpc.php Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z37v2zA%2Fqrf51LTRlsXyc3XGB9koG%2BE%2F3JyBRIrD8QJou6X1Ll7FAEoqEF%2BRfukqdnlknTErb2edtgxlUXNNgT7DUzeQlCzubJR5uK538GeoLBzP9TfSxgX%2FUaLd1duG9OE%3D"}],"group":"cf-nel","max_age":604800}
2024-04-25 19:25:14 UTC	122	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflarealt-svc: h3=":443"; ma=86400
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 3e 0a 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 78 6d Data Ascii: 7ff9<!DOCTYPE html><html lang="en-US" ><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><link rel="pingback" href="https://earnandexcel.com/xm
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 20 77 65 20 68 61 76 65 20 75 6e 74 69 6c 20 6e 6f 77 20 2a 2f 0a 09 09 09 09 09 09 09 09 09 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 64 61 74 61 2d 6c 73 2d 6f 70 74 69 6d 69 7a 65 64 27 2c 20 27 31 27 20 29 0a 0a 09 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 2b 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e 69 6e 6e 65 72 48 54 4d 4c 0a 0a 09 09 09 09 09 09 09 09 09 74 68 69 73 2e 6f 70 74 69 6d 69 7a 69 6e 67 20 3d 20 66 61 6c 73 65 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 09 09 77 69 6e 64 6f 77 2e 66 6c 61 74 53 74 79 6c 65 73 20 3d 20 63 75 72 72 65 6e 74 53 74 79 6c 65 73 68 65 65 74 2e Data Ascii: we have until now */currentStylesheet.setAttribute( 'data-ls-optimized', '1' )window.flatStyles += currentStylesheet.innerHTMLthis.optimizing = false}} else {window.flatStyles = currentStylesheet.
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 6d 65 6e 74 20 29 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 70 6c 75 67 69 6e 20 76 31 38 2e 32 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d Data Ascii: ment )}}}</script><meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO plugin v18.2 - https://yoast.com/wordpress/plugins/seo/ -
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 65 20 76 69 73 75 61 6c 6c 79 20 61 70 70 65 61 6c 69 6e 67 20 61 6e 64 20 69 6e 66 6f 72 6d 61 74 69 76 65 20 63 68 61 72 74 73 2e c2 a0 20 46 72 6f 6d 20 75 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 74 68 65 20 69 6d 70 6f 72 74 61 6e 63 65 20 6f 66 20 6c 65 67 65 6e 64 73 20 74 6f 20 63 75 73 74 6f 6d 69 7a 69 6e 67 20 74 68 65 69 72 20 61 70 70 65 61 72 61 6e 63 65 2c 20 77 65 20 77 69 6c 6c 20 63 6f 76 65 72 20 61 6c 6c 20 74 68 65 20 65 73 73 65 6e 74 69 61 6c 20 61 73 70 65 63 74 73 20 74 6f 20 68 65 6c 70 20 79 6f 75 20 6d 61 73 74 65 72 20 74 68 69 73 20 65 73 73 65 6e 74 69 61 6c 20 45 78 63 65 6c 20 66 65 61 74 75 72 65 2e 20 53 6f 2c 20 6c 65 74 26 23 38 32 31 37 3b 73 20 64 69 76 65 20 69 6e 20 61 6e 64 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 Data Ascii: e visually appealing and informative charts. From understanding the importance of legends to customizing their appearance, we will cover all the essential aspects to help you master this essential Excel feature. So, let’s dive in and learn how to
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 69 6e 63 6c 75 64 65 20 69 6e 20 74 68 65 20 63 68 61 72 74 2e 20 43 6c 69 63 6b 20 6f 6e 20 74 68 65 20 26 23 38 32 32 30 3b 49 6e 73 65 72 74 26 23 38 32 32 31 3b 20 74 61 62 20 69 6e 20 74 68 65 20 45 78 63 65 6c 20 72 69 62 62 6f 6e 2e 20 43 68 6f 6f 73 65 20 74 68 65 20 74 79 70 65 20 6f 66 20 63 68 61 72 74 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 63 72 65 61 74 65 20 66 72 6f 6d 20 74 68 65 20 61 76 61 69 6c 61 62 6c 65 20 6f 70 74 69 6f 6e 73 2e 20 45 78 63 65 6c 20 77 69 6c 6c 20 67 65 6e 65 72 61 74 65 20 61 20 62 61 73 69 63 20 63 68 61 72 74 20 62 61 73 65 64 20 6f 6e 20 79 6f 75 72 20 64 61 74 61 2e 20 46 6f 72 6d 61 74 74 69 6e 67 20 74 68 65 20 43 68 61 72 74 20 42 65 66 6f 72 65 20 61 64 64 69 6e 67 20 61 20 6c 65 67 65 6e 64 2c 20 69 74 26 Data Ascii: include in the chart. Click on the “Insert” tab in the Excel ribbon. Choose the type of chart you want to create from the available options. Excel will generate a basic chart based on your data. Formatting the Chart Before adding a legend, it&
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 75 73 20 66 6f 72 6d 61 74 74 69 6e 67 20 6f 70 74 69 6f 6e 73 20 73 75 63 68 20 61 73 20 63 68 61 6e 67 69 6e 67 20 74 68 65 20 66 6f 6e 74 20 73 69 7a 65 2c 20 66 6f 6e 74 20 73 74 79 6c 65 2c 20 6f 72 20 65 76 65 6e 20 72 65 6d 6f 76 69 6e 67 20 74 68 65 20 6c 65 67 65 6e 64 20 69 66 20 6e 65 63 65 73 73 61 72 79 2e 20 54 69 70 73 20 66 6f 72 20 43 72 65 61 74 69 6e 67 20 45 66 66 65 63 74 69 76 65 20 4c 65 67 65 6e 64 73 20 54 6f 20 63 72 65 61 74 65 20 65 66 66 65 63 74 69 76 65 20 6c 65 67 65 6e 64 73 20 69 6e 20 45 78 63 65 6c 2c 20 63 6f 6e 73 69 64 65 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 74 69 70 73 3a 20 4b 65 65 70 20 69 74 20 63 6f 6e 63 69 73 65 3a 20 45 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 6c 65 67 65 6e 64 20 70 72 6f 76 Data Ascii: us formatting options such as changing the font size, font style, or even removing the legend if necessary. Tips for Creating Effective Legends To create effective legends in Excel, consider the following tips: Keep it concise: Ensure that the legend prov
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 6f 20 61 68 65 61 64 20 61 6e 64 20 61 70 70 6c 79 20 77 68 61 74 20 79 6f 75 26 23 38 32 31 37 3b 76 65 20 6c 65 61 72 6e 65 64 2c 20 61 6e 64 20 74 61 6b 65 20 79 6f 75 72 20 45 78 63 65 6c 20 63 68 61 72 74 73 20 74 6f 20 74 68 65 20 6e 65 78 74 20 6c 65 76 65 6c 20 62 79 20 61 64 64 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 76 65 20 61 6e 64 20 76 69 73 75 61 6c 6c 79 20 61 70 70 65 61 6c 69 6e 67 20 6c 65 67 65 6e 64 73 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 Data Ascii: o ahead and apply what you’ve learned, and take your Excel charts to the next level by adding informative and visually appealing legends." /><meta property="og:url" content="https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensiv
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 3f 73 3d 7b 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 7d 22 7d 2c 22 71 75 65 72 79 2d 69 6e 70 75 74 22 3a 22 72 65 71 75 69 72 65 64 20 6e 61 6d 65 3d 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 7d 5d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 49 6d 61 67 65 4f 62 6a 65 63 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 Data Ascii: ype":"EntryPoint","urlTemplate":"https://earnandexcel.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-compreh
2024-04-25 19:25:14 UTC	1369	IN	Data Raw: 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 5d 7d 5d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 42 72 65 61 64 63 72 75 6d 62 4c 69 73 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 74 79 Data Ascii: tion","target":["https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/"]}]},{"@type":"BreadcrumbList","@id":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/#breadcrumb","itemListElement":[{"@ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:14 UTC	635	OUT	GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:15 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:15 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7c7be664515-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"606d2c04-e33b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 07 Apr 2021 03:50:28 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8SPoTQzs80jqdDqVbIw152iz%2FcTdaIQfe3LHipG5FkQGDRGhKW3%2Fa9khn9j32IZ39gSG51nHF9t4PLJDz9Q2h1tlYhuk1Ik3O98Fxoj6OoA6eDfO3c8odOjO3byZ6xDVAZ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:15 UTC	445	IN	Data Raw: 37 63 31 34 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 23 73 74 61 72 74 2d 72 65 73 69 7a 61 62 6c 65 2d 65 64 69 74 6f 72 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 61 75 64 69 6f 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 Data Ascii: 7c14@charset "UTF-8";#start-resizable-editor-section{display:none}.wp-block-audio figcaption{margin-top:.5em;margin-bottom:1em}.wp-block-audio audio{width:100%;min-width:300px}.wp-block-button__link{color:#fff;background-color:#32373c;border:none;border
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 68 6f 76 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 61 6c 69 67 6e 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 68 61 73 2d Data Ascii: link:active,.wp-block-button__link:focus,.wp-block-button__link:hover,.wp-block-button__link:visited{color:#fff}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}.wp-block-buttons>.wp-block-button.has-
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 Data Ascii: p-block-buttons.is-vertical{flex-direction:column}.wp-block-buttons.is-vertical>.wp-block-button{margin-right:0}.wp-block-buttons.is-vertical>.wp-block-button:last-child{margin-bottom:0}.wp-block-buttons>.wp-block-button{display:inline-block;margin-left:0
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 61 6c 69 67 6e 72 69 67 68 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 3a 6e 6f 74 28 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 2c 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 72 69 67 68 74 2c 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 6c 65 66 74 2c 2e 69 73 2d 63 6f 6e 74 65 6e 74 2d 6a 75 73 74 69 66 69 63 61 74 69 6f 6e 2d 63 65 6e 74 65 72 29 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 61 6c 69 Data Ascii: 5em}.wp-block-buttons.alignright .wp-block-button:first-child{margin-left:0}.wp-block-buttons:not(.is-content-justification-space-between,.is-content-justification-right,.is-content-justification-left,.is-content-justification-center) .wp-block-button.ali
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 39 39 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 31 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 3a 6e 6f 74 28 3a 6f 6e 6c 79 2d 63 68 69 6c 64 29 7b 66 6c 65 78 2d 62 61 73 69 73 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 65 6d 29 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 6d 61 72 67 Data Ascii: flow-wrap:break-word}@media (max-width:599px){.wp-block-column{flex-basis:100%!important}}@media (min-width:600px) and (max-width:781px){.wp-block-column:not(:only-child){flex-basis:calc(50% - 1em)!important;flex-grow:0}.wp-block-column:nth-child(2n){marg
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 61 63 68 6d 65 6e 74 3a 73 63 72 6f 6c 6c 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 69 73 2d 72 65 70 65 61 74 65 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 69 73 2d 72 65 70 65 61 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: achment:scroll}}.wp-block-cover-image.is-repeated,.wp-block-cover.is-repeated{background-repeat:repeat;background-size:auto}.wp-block-cover-image.has-background-dim:not([class=-background-color]),.wp-block-cover.has-background-dim:not([class=-background
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 32 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 32 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 33 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 Data Ascii: und-dim.has-background-dim-20 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-20:not(.has-background-gradient):before{opacity:.2}.wp-block-cover-image.has-background-dim.has-background-dim-30 .wp-block-cover__gra
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 36 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 36 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 36 Data Ascii: .wp-block-cover-image.has-background-dim.has-background-dim-60 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-60:not(.has-background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-6
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 39 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 Data Ascii: background-gradient):before,.wp-block-cover.has-background-dim.has-background-dim-90 .wp-block-cover__gradient-background,.wp-block-cover.has-background-dim.has-background-dim-90:not(.has-background-gradient):before{opacity:.9}.wp-block-cover-image.has-ba
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 61 64 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 31 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 32 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 33 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 34 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 68 35 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 2c 2e Data Ascii: ad:not(.has-text-color),.wp-block-cover-image h1:not(.has-text-color),.wp-block-cover-image h2:not(.has-text-color),.wp-block-cover-image h3:not(.has-text-color),.wp-block-cover-image h4:not(.has-text-color),.wp-block-cover-image h5:not(.has-text-color),.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	635	OUT	GET /wp-includes/css/dist/block-library/theme.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:15 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:15 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7ca2f84addb-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"601926a8-a9a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 02 Feb 2021 10:17:12 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SAk8CwtT4rlBHv4Nn%2FYIdC98FvFMqtp%2BpSzRdvMMCwD2MjOFD6QCiANr1J1G0GIGT27Qrd72kmwgrrLbYNr6Mq6okHszXtpmt6R6PYK5t6KQdBqOoeKL4lnssp06vf0LNPc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:15 UTC	446	IN	Data Raw: 61 39 61 0d 0a 23 73 74 61 72 74 2d 72 65 73 69 7a 61 62 6c 65 2d 65 64 69 74 6f 72 2d 73 65 63 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 65 6e 6c 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 6d 6f 6e 61 63 6f 2c 6d 6f 6e 6f 73 70 61 63 65 3b 63 6f 6c 6f 72 3a 23 Data Ascii: a9a#start-resizable-editor-section{display:none}.wp-block-audio figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-audio figcaption{color:hsla(0,0%,100%,.65)}.wp-block-code{font-family:Menlo,Consolas,monaco,monospace;color:#
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 36 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 69 73 2d 64 61 72 6b 2d 74 68 65 6d 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 66 69 67 63 61 70 74 69 Data Ascii: %,100%,.65)}.blocks-gallery-caption{color:#555;font-size:13px;text-align:center}.is-dark-theme .blocks-gallery-caption{color:hsla(0,0%,100%,.65)}.wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcapti
2024-04-25 19:25:15 UTC	906	IN	Data Raw: 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 64 6f 74 73 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 65 70 61 72 61 74 6f 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 77 69 64 65 29 3a 6e 6f 74 28 2e 69 73 2d 73 74 Data Ascii: margin-right:auto;opacity:.4}.wp-block-separator:not(.is-style-wide):not(.is-style-dots){max-width:100px}.wp-block-separator.has-background:not(.is-style-dots){border-bottom:none;height:1px}.wp-block-separator.has-background:not(.is-style-wide):not(.is-st
2024-04-25 19:25:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	661	OUT	GET /wp-content/plugins/thrive-ultimatum/tcb-bridge/assets/css/placeholders.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:15 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:15 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7ca288b5085-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6571c6d4-2a2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 07 Dec 2023 13:21:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AesO79aq1W338dI7IG8aDOjTxsR8GxVVejbDMVWi%2BxbyZMQSI5y7HaIQU%2FMA5bymKXp8JvnTGxm04vxAW%2F6g8UW8N52sufcEmUEsL4mZYOSLvzskLeHlK6JaA0LkN5XzDBI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:15 UTC	444	IN	Data Raw: 32 61 32 0d 0a 2e 74 76 65 2d 75 6c 74 2d 70 72 65 6c 6f 61 64 2d 66 6f 72 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 75 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 68 65 69 67 68 74 2d 64 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 31 35 33 2c 31 36 32 2c 31 36 35 2c 2e 31 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 69 6d 6d 65 72 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 7d 7d 2e 74 76 65 2d 75 6c 74 2d 70 72 65 6c 6f 61 64 2d 66 6f 72 6d 3a 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 Data Ascii: 2a2.tve-ult-preload-form{min-height:var(--tu-placeholder-height-d);position:relative;display:block;background:rgba(153,162,165,.1);overflow:hidden}@keyframes shimmer{100%{transform:translateX(100%)}}.tve-ult-preload-form::after{position:absolute;top:0;r
2024-04-25 19:25:15 UTC	237	IN	Data Raw: 35 2c 20 32 35 35 2c 20 30 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 69 6d 6d 65 72 20 32 73 20 69 6e 66 69 6e 69 74 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 33 70 78 29 7b 2e 74 76 65 2d 75 6c 74 2d 70 72 65 6c 6f 61 64 2d 66 6f 72 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 75 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 68 65 69 67 68 74 2d 74 29 7d 7d 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 74 76 65 2d 75 6c 74 2d 70 72 65 6c 6f 61 64 2d 66 6f 72 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 74 75 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 68 65 69 67 68 74 2d 6d 29 7d 7d 0a 0d 0a Data Ascii: 5, 255, 0));animation:shimmer 2s infinite;content:""}@media(max-width: 1023px){.tve-ult-preload-form{min-height:var(--tu-placeholder-height-t)}}@media(max-width: 767px){.tve-ult-preload-form{min-height:var(--tu-placeholder-height-m)}}
2024-04-25 19:25:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49713	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	641	OUT	GET /wp-content/plugins/tutor/assets/css/tutor-icon.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:15 UTC	922	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:15 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7ca2a47b0e5-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-38ff" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=76BcU%2B0cXrtkFGmjfdrpLgM7xAjlT1ZGZ7KnlzOrVe6dNtZ3Lplo5k9qPH5167FLCJxWY5AanGOsz3A0Je1gMH2F9nH6vD2KlP2PLw1RMfdtGK1YWEowBG2WVKqgv7QGu8Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:15 UTC	447	IN	Data Raw: 33 38 66 66 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 75 74 6f 72 22 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 74 75 74 6f 72 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 74 75 74 6f 72 22 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 74 75 74 6f 72 2d 76 32 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c Data Ascii: 38ff@font-face{font-family:"tutor";src:url("../fonts/tutor.woff") format("woff");font-weight:normal;font-style:normal;font-display:block}@font-face{font-family:"tutor";src:url("../fonts/tutor-v2.woff") format("woff");font-weight:normal;font-style:normal
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 69 67 68 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 70 72 69 76 61 63 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a4 80 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6c 61 70 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a4 81 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 64 65 73 6b 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a4 82 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 74 61 62 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a4 83 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 6f 62 69 6c Data Ascii: ight:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.tutor-icon-privacy:before{content:""}.tutor-icon-laptop:before{content:""}.tutor-icon-desktop:before{content:""}.tutor-icon-tablet:before{content:""}.tutor-icon-mobil
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 ee a4 91 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 74 72 61 73 68 2d 63 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 92 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 73 70 65 63 74 61 63 6c 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 93 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 67 72 61 64 75 61 74 65 2d 73 74 75 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 94 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 67 72 69 64 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 95 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 73 65 72 2d 67 72 6f 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 96 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 68 6f 6d 65 2d 6f 3a 62 65 66 6f 72 Data Ascii: ent:""}.tutor-icon-trash-can:before{content:""}.tutor-icon-spectacles:before{content:""}.tutor-icon-graduate-student:before{content:""}.tutor-icon-grid-o:before{content:""}.tutor-icon-user-group:before{content:""}.tutor-icon-home-o:befor
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3a 22 ee a4 b1 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 62 61 64 67 65 2d 70 65 72 63 65 6e 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b2 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 6f 6e 65 79 2d 62 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b3 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 62 61 64 67 65 2d 73 74 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b4 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 70 64 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b5 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 70 6c 6f 61 64 2d 66 69 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a4 b6 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 70 6c 6f 61 64 2d 6f 3a 62 Data Ascii: ntent:""}.tutor-icon-badge-percent-o:before{content:""}.tutor-icon-money-bag:before{content:""}.tutor-icon-badge-star:before{content:""}.tutor-icon-update:before{content:""}.tutor-icon-upload-file:before{content:""}.tutor-icon-upload-o:b
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 63 6f 6e 2d 63 61 72 74 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 91 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 61 72 74 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 92 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 72 69 62 62 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 93 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 65 72 74 69 66 69 63 61 74 65 2d 6c 61 6e 64 73 63 61 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 94 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 95 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 68 61 72 74 2d 70 69 65 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: con-cart-bold:before{content:""}.tutor-icon-cart-line:before{content:""}.tutor-icon-ribbon:before{content:""}.tutor-icon-certificate-landscape:before{content:""}.tutor-icon-slider-horizontal:before{content:""}.tutor-icon-chart-pie:before{co
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 af 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 62 61 64 67 65 2d 64 6f 6c 6c 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b0 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 74 65 78 74 2d 61 64 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b1 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 64 6f 63 75 6d 65 6e 74 2d 74 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b2 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 64 6f 6c 6c 61 72 2d 73 6c 6f 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b3 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 64 6f 6f 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a5 b4 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 63 61 72 65 Data Ascii: e{content:""}.tutor-icon-badge-dollar:before{content:""}.tutor-icon-text-add:before{content:""}.tutor-icon-document-text:before{content:""}.tutor-icon-dollar-slot:before{content:""}.tutor-icon-door-open:before{content:""}.tutor-icon-care
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 65 61 72 74 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 8f 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 68 6f 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 90 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 68 61 6d 62 75 72 67 65 72 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 91 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6c 69 67 68 74 2d 62 75 6c 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 92 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 69 6d 61 67 65 2d 6c 61 6e 64 73 63 61 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 93 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 69 6d 61 67 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 94 22 7d 2e 74 75 74 6f Data Ascii: eart-bold:before{content:""}.tutor-icon-home:before{content:""}.tutor-icon-hamburger-menu:before{content:""}.tutor-icon-light-bulb:before{content:""}.tutor-icon-image-landscape:before{content:""}.tutor-icon-images:before{content:""}.tuto
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 2d 6d 65 65 74 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 ae 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 69 63 72 6f 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 af 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 b0 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 69 6e 75 73 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 b1 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 72 65 66 75 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 b2 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a6 b3 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 68 3a 62 65 Data Ascii: -meeting:before{content:""}.tutor-icon-microphone:before{content:""}.tutor-icon-minus:before{content:""}.tutor-icon-minus-o:before{content:""}.tutor-icon-refund:before{content:""}.tutor-icon-move:before{content:""}.tutor-icon-slider-h:be
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 2d 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 71 75 65 73 74 69 6f 6e 2d 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 8e 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 71 75 69 7a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 8f 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 71 75 69 7a 2d 61 74 74 65 6d 70 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 90 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 71 75 69 7a 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 91 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 72 65 63 65 69 70 74 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 92 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 72 65 64 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 93 22 Data Ascii: -icon-circle-question-mark:before{content:""}.tutor-icon-quiz:before{content:""}.tutor-icon-quiz-attempt:before{content:""}.tutor-icon-quiz-o:before{content:""}.tutor-icon-receipt-bold:before{content:""}.tutor-icon-redo:before{content:""
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 75 73 65 72 2d 67 72 61 64 75 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 af 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 76 65 72 69 66 79 2d 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 b0 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 b1 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 76 69 64 65 6f 2d 63 61 6d 65 72 61 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 b2 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 77 61 6c 6c 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee a7 b3 22 7d 2e 74 75 74 6f 72 2d 69 63 6f 6e 2d 62 72 61 6e 64 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f Data Ascii: .tutor-icon-user-graduate:before{content:""}.tutor-icon-verify-id:before{content:""}.tutor-icon-video-camera:before{content:""}.tutor-icon-video-camera-o:before{content:""}.tutor-icon-wallet:before{content:""}.tutor-icon-brand-facebook:befo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49714	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	636	OUT	GET /wp-content/plugins/tutor/assets/css/tutor.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:15 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:15 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7ca2a7d53af-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-43084" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vOn55BgQX1nA6tvyttx6EZZXIFxow2GPlqop%2BQO%2BpB8tvvbUmoP%2BkEm1hWYOUhFRiwf%2BjZy3YuXCd8V12QC1rgXI1kNmiwr64LsZvi4tHASaG9E0XyF44aanBx1P2%2FP19HQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:15 UTC	438	IN	Data Raw: 37 63 30 63 0d 0a 5b 63 6c 61 73 73 2a 3d 74 75 74 6f 72 2d 73 63 72 65 65 6e 2d 5d 20 23 77 70 62 6f 64 79 2d 63 6f 6e 74 65 6e 74 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 78 78 6c 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 2c 20 Data Ascii: 7c0c[class*=tutor-screen-] #wpbody-content{box-sizing:border-box}.tutor-container,.tutor-container-fluid,.tutor-container-xxl,.tutor-container-xl,.tutor-container-lg,.tutor-container-md,.tutor-container-sm{width:100%;padding-right:var(--tutor-gutter-x,
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 3a 20 37 36 38 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 64 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 2c 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 39 36 30 70 78 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 78 6c 2c 2e 74 75 74 6f 72 2d Data Ascii: : 768px){.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:720px}}@media(min-width: 992px){.tutor-container-lg,.tutor-container-md,.tutor-container-sm,.tutor-container{max-width:960px}}@media(min-width: 1200px){.tutor-container-xl,.tutor-
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 2d 63 6f 6c 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 35 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 36 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 37 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 Data Ascii: -col-2{flex:0 0 auto;width:16.66666667%}.tutor-col-3{flex:0 0 auto;width:25%}.tutor-col-4{flex:0 0 auto;width:33.33333333%}.tutor-col-5{flex:0 0 auto;width:41.66666667%}.tutor-col-6{flex:0 0 auto;width:50%}.tutor-col-7{flex:0 0 auto;width:58.33333333%}.tu
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 74 6f 72 2d 67 78 2d 35 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 33 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 35 2c 2e 74 75 74 6f 72 2d 67 79 2d 35 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 33 72 65 6d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6c 2d 73 6d 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 74 75 74 6f 72 2d 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 74 75 74 6f 72 2d 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 75 74 6f 72 2d 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 66 6c 65 78 Data Ascii: tor-gx-5{--tutor-gutter-x: 3rem}.tutor-g-5,.tutor-gy-5{--tutor-gutter-y: 3rem}@media(min-width: 576px){.tutor-col-sm{flex:1 0 0%}.tutor-row-cols-sm-auto>{flex:0 0 auto;width:auto}.tutor-row-cols-sm-1>{flex:0 0 auto;width:100%}.tutor-row-cols-sm-2>*{flex
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 6f 66 66 73 65 74 2d 73 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 67 2d 73 6d 2d 30 2c 2e 74 75 74 6f 72 2d 67 78 2d 73 6d 2d 30 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 30 7d Data Ascii: offset-sm-7{margin-left:58.33333333%}.tutor-offset-sm-8{margin-left:66.66666667%}.tutor-offset-sm-9{margin-left:75%}.tutor-offset-sm-10{margin-left:83.33333333%}.tutor-offset-sm-11{margin-left:91.66666667%}.tutor-g-sm-0,.tutor-gx-sm-0{--tutor-gutter-x: 0}
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 35 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 36 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 37 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 6d 64 2d 38 7b Data Ascii: 6.66666667%}.tutor-col-md-3{flex:0 0 auto;width:25%}.tutor-col-md-4{flex:0 0 auto;width:33.33333333%}.tutor-col-md-5{flex:0 0 auto;width:41.66666667%}.tutor-col-md-6{flex:0 0 auto;width:50%}.tutor-col-md-7{flex:0 0 auto;width:58.33333333%}.tutor-col-md-8{
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 79 3a 20 31 2e 35 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 6d 64 2d 34 2c 2e 74 75 74 6f 72 2d 67 78 2d 6d 64 2d 34 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 32 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 6d 64 2d 34 2c 2e 74 75 74 6f 72 2d 67 79 2d 6d 64 2d 34 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 32 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 6d 64 2d 35 2c 2e 74 75 74 6f 72 2d 67 78 2d 6d 64 2d 35 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 33 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 6d 64 2d 35 2c 2e 74 75 74 6f 72 2d 67 79 2d 6d 64 2d 35 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 33 72 65 6d 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 2e 74 75 74 6f 72 2d 63 6f 6c 2d Data Ascii: y: 1.5rem}.tutor-g-md-4,.tutor-gx-md-4{--tutor-gutter-x: 2rem}.tutor-g-md-4,.tutor-gy-md-4{--tutor-gutter-y: 2rem}.tutor-g-md-5,.tutor-gx-md-5{--tutor-gutter-x: 3rem}.tutor-g-md-5,.tutor-gy-md-5{--tutor-gutter-y: 3rem}}@media(min-width: 992px){.tutor-col-
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 6f 66 66 73 65 74 2d 6c 67 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 Data Ascii: n-left:25%}.tutor-offset-lg-4{margin-left:33.33333333%}.tutor-offset-lg-5{margin-left:41.66666667%}.tutor-offset-lg-6{margin-left:50%}.tutor-offset-lg-7{margin-left:58.33333333%}.tutor-offset-lg-8{margin-left:66.66666667%}.tutor-offset-lg-9{margin-left:75
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 61 75 74 6f 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 6c 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 74 75 74 6f 72 2d 63 6f 6c 2d 78 Data Ascii: .6666666667%}.tutor-col-xl-auto{flex:0 0 auto;width:auto}.tutor-col-xl-1{flex:0 0 auto;width:8.33333333%}.tutor-col-xl-2{flex:0 0 auto;width:16.66666667%}.tutor-col-xl-3{flex:0 0 auto;width:25%}.tutor-col-xl-4{flex:0 0 auto;width:33.33333333%}.tutor-col-x
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 2d 78 6c 2d 32 2c 2e 74 75 74 6f 72 2d 67 79 2d 78 6c 2d 32 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 31 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 78 6c 2d 33 2c 2e 74 75 74 6f 72 2d 67 78 2d 78 6c 2d 33 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 31 2e 35 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 78 6c 2d 33 2c 2e 74 75 74 6f 72 2d 67 79 2d 78 6c 2d 33 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 31 2e 35 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 78 6c 2d 34 2c 2e 74 75 74 6f 72 2d 67 78 2d 78 6c 2d 34 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 78 3a 20 32 72 65 6d 7d 2e 74 75 74 6f 72 2d 67 2d 78 6c 2d 34 2c 2e 74 75 74 6f 72 2d 67 79 2d 78 6c 2d 34 7b 2d 2d 74 75 74 6f 72 2d 67 75 74 74 65 72 2d 79 3a 20 32 72 65 6d Data Ascii: -xl-2,.tutor-gy-xl-2{--tutor-gutter-y: 1rem}.tutor-g-xl-3,.tutor-gx-xl-3{--tutor-gutter-x: 1.5rem}.tutor-g-xl-3,.tutor-gy-xl-3{--tutor-gutter-y: 1.5rem}.tutor-g-xl-4,.tutor-gx-xl-4{--tutor-gutter-x: 2rem}.tutor-g-xl-4,.tutor-gy-xl-4{--tutor-gutter-y: 2rem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49718	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	618	OUT	GET /wp-includes/css/buttons.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:15 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:15 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7cb0910134f-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60232d06-16de" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 10 Feb 2021 00:47:02 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WFW5iWvf04KrRQceGc%2FDNR3M9EakiuM9pSnFQNTgMvbM7qKPk7uR%2BvSDNZjHvny2taB6XXcXh4NyX4YSoUhRj7Ue4Ec%2FpE%2F9KqgJsGyAwEhEiLtXF9dKbTL%2Becs8K9WGzuY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:15 UTC	439	IN	Data Raw: 31 36 64 65 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2c 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 31 35 33 38 34 36 31 35 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 Data Ascii: 16de/! This file is auto-generated /.wp-core-ui .button,.wp-core-ui .button-primary,.wp-core-ui .button-secondary{display:inline-block;text-decoration:none;font-size:13px;line-height:2.15384615;min-height:30px;margin:0;padding:0 10px;cursor:pointer;b
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 2e 77 70 2d 63 6f 72 65 2d 75 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 2e 77 70 2d 63 6f 72 65 2d 75 69 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 20 2e 62 75 74 74 6f 6e 2c 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2d 6c 61 72 67 65 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 Data Ascii: ]::-moz-focus-inner,.wp-core-ui input[type=reset]::-moz-focus-inner,.wp-core-ui input[type=submit]::-moz-focus-inner{border-width:0;border-style:none;padding:0}.wp-core-ui .button-group.button-large .button,.wp-core-ui .button.button-large{min-height:32px
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 3a 61 63 74 69 76 65 2c 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 36 66 37 66 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 63 38 66 39 34 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 2c 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 64 63 64 65 3b 63 6f 6c 6f 72 3a 23 31 33 35 65 39 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 61 34 62 37 38 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 Data Ascii: .wp-core-ui .button-secondary:active,.wp-core-ui .button:active{background:#f6f7f7;border-color:#8c8f94;box-shadow:none}.wp-core-ui .button.active,.wp-core-ui .button.active:hover{background-color:#dcdcde;color:#135e96;border-color:#0a4b78;box-shadow:inse
2024-04-25 19:25:15 UTC	1369	IN	Data Raw: 74 6f 6e 2d 6c 69 6e 6b 2d 64 65 6c 65 74 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 64 36 33 36 33 38 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 6c 69 6e 6b 2d 64 65 6c 65 74 65 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 32 37 31 62 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 32 37 31 62 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 70 Data Ascii: ton-link-delete:hover{color:#d63638;background:0 0}.wp-core-ui .button-link-delete:disabled{background:0 0!important}.wp-core-ui .button-primary{background:#2271b1;border-color:#2271b1;color:#fff;text-decoration:none;text-shadow:none}.wp-core-ui .button-p
2024-04-25 19:25:15 UTC	1316	IN	Data Raw: 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 33 70 78 20 33 70 78 20 30 7d 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 67 72 6f 75 70 3e 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2b 2e 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 67 72 6f 75 70 3e 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 77 70 2d 63 6f 72 65 2d 75 69 20 2e 62 75 74 74 6f 6e 2d 67 72 6f 75 70 3e 2e 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 64 63 64 65 3b 63 6f 6c 6f 72 3a 23 31 33 35 65 39 36 3b 62 6f 72 64 65 72 2d 63 6f Data Ascii: t-child{border-radius:0 3px 3px 0}.wp-core-ui .button-group>.button-primary+.button{border-left:0}.wp-core-ui .button-group>.button:focus{position:relative;z-index:1}.wp-core-ui .button-group>.button.active{background-color:#dcdcde;color:#135e96;border-co
2024-04-25 19:25:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	620	OUT	GET /wp-includes/css/dashicons.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:16 UTC	922	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:16 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7cdaaa48832-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-e688" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FI0uIWAnMtue1yk5gjtMf1WWcqr1mLNLWALEjtFiL14c768wTAIcHOlf5WmsgesXUL6bSJmd5vqfSa0Dk8nlAbKRgXWJpuc85W0iCURm%2FUxNDYcYwVbZsFBtslistON1FzU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:16 UTC	447	IN	Data Raw: 37 62 66 38 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 Data Ascii: 7bf8/! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:app
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 41 41 59 77 49 41 41 4b 6c 41 63 57 54 4d 52 57 68 6c 59 57 51 41 41 47 33 41 41 41 41 41 4c 77 41 41 41 44 59 58 6b 6d 61 52 61 47 68 6c 59 51 41 41 62 66 41 41 41 41 41 66 41 41 41 41 4a 41 51 33 41 30 68 6f 62 58 52 34 41 41 42 75 45 41 41 41 41 43 55 41 41 41 56 51 70 67 54 2f 39 6d 78 76 59 32 45 41 41 47 34 34 41 41 41 43 71 67 41 41 41 71 70 73 35 45 45 59 62 57 46 34 63 41 41 41 63 4f 51 41 41 41 41 66 41 41 41 41 49 41 4a 76 41 4b 42 75 59 57 31 6c 41 41 42 78 42 41 41 41 41 54 41 41 41 41 49 69 77 79 74 66 38 6e 42 76 63 33 51 41 41 48 49 30 41 41 41 4a 76 41 41 41 45 68 6f 6a 4d 6c 7a 32 65 4a 78 6a 59 47 52 67 59 4f 42 69 6b 47 50 51 59 57 42 30 63 66 4d 4a 59 65 42 67 59 47 47 41 41 4a 41 4d 59 30 35 6d 65 69 4a 51 44 4d 6f 44 79 72 47 41 61 Data Ascii: AAYwIAAKlAcWTMRWhlYWQAAG3AAAAALwAAADYXkmaRaGhlYQAAbfAAAAAfAAAAJAQ3A0hobXR4AABuEAAAACUAAAVQpgT/9mxvY2EAAG44AAACqgAAAqps5EEYbWF4cAAAcOQAAAAfAAAAIAJvAKBuYW1lAABxBAAAATAAAAIiwytf8nBvc3QAAHI0AAAJvAAAEhojMlz2eJxjYGRgYOBikGPQYWB0cfMJYeBgYGGAAJAMY05meiJQDMoDyrGAa
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 4f 35 77 67 4f 34 56 43 4f 35 43 67 4f 59 33 56 4d 34 53 31 65 70 59 78 64 59 7a 4b 50 38 51 53 50 78 33 78 75 34 76 37 6f 34 46 6d 64 79 64 62 6f 34 6a 31 65 6f 2b 49 5a 62 64 61 57 2f 2b 47 63 2f 4c 2f 38 32 54 6a 2f 30 7a 62 53 2f 34 6b 56 75 65 35 59 72 6d 7a 70 50 33 4c 31 53 77 33 54 2b 53 59 31 6d 55 34 36 71 64 6c 30 35 6b 6e 39 54 4b 65 66 31 47 4c 35 4a 36 54 2b 70 6f 70 41 47 6d 43 71 44 61 52 57 55 35 55 67 44 54 54 56 43 39 4a 47 70 73 70 42 32 74 69 34 54 4f 4d 6d 70 6d 70 43 32 74 52 55 56 30 69 62 6d 53 6f 4d 71 63 31 55 61 30 69 44 4c 46 66 77 4e 4e 68 79 70 55 35 44 54 4a 57 49 4e 4e 54 51 47 71 52 68 46 6f 73 30 44 72 64 59 72 48 47 45 78 55 4b 4e 49 79 31 36 4e 62 61 62 71 68 68 70 63 31 4d 39 49 32 31 68 71 6d 79 6b 55 61 59 61 52 39 Data Ascii: O5wgO4VCO5CgOY3VM4S1epYxdYzKP8QSPx3xu4v7o4Fmdydbo4j1eo+IZbdaW/+Gc/L/82Tj/0zbS/4kVue5YrmzpP3L1Sw3T+SY1mU46qdl05kn9TKef1GL5J6T+popAGmCqDaRWU5UgDTTVC9JGpspB2ti4TOMmpmpC2tRUV0ibmSoMqc1Ua0iDLFfwNNhypU5DTJWINNTQGqRhFos0DrdYrHGExUKNIy16Nbabqhhpc1M9I21hqmykUaYaR9
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 56 59 34 77 4a 51 62 4b 6b 61 62 73 51 4e 6c 75 35 4f 2f 64 59 63 6f 54 6c 4b 4d 4e 72 58 73 35 78 69 4b 76 77 56 67 4c 39 52 62 6c 4f 46 50 75 6f 42 78 76 76 4b 46 78 67 69 6d 4c 55 45 34 30 56 43 76 4c 53 52 62 35 5a 33 61 61 6b 67 70 6c 6c 79 6d 7a 55 45 34 32 39 4a 36 56 55 79 7a 79 6e 4b 59 61 4c 32 75 63 5a 70 48 6e 50 64 32 55 63 69 68 6e 6d 50 49 4f 35 55 78 54 38 71 47 63 5a 63 70 41 6c 4c 4e 4e 61 59 69 79 32 38 6a 50 50 73 66 49 7a 39 35 6a 35 44 6e 4f 74 66 79 62 67 33 49 50 49 38 39 6a 6e 70 48 6e 4d 64 2f 49 36 37 54 41 79 4f 75 30 30 4a 53 7a 4b 48 74 4e 69 59 74 71 6f 53 6c 37 55 66 57 61 55 68 6a 56 55 6c 4d 65 6f 31 70 6d 53 6d 5a 55 2b 35 67 79 47 74 57 2b 70 72 52 47 74 64 79 55 32 36 6a 32 4d 79 55 34 71 68 57 6d 4c 45 65 31 30 6c 42 Data Ascii: VY4wJQbKkabsQNlu5O/dYcoTlKMNrXs5xiKvwVgL9RblOFPuoBxvvKFxgimLUE40VCvLSRb5Z3aakgpllymzUE429J6VUyzynKYaL2ucZpHnPd2UcihnmPIO5UxT8qGcZcpAlLNNaYiy28jPPsfIz95j5DnOtfybg3IPI89jnpHnMd/I67TAyOu00JSzKHtNiYtqoSl7UfWaUhjVUlMeo1pmSmZU+5gyGtW+prRGtdyU26j2MyU4qhWmLEe10lB
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 33 39 41 64 78 51 2f 4c 65 6d 79 6c 72 4b 6b 61 6b 33 4a 38 56 78 53 31 68 48 55 4d 32 53 4f 51 54 2f 57 42 4f 7a 6a 55 4d 42 75 72 64 30 4d 63 64 68 74 68 72 56 32 31 4f 6d 47 58 62 2f 54 62 55 65 75 35 33 64 39 37 50 6b 52 33 75 79 30 6d 6c 58 42 38 64 44 6f 4f 4e 59 58 4f 67 74 65 30 41 74 38 4f 4f 71 34 32 78 57 4d 68 55 37 6f 35 58 75 42 42 30 64 64 4f 50 36 6c 38 75 72 71 7a 75 72 71 4b 4f 65 48 38 51 33 30 43 54 2f 59 54 5a 34 34 66 6c 7a 51 51 35 4c 77 41 72 6c 74 5a 35 55 55 4b 55 58 4c 39 51 76 6f 35 78 6d 4a 30 55 6b 66 49 43 67 57 6c 4d 64 76 52 39 68 33 4b 32 32 2f 58 58 50 52 4d 4d 78 39 39 4b 4f 35 58 2b 69 33 68 73 50 78 31 56 45 66 4e 5a 50 7a 61 47 46 2f 66 2f 2b 6c 77 57 44 36 6e 71 2b 69 2f 38 78 34 54 4a 55 35 44 6e 46 6f 59 51 50 70 Data Ascii: 39AdxQ/LemylrKkak3J8VxS1hHUM2SOQT/WBOzjUMBurd0McdhthrV21OmGXb/TbUeu53d97PkR3uy0mlXB8dDoONYXOgte0At8OOq42xWMhU7o5XuBB0ddOP6l8urqzurqKOeH8Q30CT/YTZ44flzQQ5LwArltZ5UUKUXL9Qvo5xmJ0UkfICgWlMdvR9h3K22/XXPRMMx99KO5X+i3hsPx1VEfNZPzaGF/f/+lwWD6nq+i/8x4TJU5DnFoYQPp
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 61 50 63 34 57 67 59 70 58 6c 74 4d 6c 6e 33 44 76 66 62 5a 51 6b 30 30 4d 63 79 79 52 76 68 65 43 6a 56 68 36 58 49 38 31 53 42 46 47 78 4a 41 31 78 57 67 62 5a 6e 6f 73 55 78 63 67 47 39 6f 6d 4b 4b 57 72 6a 72 7a 69 65 6c 72 55 6c 51 38 45 70 6c 6b 74 78 55 72 36 54 46 6e 67 75 6c 64 49 4c 53 30 69 71 72 34 54 6e 30 4a 73 45 53 54 4d 34 52 57 46 67 31 73 2f 61 61 41 46 57 6a 6c 50 4d 47 32 39 6f 4a 52 74 69 6e 53 34 30 42 74 53 30 52 68 70 49 43 47 6d 6a 6b 56 55 76 4a 4f 32 6a 6f 32 59 58 6d 73 72 7a 79 61 58 6d 4f 6e 4c 58 59 43 4b 51 78 76 50 49 64 43 55 44 46 4b 37 46 4c 55 66 2b 42 5a 63 30 49 63 53 32 57 65 69 41 75 54 5a 54 65 55 6c 6b 65 56 33 6c 55 71 37 47 61 36 4a 54 4e 4e 51 30 4a 78 6c 69 4b 46 73 50 57 54 6c 57 51 6b 37 75 51 6d 70 54 63 Data Ascii: aPc4WgYpXltMln3DvfbZQk00McyyRvheCjVh6XI81SBFGxJA1xWgbZnosUxcgG9omKKWrjrzielrUlQ8EplktxUr6TFnguldILS0iqr4Tn0JsESTM4RWFg1s/aaAFWjlPMG29oJRtinS40BtS0RhpICGmjkVUvJO2jo2YXmsrzyaXmOnLXYCKQxvPIdCUDFK7FLUf+BZc0IcS2WeiAuTZTeUlkeV3lUq7Ga6JTNNQ0JxliKFsPWTlWQk7uQmpTc
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 78 35 32 32 6a 4e 65 68 5a 44 2b 67 66 6a 4d 35 74 42 48 4f 39 53 77 68 71 6b 52 44 4f 57 36 51 68 5a 76 74 55 36 37 7a 6a 70 48 66 66 73 48 6d 64 4f 62 79 4b 48 74 61 36 67 53 71 61 71 32 35 67 33 38 2f 4a 6d 49 55 56 42 46 33 30 6f 34 7a 41 73 7a 4c 50 4c 56 52 73 4a 53 56 4c 62 45 72 6e 63 6d 64 4c 67 73 42 4b 41 74 39 5a 44 64 49 30 7a 59 36 77 36 64 6b 50 76 4b 6d 31 63 56 74 47 77 38 46 34 69 50 71 2f 45 64 69 61 49 44 31 68 69 62 4c 57 35 56 4e 49 6b 67 55 6b 4b 6b 38 61 6b 6f 42 6b 6d 55 64 51 58 4d 33 69 57 55 48 6d 2f 4b 36 74 38 30 69 43 76 4a 42 51 74 48 49 38 79 79 74 63 65 59 6f 54 72 67 42 4f 53 41 45 79 67 6b 58 46 72 72 51 72 71 46 31 78 4d 52 78 37 71 41 39 35 52 41 43 6b 61 47 51 41 73 65 47 77 48 38 33 47 2b 75 51 35 51 42 63 56 79 79 Data Ascii: x522jNehZD+gfjM5tBHO9SwhqkRDOW6QhZvtU67zjpHffsHmdObyKHta6gSqaq25g38/JmIUVBF30o4zAszLPLVRsJSVLbErncmdLgsBKAt9ZDdI0zY6w6dkPvKm1cVtGw8F4iPq/EdiaID1hibLW5VNIkgUkKk8akoBkmUdQXM3iWUHm/K6t80iCvJBQtHI8yytceYoTrgBOSAEygkXFrrQrqF1xMRx7qA95RACkaGQAseGwH83G+uQ5QBcVyy
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 2b 6d 66 78 66 65 54 2b 63 67 54 33 2f 2b 4b 70 42 37 66 67 35 6d 77 73 52 4d 71 66 55 4c 2f 33 78 48 65 65 30 44 35 34 49 6d 6d 7a 58 34 64 79 6c 5a 67 6c 49 67 39 67 64 5a 61 67 4f 38 70 39 62 4c 4e 72 72 45 34 48 6d 62 2f 4e 34 6d 61 37 75 30 45 6b 46 64 30 6d 65 6d 7a 7a 4a 49 34 75 76 33 6d 6a 76 71 6b 74 53 51 76 46 78 67 4d 58 51 6e 37 31 37 67 63 75 32 4d 64 65 6b 74 65 79 6c 39 2b 38 4c 61 4a 73 74 76 63 43 34 74 42 50 77 74 6b 62 54 75 49 67 66 62 4b 65 4b 32 32 61 4e 72 30 4e 62 6d 35 6d 37 76 31 67 5a 76 4f 6b 38 45 64 59 34 56 39 38 38 57 49 48 73 54 4f 61 50 51 4c 71 4b 51 49 75 4e 51 46 48 51 66 2f 43 5a 4f 56 78 46 45 62 4a 6c 35 41 4b 42 4f 74 59 66 7a 7a 69 64 38 53 49 33 38 48 77 46 63 63 6a 53 72 74 48 65 39 6b 73 6a 43 48 79 64 35 33 Data Ascii: +mfxfeT+cgT3/+KpB7fg5mwsRMqfUL/3xHee0D54ImmzX4dylZglIg9gdZagO8p9bLNrrE4Hmb/N4ma7u0EkFd0memzzJI4uv3mjvqktSQvFxgMXQn717gcu2Mdekteyl9+8LaJstvcC4tBPwtkbTuIgfbKeK22aNr0Nbm5m7v1gZvOk8EdY4V988WIHsTOaPQLqKQIuNQFHQf/CZOVxFEbJl5AKBOtYfzzid8SI38HwFccjSrtHe9ksjCHyd53
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 38 36 66 66 39 74 33 6b 2b 44 43 75 65 66 50 6e 6e 33 2b 33 53 51 34 74 2f 58 55 31 74 5a 54 33 30 53 43 5a 31 79 37 46 4f 70 42 5a 65 56 79 61 57 56 6c 65 32 58 6c 48 73 30 78 56 4d 79 7a 62 4e 6b 31 73 71 72 55 36 58 51 61 76 69 58 79 4c 4d 70 78 49 74 5a 56 55 39 46 59 4a 6e 6b 68 42 46 72 79 51 67 69 79 79 51 73 68 57 46 48 78 52 6a 6e 77 68 49 56 63 61 53 55 67 4c 39 31 65 47 52 69 43 71 61 55 31 51 2b 33 6b 48 58 69 5a 32 32 34 6a 31 38 77 35 76 6c 30 50 66 4a 72 66 68 48 5a 66 67 62 6b 69 30 68 6d 39 47 4e 4e 75 75 78 56 43 71 30 42 39 75 35 4d 49 62 70 4f 70 55 49 67 54 35 2b 49 2b 55 4b 63 62 70 68 45 38 4d 46 48 46 62 56 4a 59 73 41 33 74 4f 74 45 32 75 58 48 7a 6e 6b 5a 54 64 64 31 68 56 6a 5a 4e 78 39 67 4c 36 42 7a 61 69 79 64 47 63 75 68 76 Data Ascii: 86ff9t3k+DCuefPnn3+3SQ4t/XU1tZT30SCZ1y7FOpBZeVyaWVle2XlHs0xVMyzbNk1sqrU6XQaviXyLMpxItZVU9FYJnkhBFryQgiyyQshWFHxRjnwhIVcaSUgL91eGRiCqaU1Q+3kHXiZ224j18w5vl0PfJrfhHZfgbki0hm9GNNuuxVCq0B9u5MIbpOpUIgT5+I+UKcbphE8MFHFbVJYsA3tOtE2uXHznkZTdd1hVjZNx9gL6BzaiydGcuhv
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 76 6a 47 6c 48 6c 76 5a 38 45 34 79 38 72 6f 71 70 49 69 69 41 35 68 6c 68 46 76 36 4d 6f 37 31 64 4c 50 72 6c 32 57 6f 6e 76 67 4f 44 37 33 36 69 55 66 52 57 65 6f 75 2f 77 53 2b 70 37 30 6a 6e 62 74 65 79 4d 48 65 68 2b 66 69 71 2f 65 52 6c 39 67 58 48 70 43 73 4b 51 71 55 52 45 72 32 47 58 63 44 6d 65 54 77 61 79 33 7a 51 51 67 54 43 77 57 67 4b 78 43 43 6e 32 77 42 37 4b 66 6d 4e 36 75 66 6c 41 63 7a 6e 39 67 6e 36 69 65 53 62 4b 61 6d 6f 36 57 4e 2f 34 70 67 79 41 74 6f 57 67 6c 6d 6e 75 4f 49 47 39 30 2f 52 38 4d 30 51 58 66 36 50 75 32 62 5a 58 2f 30 49 6d 68 2b 36 75 62 37 69 4b 49 64 36 6c 76 6d 4f 46 79 36 36 35 33 78 31 34 71 31 37 41 46 31 7a 67 5a 79 68 64 5a 70 6b 35 6d 5a 54 50 35 49 44 7a 71 67 45 2f 75 41 79 7a 50 32 4b 36 7a 42 5a 7a 68 Data Ascii: vjGlHlvZ8E4y8roqpIiiA5hlhFv6Mo71dLPrl2WonvgOD736iUfRWeou/wS+p70jnbteyMHeh+fiq/eRl9gXHpCsKQqUREr2GXcDmeTway3zQQgTCwWgKxCCn2wB7KfmN6uflAczn9gn6ieSbKamo6WN/4pgyAtoWglmnuOIG90/R8M0QXf6Pu2bZX/0Imh+6ub7iKId6lvmOFy6653x14q17AF1zgZyhdZpk5mZTP5IDzqgE/uAyzP2K6zBZzh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49723	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	617	OUT	GET /wp-includes/css/editor.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:16 UTC	922	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:16 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7cfacf712e3-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6019fc28-6a49" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 03 Feb 2021 01:28:08 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cF7p6Rlp7fgMA92ZajXVXq4uFwKI6L1UVSwjDA6Inp5i3Y9i6s31Uo7bntVL3QmIFtnOLT7XEHWwnCs1CfwWexfhYFke1uO6XoX4F%2BLYVLwEsIZYxpr8X0E8eslRydVUldw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:16 UTC	447	IN	Data Raw: 36 61 34 39 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 6d 63 65 2d 74 69 6e 79 6d 63 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 6d 63 65 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6d 63 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2a 2c 2e 6d 63 65 2d 77 69 64 67 65 74 2c 2e 6d 63 65 2d 77 69 64 67 65 74 20 2a 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 7d 2e 6d 63 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 63 65 2d 6d 6f 6e 6f 73 70 61 63 65 2c 2e 6d 63 65 2d 77 69 64 67 65 74 20 2e 6d 63 65 2d 6d 6f 6e 6f 73 70 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 6f 6e 73 6f 6c 61 73 2c 4d 6f 6e 61 63 6f 2c 6d 6f 6e 6f 73 70 61 63 Data Ascii: 6a49/! This file is auto-generated /.mce-tinymce{box-shadow:none}.mce-container,.mce-container ,.mce-widget,.mce-widget {color:inherit;font-family:inherit}.mce-container .mce-monospace,.mce-widget .mce-monospace{font-family:Consolas,Monaco,monospac
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 73 75 62 70 69 78 65 6c 2d 61 6e 74 69 61 6c 69 61 73 65 64 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6d 63 65 2d 77 69 6e 64 6f 77 20 2e 6d 63 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 62 6f 64 79 2e 6d 63 65 2d 61 62 73 2d 6c 61 79 6f 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6d 63 65 2d 77 69 6e 64 6f 77 20 2e 6d 63 65 2d 77 69 6e 64 6f 77 2d 68 65 61 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 63 64 63 64 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 36 70 78 7d 2e 6d 63 65 2d 77 69 6e 64 6f 77 20 2e 6d 63 65 2d 77 69 6e 64 6f 77 2d 68 65 61 64 20 2e 6d 63 65 2d 74 69 Data Ascii: font-smoothing:subpixel-antialiased;transition:none}.mce-window .mce-container-body.mce-abs-layout{overflow:visible}.mce-window .mce-window-head{background:#fff;border-bottom:1px solid #dcdcde;padding:0;min-height:36px}.mce-window .mce-window-head .mce-ti
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 30 20 30 20 32 70 78 20 72 67 62 61 28 37 39 2c 31 34 38 2c 32 31 32 2c 2e 38 29 7d 2e 6d 63 65 2d 77 69 6e 64 6f 77 20 2e 6d 63 65 2d 77 70 2d 68 65 6c 70 7b 68 65 69 67 68 74 3a 33 36 30 70 78 3b 77 69 64 74 68 3a 34 36 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 2e 6d 63 65 2d 77 69 6e 64 6f 77 20 2e 6d 63 65 2d 77 70 2d 68 65 6c 70 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6d 63 65 2d 77 69 6e 64 6f 77 20 2e 6d 63 65 2d 77 70 2d 68 65 6c 70 3e 2e 6d 63 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 62 6f 64 79 7b 77 69 64 74 68 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 63 65 2d 77 69 6e 64 6f 77 20 2e 77 70 2d 65 64 69 74 6f 72 2d 68 65 6c 70 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 Data Ascii: hadow:0 0 2px rgba(79,148,212,.8)}.mce-window .mce-wp-help{height:360px;width:460px;overflow:auto}.mce-window .mce-wp-help *{box-sizing:border-box}.mce-window .mce-wp-help>.mce-container-body{width:auto!important}.mce-window .wp-editor-help{padding:10px 1
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6d 63 65 2d 66 6c 6f 61 74 70 61 6e 65 6c 2e 6d 63 65 2d 70 6f 70 6f 76 65 72 2c 2e 6d 63 65 2d 6d 65 6e 75 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 2e 6d 63 65 2d 66 6c 6f 61 74 70 61 6e 65 6c 2e 6d 63 65 2d 70 6f 70 6f 76 65 72 2e 6d 63 65 2d 62 6f 74 74 6f 6d 2c 2e 6d 63 65 2d 6d 65 6e 75 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 7d 2e 6d 63 65 2d 66 6c 6f 61 74 70 61 6e 65 6c 20 2e 6d 63 65 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 63 65 2d 6d 65 6e 75 20 2e 6d 63 65 2d 63 6f Data Ascii: t-align:center}.mce-floatpanel.mce-popover,.mce-menu{border-color:rgba(0,0,0,.15);border-radius:0;box-shadow:0 3px 5px rgba(0,0,0,.2)}.mce-floatpanel.mce-popover.mce-bottom,.mce-menu{margin-top:2px}.mce-floatpanel .mce-arrow{display:none}.mce-menu .mce-co
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 61 37 61 61 61 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 39 70 78 20 39 70 78 20 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 39 70 78 7d 64 69 76 2e 6d 63 65 2d 69 6e 6c 69 6e 65 2d 74 6f 6f 6c 62 61 72 2d 67 72 70 2e 6d 63 65 2d 61 72 72 6f 77 2d 75 70 3a 61 66 74 65 72 7b 74 6f 70 3a 2d 38 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 66 36 66 37 66 37 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 38 70 78 20 38 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 7d 64 69 76 2e 6d 63 65 2d 69 6e 6c 69 6e 65 2d 74 6f 6f 6c 62 61 72 2d 67 72 70 2e 6d 63 65 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 2d 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f Data Ascii: rder-top-color:#a7aaad;border-width:9px 9px 0;margin-left:-9px}div.mce-inline-toolbar-grp.mce-arrow-up:after{top:-8px;border-bottom-color:#f6f7f7;border-width:0 8px 8px;margin-left:-8px}div.mce-inline-toolbar-grp.mce-arrow-down:after{bottom:-8px;border-to
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 73 69 7a 65 3a 31 32 70 78 7d 2e 6d 63 65 2d 74 6f 6f 6c 62 61 72 20 2e 6d 63 65 2d 62 74 6e 2c 2e 71 74 2d 64 66 77 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6d 63 65 2d 62 74 6e 20 2e 6d 63 65 2d 74 78 74 7b 64 69 72 65 63 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 7d 2e 6d 63 65 2d 74 6f 6f 6c 62 61 72 20 2e 6d 63 65 2d 62 74 6e 2d 67 72 6f 75 70 20 2e 6d 63 65 2d 62 74 6e 2c 2e 71 74 2d 64 66 77 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e Data Ascii: size:12px}.mce-toolbar .mce-btn,.qt-dfw{border-color:transparent;background:0 0;box-shadow:none;text-shadow:none;cursor:pointer}.mce-btn .mce-txt{direction:inherit;text-align:inherit}.mce-toolbar .mce-btn-group .mce-btn,.qt-dfw{border:1px solid transparen
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 63 65 2d 74 6f 6f 6c 62 61 72 20 2e 6d 63 65 2d 62 74 6e 20 62 75 74 74 6f 6e 2c 2e 71 74 2d 64 66 77 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 63 65 2d 74 6f 6f 6c 62 61 72 20 2e 6d 63 65 2d 6c 69 73 74 62 6f 78 20 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 33 38 34 36 31 35 33 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 6d 63 65 2d 74 6f 6f 6c 62 61 72 20 2e 6d 63 65 2d 62 74 6e 20 69 7b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 6d 63 65 2d 74 6f 6f 6c 62 61 72 20 2e 6d 63 65 2d 62 74 6e 2d 67 72 6f 75 70 3e 64 69 76 7b 77 68 69 74 65 Data Ascii: ce-toolbar .mce-btn button,.qt-dfw{padding:2px 3px;line-height:normal}.mce-toolbar .mce-listbox button{font-size:13px;line-height:1.53846153;padding-left:6px;padding-right:20px}.mce-toolbar .mce-btn i{text-shadow:none}.mce-toolbar .mce-btn-group>div{white
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 2d 62 74 6e 2e 6d 63 65 2d 6c 69 73 74 62 6f 78 3a 66 6f 63 75 73 2c 2e 6d 63 65 2d 74 6f 6f 6c 62 61 72 20 2e 6d 63 65 2d 62 74 6e 2d 67 72 6f 75 70 20 2e 6d 63 65 2d 62 74 6e 2e 6d 63 65 2d 6c 69 73 74 62 6f 78 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 33 63 34 63 37 7d 2e 6d 63 65 2d 70 61 6e 65 6c 20 2e 6d 63 65 2d 62 74 6e 20 69 2e 6d 63 65 2d 63 61 72 65 74 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 36 70 78 20 73 6f 6c 69 64 20 23 35 30 35 37 35 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 7d 2e 6d 63 65 2d 6c 69 73 74 62 6f 78 20 69 2e 6d 63 65 2d 63 61 72 65 74 7b 72 69 67 68 74 3a 34 70 78 7d 2e 6d 63 65 2d 70 61 6e 65 6c 20 2e 6d 63 65 2d 62 74 6e 3a 66 6f 63 75 73 20 69 Data Ascii: -btn.mce-listbox:focus,.mce-toolbar .mce-btn-group .mce-btn.mce-listbox:hover{border-color:#c3c4c7}.mce-panel .mce-btn i.mce-caret{border-top:6px solid #50575e;margin-left:2px;margin-right:2px}.mce-listbox i.mce-caret{right:4px}.mce-panel .mce-btn:focus i
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 6f 76 65 72 20 2e 6d 63 65 2d 74 65 78 74 2c 2e 6d 63 65 2d 6d 65 6e 75 20 2e 6d 63 65 2d 6d 65 6e 75 2d 69 74 65 6d 2e 6d 63 65 2d 73 65 6c 65 63 74 65 64 20 2e 6d 63 65 2d 69 63 6f 2c 2e 6d 63 65 2d 6d 65 6e 75 20 2e 6d 63 65 2d 6d 65 6e 75 2d 69 74 65 6d 2e 6d 63 65 2d 73 65 6c 65 63 74 65 64 20 2e 6d 63 65 2d 74 65 78 74 2c 2e 6d 63 65 2d 6d 65 6e 75 20 2e 6d 63 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 66 6f 63 75 73 20 2e 6d 63 65 2d 69 63 6f 2c 2e 6d 63 65 2d 6d 65 6e 75 20 2e 6d 63 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 66 6f 63 75 73 20 2e 6d 63 65 2d 6d 65 6e 75 2d 73 68 6f 72 74 63 75 74 2c 2e 6d 63 65 2d 6d 65 6e 75 20 2e 6d 63 65 2d 6d 65 6e 75 2d 69 74 65 6d 3a 66 6f 63 75 73 20 2e 6d 63 65 2d 74 65 78 74 2c 2e 6d 63 65 2d 6d 65 6e 75 20 2e 6d 63 65 Data Ascii: over .mce-text,.mce-menu .mce-menu-item.mce-selected .mce-ico,.mce-menu .mce-menu-item.mce-selected .mce-text,.mce-menu .mce-menu-item:focus .mce-ico,.mce-menu .mce-menu-item:focus .mce-menu-shortcut,.mce-menu .mce-menu-item:focus .mce-text,.mce-menu .mce
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 33 63 34 63 37 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 30 20 23 63 33 63 34 63 37 7d 2e 6d 63 65 2d 77 69 6e 64 6f 77 20 2e 6d 63 65 2d 62 74 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 73 Data Ascii: e;font-size:13px;line-height:26px;height:28px;margin:0;padding:0;cursor:pointer;border:1px solid #c3c4c7;-webkit-appearance:none;border-radius:3px;white-space:nowrap;box-shadow:0 1px 0 #c3c4c7}.mce-window .mce-btn::-moz-focus-inner{border-width:0;border-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	642	OUT	GET /wp-content/plugins/tutor/assets/css/tutor-front.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:16 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:16 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7cfb83e07c6-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-1deb7" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y2FfsRud5wjBWHkkyTOLWTHeVVnNIVQXXWGhh%2FsTvHDJnh2LhkweGslE1HOnnHExPwO0Twxg1TXg36aycForJ7oXX4By0lQJ4pePbi2sdNk8QOkrsoSdQ9Yo2GzWg0WJXgc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:16 UTC	446	IN	Data Raw: 37 63 31 35 0d 0a 3a 72 6f 6f 74 7b 2d 2d 74 75 74 6f 72 2d 74 65 78 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 3a 09 23 66 66 66 66 66 66 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 73 75 63 63 65 73 73 3a 09 23 32 34 41 31 34 38 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 73 75 63 63 65 73 73 2d 72 67 62 3a 09 33 36 2c 20 31 36 31 2c 20 37 32 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 3a 09 23 45 44 39 37 30 30 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 2d 72 67 62 3a 09 32 33 37 2c 20 31 35 31 2c 20 30 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 3a 09 23 46 34 34 33 33 37 3b 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 Data Ascii: 7c15:root{--tutor-text-size: 16px;--tutor-color-white:#ffffff;--tutor-color-success:#24A148;--tutor-color-success-rgb:36, 161, 72;--tutor-color-warning:#ED9700;--tutor-color-warning-rgb:237, 151, 0;--tutor-color-danger:#F44337;--tutor-color-danger
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 6c 6f 72 3a 76 61 72 28 2d 2d 74 75 74 6f 72 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 29 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 32 34 41 31 34 38 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 45 44 39 37 30 30 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 7b 63 6f 6c 6f 72 3a 23 46 34 34 33 33 37 7d 2e 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 7b 63 6f 6c 6f 72 3a 23 34 31 34 35 34 46 Data Ascii: lor:var(--tutor-body-color)}.tutor-color-white{color:#ffffff}.tutor-color-primary{color:var(--tutor-color-primary)}.tutor-color-success{color:#24A148}.tutor-color-warning{color:#ED9700}.tutor-color-danger{color:#F44337}.tutor-color-secondary{color:#41454F
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 35 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 72 65 67 75 6c 61 72 2d 74 69 6e 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 35 25 7d 2e 74 65 78 74 2d 6d 65 64 69 75 6d 2d 68 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 31 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 6d 65 64 69 75 6d 2d 68 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 31 25 7d 2e 74 65 78 74 2d 6d 65 64 69 75 6d 2d 68 Data Ascii: 0;font-size:11px;line-height:145%}.tutor-text-regular-tiny{font-weight:400;font-size:11px;line-height:145%}.text-medium-h1{font-weight:500;font-size:80px;line-height:101%}.tutor-text-medium-h1{font-weight:500;font-size:80px;line-height:101%}.text-medium-h
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 75 6d 2d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 32 25 7d 2e 74 65 78 74 2d 6d 65 64 69 75 6d 2d 74 69 6e 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 35 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 6d 65 64 69 75 6d 2d 74 69 6e 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 35 25 7d 2e 74 65 78 74 2d 73 65 6d 69 2d 68 31 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 31 Data Ascii: um-small{font-weight:500;font-size:13px;line-height:162%}.text-medium-tiny{font-weight:500;font-size:11px;line-height:145%}.tutor-text-medium-tiny{font-weight:500;font-size:11px;line-height:145%}.text-semi-h1{font-weight:600;font-size:80px;line-height:101
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 31 30 31 25 7d 2e 74 65 78 74 2d 62 6f 6c 64 2d 68 32 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 36 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 37 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 62 6f 6c 64 2d 68 32 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 36 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 37 25 7d 2e 74 65 78 74 2d 62 6f 6c 64 2d 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 30 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 62 6f 6c 64 2d 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b Data Ascii: height:101%}.text-bold-h2{font-weight:700;font-size:60px;line-height:117%}.tutor-text-bold-h2{font-weight:700;font-size:60px;line-height:117%}.text-bold-h3{font-weight:700;font-size:40px;line-height:120%}.tutor-text-bold-h3{font-weight:700;font-size:40px;
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 30 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 62 74 6e 2d 6c 61 72 67 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 30 25 7d 2e 74 65 78 74 2d 62 74 6e 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 30 25 7d 2e 74 75 74 6f 72 2d 74 65 78 74 2d 62 74 6e 2d 6d 65 64 69 75 6d 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 30 25 7d 2e 74 65 78 74 2d 62 74 6e 2d 73 6d Data Ascii: :500;font-size:16px;line-height:200%}.tutor-text-btn-large{font-weight:500;font-size:16px;line-height:200%}.text-btn-medium{font-weight:500;font-size:15px;line-height:160%}.tutor-text-btn-medium{font-weight:500;font-size:15px;line-height:160%}.text-btn-sm
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 6f 72 29 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 73 2d 63 6f 6e 74 65 6e 74 73 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 69 74 6c 65 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 73 2d 63 6f 6e 74 65 6e 74 73 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 69 74 6c 65 20 68 34 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 75 74 6f 72 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 2e 74 75 74 6f 72 2d 61 63 74 69 76 65 20 2e 74 75 74 6f 72 Data Ascii: or)}.tutor-course-topics-contents .tutor-course-title{cursor:pointer}.tutor-course-topics-contents .tutor-course-title h4{color:var(--tutor-color-primary);font-size:16px;line-height:25px;overflow:hidden;margin-top:0}.tutor-course-topic.tutor-active .tutor
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 74 7d 74 61 62 6c 65 2e 63 6f 75 72 73 65 2d 73 69 6e 67 6c 65 2d 67 72 61 64 65 62 6f 6f 6b 73 20 2e 64 61 74 65 74 69 6d 65 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 73 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 20 68 35 20 69 2e 74 75 74 6f 72 2d 6c 65 73 73 6f 6e 2d 74 68 75 6d 62 6e 61 69 6c 2d 69 63 6f 6e 7b 68 65 69 67 68 74 3a 35 30 70 78 3b 77 69 64 74 68 3a 37 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e Data Ascii: t}table.course-single-gradebooks .datetime{margin:0;font-size:80%}.tutor-course-lessons .tutor-course-lesson h5 i.tutor-lesson-thumbnail-icon{height:50px;width:70px;border-radius:3px;text-align:center;line-height:50px;color:#fff;margin-right:10px;position
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 74 75 74 6f 72 2d 6e 6f 74 69 63 65 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 61 65 62 63 63 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 74 75 74 6f 72 2d 69 6e 66 6f 2d 6d 73 67 2c 2e 74 75 74 6f 72 2d 73 75 63 63 65 73 73 2d 6d 73 67 2c 2e 74 75 74 6f 72 2d 77 61 72 6e 69 6e 67 2d 6d 73 67 2c 2e 74 75 74 6f 72 2d 65 72 72 6f 72 2d 6d 73 67 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 20 33 70 78 20 33 70 78 20 33 70 78 7d 2e 74 75 74 6f 72 2d 69 6e 66 Data Ascii: hover{opacity:.8}.tutor-notice-warning{background-color:#fcf8e3;border-color:#faebcc;padding:20px;margin-bottom:10px}.tutor-info-msg,.tutor-success-msg,.tutor-warning-msg,.tutor-error-msg{margin:10px 0;padding:10px;border-radius:3px 3px 3px 3px}.tutor-inf
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 74 6f 72 2d 77 72 61 70 20 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 74 6f 70 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 7d 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 20 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 74 6f 70 20 68 33 2c 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 20 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 74 6f 70 20 68 34 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 69 6e 67 6c 65 2d 69 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 20 2e 74 75 74 6f 72 2d 69 6e 73 74 72 75 63 74 6f 72 2d 6c 65 66 74 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 30 70 78 7d 40 6d 65 64 69 61 28 6d Data Ascii: tor-wrap .single-instructor-top{flex-wrap:wrap}}.single-instructor-wrap .single-instructor-top h3,.single-instructor-wrap .single-instructor-top h4{margin:0;padding:0}.single-instructor-wrap .tutor-instructor-left{flex:0 0 auto;padding-right:30px}@media(m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49724	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:15 UTC	636	OUT	GET /wp-content/plugins/tutor-pro/assets/css/front.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:16 UTC	922	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:16 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7cfb873070d-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32b7-3b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:27 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yYxfEDs4XeOizOn2MkGYjcZM0OPIQyqBltFHAJ4VK%2Fhoygf0Xpn1RGximsr8s8iBKxvMWUNG9Sl63o6a613aNhvAU5HImR5%2BUpVSSQfWpuinQqhzsAuLzekI84qnvNywodk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:16 UTC	65	IN	Data Raw: 33 62 0d 0a 2e 65 6e 72 6f 6c 6d 65 6e 74 2d 65 78 70 69 72 65 2d 69 6e 66 6f 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0d 0a Data Ascii: 3b.enrolment-expire-info { margin-top: 10px !important;}
2024-04-25 19:25:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:16 UTC	654	OUT	GET /wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:16 UTC	919	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:16 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d04bc653bb-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-151" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LRYUaWpjlpwAVeSzbIztPHOB8GHkr7qvcAnXOzeGCdzw9BNRy5dgHb05NrmLUJB3tsgisQrSOmg7gWKqL7xM5NBrNzRL3fGKnnbx6yWpRFljngY8ffIl2ndLcilIhcqwNfU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:16 UTC	344	IN	Data Raw: 31 35 31 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 72 64 69 74 61 3b 73 72 63 3a 75 72 6c 28 47 6f 72 64 69 74 61 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 72 64 69 74 61 3b 73 72 63 3a 75 72 6c 28 47 6f 72 64 69 74 61 2d 4d 65 64 69 75 6d 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 Data Ascii: 151@charset "UTF-8";@font-face{font-family:Gordita;src:url(Gordita-Regular.ttf) format('truetype');font-style:normal}@font-face{font-family:Gordita;src:url(Gordita-Medium.ttf) format('truetype');font-style:normal;font-weight:500}@font-face{font-family:G
2024-04-25 19:25:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49726	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:16 UTC	661	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:16 UTC	933	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:16 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d15ef16751-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32e0-2a63d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:08 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tMaaq4WqcHN5bLZAF%2FV3k0n6rUT4Vmjp6GgrYBRvoXmw0iWN%2FHVSUgMY%2BGQ5NIlfo9upCQhXnSs6V%2FLKi178SnKPH0U1nwRbXBv5B%2BFSciLpkPbOCR0HtOdfA82iSnz%2Be58%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:16 UTC	436	IN	Data Raw: 37 63 30 62 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 35 2e 31 33 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a Data Ascii: 7c0b/! Font Awesome Pro 5.13.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license (Commercial License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 65 6d 7d 2e 66 61 2d 31 30 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 65 6d 7d 2e 66 61 2d 66 77 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 Data Ascii: sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:cente
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 33 29 Data Ascii: deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=3)
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 63 6f 72 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 65 22 7d 2e 66 61 2d 61 63 71 75 69 73 69 74 69 6f 6e 73 2d 69 6e 63 6f 72 70 6f 72 61 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 61 66 22 7d 2e 66 61 2d 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 31 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 39 22 7d 2e 66 61 2d 61 64 64 72 65 73 73 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 62 22 7d 2e 66 61 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 32 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 30 22 Data Ascii: corn:before{content:"\f6ae"}.fa-acquisitions-incorporated:before{content:"\f6af"}.fa-ad:before{content:"\f641"}.fa-address-book:before{content:"\f2b9"}.fa-address-card:before{content:"\f2bb"}.fa-adjust:before{content:"\f042"}.fa-adn:before{content:"\f170"
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 66 38 61 31 22 7d 2e 66 61 2d 61 6e 61 6c 79 74 69 63 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 33 22 7d 2e 66 61 2d 61 6e 63 68 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 64 22 7d 2e 66 61 2d 61 6e 64 72 6f 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 62 22 7d 2e 66 61 2d 61 6e 67 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 39 22 7d 2e 66 61 2d 61 6e 67 65 6c 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 39 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 33 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 Data Ascii: nt:"\f8a1"}.fa-analytics:before{content:"\f643"}.fa-anchor:before{content:"\f13d"}.fa-android:before{content:"\f17b"}.fa-angel:before{content:"\f779"}.fa-angellist:before{content:"\f209"}.fa-angle-double-down:before{content:"\f103"}.fa-angle-double-left:b
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 2d 61 72 72 6f 77 2d 61 6c 74 2d 66 72 6f 6d 2d 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 34 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 35 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 36 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 30 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 31 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 73 71 75 61 72 65 2d 72 69 67 68 74 3a 62 65 Data Ascii: -arrow-alt-from-top:before{content:"\f349"}.fa-arrow-alt-left:before{content:"\f355"}.fa-arrow-alt-right:before{content:"\f356"}.fa-arrow-alt-square-down:before{content:"\f350"}.fa-arrow-alt-square-left:before{content:"\f351"}.fa-arrow-alt-square-right:be
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 32 22 7d 2e 66 61 2d 61 72 72 6f 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 37 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 62 32 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 33 37 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 61 6c 74 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 33 38 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 65 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 64 22 7d 2e 66 61 2d 61 72 Data Ascii: p:before{content:"\f062"}.fa-arrows:before{content:"\f047"}.fa-arrows-alt:before{content:"\f0b2"}.fa-arrows-alt-h:before{content:"\f337"}.fa-arrows-alt-v:before{content:"\f338"}.fa-arrows-h:before{content:"\f07e"}.fa-arrows-v:before{content:"\f07d"}.fa-ar
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 61 32 22 7d 2e 66 61 2d 62 61 64 67 65 72 2d 68 6f 6e 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 62 34 22 7d 2e 66 61 2d 62 61 67 73 2d 73 68 6f 70 70 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 37 22 7d 2e 66 61 2d 62 61 68 61 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 36 36 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 65 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 35 22 7d 2e 66 61 2d 62 61 6c 61 6e 63 65 2d 73 63 61 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: re{content:"\f8a2"}.fa-badger-honey:before{content:"\f6b4"}.fa-bags-shopping:before{content:"\f847"}.fa-bahai:before{content:"\f666"}.fa-balance-scale:before{content:"\f24e"}.fa-balance-scale-left:before{content:"\f515"}.fa-balance-scale-right:before{cont
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 66 39 22 7d 2e 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 63 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 34 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 35 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 62 65 6c 6c 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 38 22 7d 2e 66 61 2d 62 65 6c 6c 2d 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 66 61 22 7d 2e 66 61 2d 62 65 Data Ascii: empty:before{content:"\f8f9"}.fa-beer:before{content:"\f0fc"}.fa-behance:before{content:"\f1b4"}.fa-behance-square:before{content:"\f1b5"}.fa-bell:before{content:"\f0f3"}.fa-bell-exclamation:before{content:"\f848"}.fa-bell-on:before{content:"\f8fa"}.fa-be
2024-04-25 19:25:16 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 33 22 7d 2e 66 61 2d 62 6c 75 65 74 6f 6f 74 68 2d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 34 22 7d 2e 66 61 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 32 22 7d 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 37 22 7d 2e 66 61 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 32 22 7d 2e 66 61 2d 62 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 37 22 7d 2e 66 61 2d 62 6f 6e 65 2d 62 72 65 61 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 38 22 7d 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: before{content:"\f293"}.fa-bluetooth-b:before{content:"\f294"}.fa-bold:before{content:"\f032"}.fa-bolt:before{content:"\f0e7"}.fa-bomb:before{content:"\f1e2"}.fa-bone:before{content:"\f5d7"}.fa-bone-break:before{content:"\f5d8"}.fa-bong:before{content:"\f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49727	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:16 UTC	650	OUT	GET /wp-content/themes/edumall/assets/fonts/edumi/font-edumi.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:17 UTC	933	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d3ec8907ba-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-632" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=puqeCv3H3iN%2B7LPRK%2BgmblShqgRdhq4F3AP7eWtM22QKDSOKgyJ3vUdf9HhpN6rt9Zb4I%2FvpOM5Qz4NgtMSAqnZRXj8efSpYw8mv%2BMWBPRG3%2Bhz8R%2FbQHQA9HggURo%2BnsAk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:17 UTC	436	IN	Data Raw: 36 33 32 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 45 64 75 6d 61 6c 6c 69 63 6f 6e 3b 73 72 63 3a 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 45 64 75 6d 61 6c 6c 69 63 6f 6e 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 Data Ascii: 632@charset "UTF-8";@font-face{font-family:Edumallicon;src:url(Edumallicon.eot);src:url(Edumallicon.eot?#iefix) format("embedded-opentype"),url(Edumallicon.woff2) format("woff2"),url(Edumallicon.woff) format("woff"),url(Edumallicon.ttf) format("truetype
2024-04-25 19:25:17 UTC	1157	IN	Data Raw: 64 75 6d 61 6c 6c 69 63 6f 6e 2e 73 76 67 23 45 64 75 6d 61 6c 6c 69 63 6f 6e 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 7d 7d 2e 65 64 75 6d 69 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 45 64 75 6d 61 6c 6c 69 63 6f 6e 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 6f 73 Data Ascii: dumallicon.svg#Edumallicon) format("svg")}}.edumi:before{display:inline-block;font-family:Edumallicon;font-style:normal;font-weight:400;font-variant:normal;line-height:1;text-decoration:inherit;text-rendering:optimizeLegibility;text-transform:none;-moz-os
2024-04-25 19:25:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:16 UTC	650	OUT	GET /wp-content/themes/edumall/assets/libs/swiper/css/swiper.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:17 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d4cea5672d-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-356c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xs1pMu4IX2qAt97VelBR8bEZCAhkKeeDtUVMoWdTBVwQmPfCTbYygLbBf%2FbIhpn2%2FX%2FP8jY2hf2jG0OMOKG%2FX4Tl5DgNtxWQeerJni20BamnxIXIO%2FVcD2NGefo0%2BOImlmE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:17 UTC	437	IN	Data Raw: 33 35 36 63 0d 0a 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 35 2e 34 2e 31 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 30 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4d 61 79 20 32 30 2c 20 32 30 32 30 0a 20 2a 2f Data Ascii: 356c/** * Swiper 5.4.1 * Most modern mobile touch slider and framework with hardware accelerated transitions * http://swiperjs.com * * Copyright 2014-2020 Vladimir Kharlampidi * * Released under the MIT License * * Released on: May 20, 2020 */
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 64 45 52 55 59 41 41 41 57 67 41 41 41 41 49 77 41 41 41 43 51 41 59 41 42 58 52 31 42 50 55 77 41 41 42 68 51 41 41 41 41 75 41 41 41 41 4e 75 41 59 37 2b 78 48 55 31 56 43 41 41 41 46 78 41 41 41 41 46 41 41 41 41 42 6d 32 66 50 63 7a 55 39 54 4c 7a 49 41 41 41 48 63 41 41 41 41 53 67 41 41 41 47 42 50 39 56 35 52 59 32 31 68 63 41 41 41 41 6b 51 41 41 41 43 49 41 41 41 42 59 74 36 46 30 63 42 6a 64 6e 51 67 41 41 41 43 7a 41 41 41 41 41 51 41 41 41 41 45 41 42 45 42 52 47 64 68 63 33 41 41 41 41 57 59 41 41 41 41 43 41 41 41 41 41 6a 2f 2f 77 41 44 5a 32 78 35 5a 67 41 41 41 79 77 41 41 41 44 4d 41 41 41 44 32 4d 48 74 72 79 56 6f 5a 57 46 6b 41 41 41 42 62 41 41 41 41 44 41 41 41 41 41 32 45 32 2b 65 6f 57 68 6f 5a 57 45 41 41 41 47 63 41 41 41 41 48 Data Ascii: dERUYAAAWgAAAAIwAAACQAYABXR1BPUwAABhQAAAAuAAAANuAY7+xHU1VCAAAFxAAAAFAAAABm2fPczU9TLzIAAAHcAAAASgAAAGBP9V5RY21hcAAAAkQAAACIAAABYt6F0cBjdnQgAAACzAAAAAQAAAAEABEBRGdhc3AAAAWYAAAACAAAAAj//wADZ2x5ZgAAAywAAADMAAAD2MHtryVoZWFkAAABbAAAADAAAAA2E2+eoWhoZWEAAAGcAAAAH
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 69 33 66 45 41 34 7a 2f 50 45 4a 36 59 4f 42 35 68 4b 68 34 64 6a 33 45 76 58 68 78 50 71 48 2f 53 4b 55 59 33 72 4a 37 73 72 5a 34 46 5a 6e 68 31 50 4d 41 74 50 68 77 50 36 66 6c 32 50 4d 4a 4d 50 44 67 65 51 34 72 59 38 59 54 36 47 7a 61 6f 30 65 41 45 41 34 30 39 44 75 67 67 6d 54 6e 46 6e 4f 63 53 43 69 45 69 4c 4d 67 78 43 69 54 49 36 43 71 35 44 5a 55 64 33 51 6d 70 31 30 76 4f 30 4c 61 4c 54 64 32 63 6a 4e 34 66 4f 75 6d 6c 63 37 6c 55 59 62 53 51 63 5a 46 6b 75 74 52 47 37 67 36 4a 4b 5a 4b 79 30 52 6d 64 4c 59 36 38 30 43 44 6e 45 4a 2b 55 4d 6b 70 46 46 65 31 52 4e 37 6e 78 64 56 70 58 72 43 34 61 54 74 6e 61 75 72 4f 6e 59 65 72 63 5a 67 32 59 56 6d 4c 4e 2f 64 2f 67 63 7a 66 45 69 6d 72 45 2f 66 73 2f 62 4f 75 71 32 39 5a 6d 6e 38 74 6c 6f 4f Data Ascii: i3fEA4z/PEJ6YOB5hKh4dj3EvXhxPqH/SKUY3rJ7srZ4FZnh1PMAtPhwP6fl2PMJMPDgeQ4rY8YT6Gzao0eAEA409DuggmTnFnOcSCiEiLMgxCiTI6Cq5DZUd3Qmp10vO0LaLTd2cjN4fOumlc7lUYbSQcZFkutRG7g6JKZKy0RmdLY680CDnEJ+UMkpFFe1RN7nxdVpXrC4aTtnaurOnYercZg2YVmLN/d/gczfEimrE/fs/bOuq29Zmn8tloO
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 63 6f 6e 74 61 69 6e 65 72 2d 66 72 65 65 2d 6d 6f 64 65 3e 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 69 6e 76 69 73 69 62 6c 65 2d 62 6c 61 6e 6b 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 75 74 6f Data Ascii: container-free-mode>.swiper-wrapper{transition-timing-function:ease-out;margin:0 auto}.swiper-slide{flex-shrink:0;width:100%;height:100%;position:relative;transition-property:transform}.swiper-slide-invisible-blank{visibility:hidden}.swiper-container-auto
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 62 6f 74 74 6f 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 73 73 2d 6d 6f 64 65 3e 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 2d 6d Data Ascii: linear-gradient(to top,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-container-3d .swiper-slide-shadow-bottom{background-image:linear-gradient(to bottom,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-container-css-mode>.swiper-wrapper{overflow:auto;scrollbar-width:none;-m
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 67 68 74 3a 31 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 7b 6c 65 66 74 3a 31 30 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 3a 61 66 74 65 72 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 70 72 65 76 27 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 2c 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 7b 72 69 67 68 74 3a 31 30 70 78 3b 6c 65 66 74 Data Ascii: ght:1}.swiper-button-prev,.swiper-container-rtl .swiper-button-next{left:10px;right:auto}.swiper-button-prev:after,.swiper-container-rtl .swiper-button-next:after{content:'prev'}.swiper-button-next,.swiper-container-rtl .swiper-button-prev{right:10px;left
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 70 72 65 76 2d 70 72 65 76 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 33 33 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 6e 65 78 74 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 36 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 6e 65 78 74 Data Ascii: gination-bullets-dynamic .swiper-pagination-bullet-active-prev-prev{transform:scale(.33)}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active-next{transform:scale(.66)}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active-next
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 7b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 74 72 61 6e 73 66 6f 72 6d 2c 2e 32 73 20 6c 65 66 74 7d 2e 73 Data Ascii: ation-bullets.swiper-pagination-bullets-dynamic{left:50%;transform:translateX(-50%);white-space:nowrap}.swiper-container-horizontal>.swiper-pagination-bullets.swiper-pagination-bullets-dynamic .swiper-pagination-bullet{transition:.2s transform,.2s left}.s
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 65 72 2d 73 63 72 6f 6c 6c 62 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 25 3b 62 6f 74 74 6f 6d 3a 33 70 78 3b 7a 2d 69 6e 64 65 78 3a 35 30 3b 68 65 69 67 68 74 3a 35 70 78 3b 77 69 64 74 68 3a 39 38 25 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 76 65 72 74 69 63 61 6c 3e 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c Data Ascii: er-scrollbar{border-radius:10px;position:relative;-ms-touch-action:none;background:rgba(0,0,0,.1)}.swiper-container-horizontal>.swiper-scrollbar{position:absolute;left:1%;bottom:3px;z-index:50;height:5px;width:98%}.swiper-container-vertical>.swiper-scroll
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 30 3b 7a 2d 69 6e 64 65 78 3a 2d 31 30 30 30 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 61 64 65 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 72 65 65 2d 6d 6f 64 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 7d 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 61 64 65 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 Data Ascii: tion{position:absolute;left:0;top:0;pointer-events:none;opacity:0;z-index:-1000}.swiper-container-fade.swiper-container-free-mode .swiper-slide{transition-timing-function:ease-out}.swiper-container-fade .swiper-slide{pointer-events:none;transition-propert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49729	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:16 UTC	662	OUT	GET /wp-content/themes/edumall/assets/libs/lightGallery/css/lightgallery.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:17 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d55f4144ee-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-4fea" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z9gNyYKcLyEp3FNuBAy1U4C5q2%2BQ21Rz7ZWbxaJ%2FtTKvB%2B8gXWMPyo1P%2BknZqynuAx7AgWOr7dcOXsizKnRKFLqmfKdBNFhI5mPeSn3422OggiQOxqWeDk%2B8fF23cg3Q4AU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:17 UTC	439	IN	Data Raw: 34 66 65 61 0d 0a 2e 6c 67 2d 73 75 62 2d 68 74 6d 6c 2c 2e 6c 67 2d 74 6f 6f 6c 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 35 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6c 67 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 6c 67 2e 65 6f 74 3f 6e 31 7a 33 37 33 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 6c 67 2e 65 6f 74 3f 23 69 65 66 69 78 6e 31 7a 33 37 33 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 6c 67 2e 77 6f 66 66 3f 6e 31 7a 33 37 33 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 6c 67 2e 74 74 66 3f 6e 31 7a Data Ascii: 4fea.lg-sub-html,.lg-toolbar{background-color:rgba(0,0,0,.45)}@font-face{font-family:lg;src:url(../fonts/lg.eot?n1z373);src:url(../fonts/lg.eot?#iefixn1z373) format("embedded-opentype"),url(../fonts/lg.woff?n1z373) format("woff"),url(../fonts/lg.ttf?n1z
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 6c 67 2d 61 63 74 69 6f 6e 73 20 2e 6c 67 2d 6e 65 78 74 2c 2e 6c 67 2d 61 63 74 69 6f 6e 73 20 2e 6c 67 2d 70 72 65 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 35 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 63 6f 6c 6f 72 3a 23 39 39 39 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 Data Ascii: :normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.lg-actions .lg-next,.lg-actions .lg-prev{background-color:rgba(0,0,0,.45);border-radius:2px;color:#999;cursor:pointer;display:block;font-size:2
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 67 2d 6c 65 66 74 2d 65 6e 64 20 2e 33 73 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6c 67 2d 74 6f 6f 6c 62 61 72 7b 7a 2d 69 6e 64 65 78 3a 31 30 38 32 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 67 2d 74 6f 6f 6c 62 61 72 20 2e 6c 67 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 23 39 39 39 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 34 37 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 37 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 35 Data Ascii: ;animation:lg-left-end .3s;position:relative}.lg-toolbar{z-index:1082;left:0;position:absolute;top:0;width:100%}.lg-toolbar .lg-icon{color:#999;cursor:pointer;float:right;font-size:24px;height:47px;line-height:27px;padding:10px 0;text-align:center;width:5
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 2e 32 73 20 6c 69 6e 65 61 72 7d 2e 6c 67 2d 68 69 64 65 2d 69 74 65 6d 73 20 2e 6c 67 2d 70 72 65 76 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 2e 6c 67 2d 68 69 64 65 2d 69 74 65 6d 73 20 2e 6c 67 2d 6e 65 78 74 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 2e 6c 67 2d 68 69 64 65 2d 69 74 65 6d 73 20 2e 6c 67 2d 74 6f 6f 6c 62 61 72 7b 6f 70 61 Data Ascii: .2s linear}.lg-hide-items .lg-prev{opacity:0;-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}.lg-hide-items .lg-next{opacity:0;-webkit-transform:translate3d(10px,0,0);transform:translate3d(10px,0,0)}.lg-hide-items .lg-toolbar{opa
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 7d 2e 6c 67 2d 6f 75 74 65 72 20 2e 6c 67 2d 74 Data Ascii: kit-transition:-webkit-transform .25s cubic-bezier(0,0,.25,1) 0s;-moz-transition:-moz-transform .25s cubic-bezier(0,0,.25,1) 0s;-o-transition:-o-transform .25s cubic-bezier(0,0,.25,1) 0s;transition:transform .25s cubic-bezier(0,0,.25,1) 0s}.lg-outer .lg-t
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6c 67 2d 6f 75 74 65 72 2e 6c 67 2d 70 75 6c 6c 2d 63 61 70 74 69 6f 6e 2d 75 70 20 2e 6c 67 2d 73 75 62 2d 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 65 61 73 65 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 65 61 73 65 7d 2e 6c 67 2d 6f 75 74 65 72 2e 6c 67 2d 70 75 6c 6c 2d 63 61 70 74 69 6f 6e 2d 75 70 2e 6c 67 2d 74 68 75 6d 62 2d 6f 70 65 6e 20 2e 6c 67 2d 73 75 62 2d 68 74 6d 6c 7b 62 6f 74 74 6f 6d 3a 31 30 30 70 78 7d 2e 6c 67 2d 6f 75 74 65 72 20 2e 6c 67 2d 74 6f 6f 67 6c 65 2d 74 68 75 6d 62 7b 62 61 63 6b 67 Data Ascii: padding-bottom:0}.lg-outer.lg-pull-caption-up .lg-sub-html{-webkit-transition:bottom .25s ease;-o-transition:bottom .25s ease;transition:bottom .25s ease}.lg-outer.lg-pull-caption-up.lg-thumb-open .lg-sub-html{bottom:100px}.lg-outer .lg-toogle-thumb{backg
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 2e 6c 67 2d 68 61 73 2d 68 74 6d 6c 35 20 2e 6c 67 2d 76 69 64 65 6f 2d 70 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 76 69 64 65 6f 2d 70 6c 61 79 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 68 65 69 67 68 74 3a 36 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 32 70 78 3b 77 69 64 74 68 3a 36 34 70 78 3b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 6c 67 2d 6f 75 74 65 72 20 2e 6c 67 2d 68 61 73 2d 68 74 6d 6c 35 3a 68 6f 76 65 72 20 2e 6c 67 2d 76 69 64 65 6f 2d 70 6c 61 79 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 6c 67 2d 6f 75 74 65 72 20 2e 6c 67 2d 68 61 73 2d 79 6f 75 74 75 62 65 20 2e 6c 67 2d 76 69 64 65 6f 2d 70 6c 61 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 Data Ascii: .lg-has-html5 .lg-video-play{background:url(../img/video-play.png) no-repeat;height:64px;margin-left:-32px;margin-top:-32px;width:64px;opacity:.8}.lg-outer .lg-has-html5:hover .lg-video-play{opacity:1}.lg-outer .lg-has-youtube .lg-video-play{background:ur
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 74 65 72 2e 6c 67 2d 63 73 73 33 2e 6c 67 2d 7a 6f 6f 6d 2d 64 72 61 67 67 69 6e 67 20 2e 6c 67 2d 69 74 65 6d 2e 6c 67 2d 63 6f 6d 70 6c 65 74 65 2e 6c 67 2d 7a 6f 6f 6d 61 62 6c 65 20 2e 6c 67 2d 69 6d 67 2d 77 72 61 70 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 2e 6c 67 2d 6f 75 74 65 72 2e 6c 67 2d 75 73 65 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 66 6f 72 2d 7a 6f 6f 6d 20 2e 6c 67 2d 69 74 65 6d 2e 6c 67 2d 63 6f 6d 70 6c 65 74 65 2e 6c 67 2d 7a 6f 6f 6d 61 62 6c 65 20 2e 6c 67 2d 69 6d 67 2d 77 72 61 70 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 63 75 Data Ascii: ter.lg-css3.lg-zoom-dragging .lg-item.lg-complete.lg-zoomable .lg-img-wrap{-webkit-transition-duration:0s;transition-duration:0s}.lg-outer.lg-use-transition-for-zoom .lg-item.lg-complete.lg-zoomable .lg-img-wrap{-webkit-transition:-webkit-transform .3s cu
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 2c 6f 70 61 63 69 74 79 20 2e 31 35 73 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 35 2c 31 29 20 30 73 2c 6f 70 61 63 69 74 79 20 2e 31 35 73 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 Data Ascii: ortant;-o-transition:-o-transform .3s cubic-bezier(0,0,.25,1) 0s,opacity .15s!important;transition:transform .3s cubic-bezier(0,0,.25,1) 0s,opacity .15s!important;-webkit-transform-origin:0 0;-moz-transform-origin:0 0;-ms-transform-origin:0 0;transform-or
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 65 61 73 65 20 30 73 2c 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 65 61 73 65 20 30 73 2c 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 20 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 65 61 73 65 20 30 73 2c 74 72 61 6e 73 66 6f 72 6d 20 2e 31 35 73 20 65 61 73 65 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 35 70 78 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 Data Ascii: transform .15s ease 0s;-moz-transition:opacity .15s ease 0s,-moz-transform .15s ease 0s;-o-transition:opacity .15s ease 0s,-o-transform .15s ease 0s;transition:opacity .15s ease 0s,transform .15s ease 0s;-webkit-transform:translate3d(0,5px,0);transform:tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49730	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:16 UTC	622	OUT	GET /wp-content/themes/edumall/style.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:17 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d56c856773-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-6df26" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ghJpNDX5sFuidPVCxXvoTrxlHDNp1xLz4sYpmqGsuuSZ40NeuQHtu4OqEhXnLf%2FrKoKNQTmnNvUN24%2FT9o7YZTea33WLd%2BdadBkjwSdmjLNRJFSSL0F%2Fo35V%2Bh5AD8tc1tk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:17 UTC	438	IN	Data Raw: 37 63 30 64 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 0a 0a 0a 2f 2a 21 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 45 64 75 6d 61 6c 6c 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 65 64 75 6d 61 6c 6c 2e 74 68 65 6d 65 6d 6f 76 65 2e 63 6f 6d 0a 41 75 74 68 6f 72 3a 20 54 68 65 6d 65 4d 6f 76 65 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 74 68 65 6d 65 6d 6f 76 65 2e 63 6f 6d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 45 64 75 6d 61 6c 6c 20 e2 80 93 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 20 4c 4d 53 20 45 64 75 63 61 74 69 6f 6e 20 43 65 6e 74 65 72 20 57 6f 72 64 50 72 65 73 73 20 54 68 65 6d 65 0a 56 65 72 73 69 6f 6e 3a 20 32 2e 34 2e 31 0a 4c 69 63 65 6e 73 65 3a 20 47 4e 55 20 47 65 6e 65 72 61 6c Data Ascii: 7c0d@charset "UTF-8";/*!Theme Name: EdumallTheme URI: https://edumall.thememove.comAuthor: ThemeMoveAuthor URI: https://thememove.comDescription: Edumall Professional LMS Education Center WordPress ThemeVersion: 2.4.1License: GNU General
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 75 70 70 6f 72 74 2c 20 73 74 69 63 6b 79 2d 70 6f 73 74 2c 20 74 68 72 65 61 64 65 64 2d 63 6f 6d 6d 65 6e 74 73 2c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 61 64 79 0a 2a 2f 2e 61 72 63 68 69 76 65 2d 6c 61 79 6f 75 74 2d 73 77 69 74 63 68 65 72 20 2e 73 77 69 74 63 68 65 72 2d 69 74 65 6d 3a 61 66 74 65 72 2c 2e 61 72 63 68 69 76 65 2d 6c 61 79 6f 75 74 2d 73 77 69 74 63 68 65 72 20 2e 73 77 69 74 63 68 65 72 2d 69 74 65 6d 3a 62 65 66 6f 72 65 2c 2e 61 72 63 68 69 76 65 2d 74 6f 70 2d 66 69 6c 74 65 72 2d 63 6f 6e 74 65 6e 74 20 2e 63 6f 75 6e 74 2c 2e 62 6c 6f 67 2d 6e 61 76 2d 6c 69 6e 6b 73 20 2e 69 6e 6e 65 72 20 2e 68 6f 76 65 72 2d 62 67 2c 2e 62 6c 6f 67 2d 6e 61 76 2d 6c 69 6e 6b 73 20 2e 69 6e 6e 65 72 20 68 36 3a 62 65 66 6f 72 65 2c 2e Data Ascii: upport, sticky-post, threaded-comments, translation-ready*/.archive-layout-switcher .switcher-item:after,.archive-layout-switcher .switcher-item:before,.archive-top-filter-content .count,.blog-nav-links .inner .hover-bg,.blog-nav-links .inner h6:before,.
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 6e 69 63 65 2d 73 65 6c 65 63 74 2c 2e 65 64 75 6d 61 6c 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 2d 77 72 61 70 20 2e 65 64 75 6d 61 6c 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 2d 63 75 72 72 65 6e 74 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 2d 76 69 64 65 6f 2d 62 75 74 74 6f 6e 2d 65 66 66 65 63 74 2d 77 61 76 65 2d 70 75 6c 73 65 20 2e 76 69 64 65 6f 2d 62 75 74 74 6f 6e 2d 6d 61 73 6b 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 20 2e 62 75 74 74 6f 6e 2d 63 6c 6f 73 65 2d 70 6f 70 75 70 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 2e 6f 70 65 6e 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 20 2e 70 6f 70 75 70 2d 63 6f 6e 74 65 6e 74 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 72 74 66 6f 6c 69 6f 2d 63 61 72 6f 75 73 65 6c 2d 30 31 20 2e 70 6f 73 74 2d 74 Data Ascii: nice-select,.edumall-nice-select-wrap .edumall-nice-select-current,.edumall-popup-video-button-effect-wave-pulse .video-button-mask,.edumall-popup .button-close-popup,.edumall-popup.open,.edumall-popup .popup-content,.edumall-portfolio-carousel-01 .post-t
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 69 63 6f 6e 2d 62 6f 78 20 2e 74 6d 2d 69 63 6f 6e 2d 62 6f 78 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 69 63 6f 6e 2d 62 6f 78 20 2e 74 6d 2d 69 63 6f 6e 2d 62 6f 78 3a 62 65 66 6f 72 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 69 6d 61 67 65 2d 63 61 72 6f 75 73 65 6c 20 2e 69 6d 61 67 65 20 69 6d 67 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 6e 75 6d 62 65 72 73 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 6e 75 6d 62 65 72 73 20 2e 6e 75 6d 62 65 72 73 20 2e 74 6f 74 61 6c 3a 62 65 66 6f 72 65 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 73 68 61 72 65 2d 6c 69 73 74 20 2e 73 74 61 6c 6b 2c 2e 66 75 6c 6c 2d 70 61 67 65 2d 73 68 61 72 65 2d 6c 69 73 74 20 2e 73 74 Data Ascii: .elementor-widget-tm-icon-box .tm-icon-box,.elementor-widget-tm-icon-box .tm-icon-box:before,.elementor-widget-tm-image-carousel .image img,.full-page-numbers,.full-page-numbers .numbers .total:before,.full-page-share-list .stalk,.full-page-share-list .st
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 72 65 2c 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 2c 2e 73 69 6e 67 6c 65 2d 70 6f 72 74 66 6f 6c 69 6f 20 2e 74 6d 2d 73 74 69 63 6b 79 2d 63 6f 6c 75 6d 6e 2c 2e 73 69 74 65 2c 2e 73 76 67 2d 64 65 66 73 2d 67 72 61 64 69 65 6e 74 20 2e 73 74 6f 70 2d 61 2c 2e 73 76 67 2d 64 65 66 73 2d 67 72 61 64 69 65 6e 74 20 2e 73 74 6f 70 2d 62 2c 2e 73 77 69 74 63 68 65 72 2d 6c 61 6e 67 75 61 67 65 2d 77 72 61 70 70 65 72 20 2e 77 70 6d 6c 2d 6c 73 20 2e 77 70 6d 6c 2d 6c 73 2d 73 75 62 2d 6d 65 6e 75 2c 2e 74 6d 2d 62 75 74 74 6f Data Ascii: re,.select2-container.select2-container.select2-container--default .select2-selection--multiple,.single-portfolio .tm-sticky-column,.site,.svg-defs-gradient .stop-a,.svg-defs-gradient .stop-b,.switcher-language-wrapper .wpml-ls .wpml-ls-sub-menu,.tm-butto
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 61 66 74 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 62 65 66 6f 72 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 2d 77 65 62 6b Data Ascii: ut[type=button],input[type=checkbox]:after,input[type=checkbox]:before,input[type=email],input[type=number],input[type=password],input[type=reset],input[type=search],input[type=submit],input[type=tel],input[type=text],input[type=url],select,textarea{-webk
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 74 65 78 74 20 61 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 64 75 6d 61 6c 6c 2d 62 6c 6f 67 20 2e 70 6f 73 74 2d 6f 76 65 72 6c 61 79 2d 6d 65 74 61 20 61 3a 61 66 74 65 72 2c 2e 65 6e 74 72 79 2d 70 6f 72 74 66 6f 6c 69 6f 2d 64 65 74 61 69 6c 73 20 61 3a 61 66 74 65 72 2c 2e 69 6e 73 69 67 68 74 5f 63 6f 72 65 5f 62 72 65 61 64 63 72 75 6d 62 20 61 3a 61 66 74 65 72 2c 2e 74 6d 2d 74 77 69 74 74 65 72 2e 73 74 79 6c 65 2d 6c 69 73 74 20 2e 74 77 65 65 74 20 2e 74 77 65 65 74 2d 74 65 78 74 20 61 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a Data Ascii: text a{position:relative}.edumall-blog .post-overlay-meta a:after,.entry-portfolio-details a:after,.insight_core_breadcrumb a:after,.tm-twitter.style-list .tweet .tweet-text a:after{content:"";width:0;height:1px;position:absolute;left:auto;right:0;bottom:
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 6f 6e 74 20 41 77 65 73 6f 6d 65 5c 20 35 20 50 72 6f 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 7d 2e 62 6c 6f 67 2d 6e 61 76 2d 6c 69 6e 6b 73 20 2e 69 6e 6e 65 72 20 68 36 3a 62 65 66 6f 72 65 2c 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 20 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 69 2c 2e 65 64 75 6d 61 6c 6c 2d 66 61 71 73 2d 6c 69 73 74 20 2e 70 6f 73 74 2d 64 61 74 65 3a 62 65 66 6f 72 65 2c 2e 65 64 75 6d 61 6c 6c 2d 6d 61 69 6c 63 68 69 6d 70 2d 66 6f 72 6d 20 2e 62 75 74 74 6f 6e 2d 69 63 6f 6e 2c 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 20 2e 62 75 74 74 6f 6e 2d 63 6c 6f 73 65 2d 70 6f 70 75 70 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 Data Ascii: ;line-height:1;font-family:Font Awesome\ 5 Pro;font-weight:900}.blog-nav-links .inner h6:before,.dialog-widget .dialog-close-button i,.edumall-faqs-list .post-date:before,.edumall-mailchimp-form .button-icon,.edumall-popup .button-close-popup,.elementor-w
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 61 66 74 65 72 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 6f 6e 74 20 41 77 65 73 6f 6d 65 5c 20 35 20 50 72 6f 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 6d 6f 2d 6f 70 65 6e 69 64 2d 61 70 70 2d 69 63 6f 6e Data Ascii: nput[type=checkbox]:after{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1;font-family:Font Awesome\ 5 Pro;font-weight:400}.mo-openid-app-icon
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 74 7d 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 6d 61 69 6e 2c 6d 65 6e 75 2c Data Ascii: t}html{box-sizing:border-box;font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}body{margin:0}article,aside,details,figcaption,figure,footer,header,main,menu,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49732	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:16 UTC	672	OUT	GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/perfect-scrollbar.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:17 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d619344514-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1217" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rbeiOw065wtyMD45vqi32av3dvgsK4h2tw%2FoGo7xVLLdjglhvvyZWqktyM%2FKf4q%2F2p6lUd3krUEdkCCN9QxbfOQ4kHB%2F8HLey%2B2uk95lxgBWEoPZ2ab0YTlnHoXd0DoI1CY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:17 UTC	439	IN	Data Raw: 31 32 31 37 0d 0a 2f 2a 20 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 20 76 30 2e 36 2e 31 34 20 2a 2f 0d 0a 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 61 75 74 6f 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 40 73 75 70 70 6f 72 74 73 20 28 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 29 7b 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 Data Ascii: 1217/* perfect-scrollbar v0.6.14 */.ps-container{-ms-touch-action:auto;touch-action:auto;overflow:hidden !important;-ms-overflow-style:none}@supports (-ms-overflow-style: none){.ps-container{overflow:auto !important}}@media screen and (-ms-high-contra
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 39 39 3b 68 65 69 67 68 74 3a 31 31 70 78 7d 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e Data Ascii: ck;background-color:transparent}.ps-container.ps-in-scrolling.ps-x>.ps-scrollbar-x-rail{background-color:#eee;opacity:.9}.ps-container.ps-in-scrolling.ps-x>.ps-scrollbar-x-rail>.ps-scrollbar-x{background-color:#999;height:11px}.ps-container.ps-in-scrollin
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 68 65 69 67 68 74 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 77 69 64 74 68 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 68 65 69 67 68 74 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 77 69 64 74 68 20 2e Data Ascii: se-in-out, border-radius .2s ease-in-out, -moz-border-radius .2s ease-in-out;transition:background-color .2s linear, height .2s linear, width .2s ease-in-out, border-radius .2s ease-in-out;transition:background-color .2s linear, height .2s linear, width .
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 68 65 69 67 68 74 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 77 69 64 74 68 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 68 65 69 67 68 74 20 2e 32 73 20 6c 69 6e 65 61 72 2c 20 77 69 64 74 68 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f Data Ascii: -radius .2s ease-in-out;-moz-transition:background-color .2s linear, height .2s linear, width .2s ease-in-out, border-radius .2s ease-in-out, -moz-border-radius .2s ease-in-out;transition:background-color .2s linear, height .2s linear, width .2s ease-in-o
2024-04-25 19:25:17 UTC	93	IN	Data Raw: 3a 2e 39 7d 2e 70 73 2d 63 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 2d 72 61 69 6c 3a 68 6f 76 65 72 3e 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 39 39 7d 0d 0a 0d 0a Data Ascii: :.9}.ps-container:hover>.ps-scrollbar-y-rail:hover>.ps-scrollbar-y{background-color:#999}
2024-04-25 19:25:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49731	23.54.200.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 19:25:17 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=128278 Date: Thu, 25 Apr 2024 19:25:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49733	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:17 UTC	663	OUT	GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/css/custom-theme.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:17 UTC	928	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d89acc53b6-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1092" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xko2OB0Fh47CAWY6YdC5DTdEWwqX%2FHJUt1bxbvAIdq16XUwBglj7LrlI7a3FJa%2FKbnQ4Zrobj99WT0yDD%2FSgrhnYtiVf31gY1YEtnmPB0XP%2FxxknGWGAHrEX9cZyhITEZUw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:17 UTC	441	IN	Data Raw: 31 30 39 32 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 20 7b 0d 0a 20 20 20 20 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 40 73 75 70 70 6f 72 74 73 20 28 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 29 20 7b 0d 0a 20 20 20 20 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 7d 0d 0a Data Ascii: 1092.ps-theme-woosw { -ms-touch-action: none; touch-action: none; overflow: hidden !important; -ms-overflow-style: none;}@supports (-ms-overflow-style: none) { .ps-theme-woosw { overflow: auto !important; }
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 2c 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 2e 70 73 2d 61 63 74 69 76 65 2d 79 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 79 2d 72 61 69 6c 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 20 7b 0d 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d Data Ascii: scrollbar-x-rail,.ps-theme-woosw.ps-active-y > .ps-scrollbar-y-rail { display: block; background-color: transparent;}.ps-theme-woosw.ps-in-scrolling { pointer-events: none;}.ps-theme-woosw.ps-in-scrolling.ps-x > .ps-scrollbar-
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 75 73 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 2f 2a 20 74 68 65 72 65 20 6d 75 73 74 20 62 65 20 27 62 6f 74 74 6f 6d 27 20 66 6f 72 20 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 20 2a 2f 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 3a 68 6f 76 65 72 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2c 20 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 Data Ascii: us .2s ease-in-out; bottom: 0; /* there must be 'bottom' for ps-scrollbar-x */ height: 6px !important; border-radius: 3px !important;}.ps-theme-woosw > .ps-scrollbar-x-rail:hover > .ps-scrollbar-x, .ps-theme-woosw > .ps-scrollbar
2024-04-25 19:25:17 UTC	1071	IN	Data Raw: 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 3a 68 6f 76 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 35 38 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 73 2d 74 68 65 6d 65 2d 77 6f 6f 73 77 3a 68 6f 76 65 72 2e 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 2e 70 73 2d 78 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 2d 72 61 69 6c 20 3e 20 2e 70 73 2d 73 63 72 6f 6c 6c 62 61 72 2d 78 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 35 38 29 3b 0d 0a 20 20 Data Ascii: }.ps-theme-woosw:hover.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail { background-color: rgba(0, 0, 0, .58);}.ps-theme-woosw:hover.ps-in-scrolling.ps-x > .ps-scrollbar-x-rail > .ps-scrollbar-x { background-color: rgba(0, 0, 0, .58);
2024-04-25 19:25:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49734	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:17 UTC	655	OUT	GET /wp-content/themes/edumall/assets/libs/growl/css/jquery.growl.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:17 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d8bbba7bd8-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-596" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bvh8utntTUIwiDZJF7gRaSiPOYdFRFtpyXJVN0AzoBxClxASLkMZfDMh2ERheaUnKuPHlpk5lmmz6yXlY4fJntyhLW6vV01cK0IASbgcCD5UYfrmJmmfXVG3RAyO%2B%2FIvjZg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:17 UTC	446	IN	Data Raw: 35 39 36 0d 0a 23 67 72 6f 77 6c 73 2d 62 63 2c 23 67 72 6f 77 6c 73 2d 62 6c 2c 23 67 72 6f 77 6c 73 2d 62 72 2c 23 67 72 6f 77 6c 73 2d 63 63 2c 23 67 72 6f 77 6c 73 2d 63 6c 2c 23 67 72 6f 77 6c 73 2d 63 72 2c 23 67 72 6f 77 6c 73 2d 64 65 66 61 75 6c 74 2c 23 67 72 6f 77 6c 73 2d 74 63 2c 23 67 72 6f 77 6c 73 2d 74 6c 2c 23 67 72 6f 77 6c 73 2d 74 72 2c 2e 6f 6e 74 6f 70 7b 7a 2d 69 6e 64 65 78 3a 35 30 30 30 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 7d 23 67 72 6f 77 6c 73 2d 64 65 66 61 75 6c 74 2c 23 67 72 6f 77 6c 73 2d 74 72 7b 74 6f 70 3a 31 30 70 78 3b 72 69 67 68 74 3a 31 30 70 78 7d 23 67 72 6f 77 6c 73 2d 74 6c 7b 74 6f 70 3a 31 30 70 78 3b 6c 65 66 74 3a 31 30 70 78 7d 23 67 72 6f 77 6c 73 2d 62 6c 7b 62 6f 74 74 6f 6d 3a 31 30 70 78 Data Ascii: 596#growls-bc,#growls-bl,#growls-br,#growls-cc,#growls-cl,#growls-cr,#growls-default,#growls-tc,#growls-tl,#growls-tr,.ontop{z-index:50000;position:fixed}#growls-default,#growls-tr{top:10px;right:10px}#growls-tl{top:10px;left:10px}#growls-bl{bottom:10px
2024-04-25 19:25:17 UTC	991	IN	Data Raw: 3a 35 30 25 3b 6c 65 66 74 3a 31 30 70 78 7d 23 67 72 6f 77 6c 73 2d 63 72 7b 74 6f 70 3a 35 30 25 3b 72 69 67 68 74 3a 31 30 70 78 7d 23 67 72 6f 77 6c 73 2d 62 63 20 2e 67 72 6f 77 6c 2c 23 67 72 6f 77 6c 73 2d 74 63 20 2e 67 72 6f 77 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 6f 77 6c 7b 6f 70 61 63 69 74 79 3a 2e 38 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e Data Ascii: :50%;left:10px}#growls-cr{top:50%;right:10px}#growls-bc .growl,#growls-tc .growl{margin-left:auto;margin-right:auto}.growl{opacity:.8;filter:alpha(opacity=80);position:relative;border-radius:4px;-webkit-transition:all .4s ease-in-out;-moz-transition:all .
2024-04-25 19:25:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49735	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:17 UTC	661	OUT	GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:18 UTC	922	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d95a89ad6e-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-4ab8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2YCnRUrQvDwz6fIdYywpl6j5ykFpy92IBNTCpsRbWfGxImWnRJYk%2Bb2JpRbFXC7YzN2MPpiQ5I3dnj3VkDyEtU5PvZTYMgNBLtRighwZVGvKgK2hxILsYd2YbeQpHxmZXTc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:18 UTC	447	IN	Data Raw: 34 61 62 38 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 73 20 2d 20 76 35 2e 31 35 2e 30 20 2d 20 33 30 2d 30 31 2d 32 30 32 32 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 65 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 65 6f 74 3f 35 2e 31 35 2e 30 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 65 6f 74 3f 35 2e 31 35 2e 30 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f 6e 73 2e 77 6f 66 66 32 3f 35 2e 31 35 2e 30 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 65 69 63 6f Data Ascii: 4ab8/! elementor-icons - v5.15.0 - 30-01-2022 /@font-face{font-family:eicons;src:url(../fonts/eicons.eot?5.15.0);src:url(../fonts/eicons.eot?5.15.0#iefix) format("embedded-opentype"),url(../fonts/eicons.woff2?5.15.0) format("woff2"),url(../fonts/eico
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 73 5e 3d 65 69 63 6f 6e 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 65 69 63 6f 6e 73 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 Data Ascii: s^=eicon]{display:inline-block;font-family:eicons;font-size:inherit;font-weight:400;font-style:normal;font-variant:normal;line-height:1;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}@keyframes a{0%{transform:rota
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 38 27 7d 2e 65 69 63 6f 6e 2d 61 6c 65 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 39 27 7d 2e 65 69 63 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 65 78 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 61 27 7d 2e 65 69 63 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 62 27 7d 2e 65 69 63 6f 6e 2d 62 61 6e 6e 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 63 27 7d 2e 65 69 63 6f 6e 2d 62 6c 6f 63 6b 71 75 6f 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 31 64 27 7d 2e 65 69 63 6f 6e 2d 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c Data Ascii: n:before{content:'\e818'}.eicon-alert:before{content:'\e819'}.eicon-animation-text:before{content:'\e81a'}.eicon-animation:before{content:'\e81b'}.eicon-banner:before{content:'\e81c'}.eicon-blockquote:before{content:'\e81d'}.eicon-button:before{content:'\
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 2e 65 69 63 6f 6e 2d 69 6e 66 6f 2d 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 39 27 7d 2e 65 69 63 6f 6e 2d 69 6e 6e 65 72 2d 73 65 63 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 61 27 7d 2e 65 69 63 6f 6e 2d 6d 61 69 6c 63 68 69 6d 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 62 27 7d 2e 65 69 63 6f 6e 2d 6d 65 6e 75 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 63 27 7d 2e 65 69 63 6f 6e 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 64 27 7d 2e 65 69 63 6f 6e 2d 6e 61 76 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 33 65 27 7d 2e Data Ascii: .eicon-info-box:before{content:'\e839'}.eicon-inner-section:before{content:'\e83a'}.eicon-mailchimp:before{content:'\e83b'}.eicon-menu-card:before{content:'\e83c'}.eicon-navigation-horizontal:before{content:'\e83d'}.eicon-nav-menu:before{content:'\e83e'}.
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 61 27 7d 2e 65 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 62 27 7d 2e 65 69 63 6f 6e 2d 73 6c 69 64 65 72 2d 76 69 64 65 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 63 27 7d 2e 65 69 63 6f 6e 2d 73 6c 69 64 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 64 27 7d 2e 65 69 63 6f 6e 2d 73 6f 63 69 61 6c 2d 69 63 6f 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 65 27 7d 2e 65 69 63 6f 6e 2d 73 70 61 63 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 35 66 27 7d 2e 65 69 63 6f 6e 2d 74 61 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: sh:before{content:'\e85a'}.eicon-slider-vertical:before{content:'\e85b'}.eicon-slider-video:before{content:'\e85c'}.eicon-slides:before{content:'\e85d'}.eicon-social-icons:before{content:'\e85e'}.eicon-spacer:before{content:'\e85f'}.eicon-table:before{con
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 37 63 27 7d 2e 65 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 37 64 27 7d 2e 65 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 37 65 27 7d 2e 65 69 63 6f 6e 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 37 66 27 7d 2e 65 69 63 6f 6e 2d 66 69 6c 65 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 38 30 27 7d 2e 65 69 63 6f 6e 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 38 31 27 7d 2e 65 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 38 32 Data Ascii: {content:'\e87c'}.eicon-chevron-right:before{content:'\e87d'}.eicon-chevron-left:before{content:'\e87e'}.eicon-close:before{content:'\e87f'}.eicon-file-download:before{content:'\e880'}.eicon-save:before{content:'\e881'}.eicon-zoom-in:before{content:'\e882
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 2e 65 69 63 6f 6e 2d 61 6e 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 39 65 27 7d 2e 65 69 63 6f 6e 2d 61 6e 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 39 66 27 7d 2e 65 69 63 6f 6e 2d 61 6e 69 6d 61 74 65 64 2d 68 65 61 64 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 61 30 27 7d 2e 65 69 63 6f 6e 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 61 31 27 7d 2e 65 69 63 6f 6e 2d 66 62 2d 65 6d 62 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 61 32 27 7d 2e 65 69 63 6f 6e 2d 66 62 2d 66 65 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 61 33 27 7d 2e 65 69 63 6f Data Ascii: .eicon-angle-right:before{content:'\e89e'}.eicon-angle-left:before{content:'\e89f'}.eicon-animated-headline:before{content:'\e8a0'}.eicon-menu-toggle:before{content:'\e8a1'}.eicon-fb-embed:before{content:'\e8a2'}.eicon-fb-feed:before{content:'\e8a3'}.eico
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 62 66 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 30 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 31 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 32 27 7d 2e 65 69 63 6f 6e 2d 70 6c 61 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 33 27 7d 2e 65 69 63 6f 6e 2d 61 72 63 68 69 76 65 2d 70 6f 73 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 63 34 27 7d 2e 65 69 63 6f 6e 2d 61 72 63 Data Ascii: }.eicon-arrow-left:before{content:'\e8bf'}.eicon-arrow-right:before{content:'\e8c0'}.eicon-arrow-up:before{content:'\e8c1'}.eicon-arrow-down:before{content:'\e8c2'}.eicon-play-o:before{content:'\e8c3'}.eicon-archive-posts:before{content:'\e8c4'}.eicon-arc
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 7d 2e 65 69 63 6f 6e 2d 70 72 6f 64 75 63 74 2d 74 61 62 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 64 66 27 7d 2e 65 69 63 6f 6e 2d 70 72 6f 64 75 63 74 2d 74 69 74 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 30 27 7d 2e 65 69 63 6f 6e 2d 70 72 6f 64 75 63 74 2d 75 70 73 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 31 27 7d 2e 65 69 63 6f 6e 2d 70 72 6f 64 75 63 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 32 27 7d 2e 65 69 63 6f 6e 2d 62 61 67 2d 6c 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 33 27 7d 2e 65 69 63 6f 6e 2d 62 61 67 2d 6d 65 64 69 75 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 65 34 27 7d 2e 65 Data Ascii: }.eicon-product-tabs:before{content:'\e8df'}.eicon-product-title:before{content:'\e8e0'}.eicon-product-upsell:before{content:'\e8e1'}.eicon-products:before{content:'\e8e2'}.eicon-bag-light:before{content:'\e8e3'}.eicon-bag-medium:before{content:'\e8e4'}.e
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 39 30 30 27 7d 2e 65 69 63 6f 6e 2d 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 31 27 7d 2e 65 69 63 6f 6e 2d 63 75 72 73 6f 72 2d 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 32 27 7d 2e 65 69 63 6f 6e 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 33 27 7d 2e 65 69 63 6f 6e 2d 66 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 34 27 7d 2e 65 69 63 6f 6e 2d 72 65 64 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 35 27 7d 2e 65 69 63 6f 6e 2d 62 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 39 30 36 27 7d 2e 65 69 63 6f 6e 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 Data Ascii: 900'}.eicon-flow:before{content:'\e901'}.eicon-cursor-move:before{content:'\e902'}.eicon-arrow-circle-left:before{content:'\e903'}.eicon-flash:before{content:'\e904'}.eicon-redo:before{content:'\e905'}.eicon-ban:before{content:'\e906'}.eicon-barcode:befor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49736	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:17 UTC	650	OUT	GET /wp-content/plugins/elementor/assets/css/frontend-legacy.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:17 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7d9a8a2b0d5-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-35ed" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4dztW92Fq3j5svb5H86dM4embn0OjXtgXyePUax1bXK2Re0ChU%2B8cuh1ImsmA53DsWj2DePU1RweXLBOuOjGGt8ZRGM5thSNLUY9UxfDxh9gitHYwSQngTvh4%2FkFLgqWobU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:17 UTC	445	IN	Data Raw: 33 35 65 64 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 36 2e 30 20 2d 20 32 31 2d 30 33 2d 32 30 32 32 20 2a 2f 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 63 2d 66 6c 65 78 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 77 72 61 70 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 Data Ascii: 35ed/! elementor - v3.6.0 - 21-03-2022 /.elementor-bc-flex-widget .elementor-section-content-top>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:start;-ms-flex-align:start;align-items:flex-start}.element
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 63 2d 66 6c 65 78 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 62 6f 74 74 6f 6d 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 77 72 61 70 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 2d 67 61 70 2d 6e 61 72 72 6f 77 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 2e 65 6c 65 6d 65 6e Data Ascii: nter}.elementor-bc-flex-widget .elementor-section-content-bottom>.elementor-container>.elementor-row>.elementor-column>.elementor-column-wrap{-webkit-box-align:end;-ms-flex-align:end;align-items:flex-end}.elementor-column-gap-narrow>.elementor-row>.elemen
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 3a 38 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 77 69 64 65 73 63 72 65 65 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 37 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 36 3b 6f 72 64 65 72 3a 36 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 77 69 64 65 73 63 72 65 65 6e 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 Data Ascii: :8;-ms-flex-order:7;order:7}.elementor-reverse-widescreen>.elementor-container>.elementor-row>:nth-child(5){-webkit-box-ordinal-group:7;-ms-flex-order:6;order:6}.elementor-reverse-widescreen>.elementor-container>.elementor-row>:nth-child(6){-webkit-box-or
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 37 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 36 3b 6f 72 64 65 72 3a 36 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 Data Ascii: -ms-flex-order:7;order:7}.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(5){-webkit-box-ordinal-group:7;-ms-flex-order:6;order:6}.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(6){-webkit-box-ordinal-group
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 37 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 36 3b 6f 72 64 65 72 3a 36 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 36 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 7d 2e Data Ascii: mentor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(5){-webkit-box-ordinal-group:7;-ms-flex-order:6;order:6}.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(6){-webkit-box-ordinal-group:6;-ms-flex-order:5;order:5}.
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 38 29 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 69 6e 69 74 69 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 Data Ascii: laptop>.elementor-container>.elementor-row>:nth-child(8),.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(9),.elementor-reverse-laptop>.elementor-container>.elementor-row>:nth-child(10){-webkit-box-ordinal-group:initial;-ms-flex-or
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 33 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 5f 65 78 74 72 61 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 32 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 Data Ascii: reverse-tablet_extra>.elementor-container>.elementor-row>:nth-child(9){-webkit-box-ordinal-group:3;-ms-flex-order:2;order:2}.elementor-reverse-tablet_extra>.elementor-container>.elementor-row>:nth-child(10){-webkit-box-ordinal-group:2;-ms-flex-order:1;ord
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 33 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 32 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 2d 31 Data Ascii: >.elementor-container>.elementor-row>:nth-child(9){-webkit-box-ordinal-group:3;-ms-flex-order:2;order:2}.elementor-reverse-tablet>.elementor-container>.elementor-row>:nth-child(10){-webkit-box-ordinal-group:2;-ms-flex-order:1;order:1}}@media (min-width:-1
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 33 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 74 61 62 6c 65 74 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 32 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 2d 31 70 78 29 7b 2e Data Ascii: entor-row>:nth-child(9){-webkit-box-ordinal-group:3;-ms-flex-order:2;order:2}.elementor-reverse-tablet>.elementor-container>.elementor-row>:nth-child(10){-webkit-box-ordinal-group:2;-ms-flex-order:1;order:1}}@media (min-width:768px) and (max-width:-1px){.
2024-04-25 19:25:17 UTC	1369	IN	Data Raw: 65 2d 6d 6f 62 69 6c 65 5f 65 78 74 72 61 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 39 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 38 3b 6f 72 64 65 72 3a 38 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6d 6f 62 69 6c 65 5f 65 78 74 72 61 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 38 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 37 3b 6f 72 64 65 72 3a 37 7d 2e 65 Data Ascii: e-mobile_extra>.elementor-container>.elementor-row>:nth-child(3){-webkit-box-ordinal-group:9;-ms-flex-order:8;order:8}.elementor-reverse-mobile_extra>.elementor-container>.elementor-row>:nth-child(4){-webkit-box-ordinal-group:8;-ms-flex-order:7;order:7}.e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49737	23.54.200.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 19:25:17 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=128266 Date: Thu, 25 Apr 2024 19:25:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 19:25:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49738	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:17 UTC	643	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:18 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:18 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7db6d206759-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-266bc" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hxCSFpRM0tMiehG3kq06ChJv2zcRgDO6AD1%2Bt1lvXN9ox4SQukXUKgYj4kbZZOwTPXVGkddJJdvZnJzcQnnN3PEaSVWJ04BBX0Hx4vrbX65%2FEQ7lPzrvS6sBcmW06KcrZfU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:18 UTC	444	IN	Data Raw: 37 63 31 32 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 36 2e 30 20 2d 20 32 31 2d 30 33 2d 32 30 32 32 20 2a 2f 0a 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 38 70 78 20 32 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 32 70 78 20 38 70 78 20 32 33 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 64 69 61 6c 6f 67 2d 6d 65 73 73 61 67 65 7b 66 6f 6e Data Ascii: 7c12/! elementor - v3.6.0 - 21-03-2022 /.dialog-widget-content{background-color:#fff;position:absolute;border-radius:3px;-webkit-box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);box-shadow:2px 8px 23px 3px rgba(0,0,0,.2);overflow:hidden}.dialog-message{fon
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 2d 69 6e 64 65 78 3a 39 39 39 39 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 6c 69 67 68 74 62 6f 78 20 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 33 37 35 70 78 7d 2e 64 69 61 6c 6f 67 2d 74 79 70 65 2d 6c 69 67 68 74 62 6f 78 20 2e 64 69 61 6c 6f 67 2d 68 65 61 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 63 6f 6c 6f 72 3a 23 34 39 35 31 35 37 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 30 70 78 3b 66 6f 6e Data Ascii: -index:9999;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.dialog-type-lightbox .dialog-widget-content{margin:auto;width:375px}.dialog-type-lightbox .dialog-header{font-size:15px;color:#495157;padding:30px 0 10px;fon
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 2d 68 65 69 67 68 74 3a 31 7d 2e 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 7b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 64 69 61 6c 6f 67 2d 61 6c 65 72 74 2d 77 69 64 67 65 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 70 65 72 3e 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 64 69 61 6c 6f 67 2d 63 6f 6e 66 69 72 6d 2d 77 69 64 67 65 74 20 2e 64 69 61 6c 6f 67 2d 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 36 65 39 65 63 7d 2e 64 69 61 6c 6f 67 2d 70 72 65 76 65 6e 74 2d 73 63 72 6f 6c 6c 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 40 Data Ascii: -height:1}.dialog-close-button:not(:hover){opacity:.4}.dialog-alert-widget .dialog-buttons-wrapper>button{width:100%}.dialog-confirm-widget .dialog-button:first-child{border-right:1px solid #e6e9ec}.dialog-prevent-scroll{overflow:hidden;max-height:100vh}@
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 61 6c 65 6e 64 61 72 20 2e 66 6c 61 74 70 69 63 6b 72 2d 64 61 79 7b 6d 61 78 2d 77 69 64 74 68 3a 33 37 70 78 3b 68 65 69 67 68 74 3a 33 37 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 37 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 20 2e 64 69 61 6c 6f 67 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 56 65 72 64 61 6e 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 33 66 35 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 34 33 39 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d Data Ascii: alendar .flatpickr-day{max-width:37px;height:37px;line-height:37px}.elementor-templates-modal .dialog-widget-content{font-family:Roboto,Arial,Helvetica,Verdana,sans-serif;background-color:#f1f3f5;width:100%}@media (max-width:1439px){.elementor-templates-m
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 5f 5f 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 Data Ascii: elementor-templates-modal__header{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:justify;-ms-flex-pack:justify;justify-content:space-between;height:50px}.elementor-te
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 61 6c 6c 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 33 73 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 5f 5f 68 65 61 64 65 72 5f 5f 69 74 65 6d 3e 69 3a 6e 6f 74 28 3a 68 6f 76 65 72 29 7b 63 6f 6c 6f 72 3a 23 61 34 61 66 62 37 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 5f 5f 68 65 61 64 65 72 5f 5f 63 6c 6f 73 65 2d 2d 6e 6f 72 6d 61 6c 7b 77 69 64 74 68 3a 34 37 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 36 65 39 65 63 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6d 6f 64 61 6c 5f 5f 68 65 61 64 65 72 5f 5f 63 6c 6f 73 65 2d 2d 6e 6f 72 6d 61 6c 20 69 7b 66 Data Ascii: all .3s;transition:all .3s;cursor:pointer}.elementor-templates-modal__header__item>i:not(:hover){color:#a4afb7}.elementor-templates-modal__header__close--normal{width:47px;border-left:1px solid #e6e9ec}.elementor-templates-modal__header__close--normal i{f
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 2c 30 2c 30 29 3b 62 6f 72 64 65 72 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 30 7d 2e 65 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 39 33 30 30 33 63 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 2e 37 35 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 65 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 69 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 23 65 2d 65 6e 61 62 6c 65 2d 75 6e 66 69 6c 74 Data Ascii: ,0,0);border:0}.elementor-clearfix:after{content:"";display:block;clear:both;width:0;height:0}.e-logo-wrapper{background:#93003c;display:inline-block;padding:.75em;border-radius:50%;line-height:1}.e-logo-wrapper i{color:#fff;font-size:1em}#e-enable-unfilt
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6c 6f 61 64 69 6e 67 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 76 69 64 65 6f 2d 65 6d 62 65 64 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 Data Ascii: eo-container{-webkit-transition:opacity 1s;-o-transition:opacity 1s;transition:opacity 1s;pointer-events:none}.elementor .elementor-background-video-container.elementor-loading{opacity:0}.elementor .elementor-background-video-embed{max-width:none}.element
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 61 62 6c 65 74 5f 5f 77 69 64 74 68 2d 61 75 74 6f 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 61 62 6c 65 74 5f 5f 77 69 64 74 68 2d 69 6e 69 74 69 61 6c 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 20 2e 65 6c 65 6d Data Ascii: }@media (max-width:1024px){.elementor-widget-wrap .elementor-element.elementor-widget-tablet__width-auto,.elementor-widget-wrap .elementor-element.elementor-widget-tablet__width-initial{max-width:100%}}@media (max-width:767px){.elementor-widget-wrap .elem
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 76 61 72 28 2d 2d 6f 72 64 65 72 29 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 76 61 72 28 2d 2d 6f 72 64 65 72 29 3b 6f 72 64 65 72 3a 76 61 72 28 2d 2d 6f 72 64 65 72 29 3b 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 76 61 72 28 2d 2d 61 6c 69 67 6e 2d 73 65 6c 66 29 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 76 61 72 28 2d 2d 61 6c 69 67 6e 2d 73 65 6c 66 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 62 73 6f 6c 75 74 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 78 65 64 7b 7a 2d 69 6e 64 65 78 3a 31 7d Data Ascii: var(--flex-shrink);-webkit-box-ordinal-group:var(--order);-ms-flex-order:var(--order);order:var(--order);-ms-flex-item-align:var(--align-self);align-self:var(--align-self)}.elementor-element.elementor-absolute,.elementor-element.elementor-fixed{z-index:1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49739	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:18 UTC	634	OUT	GET /wp-content/uploads/elementor/css/post-27785.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:18 UTC	935	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:18 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7dd4b45b08b-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837f9-4c4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:33 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7EFKKS%2BqUoo4Unm%2BK3lNq7wcYdf6Qs%2F%2BjYcGUaJZ2QRlw%2BTpr972%2F4z%2F7eVIUU0Vf7gbQeuE6sIZemMuJHkSHjn6BASMsL1IGBExzgoSPTxUaueyT%2B59wnUpNHQuWLsTHoA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:18 UTC	434	IN	Data Raw: 34 63 34 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 32 37 37 38 35 7b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 36 45 43 31 45 34 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 23 35 34 35 39 35 46 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 23 37 41 37 41 37 41 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 3a 23 36 31 43 45 37 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 39 31 33 63 30 31 32 3a 23 30 43 44 39 37 37 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 64 35 66 38 39 38 39 3a 23 43 43 46 46 32 41 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 62 34 31 34 35 65 61 3a 23 33 32 38 37 43 38 3b Data Ascii: 4c4.elementor-kit-27785{--e-global-color-primary:#6EC1E4;--e-global-color-secondary:#54595F;--e-global-color-text:#7A7A7A;--e-global-color-accent:#61CE70;--e-global-color-913c012:#0CD977;--e-global-color-d5f8989:#CCFF2A;--e-global-color-b4145ea:#3287C8;
2024-04-25 19:25:18 UTC	793	IN	Data Raw: 63 6f 6e 64 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 61 63 63 65 6e 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 61 63 63 65 6e 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 62 6f 78 65 64 20 3e Data Ascii: condary-font-weight:400;--e-global-typography-text-font-family:"Roboto";--e-global-typography-text-font-weight:400;--e-global-typography-accent-font-family:"Roboto";--e-global-typography-accent-font-weight:500;}.elementor-section.elementor-section-boxed >
2024-04-25 19:25:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49740	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:18 UTC	647	OUT	GET /wp-content/plugins/elementor-pro/assets/css/frontend.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:18 UTC	921	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:18 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7dd9e3807be-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32ba-337c2" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:30 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BcRZ0yyBUNUVtXU9afwcH26gufcSoGSJy6h3D569jXJjdGXyZndDOJbuqC4QnBuGZPGdZo5rcH8aIXSbegDfmcdhugJ51ARLI3Du4wXIPU63bX0UxfdUMWqf2o6a65Bksrw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:18 UTC	448	IN	Data Raw: 37 63 31 36 0d 0a 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 2e 32 20 2d 20 30 35 2d 30 35 2d 32 30 32 31 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 77 69 6c 6c 2d 63 68 61 6e 67 65 3a 74 72 61 6e 73 66 6f 72 6d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 7a 6f 6f 6d 2d 69 6e 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 7d 2e 65 Data Ascii: 7c16/! elementor-pro - v3.2.2 - 05-05-2021 /@charset "UTF-8";.elementor-bg-transform .elementor-bg{will-change:transform}.elementor-bg-transform-zoom-in:hover .elementor-bg{-webkit-transform:scale(1.2);-ms-transform:scale(1.2);transform:scale(1.2)}.e
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 6d 6f 76 65 2d 6c 65 66 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 58 28 38 25 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 58 28 38 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 58 28 38 25 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 67 2d 74 72 61 6e 73 66 6f 72 6d 2d 6d 6f 76 65 2d 6c 65 66 74 3a 68 6f 76 65 Data Ascii: ale(1);-ms-transform:scale(1);transform:scale(1)}.elementor-bg-transform-move-left .elementor-bg{-webkit-transform:scale(1.2) translateX(8%);-ms-transform:scale(1.2) translateX(8%);transform:scale(1.2) translateX(8%)}.elementor-bg-transform-move-left:hove
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 59 28 38 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 32 29 20 74 72 61 6e 73 6c 61 74 65 59 28 38 25 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 7b 2d 2d 74 72 61 6e 73 6c 61 74 65 3a 30 2c 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 67 72 6f 77 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e Data Ascii: e(1.2) translateY(8%);transform:scale(1.2) translateY(8%)}.elementor-animated-content{--translate:0,0}.elementor-animated-content:hover .elementor-animated-item--grow{-webkit-transform:scale(1.1);-ms-transform:scale(1.1);transform:scale(1.1)}.elementor-an
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 62 6f 74 74 6f 6d 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 6c 65 66 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 72 69 67 68 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 Data Ascii: over .elementor-animated-item--enter-from-bottom,.elementor-animated-content:hover .elementor-animated-item--enter-from-left,.elementor-animated-content:hover .elementor-animated-item--enter-from-right,.elementor-animated-content:hover .elementor-animated
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 78 69 74 2d 74 6f 2d 74 6f 70 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 6d 6f 76 65 2d 72 69 67 68 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 30 70 78 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 33 30 70 78 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 Data Ascii: -animated-item--exit-to-top{opacity:0}.elementor-animated-content:hover .elementor-animated-item--move-right{-webkit-transform:translateX(30px);-ms-transform:translateX(30px);transform:translateX(30px)}.elementor-animated-content:hover .elementor-animated
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 7a 6f 6f 6d 2d 69 6e 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 32 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 32 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 32 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 7a 6f 6f 6d 2d 6f 75 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 Data Ascii: mated-item--enter-zoom-in{-webkit-transform:scale(.2);-ms-transform:scale(.2);transform:scale(.2)}.elementor-animated-content .elementor-animated-item--enter-zoom-out{-webkit-transform:scale(2);-ms-transform:scale(2);transform:scale(2)}.elementor-animated
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 35 30 30 70 78 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 62 6f 74 74 6f 6d 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 6c 65 66 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 63 6f 6e 74 65 6e 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6e 69 6d 61 74 65 64 2d 69 74 65 6d 2d 2d 65 6e 74 65 72 2d 66 72 6f 6d 2d 72 69 67 68 74 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d Data Ascii: x);transform:translateY(500px)}.elementor-animated-content .elementor-animated-item--enter-from-bottom,.elementor-animated-content .elementor-animated-item--enter-from-left,.elementor-animated-content .elementor-animated-item--enter-from-right,.elementor-
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 64 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 6c 6f 62 61 6c 2d 77 69 64 67 65 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 64 69 74 6f 72 2d 77 69 64 67 65 74 2d 73 65 74 74 69 6e 67 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 6c 65 66 74 20 74 6f 70 2c 66 72 6f 6d 28 23 66 65 62 34 31 36 29 2c 74 6f 28 23 66 65 63 34 34 39 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 66 65 62 34 31 36 2c 23 66 65 63 34 34 39 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 Data Ascii: de .elementor-global-widget .elementor-editor-widget-settings{background-image:-webkit-gradient(linear,left bottom,left top,from(#feb416),to(#fec449));background-image:-webkit-linear-gradient(bottom,#feb416,#fec449);background-image:-o-linear-gradient(bot
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 66 69 6c 74 65 72 20 2e 33 73 2c 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 20 2e 33 73 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 74 68 75 6d 62 6e 61 69 6c 5f 5f 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 61 73 2d 69 74 65 6d 2d 72 61 74 69 6f 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 74 68 75 6d 62 6e 61 69 6c 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a Data Ascii: ransition:filter .3s;transition:filter .3s,-webkit-filter .3s}.elementor-posts-container .elementor-post__thumbnail__link{position:relative;display:block;width:100%}.elementor-posts-container.elementor-has-item-ratio .elementor-post__thumbnail{top:0;left:
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 3b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 6d 65 74 61 2d 64 61 74 61 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 61 64 61 64 61 64 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 72 65 61 64 2d 6d 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 6f 73 74 5f 5f 74 68 75 6d 62 6e 61 69 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 Data Ascii: ;color:#777}.elementor-posts .elementor-post__meta-data{line-height:1.3em;font-size:12px;margin-bottom:13px;color:#adadad}.elementor-posts .elementor-post__read-more{font-size:12px;font-weight:700}.elementor-posts .elementor-post__thumbnail{position:relat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49741	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:18 UTC	630	OUT	GET /wp-content/uploads/elementor/css/global.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:18 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:18 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7ddae077b9b-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"65af8fd9-96fb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 23 Jan 2024 10:07:21 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PwQ6yOfDL%2B1f8QyLH%2BSex%2Fo9OPM52isLX7G%2BsElfaDZqvEDt5LG2D7osHcbukaGq3q6fPuClmczdMeI10UyIH1TMCKFIc8wnJBjnvZUFvdS57nDY4miXqEzZIaNWSnF1%2FFA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:18 UTC	439	IN	Data Raw: 37 63 30 65 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 68 65 61 64 69 6e 67 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 65 61 64 69 6e 67 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 68 65 61 64 69 6e 67 Data Ascii: 7c0e.elementor-widget-heading .elementor-heading-title{color:var( --e-global-color-primary );font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-widget-heading
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 65 64 69 74 6f 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 Data Ascii: family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-text-editor{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-se
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 66 72 61 6d 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 64 69 76 69 64 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 64 65 66 61 75 6c 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 20 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 64 69 76 69 64 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 66 72 61 6d 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 Data Ascii: er.elementor-view-framed .elementor-icon, .elementor-widget-divider.elementor-view-default .elementor-icon{color:var( --e-global-color-secondary );border-color:var( --e-global-color-secondary );}.elementor-widget-divider.elementor-view-framed .elementor-i
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 62 6f 78 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 66 72 61 6d 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 62 6f 78 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 65 77 2d 64 65 66 61 75 6c 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 7b 66 69 6c 6c 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 Data Ascii: icon{background-color:var( --e-global-color-primary );}.elementor-widget-icon-box.elementor-view-framed .elementor-icon, .elementor-widget-icon-box.elementor-view-default .elementor-icon{fill:var( --e-global-color-primary );color:var( --e-global-color-pri
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 6c 69 73 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 20 69 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 6c 69 73 74 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 63 6f 6e 2d 6c 69 73 74 2d 69 63 6f 6e 20 73 76 67 7b 66 69 6c 6c 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 6c 69 73 Data Ascii: r-color:var( --e-global-color-text );}.elementor-widget-icon-list .elementor-icon-list-icon i{color:var( --e-global-color-primary );}.elementor-widget-icon-list .elementor-icon-list-icon svg{fill:var( --e-global-color-primary );}.elementor-widget-icon-lis
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 65 73 74 69 6d 6f 6e 69 61 6c 2d 63 6f 6e 74 65 6e 74 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 20 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 Data Ascii: ography-text-font-weight );}.elementor-widget-testimonial .elementor-testimonial-content{color:var( --e-global-color-text );font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.e
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 2d 69 63 6f 6e 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 63 6f 72 64 69 6f 6e 2d 69 63 6f 6e 20 73 76 67 7b 66 69 6c 6c 3a 76 61 72 28 Data Ascii: -global-typography-text-font-weight );}.elementor-widget-accordion .elementor-accordion-icon, .elementor-widget-accordion .elementor-accordion-title{color:var( --e-global-color-primary );}.elementor-widget-accordion .elementor-accordion-icon svg{fill:var(
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 74 6f 72 2d 74 61 62 2d 74 69 74 6c 65 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 63 74 69 76 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 67 67 6c 65 2d 69 63 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6f 67 67 6c 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 74 6f 67 67 6c 65 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 Data Ascii: tor-tab-title.elementor-active .elementor-toggle-icon{color:var( --e-global-color-accent );}.elementor-widget-toggle .elementor-toggle-title{font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-pr
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 68 65 61 64 69 6e 67 20 2e 68 65 61 64 69 6e 67 2d 64 65 73 63 72 69 70 74 69 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 68 65 61 64 69 6e 67 20 2e 68 65 61 64 69 6e 67 2d 73 65 63 6f 6e 64 61 72 Data Ascii: graphy-primary-font-weight );}.elementor-widget-tm-heading .heading-description{font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-tm-heading .heading-secondar
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 29 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 74 65 78 74 2d 66 6f 6e 74 2d 77 65 69 67 68 74 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 73 68 61 70 65 73 20 2e 73 68 61 70 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 29 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 6d 2d 73 68 61 70 65 73 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 68 61 70 65 2d 66 69 6c 6c 7b 66 69 6c 6c 3a 76 61 72 28 20 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 Data Ascii: ography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-widget-tm-shapes .shape{color:var( --e-global-color-primary );}.elementor-widget-tm-shapes .elementor-shape-fill{fill:var( --e-global-color-primar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49742	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:18 UTC	651	OUT	GET /wp-content/plugins/wp-whatsapp-chat/build/frontend/css/style.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:18 UTC	928	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:18 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7ddd94f457d-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fa99-7f34" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:34:49 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fPNE2CJ051xaHeeQlu5YHaB8J9bNFjf%2FW41iNmjBT64SNY1sg8B%2BLHQUwe0WvnbdU8QLLbe8MIorxNKhhL%2F9dmt7YmjGvCIkOetIoyWuUw6ZqFDA76%2FxoY76cMgbHYSqbIo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:18 UTC	441	IN	Data Raw: 37 63 31 30 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 71 6c 77 61 70 70 2d 77 68 61 74 73 61 70 70 22 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 77 6f 66 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 64 30 39 47 52 67 41 42 41 41 41 41 41 41 59 45 41 41 73 41 41 41 41 41 42 62 67 41 41 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 50 55 79 38 79 41 41 41 42 43 41 41 41 41 47 41 41 41 41 42 67 44 78 49 46 4b 6d 4e 74 59 58 41 41 41 41 46 6f 41 41 41 41 56 41 41 41 41 46 51 58 56 74 4b 48 5a 32 46 7a 63 41 41 41 41 62 77 41 41 41 41 49 41 41 41 41 43 41 41 41 41 42 42 6e 62 48 6c 6d 41 41 41 42 78 41 Data Ascii: 7c10@font-face{font-family:"qlwapp-whatsapp";src:url(data:application/x-font-woff;charset=utf-8;base64,d09GRgABAAAAAAYEAAsAAAAABbgAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABPUy8yAAABCAAAAGAAAABgDxIFKmNtYXAAAAFoAAAAVAAAAFQXVtKHZ2FzcAAAAbwAAAAIAAAACAAAABBnbHlmAAABxA
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 41 41 41 41 49 41 41 41 41 43 41 41 41 77 41 41 41 41 4d 44 41 41 47 51 41 41 55 41 41 41 4b 5a 41 73 77 41 41 41 43 50 41 70 6b 43 7a 41 41 41 41 65 73 41 4d 77 45 4a 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 52 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 51 41 41 41 36 51 41 44 77 50 2f 41 41 45 41 44 77 41 42 41 41 41 41 41 41 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 49 41 41 41 41 41 41 41 41 77 41 41 41 41 4d 41 41 41 41 63 41 41 45 41 41 77 41 41 41 42 77 41 41 77 41 42 41 41 41 41 48 41 41 45 41 44 67 41 41 41 41 4b 41 41 67 41 41 67 41 43 41 41 45 41 49 4f 6b 41 2f 2f 33 2f 2f 77 41 41 41 41 41 41 49 4f 6b 41 2f 2f 33 2f 2f 77 41 42 2f 2b 4d 58 42 41 41 44 41 41 45 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: AAAAIAAAACAAAwAAAAMDAAGQAAUAAAKZAswAAACPApkCzAAAAesAMwEJAAAAAAAAAAAAAAAAAAAAARAAAAAAAAAAAAAAAAAAAAAAQAAA6QADwP/AAEADwABAAAAAAQAAAAAAAAAAAAAAIAAAAAAAAwAAAAMAAAAcAAEAAwAAABwAAwABAAAAHAAEADgAAAAKAAgAAgACAAEAIOkA//3//wAAAAAAIOkA//3//wAB/+MXBAADAAEAAAAAAAAAAAA
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 41 4d 41 41 51 51 4a 41 41 6f 41 4e 41 43 6b 61 57 4e 76 62 57 39 76 62 67 42 70 41 47 4d 41 62 77 42 74 41 47 38 41 62 77 42 75 56 6d 56 79 63 32 6c 76 62 69 41 78 4c 6a 41 41 56 67 42 6c 41 48 49 41 63 77 42 70 41 47 38 41 62 67 41 67 41 44 45 41 4c 67 41 77 61 57 4e 76 62 57 39 76 62 67 42 70 41 47 4d 41 62 77 42 74 41 47 38 41 62 77 42 75 61 57 4e 76 62 57 39 76 62 67 42 70 41 47 4d 41 62 77 42 74 41 47 38 41 62 77 42 75 55 6d 56 6e 64 57 78 68 63 67 42 53 41 47 55 41 5a 77 42 31 41 47 77 41 59 51 42 79 61 57 4e 76 62 57 39 76 62 67 42 70 41 47 4d 41 62 77 42 74 41 47 38 41 62 77 42 75 52 6d 39 75 64 43 42 6e 5a 57 35 6c 63 6d 46 30 5a 57 51 67 59 6e 6b 67 53 57 4e 76 54 57 39 76 62 69 34 41 52 67 42 76 41 47 34 41 64 41 41 67 41 47 63 41 5a 51 42 75 Data Ascii: AMAAQQJAAoANACkaWNvbW9vbgBpAGMAbwBtAG8AbwBuVmVyc2lvbiAxLjAAVgBlAHIAcwBpAG8AbgAgADEALgAwaWNvbW9vbgBpAGMAbwBtAG8AbwBuaWNvbW9vbgBpAGMAbwBtAG8AbwBuUmVndWxhcgBSAGUAZwB1AGwAYQByaWNvbW9vbgBpAGMAbwBtAG8AbwBuRm9udCBnZW5lcmF0ZWQgYnkgSWNvTW9vbi4ARgBvAG4AdAAgAGcAZQBu
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 64 69 73 61 62 6c 65 64 2c 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 64 69 73 61 62 6c 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 6d 69 64 64 6c 65 2d 6c 65 66 74 2c 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2c 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 6d 69 64 64 6c 65 2d 72 69 67 68 74 2c 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 39 7d 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 6d 69 64 Data Ascii: le{display:none}#qlwapp .qlwapp-disabled,#qlwapp.qlwapp-disabled{display:none;visibility:hidden}#qlwapp.qlwapp-middle-left,#qlwapp.qlwapp-bottom-left,#qlwapp.qlwapp-middle-right,#qlwapp.qlwapp-bottom-right{position:fixed;z-index:9999999}#qlwapp.qlwapp-mid
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 7d 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 6d 69 64 64 6c 65 2d 72 69 67 68 74 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 20 2e 71 6c 77 61 70 70 2d 64 61 79 73 2c 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 6d 69 64 64 6c 65 2d 72 69 67 68 74 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 20 2e 71 6c 77 61 70 70 2d 74 69 6d 65 2c 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 20 2e 71 6c 77 61 70 70 2d 64 61 79 73 2c 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 20 2e 71 6c 77 61 70 70 2d 74 69 6d 65 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 7d 23 71 6c 77 61 70 70 2e 71 6c 77 61 Data Ascii: }#qlwapp.qlwapp-middle-right .qlwapp-toggle .qlwapp-days,#qlwapp.qlwapp-middle-right .qlwapp-toggle .qlwapp-time,#qlwapp.qlwapp-bottom-right .qlwapp-toggle .qlwapp-days,#qlwapp.qlwapp-bottom-right .qlwapp-toggle .qlwapp-time{left:auto;right:0}#qlwapp.qlwa
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 77 61 70 70 2d 72 6f 75 6e 64 65 64 2e 71 6c 77 61 70 70 2d 62 75 74 74 6f 6e 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 70 78 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 33 30 70 78 29 7b 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 72 6f 75 6e 64 65 64 20 2e 71 6c 77 61 70 70 2d 62 6f 78 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 7d 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 72 6f 75 6e 64 65 64 20 2e 71 6c 77 61 70 70 2d 62 6f 78 20 2e 71 6c 77 61 70 70 2d 75 73 65 72 2c 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 72 6f 75 6e 64 65 64 20 2e 71 6c 77 61 70 70 2d 62 6f 78 20 2e 71 6c 77 61 70 70 2d 6d 65 73 73 61 67 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 Data Ascii: wapp-rounded.qlwapp-button .qlwapp-toggle{border-radius:50px}@media(min-width: 430px){#qlwapp.qlwapp-rounded .qlwapp-box{border-radius:8px}}#qlwapp.qlwapp-rounded .qlwapp-box .qlwapp-user,#qlwapp.qlwapp-rounded .qlwapp-box .qlwapp-message{border-radius:4p
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 70 70 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 2c 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 3a 61 63 74 69 76 65 2c 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 20 2e 71 6c 77 61 70 70 2d 64 61 79 73 2c 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 20 2e 71 6c 77 61 70 70 2d 74 69 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 2d 32 65 6d 3b 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c Data Ascii: pp .qlwapp-toggle,#qlwapp .qlwapp-toggle:active,#qlwapp .qlwapp-toggle:focus,#qlwapp .qlwapp-toggle:hover{outline:none;text-decoration:none}#qlwapp .qlwapp-toggle .qlwapp-days,#qlwapp .qlwapp-toggle .qlwapp-time{position:absolute;bottom:-2em;color:initial
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 72 67 69 6e 3a 30 20 31 32 70 78 20 30 20 30 7d 23 71 6c 77 61 70 70 2e 71 6c 77 61 70 70 2d 62 75 74 74 6f 6e 20 2e 71 6c 77 61 70 70 2d 74 6f 67 67 6c 65 20 2e 71 6c 77 61 70 70 2d 63 6c 6f 73 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 62 6f 78 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 6c 6c 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 35 70 78 20 34 30 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 7d 40 6d 65 64 69 61 28 6d 69 6e 2d Data Ascii: rgin:0 12px 0 0}#qlwapp.qlwapp-button .qlwapp-toggle .qlwapp-close{display:none}#qlwapp .qlwapp-box{pointer-events:all;padding-bottom:56px;position:fixed;top:auto;bottom:0;left:0;right:0;z-index:99999;box-shadow:0px 5px 40px 5px rgba(0,0,0,.5)}@media(min-
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 62 6f 78 20 2e 71 6c 77 61 70 70 2d 64 65 73 63 72 69 70 74 69 6f 6e 2c 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 62 6f 78 20 2e 71 6c 77 61 70 70 2d 63 6f 6e 74 61 63 74 7b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 33 36 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 62 6f 78 20 2e 71 6c 77 61 70 70 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 2c 23 71 6c 77 61 70 70 20 2e 71 6c 77 61 70 70 2d 62 6f 78 20 2e 71 6c 77 61 70 70 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 68 33 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 6d 61 72 Data Ascii: ay:flex;align-items:center}#qlwapp .qlwapp-box .qlwapp-description,#qlwapp .qlwapp-box .qlwapp-contact{padding:12px 36px;height:100%}#qlwapp .qlwapp-box .qlwapp-description p,#qlwapp .qlwapp-box .qlwapp-description h3{color:inherit;font-family:inherit;mar
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 51 56 52 34 41 64 32 61 43 58 68 56 39 5a 6e 2f 73 63 76 2f 50 2f 4e 30 32 6d 66 6d 6d 63 35 30 61 6e 57 71 64 55 48 55 6f 75 77 4c 59 53 46 68 43 51 6c 68 49 59 45 6b 4c 45 6e 59 46 31 53 6b 6f 72 69 58 4b 6b 57 78 4c 6f 2b 32 4f 6c 69 6e 74 6f 70 4f 71 39 55 69 65 77 4a 4a 53 45 4a 43 45 72 4b 48 73 42 41 57 43 49 73 68 59 53 46 41 57 4f 35 79 37 7a 76 66 38 33 33 75 75 62 37 38 6e 6e 4e 76 45 68 61 78 63 39 6f 50 37 32 39 35 66 2b 2f 76 50 64 2f 7a 6e 75 58 6d 73 5a 32 49 33 45 68 2b 41 4f 34 46 6b 57 41 65 2b 44 33 49 41 6c 57 67 44 74 53 44 34 2b 41 49 32 41 4d 4b 77 51 72 77 45 6b 67 43 33 63 47 74 56 37 79 2f 58 32 6a 39 62 41 64 73 47 37 6b 52 6f 6a 30 41 70 6f 4f 50 77 57 48 67 6c 71 73 37 7a 6f 47 74 34 41 55 77 43 76 7a 77 2f 36 4b 41 74 34 4a Data Ascii: QVR4Ad2aCXhV9Zn/scv/P/N02mfmmc50anWqdUHUouwLYSFhCQlhIYEkLEnYF1SkoriXKkWxLo+2OlintopOq9UiewJJSEJCErKHsBAWCIshYSFAWO5y7zvf833uub78nnNvEhaxc9oP7295f+/vPd/znuXmsZ2I3Eh+AO4FkWAe+D3IAlWgDtSD4+AI2AMKwQrwEkgC3cGtV7y/X2j9bAdsG7kRoj0ApoOPwWHglqs7zoGt4AUwCvzw/6KAt4J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49743	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:18 UTC	626	OUT	GET /wp-content/themes/edumall/tutor-lms.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:18 UTC	929	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:18 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7de8d0006ec-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-2a152" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0qKxAJB9dXlB2yYsfRBJm%2Bi7KV%2F%2B0iKDEq2fgLalCaHzINqNvbwpwcj13UWqshw28bwqcg5zVuIXFFCZxNbzNXysLgt7izjEN0NELjxiHvIjT4jBO6HDgEq%2F3IIWcvfYjqc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:18 UTC	440	IN	Data Raw: 37 63 30 65 0d 0a 2e 64 61 73 68 62 6f 61 72 64 2d 61 63 74 69 6f 6e 2d 62 74 6e 20 69 2c 2e 64 61 73 68 62 6f 61 72 64 2d 68 65 61 64 65 72 2d 74 6f 67 67 6c 65 2d 6d 65 6e 75 2c 2e 64 61 73 68 62 6f 61 72 64 2d 70 61 67 65 20 2e 70 61 67 65 2d 6f 70 65 6e 2d 6d 61 69 6e 2d 6d 65 6e 75 2c 2e 65 64 75 6d 61 6c 6c 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 2c 2e 65 64 75 6d 61 6c 6c 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 20 2e 63 61 74 65 67 6f 72 79 2d 6e 61 6d 65 2c 2e 65 64 75 6d 61 6c 6c 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 2e 73 74 79 6c 65 2d 30 31 20 2e 63 61 74 65 67 6f 72 79 2d 69 63 6f 6e 20 73 76 67 20 5b 66 69 6c 6c 5d 2c Data Ascii: 7c0e.dashboard-action-btn i,.dashboard-header-toggle-menu,.dashboard-page .page-open-main-menu,.edumall-course-category-cards .category-icon,.edumall-course-category-cards .category-name,.edumall-course-category-cards.style-01 .category-icon svg [fill],
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 72 2c 2e 65 64 75 6d 61 6c 6c 2d 77 70 2d 77 69 64 67 65 74 2d 63 6f 75 72 73 65 2d 66 69 6c 74 65 72 20 75 6c 2e 66 69 6c 74 65 72 2d 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 20 61 3a 62 65 66 6f 72 65 2c 2e 65 64 75 6d 61 6c 6c 2d 77 70 2d 77 69 64 67 65 74 2d 63 6f 75 72 73 65 2d 66 69 6c 74 65 72 20 75 6c 2e 66 69 6c 74 65 72 2d 72 61 64 69 6f 2d 6c 69 73 74 20 61 3a 61 66 74 65 72 2c 2e 65 64 75 6d 61 6c 6c 2d 77 70 2d 77 69 64 67 65 74 2d 63 6f 75 72 73 65 2d 66 69 6c 74 65 72 20 75 6c 2e 66 69 6c 74 65 72 2d 72 61 64 69 6f 2d 6c 69 73 74 20 61 3a 62 65 66 6f 72 65 2c 2e 6c 6f 6f 70 2d 69 6e 73 74 72 75 63 74 6f 72 2d 6e 61 6d 65 2c 2e 6c 6f 6f 70 2d 69 6e 73 74 72 75 63 74 6f 72 2d 77 72 61 70 70 65 72 2c 2e 70 6f 70 75 6c 61 72 2d 69 6e 73 74 72 75 Data Ascii: r,.edumall-wp-widget-course-filter ul.filter-checkbox-list a:before,.edumall-wp-widget-course-filter ul.filter-radio-list a:after,.edumall-wp-widget-course-filter ul.filter-radio-list a:before,.loop-instructor-name,.loop-instructor-wrapper,.popular-instru
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 79 2d 63 61 72 64 73 2e 73 74 79 6c 65 2d 30 31 20 2e 63 61 74 65 67 6f 72 79 2d 6e 61 6d 65 3a 61 66 74 65 72 2c 2e 65 64 75 6d 61 6c 6c 2d 63 6f 75 72 73 65 2d 63 61 74 65 67 6f 72 79 2d 63 61 72 64 73 2e 73 74 79 6c 65 2d 30 32 20 2e 63 61 74 65 67 6f 72 79 2d 6e 61 6d 65 3a 61 66 74 65 72 2c 2e 65 64 75 6d 61 6c 6c 2d 77 70 2d 77 69 64 67 65 74 2d 63 6f 75 72 73 65 2d 66 69 6c 74 65 72 20 75 6c 2e 66 69 6c 74 65 72 2d 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 20 61 3a 61 66 74 65 72 2c 2e 6c 6f 61 64 69 6e 67 2d 6c 65 73 73 6f 6e 20 2e 74 75 74 6f 72 2d 6c 65 73 73 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 3a 61 66 74 65 72 2c 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 62 75 69 6c 64 65 72 2d 75 70 6c 6f 61 64 2d 74 69 70 73 20 75 6c 20 6c 69 3a 61 66 Data Ascii: y-cards.style-01 .category-name:after,.edumall-course-category-cards.style-02 .category-name:after,.edumall-wp-widget-course-filter ul.filter-checkbox-list a:after,.loading-lesson .tutor-lesson-content-area:after,.tutor-course-builder-upload-tips ul li:af
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 65 73 73 61 67 65 3a 62 65 66 6f 72 65 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 6f 6e 74 20 41 77 65 73 6f 6d 65 5c 20 35 20 50 72 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 74 75 74 6f 72 2d 64 61 73 68 62 6f 61 72 64 2d 70 65 72 6d Data Ascii: essage:before{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1;font-family:Font Awesome\ 5 Pro!important;font-weight:400}.tutor-dashboard-perm
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 72 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 33 31 70 78 7d 2e 73 69 6e 67 6c 65 5f 61 64 64 5f 74 6f 5f 63 61 72 74 5f 62 75 74 74 6f 6e 20 69 2c 2e 74 75 74 6f 72 2d 62 74 6e 20 69 2c 2e 74 75 74 6f 72 2d 62 75 74 74 6f 6e 20 69 2c 61 2e 74 75 74 6f 72 2d 62 74 6e 20 69 2c 61 2e 74 75 74 6f 72 2d 62 75 74 74 6f 6e 20 69 7b 6d 61 72 67 69 6e 3a 30 20 31 30 70 78 20 30 20 30 7d 2e 74 75 74 6f 72 2d 62 74 6e 2e 62 6f 72 64 65 72 65 64 2d 62 74 6e 2c 2e 74 75 74 6f 72 2d 62 75 74 74 6f 6e 2e 62 6f 72 64 65 72 65 64 2d 62 75 74 74 6f 6e 2c 61 2e 74 75 74 6f 72 2d 62 74 6e 2e 62 6f 72 64 65 72 65 64 2d 62 74 6e 2c 61 2e 74 75 74 6f 72 2d 62 75 74 74 6f 6e 2e 62 6f 72 64 65 72 65 64 2d 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 64 Data Ascii: r-button{padding:0 31px}.single_add_to_cart_button i,.tutor-btn i,.tutor-button i,a.tutor-btn i,a.tutor-button i{margin:0 10px 0 0}.tutor-btn.bordered-btn,.tutor-button.bordered-button,a.tutor-btn.bordered-btn,a.tutor-button.bordered-button{color:var(--ed
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 74 3a 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 38 70 78 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 62 61 64 67 65 2e 68 6f 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 33 31 38 31 39 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 62 61 64 67 65 2e 6f 6e 73 61 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 31 64 63 7d 2e 74 75 74 6f 72 2d Data Ascii: t:0;color:#fff;text-align:center;font-size:11px;font-weight:700;line-height:1.15;text-transform:uppercase;letter-spacing:.5px;border-radius:2px;min-width:48px}.tutor-course-badge.hot{background:#d31819}.tutor-course-badge.onsale{background:#0071dc}.tutor-
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 73 6f 6c 69 64 20 76 61 72 28 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 62 6f 72 64 65 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 65 64 75 6d 61 6c 6c 2d 63 6f 6c 6f 72 2d 66 6f 72 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 32 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 32 70 78 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 74 75 74 6f 72 2d 66 6f 72 6d 2d 67 72 6f 75 70 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 66 6f 63 75 73 2c 2e 74 75 74 6f 72 2d 66 6f 72 Data Ascii: solid var(--edumall-color-form-border);background-color:var(--edumall-color-form-background);border-radius:5px;padding:3px 20px;min-height:52px;text-indent:0;line-height:normal;margin-bottom:20px}.tutor-form-group input:not([type=submit]):focus,.tutor-for
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 6e 74 72 6f 6c 73 20 2e 70 6c 79 72 5f 5f 63 6f 6e 74 72 6f 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 70 6c 79 72 5f 5f 63 6f 6e 74 72 6f 6c 2d 2d 6f 76 65 72 6c 61 69 64 7b 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 63 6f 75 72 73 65 2d 74 68 75 6d 62 6e 61 69 6c 20 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 70 72 69 63 65 7b 6d 61 72 67 69 6e 3a 38 70 78 20 30 20 30 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 70 72 69 63 65 20 2e 70 72 69 63 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 70 72 69 63 65 20 2e 70 72 69 63 65 20 64 65 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 66 Data Ascii: ntrols .plyr__control{min-height:0;height:32px}.plyr__control--overlaid{height:50px}.course-thumbnail img{width:100%}.course-loop-price{margin:8px 0 0}.course-loop-price .price{font-size:18px;line-height:26px}.course-loop-price .price del{font-size:15px;f
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 6f 6f 70 2d 65 78 63 65 72 70 74 2d 63 6f 6c 6c 61 70 73 65 2d 32 2d 72 6f 77 73 20 2a 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 65 78 63 65 72 70 74 7b 6d 61 72 67 69 6e 3a 34 70 78 20 30 20 30 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 62 61 64 67 65 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 6c 65 66 74 3a 31 30 70 78 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 72 61 74 69 6e 67 7b 6d 61 72 67 69 6e 3a 34 70 78 20 30 20 30 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 72 61 74 69 6e 67 20 2e 72 61 74 69 6e 67 2d 63 6f 75 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 39 62 39 62 39 62 3b 6d 61 72 67 69 6e 3a 30 20 Data Ascii: oop-excerpt-collapse-2-rows *{display:inline!important}.course-loop-excerpt{margin:4px 0 0}.course-loop-badges{position:absolute;top:10px;left:10px}.course-loop-rating{margin:4px 0 0}.course-loop-rating .rating-count{font-size:13px;color:#9b9b9b;margin:0
2024-04-25 19:25:18 UTC	1369	IN	Data Raw: 3b 77 69 64 74 68 3a 34 70 78 3b 68 65 69 67 68 74 3a 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 63 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 6d 65 74 61 2e 73 74 79 6c 65 2d 30 32 20 2e 6d 65 74 61 2d 76 61 6c 75 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 7d 2e 63 6f 75 72 73 65 2d 6c 6f 6f 70 2d 72 61 74 69 6e 67 2d 61 76 65 72 61 67 65 7b 6d 61 72 67 69 6e 3a 36 70 78 20 30 20 30 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 2d 6d 73 2d 66 Data Ascii: ;width:4px;height:4px;background:#ccc;border-radius:50%}.course-loop-meta.style-02 .meta-value{font-size:13px}.course-loop-rating-average{margin:6px 0 0;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-wrap:wrap;-ms-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49744	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:18 UTC	628	OUT	GET /wp-content/themes/edumall-child/style.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:19 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:19 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e15e7cb093-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32de-145" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:06 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UEbiuSSKDOTkXeFZvgfFNg1ge%2Fh%2BaGDmIp4SqcYizd3E7eRRe3uqO9OCypotesqdBjLuqk0ZcpKDUWSgRcfHr8%2BEoEC8H2nCnWBUXsdLpLQ7TKdl1WuS0SlOAf2apxpnwuA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:19 UTC	332	IN	Data Raw: 31 34 35 0d 0a 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 45 64 75 6d 61 6c 6c 20 43 68 69 6c 64 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 65 64 75 6d 61 6c 6c 2e 74 68 65 6d 65 6d 6f 76 65 2e 63 6f 6d 2f 0a 41 75 74 68 6f 72 3a 20 54 68 65 6d 65 4d 6f 76 65 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 74 68 65 6d 65 6d 6f 76 65 2e 63 6f 6d 2f 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 30 0a 54 65 6d 70 6c 61 74 65 3a 20 65 64 75 6d 61 6c 6c 0a 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 20 65 64 75 6d 61 6c 6c 2d 63 68 69 6c 64 0a 54 61 67 73 3a 20 65 64 69 74 6f 72 2d 73 74 79 6c 65 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 6d 69 63 72 6f 66 6f 72 6d 61 74 73 2c 20 70 6f 73 74 2d 66 6f 72 6d 61 74 73 2c 20 Data Ascii: 145/*Theme Name: Edumall ChildTheme URI: https://edumall.thememove.com/Author: ThemeMoveAuthor URI: https://thememove.com/Version: 1.0.0Template: edumallText Domain: edumall-childTags: editor-style, featured-images, microformats, post-formats,
2024-04-25 19:25:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49745	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:18 UTC	657	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:19 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:19 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e16e924563-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-743" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BE%2BBXVh8Ta%2BZeE32xqKd%2BQzbklGMkRZIZNoy9x%2BvAYTrfmGEbs8P0Hb%2FsG3uZdkI3iHOu%2FAbUNWHzqlZ23eyvkXgCnBmY3ZQua35agIGfwKRR%2Fhqx1%2FayNQKw%2FXZ2CCkRWM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:19 UTC	432	IN	Data Raw: 37 34 33 0d 0a 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 63 6c 65 61 6e 2d 63 73 73 20 76 34 2e 32 2e 30 2e 0a 20 2a 2f 0a 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f Data Ascii: 743/** * Minified by jsDelivr using clean-css v4.2.0. */.slick-slider { position: relative; display: block; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: no
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 69 73 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 6c 69 73 74 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 6c 69 73 74 2e 64 72 61 67 67 69 6e 67 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 68 61 6e 64 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 20 2e 73 6c 69 63 6b 2d 6c 69 73 74 2c 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 20 2e 73 6c 69 63 6b 2d Data Ascii: ist { position: relative; display: block; overflow: hidden; margin: 0; padding: 0}.slick-list:focus { outline: 0}.slick-list.dragging { cursor: pointer; cursor: hand}.slick-slider .slick-list,.slick-slider .slick-
2024-04-25 19:25:19 UTC	65	IN	Data Raw: 63 64 35 63 30 66 31 66 33 30 66 38 38 37 37 38 65 65 31 66 39 62 30 35 36 35 39 38 65 36 64 32 35 61 63 34 66 64 63 61 62 31 65 65 62 63 64 38 62 65 35 32 31 63 64 39 2e 6d 61 70 20 2a 2f 0d 0a Data Ascii: cd5c0f1f30f88778ee1f9b056598e6d25ac4fdcab1eebcd8be521cd9.map */
2024-04-25 19:25:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49746	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:19 UTC	659	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/slick-theme.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:19 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:19 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e3cb81ade1-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-a7b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dwGMB6T0y3zQYd5xMQrM%2B%2BUvdR7HI3lLFqAUIZs22aXpcvYZdWxFbt56HazXGF1%2FOtuFN5ydfs1edGgy02QmyqNpeVAm8PCVzoA9rgmqDYquKi1eOAx6dT7hu57Q0G8NSNw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:19 UTC	444	IN	Data Raw: 61 37 62 0d 0a 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 0a 0a 2f 2a 20 41 72 72 6f 77 73 20 2a 2f 0a 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 2c 20 2d 35 30 25 29 3b 0a Data Ascii: a7b@charset 'UTF-8';/* Arrows */.slick-prev,.slick-next { font-size: 0; line-height: 0; position: absolute; top: 50%; display: block; width: 20px; height: 20px; padding: 0; -webkit-transform: translate(0, -50%);
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 73 6c 69 63 6b 2d 70 72 65 76 3a 68 6f 76 65 72 2c 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 66 6f 63 75 73 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 68 6f 76 65 72 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 0a 2e 73 6c 69 63 6b 2d 70 72 65 76 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 0a 2e 73 6c 69 63 6b 2d 6e 65 78 74 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 20 7b Data Ascii: slick-prev:hover,.slick-prev:focus,.slick-next:hover,.slick-next:focus { color: transparent; outline: none; background: transparent;}.slick-prev:hover:before,.slick-prev:focus:before,.slick-next:hover:before,.slick-next:focus:before {
2024-04-25 19:25:19 UTC	877	IN	Data Raw: 30 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 73 6c 69 63 6b 2d 64 6f 74 73 20 6c 69 20 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: 0; cursor: pointer;}.slick-dots li button { font-size: 0; line-height: 0; display: block; width: 20px; height: 20px; padding: 5px; cursor: pointer; color: transparent; border: 0; outline: none; background
2024-04-25 19:25:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49747	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:19 UTC	667	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/css/tutor-elementor.min.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:19 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:19 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e3ce7a0d06-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-531f" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QtwAZKde%2FsG1%2F99nR%2Ftje6%2BoauyWf9G1qzh0lnAf0lks%2BgA3QkR3SrovBNXMMZiGDA9NSXQK1L5PVt8WjdyqIeQmUC5YID9baGgxvpIo61ekrhaoMtZbjHGgNDKtASEXRCs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:19 UTC	439	IN	Data Raw: 35 33 31 66 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 74 75 74 6f 72 2d 73 65 67 6d 65 6e 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6d 61 72 67 69 6e 3a 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 6c 6d 73 2d 6c 65 61 64 2d 69 6e 66 6f 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 74 6c 6d 73 2d 6c 65 61 64 2d 69 6e 66 6f 20 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a Data Ascii: 531f.elementor-widget-container .tutor-segment-title{font-size:20px;margin:0}.elementor-widget-container .etlms-lead-info{display:flex;align-items:center;flex-direction:row;flex-wrap:wrap}.elementor-widget-container .etlms-lead-info label{margin-bottom:
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 69 67 6e 2d 6c 65 66 74 20 2e 65 74 6c 6d 73 2d 6c 65 61 64 2d 69 6e 66 6f 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 74 6c 6d 73 2d 61 75 74 68 6f 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 73 70 65 63 69 66 69 63 61 74 69 6f 6e 2d 69 74 65 6d 73 20 6c 69 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 61 6c 69 67 6e 2d 72 69 67 68 74 20 2e 65 74 6c 6d 73 2d Data Ascii: ign-left .etlms-lead-info{justify-content:flex-start}.elementor-align-left .etlms-author{align-items:flex-start;justify-content:flex-start}.elementor-align-left .etlms-course-specification-items li{justify-content:flex-start}.elementor-align-right .etlms-
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 72 61 74 69 6e 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 74 69 74 6c 65 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 3a 30 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 70 72 69 63 65 3e 2e 61 6d 6f 75 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 70 72 69 63 65 3e 2e 70 72 69 63 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 65 74 6c 6d 73 2d 63 6f 75 Data Ascii: rating{margin-bottom:0 !important}.etlms-course-title h2{font-size:30px;font-weight:bold;margin:0}.etlms-course-price>.amount{font-size:30px;font-weight:bold;line-height:1}.etlms-course-price>.price{font-size:30px;font-weight:bold;line-height:1}.etlms-cou
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 65 66 74 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 2e 65 74 6c 6d 73 2d 70 72 6f 67 72 65 73 73 2d 70 65 72 63 65 6e 74 20 68 34 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 65 74 6c 6d 73 2d 70 72 6f 67 72 65 73 73 2d 6f 75 74 73 69 64 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 65 74 6c 6d 73 2d 70 72 6f 67 72 65 73 73 2d 6f 75 74 73 69 64 65 20 2e 65 74 6c 6d 73 2d 70 72 6f 67 72 65 73 73 2d 70 65 72 63 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 66 6c 65 78 2d 62 61 73 69 73 3a 38 25 7d 2e 65 74 6c 6d 73 2d 70 72 Data Ascii: eft-radius:10px;border-bottom-left-radius:10px}.etlms-progress-percent h4{margin:0;font-size:18px}.etlms-progress-outside{display:flex}.etlms-progress-outside .etlms-progress-percent{display:flex;align-items:center;margin-left:10px;flex-basis:8%}.etlms-pr
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 6f 72 74 61 6e 74 3b 6c 65 66 74 3a 31 30 70 78 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 63 75 72 72 69 63 75 6c 75 6d 20 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 31 65 62 66 30 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 63 75 72 72 69 63 75 6c 75 6d 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 73 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 63 75 72 72 69 63 75 6c 75 6d 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 73 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 20 68 35 20 69 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6c 69 6e Data Ascii: ortant;left:10px}.etlms-course-curriculum .etlms-course-topic{border:1px solid #e1ebf0}.etlms-course-curriculum .tutor-course-topics-header{margin-bottom:0}.etlms-course-curriculum .tutor-course-lessons .tutor-course-lesson h5 i{height:auto;width:auto;lin
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 61 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 35 70 78 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 72 65 76 69 65 77 73 20 2e 72 65 76 69 65 77 2d 74 69 6d 65 2d 6e 61 6d 65 20 70 2e 72 65 76 69 65 77 2d 6d 65 74 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 65 74 6c 6d 73 2d 72 65 76 69 65 77 2d 69 6e 64 69 76 69 64 75 61 6c 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 38 65 66 66 31 7d 2e 65 74 6c 6d 73 2d 72 65 76 69 65 77 2d 69 6e 64 69 76 69 64 75 61 6c 2d 69 74 65 6d 20 70 7b 6d 61 72 67 69 6e 3a 30 7d 2e 65 74 6c 6d 73 2d 72 65 76 69 65 77 2d 69 6e 64 69 76 69 64 75 61 6c 2d 69 74 Data Ascii: ap{margin-top:25px}.etlms-course-reviews .review-time-name p.review-meta{padding-left:0;padding-top:0}.etlms-review-individual-item{display:flex;padding:30px;border-top:1px solid #e8eff1}.etlms-review-individual-item p{margin:0}.etlms-review-individual-it
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 72 20 2e 65 64 64 2d 61 64 64 2d 74 6f 2d 63 61 72 74 2e 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6d 61 69 6e 2d 77 72 61 70 7b 70 61 64 64 69 6e 67 3a 30 70 78 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6d 61 69 6e 2d 77 72 61 70 20 2e 70 72 69 63 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 63 6f 6c 75 6d 6e 2d 67 61 70 3a 37 70 78 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6d 61 69 6e 2d 77 72 61 70 20 2e 74 75 74 6f 72 2d 73 74 61 72 2d 72 61 74 69 6e 67 2d 67 72 6f 75 70 20 69 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 63 6f 6c 6f 72 3a 23 65 64 39 37 30 30 7d 2e 65 74 6c 6d 73 2d 63 6f Data Ascii: r .edd-add-to-cart.button{width:100%}.etlms-course-list-main-wrap{padding:0px}.etlms-course-list-main-wrap .price{display:flex;align-items:center;column-gap:7px}.etlms-course-list-main-wrap .tutor-star-rating-group i{font-size:18px;color:#ed9700}.etlms-co
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 20 2e 65 74 6c 6d 73 2d 63 61 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 30 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6f 76 65 72 6c 61 79 65 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 38 70 78 20 32 38 70 78 20 30 70 78 20 23 64 30 64 30 64 30 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 6c 69 73 74 2d 6f 76 65 72 6c 61 79 65 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 3a 62 65 Data Ascii: .etlms-card{background-size:cover;background-repeat:no-repeat;border-radius:20px;position:relative;min-height:300px;height:auto}.etlms-course-list-overlayed .etlms-card:hover{box-shadow:0px 8px 28px 0px #d0d0d0}.etlms-course-list-overlayed .etlms-card:be
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 78 20 30 70 78 20 33 30 70 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 33 34 70 78 20 32 38 70 78 20 2d 32 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 63 61 72 64 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 67 72 69 64 2d 73 74 61 63 6b 65 64 20 2e 74 75 74 6f 72 2d 63 61 72 64 7b 6d 61 72 67 69 6e 3a 33 30 70 78 20 30 70 78 20 33 30 70 78 20 2d 38 30 70 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 33 34 70 78 20 32 38 70 78 20 2d 32 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 7d 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 63 61 72 64 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 63 61 72 64 2d 6f 76 65 72 6c 61 79 20 2e 74 75 Data Ascii: x 0px 30px;border:0;box-shadow:0px 34px 28px -20px rgba(0,0,0,.15)}.tutor-course-card.etlms-course-grid-stacked .tutor-card{margin:30px 0px 30px -80px;border:0;box-shadow:0px 34px 28px -20px rgba(0,0,0,.15)}.tutor-course-card.etlms-course-card-overlay .tu
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 38 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 6c 2d 63 61 72 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 32 34 70 78 20 33 34 70 78 20 2d 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 2e 65 74 6c 6d 73 2d 63 6f 75 72 73 65 6c 2d 73 74 61 63 6b 65 64 20 2e 65 74 6c 6d 73 2d 63 61 72 64 2e 68 6f 76 65 72 2d 61 6e 69 6d 61 74 69 6f 6e 20 2e 65 74 6c 6d 73 2d 63 61 72 6f 75 73 Data Ascii: -content:space-between;height:100%;box-shadow:0px 2px 4px rgba(0,0,0,.08);border-radius:8px;overflow:hidden}.etlms-coursel-card .etlms-card:hover{box-shadow:0px 24px 34px -5px rgba(0,0,0,.1)}.etlms-coursel-stacked .etlms-card.hover-animation .etlms-carous

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49748	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:19 UTC	646	OUT	GET /wp-content/plugins/ele-custom-skin/assets/css/ecs-style.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:19 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:19 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e4dca653b5-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"63ecad57-235c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 15 Feb 2023 10:00:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=npnAXH55J94VoDVmPvljBkMJp9SuKrvcAyCQpjzxmlzovazLYpl7GfbFTF%2BSJHou44QjAK86%2BgzQu0LLYYeZTTL3cwr73g3hlIKO17kKLfJOGDOzj1uof5DMueWhXVc6W6Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:19 UTC	445	IN	Data Raw: 32 33 35 63 0d 0a 2f 2a 20 20 45 6c 65 6d 65 6e 74 6f 72 20 43 75 73 74 6f 6d 20 53 6b 69 6e 20 20 20 20 2a 2f 0a 2f 2a 20 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 75 64 61 73 74 65 72 2e 63 6f 6d 20 2a 2f 0a 2e 65 63 73 2d 70 6f 73 74 2d 6c 6f 6f 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 70 61 67 65 2d 74 69 74 6c 65 7b 0a 20 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 65 63 73 2d 6c 6f 6f 70 2d 70 72 65 76 69 65 77 7b 0a 20 20 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 20 20 77 69 64 74 68 3a 31 30 30 25 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 67 68 74 67 72 61 79 3b 0a 20 20 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 31 70 78 20 67 72 61 79 3b 0a 20 20 70 61 64 64 69 6e 67 3a 35 70 78 3b 0a 7d 0a 2e 65 63 73 2d 6c 6f 6f 70 2d 70 72 65 Data Ascii: 235c/* Elementor Custom Skin // https://www.dudaster.com */.ecs-post-loop .elementor-page-title{ display:block;}.ecs-loop-preview{ height:100%; width:100%; background:lightgray; border:solid 1px gray; padding:5px;}.ecs-loop-pre
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 6c 6f 72 3a 20 23 38 30 38 30 38 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 35 70 78 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 39 32 39 31 39 31 3b 0a 7d 0a 0a 2e 65 63 73 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 65 6c 65 2d 6c 6f 6f 70 2d 69 74 65 6d 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 65 6c 65 2d 6c 6f 6f 70 2d 69 74 65 6d 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 Data Ascii: lor: #808080; font-size: 45px; text-align: center; vertical-align: middle; font-weight: 900; color: #929191;}.ecs-link-wrapper{ cursor: pointer;}.elementor-widget-ele-loop-item, .elementor-widget-ele-loop-item > .elementor-widge
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0a 7d 0a 0a 2e 62 61 72 6c 6f 61 64 2d 62 6f 72 64 65 72 20 7b 0a 09 62 6f 72 64 65 72 3a 20 33 70 78 20 73 6f 6c 69 64 20 72 67 62 28 33 34 2c 33 34 2c 33 34 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 0a 09 74 6f 70 3a 20 2d 35 30 25 3b 0a 09 70 61 64 64 69 6e 67 3a 20 34 70 78 20 33 70 78 3b 0a 7d 0a 0a 2e 62 61 72 6c 6f 61 64 2d 77 68 69 74 65 73 70 61 63 65 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 68 65 Data Ascii: n: relative;display:inline-block; font-size:16px; padding:10px;}.barload-border {border: 3px solid rgb(34,34,34);height: 100%;width: 100%;position: relative;top: -50%;padding: 4px 3px;}.barload-whitespace {overflow: hidden;he
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 2d 6c 6c 2d 62 67 63 6f 6c 6f 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 2a 2f 0a 0a 2e 62 61 72 6c 6f 61 64 2d 77 72 61 70 70 65 72 20 2c 2e 62 61 72 6c 6f 61 64 2d 77 72 61 70 70 65 72 20 2a 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 7d 20 0a 2e 62 61 6c 6c 73 6c 6f 61 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7d 0a 09 0a 2e 62 61 6c 6c 73 6c 6f 61 64 2d 63 6f 6e 74 61 69 6e 65 72 20 64 69 76 20 7b 0a 09 77 69 64 74 68 3a 20 31 65 6d 3b 0a 09 68 65 69 67 68 74 3a 20 31 65 6d 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f Data Ascii: -ll-bgcolor"></div></div>/.barload-wrapper ,.barload-wrapper { box-sizing:content-box;} .ballsload-container{ font-size:16px; padding:10px; position:relative;}.ballsload-container div {width: 1em;height: 1em;position: abso
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 36 34 2c 20 30 2e 38 31 2c 20 30 2e 32 33 29 3b 0a 09 09 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 61 6c 6c 73 6c 6f 61 64 2d 6d 6f 76 65 20 32 2e 33 73 20 33 34 35 6d 73 20 69 6e 66 69 6e 69 74 65 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 36 34 2c 20 30 2e 38 31 2c 20 30 2e 32 33 29 3b 0a 09 09 2d 6d 73 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 61 6c 6c 73 6c 6f 61 64 2d 6d 6f 76 65 20 32 2e 33 73 20 33 34 35 6d 73 20 69 6e 66 69 6e 69 74 65 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 36 34 2c 20 30 2e 38 31 2c 20 30 2e 32 33 29 3b 0a 09 09 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 61 6c 6c 73 6c 6f 61 64 2d 6d 6f 76 65 20 32 2e 33 73 20 Data Ascii: cubic-bezier(0.2, 0.64, 0.81, 0.23);-o-animation: ballsload-move 2.3s 345ms infinite cubic-bezier(0.2, 0.64, 0.81, 0.23);-ms-animation: ballsload-move 2.3s 345ms infinite cubic-bezier(0.2, 0.64, 0.81, 0.23);-webkit-animation: ballsload-move 2.3s
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 6c 61 73 73 3d 22 65 63 73 2d 6c 61 7a 79 2d 6c 6f 61 64 2d 61 6e 69 6d 61 74 69 6f 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 76 69 6e 67 42 61 6c 6c 4c 69 6e 65 47 20 20 65 63 73 2d 6c 6c 2d 62 67 63 6f 6c 6f 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 6d 6f 76 69 6e 67 42 61 6c 6c 47 5f 31 22 20 63 6c 61 73 73 3d 22 6d 6f 76 69 6e 67 42 61 6c 6c 47 20 65 63 73 2d 6c 6c 2d 62 67 63 6f 6c 6f 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 2a 2f 0a 0a 23 6d 6f 76 69 6e 67 42 61 6c 6c 47 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 32 35 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 31 39 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: lass="ecs-lazy-load-animation"><div class="movingBallLineG ecs-ll-bgcolor"></div><div id="movingBallG_1" class="movingBallG ecs-ll-bgcolor"></div></div>*/#movingBallG{position:relative;width:250px;height:19px;display:inline-block; font-size:
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 6c 3b 0a 7d 0a 0a 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 5f 6d 6f 76 69 6e 67 42 61 6c 6c 47 7b 0a 09 30 25 7b 0a 09 09 6c 65 66 74 3a 30 70 78 3b 0a 09 7d 0a 0a 09 35 30 25 7b 0a 09 09 6c 65 66 74 3a 32 33 30 70 78 3b 0a 09 7d 0a 0a 09 31 30 30 25 7b 0a 09 09 6c 65 66 74 3a 30 70 78 3b 0a 09 7d 0a 7d 0a 0a 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 5f 6d 6f 76 69 6e 67 42 61 6c 6c 47 7b 0a 09 30 25 7b 0a 09 09 6c 65 66 74 3a 30 70 78 3b 0a 09 7d 0a 0a 09 35 30 25 7b 0a 09 09 6c 65 66 74 3a 32 33 30 70 78 3b 0a 09 7d 0a 0a 09 31 30 30 25 7b 0a 09 09 6c 65 66 74 3a 30 70 78 3b 0a 09 7d 0a 7d 0a 0a 40 2d 6d 73 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 5f 6d 6f 76 69 6e 67 42 61 6c 6c 47 7b 0a 09 30 25 7b 0a 09 09 Data Ascii: l;}@keyframes bounce_movingBallG{0%{left:0px;}50%{left:230px;}100%{left:0px;}}@-o-keyframes bounce_movingBallG{0%{left:0px;}50%{left:230px;}100%{left:0px;}}@-ms-keyframes bounce_movingBallG{0%{
2024-04-25 19:25:19 UTC	401	IN	Data Raw: 2d 63 68 69 6c 64 28 34 29 20 7b 0a 20 20 6c 65 66 74 3a 20 37 65 6d 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6c 64 73 2d 65 6c 6c 69 70 73 69 73 33 20 30 2e 36 73 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 65 6c 6c 69 70 73 69 73 31 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 65 6c 6c 69 70 73 69 73 33 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f Data Ascii: -child(4) { left: 7em; animation: lds-ellipsis3 0.6s infinite;}@keyframes lds-ellipsis1 { 0% { transform: scale(0); } 100% { transform: scale(1); }}@keyframes lds-ellipsis3 { 0% { transform: scale(1); } 100% { transfo
2024-04-25 19:25:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49749	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:19 UTC	634	OUT	GET /wp-content/uploads/elementor/css/post-32613.css HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:19 UTC	929	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:19 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e4fc107bd6-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6574fedb-67c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 09 Dec 2023 23:57:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AABV8nWXSWdR1gWJgQeWHKMUTSc5aRXqLW63qXz%2B80L%2FNO%2FMx1lTPLcStVQq3lsZFWhUqJgRfVGbbV%2FuTEC6nz%2F1sZeQZmmOx3UPnlrPAmjfu01X5l7vZVSfAkQFwYomtDM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:19 UTC	440	IN	Data Raw: 36 37 63 0d 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 61 64 30 31 33 31 66 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 6f 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 63 33 62 63 38 63 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 70 6f 70 75 6c 61 74 65 64 7b 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 2d 2d 65 2d 63 6f 6c 75 6d 6e 2d Data Ascii: 67c.elementor-32613 .elementor-element.elementor-element-ad0131f > .elementor-container > .elementor-row{align-items:stretch;}.elementor-32613 .elementor-element.elementor-element-4c3bc8c > .elementor-element-populated{margin:0px 0px 0px 0px;--e-column-
2024-04-25 19:25:19 UTC	1227	IN	Data Raw: 20 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 61 37 33 36 39 32 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 61 37 33 36 39 32 20 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 64 65 74 61 69 6c 73 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 31 36 31 36 31 36 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 32 36 31 33 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 66 30 35 62 31 33 31 20 3e 20 2e Data Ascii: 0px;}.elementor-32613 .elementor-element.elementor-element-4a73692{text-align:left;}.elementor-32613 .elementor-element.elementor-element-4a73692 .tutor-course-details-title{color:#161616;}.elementor-32613 .elementor-element.elementor-element-f05b131 > .
2024-04-25 19:25:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49750	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:19 UTC	608	OUT	GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:20 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:20 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e67b1f8831-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5f7e2614-15d98" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 07 Oct 2020 20:33:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jupm4lHzGCVTtIdQIQpvPd%2FdFOroABDbSTViiM8F9lhqmwPm3GeiMCUeAGrzuGS%2B7eRwNbhIgXiBDdzPAcnnfP%2BA6ffS5PIE0jBpTGIxagV7pAUyKkXooZM9JQnAwaWKQAg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:20 UTC	428	IN	Data Raw: 37 63 30 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7c03/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f Data Ascii: .flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=functio
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function()
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c Data Ascii: on(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c Data Ascii: \\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+",
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: n(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 Data Ascii: b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 Data Ascii: &&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appendChild(C.crea
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 2a 22 3d 3d 3d 65 29 7b 77 68 69 6c 65 28 Data Ascii: eturn[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 Data Ascii: dChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49751	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:19 UTC	616	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:19 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:19 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e6bc3b7b9f-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5fb52a4e-2bd8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 18 Nov 2020 14:06:06 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wstDn6cwVh1X8dYmNeLb58h9BUy2kkM4%2FfD1FqEHUtZ6nDR20zgiir5uS9L3rLPmuyqo96YTCQvwR7RVTa%2FZpZ6OxY4khGcR098Rj5gZhr2LVxrHP3spEOoNeu%2FrCi6Ysyo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:19 UTC	429	IN	Data Raw: 32 62 64 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 2bd8/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 20 30 3c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 2f 5e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 2f 2c 6e 3d 72 2e 65 78 65 63 28 65 29 7c 7c 5b 5d 2c 6f 3d 72 2e 65 78 65 63 28 74 29 7c 7c 5b 5d 2c 69 3d 31 3b 69 3c 3d 33 3b 69 2b 2b 29 7b 69 66 28 2b 6f 5b 69 5d 3c 2b 6e 5b 69 5d 29 72 65 74 75 72 6e 20 31 3b 69 66 28 2b 6e 5b 69 5d 3c 2b 6f 5b 69 5d 29 72 65 74 75 72 6e 2d 31 7d 72 65 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 33 2e 32 22 2c 6e 2e 63 6f 6e 73 6f 6c 65 26 26 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 26 26 65 28 22 33 2e 30 2e 30 22 29 7c 7c 6e 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d Data Ascii: 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQM
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 23 22 3d 3d 3d 65 26 26 28 75 28 22 6a 51 75 65 72 79 28 20 27 23 27 20 29 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 22 29 2c 74 5b 30 5d 3d 5b 5d 29 2c 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 7d 2c 73 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 73 2e 66 6e 2c 73 2e 66 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 Data Ascii: t=Array.prototype.slice.call(arguments);return"string"==typeof e&&"#"===e&&(u("jQuery( '#' ) is not a valid selector"),t[0]=[]),l.apply(this,t)},s.fn.init.prototype=s.fn,s.find=function(t){var r=Array.prototype.slice.call(arguments);if("string"==typeof t
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 22 6a 51 75 65 72 79 2e 6e 6f 64 65 4e 61 6d 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 6f 28 73 2c 22 69 73 41 72 72 61 79 22 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 22 6a 51 75 65 72 79 2e 69 73 41 72 72 61 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 22 29 29 2c 65 28 22 33 2e 33 2e 30 22 29 26 26 28 6f 28 73 2c 22 69 73 4e 75 6d 65 72 69 63 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 65 72 22 3d 3d 74 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 29 26 26 21 69 73 4e 61 4e 28 65 2d 70 61 72 73 65 Data Ascii: Name.toLowerCase()===t.toLowerCase()},"jQuery.nodeName is deprecated"),o(s,"isArray",Array.isArray,"jQuery.isArray is deprecated; use Array.isArray")),e("3.3.0")&&(o(s,"isNumeric",function(e){var t=typeof e;return("number"==t\|\|"string"==t)&&!isNaN(e-parse
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 2e 66 6e 2e 74 6f 67 67 6c 65 43 6c 61 73 73 2c 76 3d 2f 5c 53 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 7d 73 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 76 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 28 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 72 65 6d 6f 76 65 41 74 74 72 20 6e 6f 20 6c 6f 6e 67 65 72 20 73 65 74 73 20 62 6f 6f Data Ascii: .fn.toggleClass,v=/\S+/g;function j(e){return e.replace(/-([a-z])/g,function(e,t){return t.toUpperCase()})}s.fn.removeAttr=function(e){var r=this;return s.each(e.match(v),function(e,t){s.expr.match.bool.test(t)&&(u("jQuery.fn.removeAttr no longer sets boo
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 29 2c 73 2e 63 73 73 4e 75 6d 62 65 72 7c 7c 28 73 2e 63 73 73 4e 75 6d 62 65 72 3d 7b 7d 29 2c 51 3d 73 2e 66 6e 2e 63 73 73 2c 73 2e 66 6e 2e 63 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 73 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 66 6e 2e 63 73 73 2e 63 61 6c 6c 28 6f 2c 65 2c 74 29 7d 29 2c 74 68 69 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 72 3d 6a 28 65 29 2c 6e 3d 72 2c 77 2e 74 65 73 74 28 6e 29 26 26 78 2e 74 65 73 74 28 6e 5b 30 5d Data Ascii: this,arguments)}})),s.cssNumber\|\|(s.cssNumber={}),Q=s.fn.css,s.fn.css=function(e,t){var r,n,o=this;return e&&"object"==typeof e&&!Array.isArray(e)?(s.each(e,function(e,t){s.fn.css.call(o,e,t)}),this):("number"==typeof t&&(r=j(e),n=r,w.test(n)&&x.test(n[0]
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 64 2c 43 3d 73 2e 65 76 65 6e 74 2e 66 69 78 3b 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3d 5b 5d 2c 73 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 3d 7b 7d 2c 74 28 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2c 22 63 6f 6e 63 61 74 22 2c 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 2c 22 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 70 72 6f 70 73 2e 63 6f 6e 63 61 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 20 61 6e 64 20 72 65 6d 6f 76 65 64 22 29 2c 73 2e 65 76 65 6e 74 2e 66 69 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 74 79 70 65 2c 6e 3d 74 68 69 73 2e 66 69 78 48 6f 6f 6b 73 5b 72 5d 2c 6f 3d 73 2e 65 76 65 6e 74 2e 70 72 6f 70 73 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 29 7b 75 28 22 6a 51 75 65 72 79 2e 65 76 Data Ascii: d,C=s.event.fix;s.event.props=[],s.event.fixHooks={},t(s.event.props,"concat",s.event.props.concat,"jQuery.event.props.concat() is deprecated and removed"),s.event.fix=function(e){var t,r=e.type,n=this.fixHooks[r],o=s.event.props;if(o.length){u("jQuery.ev
2024-04-25 19:25:19 UTC	1369	IN	Data Raw: 2c 6e 75 6c 6c 2c 65 2c 74 29 3a 74 68 69 73 2e 74 72 69 67 67 65 72 28 72 29 7d 7d 29 2c 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 6e 2e 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 61 64 79 22 29 7d 29 2c 73 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 72 65 61 64 79 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 26 26 75 28 22 27 72 65 61 64 79 27 20 65 76 65 6e 74 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 7d 7d 2c 73 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 62 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 28 22 6a 51 75 65 72 79 2e 66 6e 2e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 74 Data Ascii: ,null,e,t):this.trigger(r)}}),s(function(){s(n.document).triggerHandler("ready")}),s.event.special.ready={setup:function(){this===n.document&&u("'ready' event is deprecated")}},s.fn.extend({bind:function(e,t,r){return u("jQuery.fn.bind() is deprecated"),t
2024-04-25 19:25:19 UTC	1220	IN	Data Raw: 20 72 65 71 75 69 72 65 73 20 61 20 76 61 6c 69 64 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 22 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 3a 76 6f 69 64 20 30 29 7d 2c 73 2e 61 6a 61 78 26 26 28 44 3d 73 2e 70 61 72 61 6d 2c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 73 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 73 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 72 26 26 28 75 28 22 6a 51 75 65 72 79 2e 70 61 72 61 6d 28 29 20 6e 6f 20 6c 6f 6e 67 65 72 20 75 73 65 73 20 6a 51 75 65 72 79 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 22 29 2c 74 3d 72 29 2c 44 2e 63 61 6c 6c 28 Data Ascii: requires a valid DOM element"),arguments.length?this:void 0)},s.ajax&&(D=s.param,s.param=function(e,t){var r=s.ajaxSettings&&s.ajaxSettings.traditional;return void 0===t&&r&&(u("jQuery.param() no longer uses jQuery.ajaxSettings.traditional"),t=r),D.call(
2024-04-25 19:25:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49752	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:19 UTC	600	OUT	GET /wp-includes/js/utils.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:20 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:20 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e92cc753bb-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5ff61da4-748" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 06 Jan 2021 20:29:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FLst5pr6vO8SvA4vjduHNgrY3ai%2Bm1ExYlyIOCjmgNGJ5DDEXCUrznyTmbfzp3JVjYCgpkYQVsF8zhwf4a5Czv7sZ7%2FdDtH%2F8Sy7U3CkCZzAq%2Bm4ovXgibSAYe5iEdXeS8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:20 UTC	426	IN	Data Raw: 37 34 38 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 77 70 43 6f 6f 6b 69 65 73 3d 7b 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 2c 73 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 30 3b 69 66 28 6e 3d 6e 7c 7c 65 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 69 3d 30 2c 73 3d 65 2e 6c 65 6e 67 74 68 3b 69 3c 73 3b 69 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 6e 2c 65 5b 69 5d 2c 69 2c 65 29 29 72 65 74 75 72 6e 20 30 7d 65 6c 73 65 20 66 6f 72 28 69 20 69 6e 20 65 29 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 6e 2c 65 5b 69 5d 2c 69 2c Data Ascii: 748/! This file is auto-generated /window.wpCookies={each:function(e,t,n){var i,s;if(!e)return 0;if(n=n\|\|e,void 0!==e.length){for(i=0,s=e.length;i<s;i++)if(!1===t.call(n,e[i],i,e))return 0}else for(i in e)if(e.hasOwnProperty(i)&&!1===t.call(n,e[i],i,
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 69 2c 73 2c 72 29 7b 76 61 72 20 6f 3d 22 22 3b 74 68 69 73 2e 65 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6f 2b 3d 28 6f 3f 22 26 22 3a 22 22 29 2b 74 2b 22 3d 22 2b 65 7d 29 2c 74 68 69 73 2e 73 65 74 28 65 2c 6f 2c 6e 2c 69 2c 73 2c 72 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2c 69 3d 65 2b 22 3d 22 3b 69 66 28 6e 29 7b 69 66 28 2d 31 3d 3d 3d 28 74 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 3b 20 22 2b 69 29 29 29 7b 69 66 28 30 21 3d 3d 28 74 3d 6e 2e 69 6e 64 65 78 4f 66 28 69 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 6c 73 65 20 74 2b 3d 32 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 28 65 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 3b 22 2c 74 29 29 26 26 28 65 Data Ascii: i,s,r){var o="";this.each(t,function(e,t){o+=(o?"&":"")+t+"="+e}),this.set(e,o,n,i,s,r)},get:function(e){var t,n=document.cookie,i=e+"=";if(n){if(-1===(t=n.indexOf("; "+i))){if(0!==(t=n.indexOf(i)))return null}else t+=2;return-1===(e=n.indexOf(";",t))&&(e
2024-04-25 19:25:20 UTC	76	IN	Data Raw: 65 6f 66 20 75 73 65 72 53 65 74 74 69 6e 67 73 26 26 77 70 43 6f 6f 6b 69 65 73 2e 67 65 74 48 61 73 68 28 22 77 70 2d 73 65 74 74 69 6e 67 73 2d 22 2b 75 73 65 72 53 65 74 74 69 6e 67 73 2e 75 69 64 29 7c 7c 7b 7d 7d 3b 0d 0a Data Ascii: eof userSettings&&wpCookies.getHash("wp-settings-"+userSettings.uid)\|\|{}};
2024-04-25 19:25:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49753	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:19 UTC	640	OUT	GET /wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:20 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:20 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e93e1b53e4-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"63ecad57-ecb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 15 Feb 2023 10:00:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RNRc%2BCIxfQGpxM%2BWD5%2Bp53vsq8Xv3WptrbzfgX%2FBzhJ6Gt8jaWs8sHnRuo1Ika%2BWOvJP5J6Pij2hptlHASn3dEICfLzRHD47lMz5okmkWxVFzPtIM4D8kEItw5OKR%2FVUZNo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:20 UTC	424	IN	Data Raw: 65 63 62 0d 0a 6a 51 75 65 72 79 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 6a 51 75 65 72 79 28 20 22 2e 65 63 73 2d 6c 6f 61 64 2d 6d 6f 72 65 2d 62 75 74 74 6f 6e 22 20 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 77 69 64 67 65 74 3d 6a 51 75 65 72 79 28 74 68 69 73 29 3b 0a 20 20 20 20 73 65 74 74 69 6e 67 73 20 3d 20 77 69 64 67 65 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 65 74 74 69 6e 67 73 22 29 3b 0a 20 20 20 20 61 72 67 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 74 74 69 6e 67 73 29 3b 0a 20 20 20 20 77 69 64 67 65 74 2e 63 68 69 6c 64 72 65 6e 28 20 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 22 20 29 2e 61 74 74 72 28 22 68 72 65 66 22 2c Data Ascii: ecbjQuery( document ).ready(function() { jQuery( ".ecs-load-more-button" ).each(function() { widget=jQuery(this); settings = widget.attr("data-settings"); args = JSON.parse(settings); widget.children( ".elementor-button" ).attr("href",
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 20 45 43 53 5f 6c 6f 61 64 5f 6e 65 78 74 5f 70 61 67 65 28 69 64 29 7b 0a 0a 20 20 77 69 64 67 65 74 20 3d 20 6a 51 75 65 72 79 28 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 5b 64 61 74 61 2d 69 64 3d 27 22 20 2b 20 69 64 20 2b 20 22 27 5d 20 2e 65 63 73 2d 70 6f 73 74 73 22 29 3b 0a 20 20 73 65 74 74 69 6e 67 73 20 3d 20 77 69 64 67 65 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 65 74 74 69 6e 67 73 22 29 3b 0a 20 20 61 72 67 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 74 74 69 6e 67 73 29 3b 0a 20 20 0a 20 20 70 6f 73 74 73 20 3d 20 6a 51 75 65 72 79 28 22 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 5b 64 61 74 61 2d 69 64 3d 27 22 20 2b 20 61 72 67 73 2e 77 69 64 67 65 74 5f 69 64 20 2b 20 22 27 5d 20 2e 65 63 73 2d 70 6f Data Ascii: ECS_load_next_page(id){ widget = jQuery(".elementor-element[data-id='" + id + "'] .ecs-posts"); settings = widget.attr("data-settings"); args = JSON.parse(settings); posts = jQuery(".elementor-element[data-id='" + args.widget_id + "'] .ecs-po
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 6f 61 64 6d 6f 72 65 27 29 7b 0a 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 5f 74 65 78 74 2e 68 74 6d 6c 28 20 61 74 74 62 2e 74 65 78 74 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 62 75 74 74 6f 6e 5f 74 65 78 74 2e 62 6c 75 72 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 6e 65 77 73 65 74 74 69 6e 67 73 20 3d 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 72 67 73 29 3b 0a 20 20 20 20 20 20 20 20 77 69 64 67 65 74 2e 61 74 74 72 28 22 64 61 74 61 2d 73 65 74 74 69 6e 67 73 22 2c 6e 65 77 73 65 74 74 69 6e 67 73 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 28 61 72 67 73 2e 6c 6f 61 64 5f 6d 65 74 68 6f 64 20 3d 3d 20 27 6c 61 7a 79 6c 6f 61 64 27 29 20 7b 6a 51 75 65 72 79 28 Data Ascii: oadmore'){ button_text.html( attb.text ); button_text.blur(); } newsettings = JSON.stringify(args); widget.attr("data-settings",newsettings); if(args.load_method == 'lazyload') {jQuery(
2024-04-25 19:25:20 UTC	632	IN	Data Raw: 61 6d 65 3b 0a 20 20 6e 65 77 75 72 6c 20 3d 20 63 75 72 72 65 6e 74 75 72 6c 2e 72 65 70 6c 61 63 65 28 72 65 67 65 78 2c 20 27 2f 27 29 3b 0a 20 20 6e 65 77 75 72 6c 20 3d 20 6e 65 77 75 72 6c 20 2b 20 27 70 61 67 65 2f 27 20 2b 20 61 72 67 73 2e 63 75 72 72 65 6e 74 5f 70 61 67 65 20 2b 27 2f 27 3b 0a 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 6e 65 77 75 72 6c 29 3b 0a 20 20 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 7b 75 72 6c 50 61 74 68 3a 6e 65 77 75 72 6c 7d 2c 22 22 2c 6e 65 77 75 72 6c 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 45 6c 65 43 75 73 74 6f 6d 53 6b 69 6e 52 65 49 6e 69 74 4a 73 28 61 72 67 73 29 7b 0a 20 20 69 66 28 21 61 72 67 73 2e 72 65 69 6e 69 74 5f 6a 73 29 20 72 65 74 75 72 6e 3b 0a 20 20 6a 51 75 65 72 79 28 27 Data Ascii: ame; newurl = currenturl.replace(regex, '/'); newurl = newurl + 'page/' + args.current_page +'/'; console.log(newurl); history.pushState({urlPath:newurl},"",newurl);}function EleCustomSkinReInitJs(args){ if(!args.reinit_js) return; jQuery('
2024-04-25 19:25:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49754	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:20 UTC	641	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/js/slick.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:20 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:20 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7e9f81c53c4-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-c2cd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eY7o48ftp5A%2BrjkEkKc%2Bk0nO2l1pzepvtz2SRe%2FkcViGASP7vAlYTT58gZsuzfn7AiQRhg01X6OS7t5RmOnHbOAkdPF0hoNB%2Fwr68CygSLotxbIijbSJffWiaZ4fZu2oc3A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:20 UTC	427	IN	Data Raw: 37 63 30 32 0d 0a 21 20 66 75 6e 63 74 69 6f 6e 28 69 29 20 7b 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 3f 20 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 20 69 29 20 3a 20 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 69 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 20 3a 20 69 28 6a 51 75 65 72 79 29 20 7d 28 66 75 6e 63 74 69 6f 6e 28 69 29 20 7b 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 20 76 61 72 20 65 20 3d 20 77 69 6e 64 6f 77 2e 53 6c 69 63 6b 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 28 65 20 3d 20 66 75 Data Ascii: 7c02! function(i) { "use strict"; "function" == typeof define && define.amd ? define(["jquery"], i) : "undefined" != typeof exports ? module.exports = i(require("jquery")) : i(jQuery) }(function(i) { "use strict"; var e = window.Slick \|\| {}; (e = fu
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 73 3a 20 21 30 2c 20 61 73 4e 61 76 46 6f 72 3a 20 6e 75 6c 6c 2c 20 70 72 65 76 41 72 72 6f 77 3a 20 27 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 73 6c 69 63 6b 2d 70 72 65 76 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 72 65 76 69 6f 75 73 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 3e 50 72 65 76 69 6f 75 73 3c 2f 62 75 74 74 6f 6e 3e 27 2c 20 6e 65 78 74 41 72 72 6f 77 3a 20 27 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 73 6c 69 63 6b 2d 6e 65 78 74 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4e 65 78 74 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 3e 4e 65 78 74 3c 2f 62 75 74 74 6f 6e 3e 27 2c 20 61 75 74 6f 70 6c 61 79 3a 20 21 31 2c 20 61 75 74 6f 70 6c 61 79 53 70 65 65 64 3a 20 33 65 33 2c 20 63 65 6e 74 65 72 4d 6f 64 65 3a 20 21 31 2c 20 Data Ascii: s: !0, asNavFor: null, prevArrow: '<button class="slick-prev" aria-label="Previous" type="button">Previous</button>', nextArrow: '<button class="slick-next" aria-label="Next" type="button">Next</button>', autoplay: !1, autoplaySpeed: 3e3, centerMode: !1,
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 66 6f 72 6d 73 45 6e 61 62 6c 65 64 3a 20 21 31 2c 20 75 6e 73 6c 69 63 6b 65 64 3a 20 21 31 20 7d 2c 20 69 2e 65 78 74 65 6e 64 28 6e 2c 20 6e 2e 69 6e 69 74 69 61 6c 73 29 2c 20 6e 2e 61 63 74 69 76 65 42 72 65 61 6b 70 6f 69 6e 74 20 3d 20 6e 75 6c 6c 2c 20 6e 2e 61 6e 69 6d 54 79 70 65 20 3d 20 6e 75 6c 6c 2c 20 6e 2e 61 6e 69 6d 50 72 6f 70 20 3d 20 6e 75 6c 6c 2c 20 6e 2e 62 72 65 61 6b 70 6f 69 6e 74 73 20 3d 20 5b 5d 2c 20 6e 2e 62 72 65 61 6b 70 6f 69 6e 74 53 65 74 74 69 6e 67 73 20 3d 20 5b 5d 2c 20 6e 2e 63 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 20 3d 20 21 31 2c 20 6e 2e 66 6f 63 75 73 73 65 64 20 3d 20 21 31 2c 20 6e 2e 69 6e 74 65 72 72 75 70 74 65 64 20 3d 20 21 31 2c 20 6e 2e 68 69 64 64 65 6e 20 3d 20 22 68 69 64 64 65 6e 22 2c 20 6e 2e Data Ascii: formsEnabled: !1, unslicked: !1 }, i.extend(n, n.initials), n.activeBreakpoint = null, n.animType = null, n.animProp = null, n.breakpoints = [], n.breakpointSettings = [], n.cssTransitions = !1, n.focussed = !1, n.interrupted = !1, n.hidden = "hidden", n.
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d 2a 29 24 2f 2c 20 6e 2e 72 65 67 69 73 74 65 72 42 72 65 61 6b 70 6f 69 6e 74 73 28 29 2c 20 6e 2e 69 6e 69 74 28 21 30 29 20 7d 20 7d 28 29 29 2e 70 72 6f 74 6f 74 79 70 65 2e 61 63 74 69 76 61 74 65 41 44 41 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 74 68 69 73 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 66 69 6e 64 28 22 2e 73 6c 69 63 6b 2d 61 63 74 69 76 65 22 29 2e 61 74 74 72 28 7b 20 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 20 22 66 61 6c 73 65 22 20 7d 29 2e 66 69 6e 64 28 22 61 2c 20 69 6e 70 75 74 2c 20 62 75 74 74 6f 6e 2c 20 73 65 6c 65 63 74 22 29 2e 61 74 74 72 28 7b 20 74 61 62 69 6e 64 65 78 3a 20 22 30 22 20 7d 29 20 7d 2c 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 53 6c 69 64 65 20 3d 20 65 Data Ascii: [\w\W]+>)[^>]*)$/, n.registerBreakpoints(), n.init(!0) } }()).prototype.activateADA = function() { this.$slideTrack.find(".slick-active").attr({ "aria-hidden": "false" }).find("a, input, button, select").attr({ tabindex: "0" }) }, e.prototype.addSlide = e
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 3d 3d 3d 20 73 2e 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 20 3f 20 21 31 20 3d 3d 3d 20 73 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 20 3f 20 73 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 61 6e 69 6d 61 74 65 28 7b 20 6c 65 66 74 3a 20 65 20 7d 2c 20 73 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2c 20 73 2e 6f 70 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2c 20 74 29 20 3a 20 73 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 61 6e 69 6d 61 74 65 28 7b 20 74 6f 70 3a 20 65 20 7d 2c 20 73 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2c 20 73 2e 6f 70 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2c 20 74 29 20 3a 20 21 31 20 3d 3d 3d 20 73 2e 63 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 20 3f 20 28 21 30 20 3d 3d 3d 20 73 2e 6f 70 74 69 6f 6e 73 2e 72 74 6c 20 26 26 20 28 Data Ascii: === s.transformsEnabled ? !1 === s.options.vertical ? s.$slideTrack.animate({ left: e }, s.options.speed, s.options.easing, t) : s.$slideTrack.animate({ top: e }, s.options.speed, s.options.easing, t) : !1 === s.cssTransitions ? (!0 === s.options.rtl && (
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 74 20 3d 20 7b 7d 3b 21 31 20 3d 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 20 3f 20 74 5b 65 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 5d 20 3d 20 65 2e 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 20 2b 20 22 20 22 20 2b 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 20 2b 20 22 6d 73 20 22 20 2b 20 65 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 20 3a 20 74 5b 65 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 5d 20 3d 20 22 6f 70 61 63 69 74 79 20 22 20 2b 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 20 2b 20 22 6d 73 20 22 20 2b 20 65 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 2c 20 21 31 20 3d 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 66 61 64 65 20 3f 20 65 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 63 73 73 28 Data Ascii: t = {};!1 === e.options.fade ? t[e.transitionType] = e.transformType + " " + e.options.speed + "ms " + e.options.cssEase : t[e.transitionType] = "opacity " + e.options.speed + "ms " + e.options.cssEase, !1 === e.options.fade ? e.$slideTrack.css(
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 73 6c 69 63 6b 2d 68 69 64 64 65 6e 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 20 74 61 62 69 6e 64 65 78 22 29 2c 20 65 2e 68 74 6d 6c 45 78 70 72 2e 74 65 73 74 28 65 2e 6f 70 74 69 6f 6e 73 2e 70 72 65 76 41 72 72 6f 77 29 20 26 26 20 65 2e 24 70 72 65 76 41 72 72 6f 77 2e 70 72 65 70 65 6e 64 54 6f 28 65 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 65 6e 64 41 72 72 6f 77 73 29 2c 20 65 2e 68 74 6d 6c 45 78 70 72 2e 74 65 73 74 28 65 2e 6f 70 74 69 6f 6e 73 2e 6e 65 78 74 41 72 72 6f 77 29 20 26 26 20 65 2e 24 6e 65 78 74 41 72 72 6f 77 2e 61 70 70 65 6e 64 54 6f 28 65 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 65 6e 64 41 72 72 6f 77 73 29 2c 20 21 30 20 21 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 69 6e 66 69 6e 69 74 65 20 26 26 20 Data Ascii: slick-hidden").removeAttr("aria-hidden tabindex"), e.htmlExpr.test(e.options.prevArrow) && e.$prevArrow.prependTo(e.options.appendArrows), e.htmlExpr.test(e.options.nextArrow) && e.$nextArrow.appendTo(e.options.appendArrows), !0 !== e.options.infinite &&
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 69 63 6b 2d 6c 69 73 74 22 2f 3e 27 29 2e 70 61 72 65 6e 74 28 29 2c 20 65 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 63 73 73 28 22 6f 70 61 63 69 74 79 22 2c 20 30 29 2c 20 21 30 20 21 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 63 65 6e 74 65 72 4d 6f 64 65 20 26 26 20 21 30 20 21 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 77 69 70 65 54 6f 53 6c 69 64 65 20 7c 7c 20 28 65 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 20 3d 20 31 29 2c 20 69 28 22 69 6d 67 5b 64 61 74 61 2d 6c 61 7a 79 5d 22 2c 20 65 2e 24 73 6c 69 64 65 72 29 2e 6e 6f 74 28 22 5b 73 72 63 5d 22 29 2e 61 64 64 43 6c 61 73 73 28 22 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 22 29 2c 20 65 2e 73 65 74 75 70 49 6e 66 69 6e 69 74 65 28 29 2c 20 65 2e 62 75 69 6c 64 41 72 72 6f 77 Data Ascii: ick-list"/>').parent(), e.$slideTrack.css("opacity", 0), !0 !== e.options.centerMode && !0 !== e.options.swipeToSlide \|\| (e.options.slidesToScroll = 1), i("img[data-lazy]", e.$slider).not("[src]").addClass("slick-loading"), e.setupInfinite(), e.buildArrow
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 69 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3b 20 69 66 20 28 22 77 69 6e 64 6f 77 22 20 3d 3d 3d 20 72 2e 72 65 73 70 6f 6e 64 54 6f 20 3f 20 6e 20 3d 20 61 20 3a 20 22 73 6c 69 64 65 72 22 20 3d 3d 3d 20 72 2e 72 65 73 70 6f 6e 64 54 6f 20 3f 20 6e 20 3d 20 64 20 3a 20 22 6d 69 6e 22 20 3d 3d 3d 20 72 2e 72 65 73 70 6f 6e 64 54 6f 20 26 26 20 28 6e 20 3d 20 4d 61 74 68 2e 6d 69 6e 28 61 2c 20 64 29 29 2c 20 72 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 70 6f 6e 73 69 76 65 20 26 26 20 72 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 70 6f 6e 73 69 76 65 2e 6c 65 6e 67 74 68 20 26 26 20 6e 75 6c 6c 20 21 3d 3d 20 72 2e 6f 70 74 69 6f 6e 73 2e 72 65 73 70 6f 6e 73 69 76 65 29 20 7b 20 73 20 3d 20 6e 75 6c 6c 3b 20 66 6f 72 20 28 6f 20 69 6e 20 72 2e 62 72 65 61 6b Data Ascii: i(window).width(); if ("window" === r.respondTo ? n = a : "slider" === r.respondTo ? n = d : "min" === r.respondTo && (n = Math.min(a, d)), r.options.responsive && r.options.responsive.length && null !== r.options.responsive) { s = null; for (o in r.break
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 69 22 29 20 7c 7c 20 28 6c 20 3d 20 6c 2e 63 6c 6f 73 65 73 74 28 22 6c 69 22 29 29 2c 20 6e 20 3d 20 72 2e 73 6c 69 64 65 43 6f 75 6e 74 20 25 20 72 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 20 21 3d 20 30 2c 20 6f 20 3d 20 6e 20 3f 20 30 20 3a 20 28 72 2e 73 6c 69 64 65 43 6f 75 6e 74 20 2d 20 72 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 20 25 20 72 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 2c 20 65 2e 64 61 74 61 2e 6d 65 73 73 61 67 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 70 72 65 76 69 6f 75 73 22 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 30 20 3d 3d 3d 20 6f 20 3f 20 72 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 20 3a Data Ascii: i") \|\| (l = l.closest("li")), n = r.slideCount % r.options.slidesToScroll != 0, o = n ? 0 : (r.slideCount - r.currentSlide) % r.options.slidesToScroll, e.data.message) { case "previous": s = 0 === o ? r.options.slidesToScroll :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49755	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:20 UTC	647	OUT	GET /wp-content/plugins/tutor-lms-elementor-addons/assets/js/tutor-elementor.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:20 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:20 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7ea080c450f-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fadb-13ea" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UCpc6K0%2FsQT2J0FXUxCMGsSRujjgb3s7Sr16CW2AbCf4JIBEUzc2vUYacRyLY%2FtLLMFR6OOUYmcSfj8UAY%2Bx6NOL4ZLqj0BxgF9YdjOTq%2BajPvOwNzSaorqJI7KQAfLvbG4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:20 UTC	427	IN	Data Raw: 31 33 65 61 0d 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 0a 09 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 65 6c 65 6d 65 6e 74 6f 72 2f 66 72 6f 6e 74 65 6e 64 2f 69 6e 69 74 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 0a 09 09 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 68 6f 6f 6b 73 2e 61 64 64 41 63 74 69 6f 6e 28 27 66 72 6f 6e 74 65 6e 64 2f 65 6c 65 6d 65 6e 74 5f 72 65 61 64 79 2f 65 74 6c 6d 73 2d 63 6f 75 72 73 65 2d 74 68 75 6d 62 6e 61 69 6c 2e 64 65 66 61 75 6c 74 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 24 73 63 6f 70 65 2c 20 24 29 20 7b 0a 09 09 09 2f 2f 20 72 65 6d 6f 76 65 20 63 6f 75 72 73 65 20 70 6c 61 79 20 61 6e 64 20 73 70 69 6e 69 6e 67 20 63 6c 61 73 Data Ascii: 13ea'use strict';(function ($) {jQuery(window).on('elementor/frontend/init', function () {elementorFrontend.hooks.addAction('frontend/element_ready/etlms-course-thumbnail.default', function ($scope, $) {// remove course play and spining clas
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 28 70 6c 61 79 65 72 29 20 3d 3e 20 7b 0a 09 09 09 09 09 09 70 6c 61 79 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 63 6c 61 73 73 27 2c 20 27 27 29 3b 0a 09 09 09 09 09 09 63 6f 6e 73 74 20 73 70 69 6e 6e 65 72 20 3d 20 70 6c 61 79 65 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 6c 6f 61 64 69 6e 67 2d 73 70 69 6e 6e 65 72 27 29 3b 0a 09 09 09 09 09 09 69 66 20 28 73 70 69 6e 6e 65 72 29 20 7b 0a 09 09 09 09 09 09 09 73 70 69 6e 6e 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 63 6c 61 73 73 27 2c 20 27 27 29 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 29 09 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 29 3b 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 6f 75 72 73 65 20 43 75 72 72 69 63 75 6c 75 6d 0a 09 09 20 2a 20 40 73 69 6e 63 65 Data Ascii: (player) => {player.setAttribute('class', '');const spinner = player.querySelector('.loading-spinner');if (spinner) {spinner.setAttribute('class', '');}})}}});/** * Course Curriculum * @since
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 29 20 3d 3e 20 7b 0a 09 09 09 09 09 09 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 28 29 20 3d 3e 20 7b 0a 09 09 09 09 09 09 09 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 74 6f 67 67 6c 65 28 27 69 73 2d 61 63 74 69 76 65 27 29 3b 0a 09 09 09 09 09 09 09 63 6f 6e 73 74 20 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 42 6f 64 79 20 3d 20 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 0a 09 09 09 09 09 09 09 69 66 20 28 61 63 63 6f 72 64 69 6f 6e 49 74 65 6d 48 65 61 64 65 72 2e 63 6c 61 73 73 4c 69 73 74 Data Ascii: cordionItemHeader) => {accordionItemHeader.addEventListener('click', () => {accordionItemHeader.classList.toggle('is-active');const accordionItemBody = accordionItemHeader.nextElementSibling;if (accordionItemHeader.classList
2024-04-25 19:25:20 UTC	1369	IN	Data Raw: 65 6c 5f 73 65 74 74 69 6e 67 73 22 29 2e 61 74 74 72 28 27 61 75 74 6f 5f 70 6c 61 79 27 29 3b 0a 09 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 5f 61 75 74 6f 5f 70 6c 61 79 5f 73 70 65 65 64 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 23 65 74 6c 6d 73 5f 63 61 72 6f 75 73 65 6c 5f 73 65 74 74 69 6e 67 73 22 29 2e 61 74 74 72 28 27 61 75 74 6f 5f 70 6c 61 79 5f 73 70 65 65 64 27 29 3b 0a 09 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 5f 69 6e 66 69 6e 69 74 65 5f 6c 6f 6f 70 20 3d 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 22 23 65 74 6c 6d 73 5f 63 61 72 6f 75 73 65 6c 5f 73 65 74 74 69 6e 67 73 22 29 2e 61 74 74 72 28 27 69 6e 66 69 6e 69 74 65 5f 6c 6f 6f 70 27 29 3b 0a 09 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 5f 70 61 75 73 65 5f 6f 6e 5f 68 6f 76 Data Ascii: el_settings").attr('auto_play');var carousel_auto_play_speed = $scope.find("#etlms_carousel_settings").attr('auto_play_speed');var carousel_infinite_loop = $scope.find("#etlms_carousel_settings").attr('infinite_loop');var carousel_pause_on_hov
2024-04-25 19:25:20 UTC	572	IN	Data Raw: 70 61 75 73 65 5f 6f 6e 5f 68 6f 76 65 72 2c 0a 0a 09 09 09 09 63 73 73 45 61 73 65 3a 20 73 6d 6f 6f 74 68 5f 73 63 72 6f 6c 6c 2c 0a 0a 09 09 09 09 70 72 65 76 41 72 72 6f 77 3a 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 2e 65 74 6c 6d 73 2d 63 61 72 6f 75 73 65 6c 2d 61 72 72 6f 77 2d 70 72 65 76 27 29 2c 0a 09 09 09 09 6e 65 78 74 41 72 72 6f 77 3a 20 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 2e 65 74 6c 6d 73 2d 63 61 72 6f 75 73 65 6c 2d 61 72 72 6f 77 2d 6e 65 78 74 27 29 2c 0a 0a 09 09 09 09 72 74 6c 3a 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 2e 63 6f 6e 66 69 67 2e 69 73 5f 72 74 6c 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 2c 0a 0a 09 09 09 09 72 65 73 70 6f 6e 73 69 76 65 3a 20 5b 0a 09 09 09 09 09 7b 0a 09 09 09 09 09 09 62 72 65 Data Ascii: pause_on_hover,cssEase: smooth_scroll,prevArrow: $scope.find('.etlms-carousel-arrow-prev'),nextArrow: $scope.find('.etlms-carousel-arrow-next'),rtl: elementorFrontend.config.is_rtl ? true : false,responsive: [{bre
2024-04-25 19:25:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49756	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:20 UTC	624	OUT	GET /wp-content/plugins/ele-custom-skin/assets/js/ecs.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:20 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:20 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7eaabc86765-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"63ecad57-11c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 15 Feb 2023 10:00:55 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nAyuvpIDS87FInOcrxhjkyPCMBoFFhid7w%2FZVZW%2B9IRBBPz0rquWfSghGMIfkZOyxWH8V%2FTC8uU7mE2qTkAr1LOAY3Gp0l%2BrCTEdG7RNgEqqPIj%2BDKI6oGs0YLLtjpICGzs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:20 UTC	291	IN	Data Raw: 31 31 63 0d 0a 0a 76 61 72 20 45 43 53 5f 68 6f 6f 6b 73 20 3d 20 7b 7d 3b 0a 0a 76 61 72 20 45 43 53 5f 43 6f 6c 75 6d 6e 73 5f 43 6f 75 6e 74 3d 30 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 45 43 53 5f 61 64 64 5f 61 63 74 69 6f 6e 28 6e 61 6d 65 2c 20 66 75 6e 63 29 20 7b 0a 20 20 69 66 28 21 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 29 20 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 20 3d 20 5b 5d 3b 0a 20 20 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 2e 70 75 73 68 28 66 75 6e 63 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 45 43 53 5f 64 6f 5f 61 63 74 69 6f 6e 28 6e 61 6d 65 2c 20 2e 2e 2e 70 61 72 61 6d 73 29 7b 0a 20 20 69 66 28 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 29 20 0a 20 20 20 20 20 45 43 53 5f 68 6f 6f 6b 73 5b 6e 61 6d 65 5d 2e 66 Data Ascii: 11cvar ECS_hooks = {};var ECS_Columns_Count=0;function ECS_add_action(name, func) { if(!ECS_hooks[name]) ECS_hooks[name] = []; ECS_hooks[name].push(func);}function ECS_do_action(name, ...params){ if(ECS_hooks[name]) ECS_hooks[name].f
2024-04-25 19:25:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49757	35.190.80.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:20 UTC	537	OUT	OPTIONS /report/v4?s=jupm4lHzGCVTtIdQIQpvPd%2FdFOroABDbSTViiM8F9lhqmwPm3GeiMCUeAGrzuGS%2B7eRwNbhIgXiBDdzPAcnnfP%2BA6ffS5PIE0jBpTGIxagV7pAUyKkXooZM9JQnAwaWKQAg%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://earnandexcel.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:20 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 25 Apr 2024 19:25:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49759	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:20 UTC	685	OUT	GET /wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:21 UTC	907	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:21 GMT Content-Type: image/png Content-Length: 5715 Connection: close CF-Ray: 87a0b7ee9a2653fc-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-1653" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=39QEKOoerx%2BNylEs1saNFUdpKn2oqhJlMN%2FkknXtFJN9yEo%2FScslCwvqmUq%2BJAko6iGC4eSxEqOUImRz9WlEP5dZKtSydzRfPTKYyVNSEK4Zga9F5Md6mlHVitphcH%2Fi8Bk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:21 UTC	462	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 28 00 00 00 64 08 06 00 00 00 35 ea ad ba 00 00 16 1a 49 44 41 54 78 da ec db 5d 68 cd 71 1c c7 f1 df 1e 6d 76 d8 3c 46 99 79 ac 59 46 0a 43 13 17 8b 5a 8c 5c 48 0a 91 3b 29 e5 a1 76 23 17 ca 49 5a 2e dc a0 88 44 2e 14 b1 84 72 21 4f a3 64 25 0f 69 a5 79 28 0f b3 31 7b de f9 ff bd 3b fd 7f b5 d6 96 8e 9d f3 3f 4f 9f 77 bd 6e cf ee 3e 9d 7d cf ff 6f 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 ca df ae be 36 b9 9b 5f 56 56 94 bf d8 5d 59 dc b0 29 c7 28 a5 54 bc 63 98 b2 31 0f c1 03 8d 25 cd b3 9e 6d fc c8 40 1d c5 5c 64 19 a5 94 f2 39 86 29 6c 2a f6 e3 15 fa 6b 1b a7 b9 b3 1a 36 b8 0c 53 1f 1a b1 0f 53 60 94 52 ca 8f 61 ca c0 78 6c c7 23 74 c3 85 3b 60 a0 ac 2e 3c c0 56 8c 47 86 51 4a a9 18 7d Data Ascii: PNGIHDR(d5IDATx]hqmv<FyYFCZ\H;)v#IZ.D.r!Od%iy(1{;?Own>}oRJ)RJ)RJ)R6_VV]Y)(Tc1%m@\d9)l*k6SS`Raxl#t;`.<VGQJ}
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: d8 89 06 f4 da 61 49 e0 81 b2 fa f0 12 7b 30 59 87 74 a5 52 24 6f 98 02 58 87 7a fc b6 83 92 44 03 65 75 e2 3e b6 a0 48 43 a5 54 92 e6 0d 53 1e 2a 71 09 ad 70 e0 26 f1 40 59 ed b8 8e 35 28 d0 7d 4a a9 24 ca bb 33 cd 43 1d 3e 0d 1c a6 14 19 28 17 0e be e1 2c 16 eb d5 19 a5 12 3c 7b 00 47 ed e0 03 78 0a 0e 94 15 c2 07 04 51 aa a1 52 89 50 55 55 55 16 26 a1 1c b3 91 be e7 08 ef d5 94 49 d8 85 e7 e8 b3 a3 91 06 03 65 85 f0 16 07 50 ac 57 67 54 3c 63 90 e6 e3 29 be e0 18 d2 ef 17 68 ef ce 94 8f f5 b8 3d f0 09 f0 34 1c 28 ab 1b 8f b1 5d 4f a4 ab 78 c5 20 ad 40 07 5c 9c 48 bb 81 62 10 72 b0 12 97 d0 02 07 ae 06 0a 40 3b ea 51 83 7c 33 44 a5 a5 a5 01 94 63 51 14 94 21 d7 28 a5 81 0a 0f 54 39 9a e0 26 8a 04 1b 28 ab 0d ab 87 19 a8 0a bc c1 d7 28 68 c0 74 a3 94 06 Data Ascii: aI{0YtR$oXzDeu>HCTS*qp&@Y5(}J$3C>(,<{GxQRPUUU&IePWgT<c)h=4(]Ox @\Hbr@;Q\|3DcQ!(T9&((ht
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: f4 45 0a 8c 84 94 03 0d f0 20 56 c3 5f 0d 13 35 a7 e8 04 54 1d b4 40 5a a8 6b 94 69 00 9d b0 51 a3 ed 97 4d 04 94 17 fd 91 0c 17 e2 91 82 6c b4 47 1a b7 1b 09 a8 17 e0 86 03 4e a4 e1 51 9c d6 b8 fe 45 b8 22 10 50 f5 b0 5a f5 a6 93 6b 51 40 39 d0 0d a7 21 e3 2b a4 6a bc e9 4d 46 00 12 66 c0 23 a6 19 98 0f a8 20 f6 62 0a 72 e1 32 71 f4 54 33 8c c7 5e 04 6c b0 16 4f 42 11 3e c4 f5 f0 18 0c 2a 27 b2 31 1c 9b 50 6e 83 80 32 33 1d e1 49 54 40 ae e4 53 13 01 75 1e b7 39 74 ca 60 40 4d 0c 71 7d 5d 2c d0 b8 7e 11 dc 11 08 a8 04 7c 00 19 45 e8 68 45 40 29 f7 64 62 23 64 ec c4 65 1a d7 ac 51 bd 3d dd 00 31 0f ca 64 40 15 60 36 da 21 de c4 06 77 99 78 02 9b 11 b0 e1 62 61 09 c7 f1 06 5a c1 65 b0 db 17 87 a6 98 8c fd 08 d8 21 a0 94 b7 11 0f b2 d0 1c 9d 71 3d da a1 29 Data Ascii: E V_5T@ZkiQMlGNQE"PZkQ@9!+jMFf# br2qT3^lOB>*'1Pn23IT@Su9t`@Mq}],~\|EhE@)db#deQ=1d@`6!wxbaZe!q=)
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 51 95 03 08 3a e0 49 bc 85 79 58 80 f9 98 8b 69 18 8d 81 e8 8c 1c c4 6b b4 d5 08 f7 60 00 ae 36 f1 0c ad 30 00 7d 61 34 60 5d 68 8c fe 78 09 9f 60 81 ca fb 78 0d 4f a1 db 85 e7 ae 6d 65 51 40 95 23 1f 4f 22 0b 4e 9b 1c 3b 55 07 bd f1 77 9c b3 24 a0 6c 52 ca 5b 95 07 75 2a f1 a0 76 75 03 54 5b e5 22 05 75 14 1e c4 c3 61 e7 52 c2 2a 19 75 54 92 6a 5d 77 2e 02 01 15 c4 3e 4c 46 53 b8 ec 74 2e 9e 6a 03 ba 34 fc 16 6b e1 ab 09 01 25 4a 54 ad a8 8b 08 a8 42 cc 46 27 c4 db fd 54 17 25 a8 1a 63 24 76 21 28 02 4a 94 28 9b 57 15 02 ea 2c 16 a1 07 58 b3 17 5b c7 4e 29 47 4e 5d 85 d7 70 08 41 11 50 a2 44 d9 b4 4c 04 94 0f 2b 70 3f 52 e1 88 e1 73 f1 1c 70 a3 0b fe 82 d3 22 a0 44 89 b2 61 19 08 a8 20 b6 a9 8f 38 37 b1 5d 4b 0e e6 47 31 a0 96 a2 85 89 ed 7c 1d a8 83 be Data Ascii: Q:IyXik`60}a4`]hx`xOmeQ@#O"N;Uw$lR[uvuT["uaRuTj]w.>LFSt.j4k%JTBF'T%c$v!(J(W,X[N)GN]pAPDL+p?Rsp"Da 87]KG1\|
2024-04-25 19:25:21 UTC	1146	IN	Data Raw: 15 2a 77 a3 20 cc 7a b8 57 e0 09 d3 56 02 de d0 99 71 de 8d cb ec 1a 50 29 22 a0 6a 68 45 21 a0 ca b0 0a 0f a0 a1 91 d9 ea 26 17 f7 36 c0 40 2c 47 59 6d 0a 28 e5 f3 1b e2 3b c8 1a 4a f1 38 5c 61 da 71 e3 6d 8d 36 4e e1 37 22 a0 44 a9 2b d6 03 2a 80 2d 78 1a 59 88 68 11 1e 97 e0 0f f8 19 15 b5 21 a0 54 5b bd 14 41 d6 b1 07 d7 19 08 a8 99 22 a0 44 d9 aa 22 10 50 41 1c c2 4b 68 09 97 23 4a 45 80 b8 d0 0c 93 b0 0f c1 6a 0e a8 83 58 8c 85 06 bc 8d 0c 93 63 50 d7 62 37 e4 30 24 7c 83 46 d0 db ef 69 b2 ce 92 9d de 51 0c a8 ed 58 68 d0 ff 22 51 04 54 0d 2d 0b 03 4a c2 49 bc 83 8e 70 23 da a5 1e 48 6f 87 19 38 0a a9 9a 02 ea 23 d4 83 c7 80 44 38 4d 7c c1 33 b1 04 92 89 69 06 d3 50 47 67 ea c2 08 8d f6 82 78 0c ce 28 05 d4 78 78 0c 4a 80 98 66 50 53 cb a2 80 3a 8f Data Ascii: w zWVqP)"jhE!&6@,GYm(;J8\aqm6N7"D+-xYh!T[A"D"PAKh#JEjXcPb70$\|FiQXh"QT-JIp#Ho8#D8M\|3iPGgx(xxJfPS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49758	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:20 UTC	692	OUT	GET /wp-content/uploads/How-to-Add-a-Legend-in-Excel-770x400.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:21 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:21 GMT Content-Type: image/png Content-Length: 156902 Connection: close CF-Ray: 87a0b7ee8ce8add1-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "648aa785-264e6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 15 Jun 2023 05:54:13 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V3CGkPtdiYkXtWPtX3RdetyaK5ZlYWgriUj7wGOAX%2B19YO7QPnRsq65ps5Wnc1x4OwMEI1Z%2BV8UwCWdrDD8NnxgjnZLAcbkfBnGT5W2HSDV0ONgc%2BdDeBniDwBKc2MSzTWs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:21 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 02 00 00 01 90 08 06 00 00 00 1d 8d d7 d9 00 00 80 00 49 44 41 54 78 da ec fd 77 9c 24 d7 7d de 0b 7f 2b 57 e7 34 39 cf 6c 0e 58 e4 c8 04 90 20 09 66 12 a4 98 83 28 8a 92 4c 65 cb 94 e4 ab 60 4a ba b6 28 fb 95 ad d7 41 b6 7c 2d 5b 8e 92 6c 85 ab 48 31 93 00 88 8c cd 61 72 0e dd 3d 9d 73 57 3a f7 8f ee e9 9d 59 2c 48 84 45 12 fb c1 a7 3f d8 33 5d 55 7d 4e 9d 73 aa 7e f1 f9 49 c1 9f bd 5b 8c c6 fa 49 95 72 94 9b 35 14 59 66 30 dc 83 e5 da a4 cb 79 00 74 45 45 96 15 1a 76 93 2e ba e8 a2 8b 2e 5e 1a 4c 44 e2 fc d6 f5 ef c1 2a c6 39 fc 96 bb 99 ec 51 68 a6 1e e7 a1 07 b2 f8 87 06 09 8a 22 8b d3 25 12 6f 7e 0b 37 f5 3b ac 3e f8 1d 96 45 2f 93 27 4e 70 d3 78 14 45 96 5e b4 be 09 21 00 c8 16 0a e4 8b 65 86 Data Ascii: PNGIHDRIDATxw$}+W49lX f(Le`J(A\|-[lH1ar=sW:Y,HE?3]U}Ns~I[Ir5Yf0ytEEv..^LD*9Qh"%o~7;>E/'NpxE^!e
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: ba 15 43 d5 01 38 dc 3f ce 3b 8e dd 45 dc 1f 06 a0 3f 14 e7 9d c7 5f c3 48 bb 5f 3e cd e0 ee 03 37 71 fd f0 01 14 49 46 91 65 8e 0d 4e 72 d7 e4 75 68 4a eb 41 32 18 ee e1 ee 03 37 11 f3 b7 16 b3 a9 19 dc 34 7a 88 be 50 ac 73 53 0e f4 8d 32 12 ed eb bc cc 06 c2 09 0e f6 8d a2 c8 72 e7 9c c3 fd e3 9d 7e 29 b2 cc 44 62 90 a8 af 75 4d 09 e8 0d 46 e9 0f c5 3b d7 f4 eb 26 c3 d1 de ce 35 14 59 66 38 da 8b ae 5c 7e c0 c5 03 61 7c 9a d1 69 47 cc 00 3d c1 68 a7 ad ca 0a 71 7f 18 09 a9 f3 3b 11 33 80 ba 6b 71 fb 34 03 b3 dd af 9d 73 82 86 ef f2 5e 05 82 86 7f cf 22 f0 eb e6 9e 17 b7 a6 a8 c8 92 bc eb 1c 09 f9 8a 4d ae 5e 65 43 49 4f 6b 77 85 81 2e ba 78 21 d8 ae 55 79 22 3d 0f 5e 8a c5 99 69 e6 66 e6 b9 70 72 9a b2 66 e0 ef 8d e3 57 e5 bd fb 4c ba fa 5e 7c 49 5e c4 Data Ascii: C8?;E?_H_>7qIFeNruhJA274zPsS2r~)DbuMF;&5Yf8\~a\|iG=hq;3kq4s^"M^eCIOkw.x!Uy"=^ifprfWL^\|I^
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: dc 45 17 cf 77 5d d5 1b 0d aa f5 7a 37 47 e0 15 82 6e 8e c0 df 6f c8 b9 5a 89 42 bd 42 b1 ed 09 a8 5a 75 72 b5 12 99 4a 1e db 75 f0 84 c0 f5 3c 64 49 ee 58 78 3d 21 f6 84 92 08 d1 12 c8 77 e2 dd 65 49 26 a0 fb 08 ea be 96 95 08 09 9f 66 10 32 fd 9d f3 7c 9a c1 40 38 81 d9 16 f6 35 59 a5 2f 14 23 d2 0e 9d 91 90 e8 0d c5 e8 0b c7 3b e7 c4 fd 61 46 63 7d e8 aa d6 52 14 74 93 03 7d a3 44 db f1 fe b2 24 33 18 4e 10 f3 87 3a 6e f1 80 6e 32 99 18 ea f4 cd 54 75 fa 43 f1 4e 5b 95 15 fa 42 31 8c f6 35 01 c2 66 60 4f b8 8d 5f 37 3b b9 0d 00 8a 24 b7 c2 69 76 59 eb 83 86 1f 5d b9 7c 0d 43 d5 31 b5 cb b1 fa 8a 2c b7 62 f1 77 f6 4c bb 2f bb 5f 98 41 c3 b7 e7 9a aa ac ec b9 a6 d4 16 0a 76 43 57 d4 3d d7 50 24 79 cf dc 48 92 f4 b4 78 fe ef d5 be 5a 6c 7f f7 b5 de 45 17 Data Ascii: Ew]z7GnoZBBZurJu<dIXx=!weI&f2\|@85Y/#;aFc}Rt}D$3N:nn2TuCN[B15f`O_7;$ivY]\|C1,bwL/_AvCW=P$yHxZlE
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: f3 57 e7 1e c4 76 1d ee 9a 3a 41 c4 17 e4 c1 f9 d3 64 ab 45 0e f6 8d 71 b0 6f 8c f3 9b 0b 2c e7 b6 48 04 22 dc 30 72 90 f5 7c 8a d9 f4 2a 9a a2 71 fd c8 7e 9a 8e cd a5 e4 32 8e eb 32 1c ed a5 37 18 e5 62 72 89 a6 63 13 f1 05 99 4c 0c b2 92 4b 92 af 95 d1 15 95 89 c4 10 b9 6a 91 4c 5b 48 ef 0d 46 51 64 85 54 29 87 40 a0 29 2a 21 c3 4f b1 5e c1 15 1e 92 24 11 32 7c 54 9b 0d dc 76 d8 92 a6 a8 b8 9e db 51 1e 5a 9b 53 da 93 0c 7b 65 1e 81 84 c4 de c7 60 d7 0a d1 45 17 5d bc b2 70 f3 e8 61 fe f4 b3 bf c9 e0 15 1e bd 97 55 94 14 82 6c 21 df ce 11 e8 c7 67 9a cf 28 74 08 e1 d1 ac e6 48 6f 26 c9 e4 6b 78 8a 82 aa 18 c4 86 86 89 87 25 b2 b3 17 49 16 14 82 07 6f e4 40 9f 8e b1 3b 62 51 38 d4 4a 05 f2 f9 1a 84 13 c4 c3 3e 7c aa fc 52 0c 10 cf 6d 52 2e 64 c9 65 0b 14 Data Ascii: Wv:AdEqo,H"0r\|q~227brcLKjL[HFQdT)@)!O^$2\|TvQZS{e`E]paUl!g(tHo&kx%Io@;bQ8J>\|RmR.de
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 30 c1 7f f9 f8 af f0 a6 43 b7 f0 c8 f2 79 0c 55 e3 9f bd e7 1f f0 a3 af 7d 1f d3 a9 15 92 a5 2c 3f f6 ba fb f9 f5 77 fe 08 ae f0 38 bf b9 c0 bd 87 6f e5 77 3e f0 b3 8c c7 fb 79 6c f9 02 fd e1 38 bf f3 81 9f e5 9d c7 5f c3 93 ab 97 10 08 7e e1 2d 9f e4 1f bd e9 63 5c d8 5a 24 53 2d f0 b6 a3 77 f2 3b 1f f8 19 2c d7 61 3a b9 cc be de 11 7e f7 c3 3f cf 75 43 fb 78 68 e1 0c 3e cd e0 57 ee fb 21 ee bf f1 6e 9e 5c 99 a6 66 35 f8 c0 8d 6f e4 97 ee fb 41 52 a5 1c 6b f9 14 c7 06 27 f9 e2 7b 7f 9c 4a a3 ce 4a 6e 8b fd bd a3 fc 9b 0f fe 1c 42 08 a6 53 2b 68 8a ca 87 6e be 97 0f df fc 66 9e 5c bd 44 d3 b1 39 3e 38 c5 3f 7c d3 47 58 ce 6d 91 ab 95 88 fb c3 fc cc 3d 1f c6 72 6c 36 8a db 48 c0 7b 4e bc 9e 7d 3d c3 2c 65 37 f1 84 e0 e6 b1 c3 bc f5 c8 ed cc a5 d7 b0 5d 87 Data Ascii: 0CyU},?w8ow>yl8_~-c\Z$S-w;,a:~?uCxh>W!n\f5oARk'{JJnBS+hnf\D9>8?\|GXm=rl6H{N}=,e7]
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 91 68 1f b7 8d 1f e5 b1 a5 f3 3c 30 7f 8a b0 2f c0 f5 23 07 78 6a 75 ba 95 d0 2a c9 0c 47 7a 38 dc 3f 8e 5f 37 28 35 aa 44 7c 41 0e f6 8f 77 d8 89 54 45 61 2c de bf ab 82 af 44 7f 28 46 dd b6 50 e4 96 47 23 68 f8 88 fa 42 9d 0d ae c8 32 31 5f a8 93 30 2b 49 12 86 aa 77 dc 97 ad 82 5b f2 1e e1 fa ca 2d e7 09 41 dd 6e ee f1 80 34 5d 1b db 71 f6 1c 63 bb f6 1e cf c5 4e ae c3 ce 15 2d d7 d9 13 af ef 09 c1 55 6c 71 7b fe 5d b7 f6 d6 09 b0 1c 67 8f 97 c4 72 f7 b6 3d d1 4d d9 ea a2 8b 97 dd 02 0f 7c 6d e6 09 96 b2 5b 1c ea 1f 7b 95 8e 42 42 33 02 24 a2 c3 4c ec 1b a4 19 cc b1 b9 51 a4 56 c8 b0 91 cf 92 af e8 0c f5 0d 20 59 9b cc 4d 2f 92 b5 41 33 55 14 04 08 05 5d 33 c0 f4 61 aa 50 d9 de a4 58 57 08 0d e9 44 7c 3a c5 ec 06 8b 73 75 86 e5 28 a9 f3 67 99 5b af 62 Data Ascii: h<0/#xju*Gz8?_7(5D\|AwTEa,D(FPG#hB21_0+Iw[-An4]qcN-Ulq{]gr=M\|m[{BB3$LQV YM/A3U]3aPXWD\|:su(g[b
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 54 2b c7 d6 4a 0e 2f 32 ce 1d af bd 91 f1 de 00 95 e4 3a 25 47 25 18 d1 a8 6c cc 31 37 bd 49 70 f2 18 c3 31 85 d4 cc 1a 9e a1 21 4b 36 c5 4c 05 a3 7f 8c 83 fb c6 19 1d 1e 20 12 f2 b5 04 bb e7 e5 11 68 25 0d 4a 92 c0 6e 94 48 2e ac 51 d6 a3 f4 8e 0c d3 17 80 7a 7e 8b e9 27 4f 32 67 27 98 dc 3f 45 9f 66 51 ad 36 90 c2 71 7a c2 06 8d ed 35 d2 99 1c c9 9c 44 64 68 8c c3 87 86 08 49 1e aa 3e c0 f1 eb 0f 33 d4 13 ee f4 ed f9 78 04 ec e7 e3 11 10 0d ca 99 6d 16 a7 b3 f8 0f 1f 60 72 b4 97 98 de 4a 5c 96 65 05 19 9b 52 76 85 a5 d5 1a 91 91 83 dc 74 c3 00 41 b7 c8 c2 62 93 be a9 41 64 cb 23 10 eb 61 68 b8 07 ad 5e 65 3b 95 c3 4b 24 08 29 45 56 2f 25 11 e1 31 8e de 7a 13 c7 0f 0e 12 d4 1d ec 5a 80 fd c7 8f 31 35 de 8f ff 45 08 0d 12 6e 95 fc d6 2a a7 2f 94 89 4d ed Data Ascii: T+J/2:%G%l17Ip1!K6L h%JnH.Qz~'O2g'?EfQ6qz5DdhI>3xm`rJ\eRvtAbAd#ah^e;K$)EV/%1zZ15En*/M
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: fa 31 e2 fe 30 9f 7b c3 07 28 d6 2b fc fe c3 7f 49 d3 b6 b8 ff 86 7b 98 48 0c f2 df 1f ff 12 2b b9 24 6f 38 70 23 77 1f b8 89 6f ce 9e e4 81 f9 53 1c ea 1f e7 fe 1b ee 66 3a b9 cc 5f 9e 7d 10 9f 6e f0 b1 5b df 8a 24 49 fc d1 93 5f a5 d2 ac f3 f6 63 77 71 c3 e8 41 fe cb c3 7f c5 5a 21 cd 81 de 51 3e 7a eb 5b f9 bb 8b 8f f0 d8 f2 05 7a 82 51 3e 76 eb 5b 59 cb a7 f8 f3 33 df 46 95 15 de 7b e2 f5 84 cd 00 7f f8 d4 57 a9 59 0d 6e 19 3b c2 ad e3 47 f8 93 53 df 64 bb 92 67 30 dc c3 bb 4f bc 8e 07 e7 4f 73 29 b9 8c a6 aa bc f9 f0 6d 94 1a 55 1e 5e 38 8b 2b 3c 8e 0f 4e b1 af 77 84 2f 5f 7a 94 86 6d d1 13 88 f2 ba fd d7 f3 9d c5 b3 a4 cb 79 4c 55 e7 b6 89 a3 2c 64 36 3a f4 9f 47 07 26 71 85 c7 5c 7a 15 4f 08 06 c2 09 46 a3 7d 9c 5a 9f c5 f1 5c 74 45 e5 f8 d0 7e 2e Data Ascii: 10{(+I{H+$o8p#woSf:_}n[$I_cwqAZ!Q>z[zQ>v[Y3F{WYn;GSdg0OOs)mU^8+<Nw/_zmyLU,d6:G&q\zOF}Z\tE~.
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: e7 ba 9b 0e 12 0f 87 09 47 4c 14 61 75 44 2b 45 d1 d0 34 85 5a 36 4b 3e 9b 26 eb b3 91 b1 a8 d5 1d 10 2e 56 a3 46 bd d1 4a f2 75 9c 3a c5 62 96 6c 5a 61 3b 99 a6 64 05 db 82 80 d8 f5 bb 0a 8a 1a 66 60 d4 24 a7 46 e8 e9 1b e3 e0 50 18 c3 17 a2 27 a0 3e 73 58 10 b4 58 64 8a eb 6c 16 3c 9a 6a 8c fe a0 82 11 30 d1 3d 0f 6c f7 f2 3b 77 77 1a 95 e7 22 aa db 6c e7 2a 34 d4 1e 0e 8f 05 a9 49 15 66 b4 7c fb 00 87 4a b9 80 93 4a 93 cb 06 f0 6a 59 b6 8a 15 94 44 1c bf 11 c7 0d c6 49 0c 6e a3 f5 0d 31 39 d2 43 28 10 24 d6 13 23 a8 a9 38 fe 08 fd a3 a3 c8 59 58 9a df a6 54 28 d2 1c 4a e0 57 9f 2f 5f f9 d5 06 00 a0 a0 e9 01 c2 3d 41 b4 4a 94 be 81 51 0e 0e 45 31 7c 41 22 61 95 46 61 83 74 2a 83 3f 14 a3 ea ba e4 b3 79 0a 3e ad 65 79 74 2d 6a f5 26 8e e3 a2 6b f2 73 b7 Data Ascii: GLauD+E4Z6K>&.VFJu:blZa;df`$FP'>sXXdl<j0=l;ww"l4If\|JJjYDIn19C($#8YXT(JW/_=AJQE1\|A"aFat?y>eyt-j&ks
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 4e d5 d1 23 7d f4 0d f7 e0 57 a0 59 2e b0 b5 36 cf 5c b6 8e 2f 14 21 11 6e d5 5c b8 36 e1 41 82 66 31 cd c6 56 92 6d 12 dc 76 d3 51 f6 8d 0e d1 df db 47 4c ab 53 6d d4 b8 94 71 91 4a 1b c8 c1 41 f6 4d 4d e1 6f 6c 92 cb 6f 51 b2 55 a4 86 85 14 eb 21 66 16 99 7f fc 51 1e 7f ec 34 73 d9 26 5a df 3e 8e 1e 18 a7 2f a4 b7 0a f6 3d cb ae 3a 8d 02 95 64 2b 47 c0 30 15 52 eb 75 66 e7 6b cc 66 9a cc af d7 59 2d 43 34 a8 11 d6 05 c5 62 93 b9 a5 3a cb 29 8b cd aa 4c 6f 8f 46 6f 54 c1 ab d9 ac 2e 54 38 b7 54 63 36 69 91 2f 7a a8 31 93 b1 41 93 3e 53 50 2b 5b 2c ac d4 59 4e 36 d9 ac 42 30 ac a0 3b 2e c5 b2 40 ef f3 31 e8 87 46 d9 a6 60 c9 84 a3 3a fd 11 19 bb 69 31 33 53 e1 e2 4a 8d 2d 07 ea 75 89 70 40 63 7c dc 24 ba 27 47 e0 38 66 68 a0 2d a8 7f 37 b8 58 f5 6d a6 1f Data Ascii: N#}WY.6\/!n\6Af1VmvQGLSmqJAMMoloQU!fQ4s&Z>/=:d+G0RufkfY-C4b:)LoFoT.T8Tc6i/z1A>SP+[,YN6B0;.@1F`:i13SJ-up@c\|$'G8fh-7Xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49760	35.190.80.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:21 UTC	478	OUT	POST /report/v4?s=jupm4lHzGCVTtIdQIQpvPd%2FdFOroABDbSTViiM8F9lhqmwPm3GeiMCUeAGrzuGS%2B7eRwNbhIgXiBDdzPAcnnfP%2BA6ffS5PIE0jBpTGIxagV7pAUyKkXooZM9JQnAwaWKQAg%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 498 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:21 UTC	498	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 33 36 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 36 32 2e 31 35 39 2e 31 33 35 2e 34 32 22 2c 22 73 74 61 74 75 73 5f Data Ascii: [{"age":48,"body":{"elapsed_time":5366,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/","sampling_fraction":0.01,"server_ip":"162.159.135.42","status_
2024-04-25 19:25:21 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 25 Apr 2024 19:25:21 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49761	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:21 UTC	695	OUT	GET /wp-content/uploads/How-to-Fix-Spill-Error-in-Excel-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:21 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:21 GMT Content-Type: image/png Content-Length: 17176 Connection: close CF-Ray: 87a0b7f0de3f674b-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660ff203-4318" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 05 Apr 2024 12:43:47 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mY6DWoBSFPO%2FnoK9pMLHUQ%2BrvboEKwUaMzzyQ0pGyGvsGGGQ6ASsgQ6plU1M63INoBAEee9egEHfBpT5xKoj9hp1hZB5tZkqa1BlYuwTEWk0EKHgPzng6y2zl4iF4NiLsOs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 42 df 49 44 41 54 78 da ed bd 77 9c 64 57 79 e7 fd bd a1 72 ea 9c e3 74 98 9c 34 33 9a a0 19 65 21 24 24 21 23 03 0b 2c 92 85 31 c6 01 63 ef ae d7 c6 78 31 78 e5 c5 2c 8b 61 fd 9a 64 60 11 58 02 19 10 42 46 28 21 8d 46 a3 d1 04 4d ce a9 73 ce 5d d5 95 eb 86 f3 fe 71 bb ab bb 67 46 d2 e4 aa 9e a9 9f 3e ad a9 74 ee 3d f7 de f3 3b cf 73 9e f3 04 89 3f 59 2b c8 e1 b2 22 df e5 e3 ab ef ff 53 3e b4 e2 76 9c 0e 27 36 9b 6d 4e f5 df 34 21 1e b7 fe bd 5e 21 49 e0 76 83 2c 67 77 3f d5 1c dd 2e 3f c6 e3 61 fe e6 b9 ef 90 d4 35 3e b4 ec 36 64 a4 ab 7a 7e 21 04 5e af 17 87 c3 71 51 ed 93 49 78 e1 05 41 38 7c 7d 3e 3f 21 c0 e1 30 d9 b4 29 4c 41 81 8a c7 e3 41 92 a4 Data Ascii: PNGIHDR}#BIDATxwdWyrt43e!$$!#,1cx1x,ad`XBF(!FMs]qgF>t=;s?Y+"S>v'6mN4!^!Iv,gw?.?a5>6dz~!^qQIxA8\|}>?!0)LAA
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 29 4c 21 30 09 d3 72 6a 08 9b dd 87 c7 e5 c2 74 e4 53 53 dc cb e1 fd fb d1 6b f2 19 6a 3b 81 b3 b2 9e 80 2b 82 bf b8 92 95 6b 97 10 7f e5 75 da 06 42 2c 2e 98 52 4d 25 6c 76 27 26 23 68 89 28 2d a7 5a f1 95 96 63 57 5d 54 94 b8 68 3b 79 0a 6f 48 e3 d5 37 8e b0 e8 c6 f5 a4 62 11 ba 7b db e9 08 db 88 f7 8f 50 54 5e 86 6a f3 50 e6 13 9c 3a d5 41 89 5a 40 ff c0 08 63 31 89 31 ad 98 12 b7 a0 e5 c8 71 8c a1 18 25 4b 8a 30 b4 5e 10 0e 24 69 ee 8f a3 f4 1a b8 2a af 84 da c2 32 06 c3 63 00 dc 34 6f 39 e3 f1 09 52 ba c6 bc a2 2a 8a 7d 79 8c 46 43 c8 92 cc cd 8d 2b 19 0c 8f a1 9b 06 15 81 22 e6 15 55 30 30 31 96 63 e5 05 4b e2 18 bb bb 8e b3 ba 7a 21 55 79 25 97 6d 9d f5 6e 6b 60 d3 34 31 0c 03 af d7 7b e1 6b 60 49 c6 ed 2f a0 aa aa 8a ea ea 6a ca 4b 8b 50 b4 28 bd Data Ascii: )L!0rjtSSkj;+kuB,.RM%lv'&#h(-ZcW]Th;yoH7b{PT^jP:AZ@c11q%K0^$i2c4o9R}yFC+"U001cKz!Uy%mnk`41{k`I/jKP(
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 74 ca d0 67 19 4d 22 c9 58 5a 55 4e ea 1a 89 19 99 24 c2 c9 58 5a 05 d3 0c 9d 58 ce d8 72 c5 a0 9b 06 4f ec 7e 81 b6 91 be cb 4a 9c 4b 59 a1 27 63 13 0c f4 f6 32 30 38 42 42 33 2e 29 aa c7 bc 44 5d 55 08 41 32 15 65 20 34 c4 60 78 02 ed 02 33 6d 08 01 c3 c3 0e 92 c9 e9 09 24 1a 85 be 3e e6 44 b4 52 da 88 e5 75 b8 f0 3b 3d 69 32 56 04 8a 48 e8 29 4c 61 12 70 7a 71 db 1d 24 b4 14 12 d6 5e 65 5c 4b 62 0a 81 c7 ee 24 e0 f4 12 d3 12 39 b6 5d 29 35 33 16 46 33 34 ee 98 bf e6 92 92 00 4c 41 d3 34 6c 36 db 45 4a 60 9d b6 fd 6f f0 db ad 87 19 ec ef 26 e6 28 a4 a2 c8 3b 19 b1 76 e1 e4 0b 06 83 97 e4 d6 99 48 8e b2 f3 f4 7e 4e 8f 0d 33 12 8f 11 f0 15 e3 55 cf 5f 53 49 a5 64 4e 9d f2 12 8d aa d8 6c 3a 1e cf 64 e8 a3 0a f3 e6 41 b6 a7 f4 4e 4f 3b 2e 9b 03 9f 73 5a 67 Data Ascii: tgM"XZUN$XZXrO~JKY'c208BB3.)D]UA2e 4`x3m$>DRu;=i2VH)Lapzq$^e\Kb$9])53F34LA4l6EJ`o&(;vH~N3U_SIdNl:dANO;.sZg
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: f2 50 01 18 49 fa db 0e 73 a2 23 4c 4d 5d 33 23 c7 5f e6 df 7f bd 13 5f 9e 8f 7d bf 7d 92 ad 6f 6e e1 67 bf fc 35 a1 a4 4c 2a 3a cc fe 37 5f 64 db c1 56 3a 0f 6f e3 a5 df 6e 23 ac 99 80 8c bf b0 84 bc 40 21 75 0d f3 f0 b9 6c 70 9e 41 fd 73 15 39 23 d6 35 80 ee f8 10 cf 1f 7c 83 c4 c8 28 49 d3 81 df eb c3 5f 52 8e 4d 0f b1 77 d7 36 fa bb fa 30 6d e3 68 86 00 35 3b ac ac 42 08 10 33 b2 bd 48 0a 6e b7 87 f8 58 1b 4e 9f 8f 60 e7 9b b4 0c f4 51 7d ea 34 92 db 8b d3 57 c9 9a a5 8d ec df fd 32 92 7c 27 92 61 60 9a 06 86 64 5a c6 30 21 00 09 97 2f 0f af db 4f 49 59 19 2e 9b 72 5e e4 9c ae ea 20 d2 33 8a 10 73 c3 45 38 47 e0 6b 41 0a 0b 83 2e c7 04 35 0e 37 8a ea a6 a0 d8 49 67 eb 09 8e 4f 8c 12 c1 4d 59 61 11 43 b2 9a 35 95 08 a6 48 25 10 93 12 12 50 9d 54 35 af Data Ascii: PIs#LM]3#__}}ong5L*:7_dV:on#@!ulpAs9#5\|(I_RMw60mh5;B3HnXN`Q}4W2\|'a`dZ0!/OIY.r^ 3sE8GkA.57IgOMYaC5H%PT5
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: bd 15 20 29 c8 32 34 56 7a f1 b9 ad fa 42 8a 33 1f 9b bf 0a 49 be 70 25 4f 98 3a 5d ad 47 09 8d 0d d0 7a f2 24 a3 09 9d ba 55 b7 f3 f1 8f bc 8f e8 89 2d fc f2 e5 b7 88 c4 62 ec db f2 1c 2f ec e9 67 e3 bd b7 51 e8 7a f7 a1 2c 2b 0e 8a 4a ca 71 aa d7 0e 83 73 2a f4 35 8a 43 bd 2d bc d9 76 88 07 97 df 72 a5 ac 58 28 9e 12 dc f5 77 11 ef 7e 03 7d f0 38 63 e1 14 25 f9 4e 14 6f 19 ee 9a 5b b1 05 6a 21 d6 7b e1 87 56 6c 54 d4 2f e4 9e f7 2d a0 5c b4 93 ac da c0 e8 a9 5d f4 8c 09 24 d9 81 6a 53 b1 d9 fd ac 7b cf 7a 3e 7c fb 6a 1c 76 1b bd 87 5b b0 d9 54 24 49 26 d8 df c1 6b bf 7d 89 8a 62 0f a1 89 10 83 db 5e 21 d6 55 4e 43 63 1e c3 83 31 92 c9 14 e0 c8 11 38 87 ec 45 42 4f f1 c2 b1 1d dc b7 74 63 3a ab e8 95 80 e2 cc c7 5d bd 09 80 4d 12 d8 bc c5 78 6a 6f 43 0d Data Ascii: )24VzB3Ip%O:]Gz$U-b/gQz,+Jqs*5C-vrX(w~}8c%No[j!{VlT/-\]$jS{z>\|jv[T$I&k}b^!UNCc18EBOtc:]MxjoC
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 50 8a cf e3 c5 a6 da 66 b9 53 5e 57 6b 60 49 9a 2e 86 76 e6 c5 df 39 7f 0d b7 37 af a6 2f 34 c2 27 9e 78 8c ad 2d fb 31 85 e0 a7 7b 5f e6 e9 4f fe 23 f7 2e de c0 92 8a 06 76 75 1c 21 a9 a7 58 5a d1 40 c0 e5 65 59 45 23 e5 fe 42 06 26 46 29 f2 e6 b1 a6 66 21 36 45 65 63 c3 0a 24 49 62 cb e9 7d e9 3d bf b8 96 e4 ff bc fa 24 00 c5 de 3c 6e ac 5b 8c d7 e1 e2 3b db 7e c9 f3 47 b7 03 b0 aa 7a 01 1f 58 71 db 59 fd f8 c9 9e 97 f8 c5 27 bf cc 9a da 85 dc 39 7f 0d 3f 7e eb 85 73 48 f0 04 5f df fc 14 7b bb 4f a4 3f ab ca 2b 99 f5 9b 91 48 90 2f bf fc 63 96 55 36 f1 f0 da 7b b9 7f c9 46 84 10 fc c3 8b 8f 33 14 1e bb 6a 0f f8 40 cf 29 fa 43 23 d4 17 55 64 df e0 53 24 d6 2f cc c7 e3 54 51 e4 cc 05 0d 28 b2 42 73 59 3d c7 f2 1c d4 15 06 66 79 84 5d 77 56 68 a7 cd c1 df Data Ascii: PfS^Wk`I.v97/4'x-1{_O#.vu!XZ@eYE#B&F)f!6Eec$Ib}=$<n[;~GzXqY'9?~sH_{O?+H/cU6{F3j@)C#UdS$/TQ(BsY=fy]wVh
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 4d 76 75 1c e1 d1 75 f7 65 55 20 8e 61 0a ba 87 b3 c3 88 e5 76 28 ac 9d 1f 40 91 e7 56 3c f0 65 cb 4a a9 48 32 a5 fe 02 64 49 66 28 3c 9e 1e e0 76 c5 46 89 2f 1f 21 04 03 e1 51 8c 49 8f 1c 55 56 28 f5 15 50 e4 cd c3 14 26 fd a1 51 46 a3 a1 b3 54 98 22 4f 1e 6e bb 93 94 a1 31 18 1e 9b 0c 02 97 28 f1 15 60 57 6c 44 53 d6 1e ec db ce aa 92 4c a9 2f 1f 55 51 19 8e 04 49 68 c9 b3 54 dd f3 e9 87 75 b3 a0 d8 97 8f 5d b1 31 14 1e 9b 45 f0 99 d7 3f 16 9b 20 df e5 43 91 65 46 a3 21 a2 93 de 67 4e 9b 9d 62 6f 3e a6 69 32 18 1e 3b ab 70 fa 95 c4 9a da 45 bc f8 c7 5f 27 e0 f4 32 3e 3e 4e 5e 5e de 55 cf f7 34 73 1f 58 d7 75 a2 f1 14 bf da 3e c8 ef de 52 47 c0 9b 59 06 c7 93 06 07 5a c6 69 2e 57 70 39 1d a8 aa 3a 27 d2 ea e4 d2 ca 5e 27 c8 77 f9 f8 c5 c3 8f b1 ac bc 81 Data Ascii: MvuueU av(@V<eJH2dIf(<vF/!QIUV(P&QFT"On1(`WlDSL/UQIhTu]1E? CeF!gNbo>i2;pE_'2>>N^^U4sXu>RGYZi.Wp9:'^'w
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 8c b3 ef 4a 60 8f dd 85 84 84 db ee 24 df e5 e3 70 5f 2b 1f 7d fc 0b a4 0c 9d 60 2c 9c fe 5d 30 16 e6 d4 50 17 92 24 71 72 b0 93 3b e6 af 26 df e3 87 e1 2b d7 f9 a4 9e 62 38 3c 9e 5e 77 8e c7 c2 14 79 03 93 eb 5a 93 ae f1 41 4e 0c 74 72 b0 a7 05 53 08 bc 0e d7 ac 04 6f 13 89 28 a7 87 ba 31 4d 93 89 44 04 5f 5e 09 6e bb 93 d5 b5 8b 58 53 bb 90 be d0 30 ff f5 97 ff 97 fd 93 2e 95 47 fb 5b 59 50 5a cb a3 eb ee e3 8e f9 6b 78 fa c0 e6 f3 3e d7 3b 5f 87 46 5d 61 39 5f bc f7 0f 78 f4 89 ff 79 45 1f f8 89 a1 4e 52 ba 96 15 83 4f 37 05 fb 5b 26 28 2e 0c 64 dc 0a ed 71 2a 6c 5a 92 87 a2 e8 d7 16 81 37 9f da 43 e7 d8 00 4b 2a 1a 78 e6 53 5f e1 e4 60 17 9b 4f ed e1 c9 dd 2f ce f2 80 5a 5e d5 c4 9f dd f2 21 4a fd 05 dc bf 74 23 71 2d c9 f6 b6 43 57 34 23 e2 ad 4d 37 Data Ascii: J`$p_+}`,]0P$qr;&+b8<^wyZANtrSo(1MD_^nXS0.G[YPZkx>;_F]a9_xyENRO7[&(.dqlZ7CKxS_`O/Z^!Jt#q-CW4#M7
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 82 db 7c 6a 0f 7f f8 d3 7f 3c eb 18 bd c1 61 3a c7 07 f8 eb 5f 7d 13 59 96 e9 0d 0d 33 1e 0b f3 c8 bf fd 3d b7 36 dd 40 63 71 15 ad 23 bd 9c 1a ea e6 c4 60 27 c7 07 3a d0 4d 83 6f bc f6 14 6f 75 1e 65 6d dd 62 34 43 67 5b eb 41 8e 0d b4 73 ac bf 9d 65 95 4d 2c 28 ab c5 26 ab 9c 1e ee e6 40 cf a9 b4 aa 3d 1c 09 be eb b9 c6 a2 d3 aa f4 e9 e1 6e 3e f3 b3 ff c3 68 34 44 42 4b a5 af e3 d4 50 57 7a fb eb 70 6f 2b 8f fc db df b3 ac a2 91 b6 91 de 2b 62 e0 e9 0e 0d 65 45 cc ab 10 10 8c 66 87 11 2b 9e 34 d9 d7 32 c1 4d 0b 5c 73 ca 88 95 0b 27 bc 0e 71 cf c2 75 fc f2 0f be 82 d3 ee b8 ca 84 9d 96 c0 ba ae 13 8d 25 f9 d5 f6 41 3e 78 5b 3d 01 6f 66 dd 3b 83 11 8d a7 b7 f6 f0 be d5 3e bc 6e e7 9c 91 c0 b9 60 86 eb 10 63 b1 30 49 23 f3 7b c1 92 04 a5 f9 76 14 25 e7 89 Data Ascii: \|j<a:_}Y3=6@cq#`':Moouemb4Cg[AseM,(&@=n>h4DBKPWzpo++beEf+42M\s'qu%A>x[=of;>n`c0I#{v%
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: eb 70 0f c1 78 04 af c3 c5 c3 37 de 4b 52 4f f1 e2 f1 9d 80 95 e4 ed f1 9d bf a1 75 b8 e7 9c 52 5a 92 24 6c f2 74 9e 24 53 88 f3 0e d2 cf 76 9c 4f 88 e3 15 27 b0 2c d1 58 e1 c6 ae 66 81 27 96 22 51 14 b0 21 61 4d f2 a9 14 c4 62 12 a3 a3 d0 d3 03 7d 7d 16 81 25 09 ee ba 0b 5c ae 69 52 5d 4e 18 06 44 a3 50 5d 0d 3e 9f f5 be b7 17 ba bb 2d a9 5f 54 64 7d 1e 8b 59 92 38 ab 09 bc b1 61 39 3f 7a f8 0b 69 e6 0e 45 c6 f9 e1 8e e7 78 ec fe 4f 53 e2 cb e7 1f 5e 7a 9c 1f ed fa 0d 4f 3e f2 25 3e b0 e2 36 76 76 1c e1 7b 6f 3e cb 3f 6d fe 09 5f fb c0 67 f9 c3 8d 0f b2 bc aa 89 d6 e1 1e aa f2 4b b8 69 de 72 fa 82 c3 e9 00 fd 7c b7 8f af fe ce 67 88 24 62 e9 09 e2 fb db 9f 9d a5 c2 ff db 23 5f 4c 4f 20 6f b4 1e e0 5f b6 fe 62 4e 55 af 7b db 99 de d0 10 42 64 74 7d 67 18 Data Ascii: px7KROuRZ$lt$SvO',Xf'"Q!aMb}}%\iR]NDP]>-_Td}Y8a9?ziExOS^zO>%>6vv{o>?m_gKir\|g$b#_LO o_bNU{Bdt}g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49762	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:21 UTC	736	OUT	GET /wp-content/uploads/How-to-Copy-Numbers-in-Excel-Without-Formulas-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:21 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:21 GMT Content-Type: image/png Content-Length: 29516 Connection: close CF-Ray: 87a0b7f0ef9e6764-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660e8285-734c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 04 Apr 2024 10:35:49 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V0K1R4WjAXkX0WMu1MfnKywZj%2Bwc5oVAjbkG3XOy%2FAFIs206zW0Ieriaof%2BIrrYO8t6GeJsIrw1bbYFtjA7Vpe0SH44ddl34%2FGzqRiP9ZjnBjZwmfXzdNe4c6WE%2Ba0SiJsc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:21 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 73 13 49 44 41 54 78 da ed bd 77 9c 1d e7 5d ef ff 9e 72 e6 f4 b6 bd f7 a6 de bb 6d c9 45 b6 e5 1a 27 2e 71 1c 12 12 48 20 10 08 2d 81 cb 0f 42 e0 5e 2e 04 72 2f 25 10 c2 85 54 52 4c 8a 7b e2 6e c9 b2 ba ac de db 6a 7b 6f a7 b7 99 79 7e 7f cc d9 b3 bb 6a d6 ca b2 a4 38 fb f8 25 ef 9e b3 33 67 9e 33 f3 7c 9e 6f ff 7c 25 f7 1f dc 2a fe e9 43 bf c7 c6 93 7b f8 fe 9e 57 18 1f 0b 2a 1a b9 7b ee 2a fe 71 e3 7f 93 4a a5 72 ef 4b 92 84 10 82 4b 0e 09 78 87 43 a6 0c 59 b2 7e 9a 62 7a e7 08 31 bd eb 28 92 75 8d e9 9c a3 ca a0 9b 97 7f bc 94 9d 9b 71 e9 8b 28 b2 6c 1d 6b dd 54 90 60 59 e5 6c fe e9 c3 7f 48 55 7e c9 3b 4f 4b 92 09 aa 6e 14 49 66 66 fc a2 0f 31 69 Data Ascii: PNGIHDR}#sIDATxw]rmE'.qH -B^.r/%TRL{nj{oy~j8%3g3\|o\|%C{W{*qJrKKxCY~bz1(uq(lkT`YlHU~;OKnIff1i
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: c0 9b 36 2e ff 1c 9f 1d a2 e9 e9 49 fa a0 03 46 93 d3 93 f2 6e 0d c2 a9 77 94 c0 e3 0f 59 d8 2d 00 4b f1 0c b2 24 f1 81 85 eb f8 c7 0f ff 21 85 ee 00 8a a2 5c 70 31 24 cd 0c 32 12 9a ac 5e b7 85 6a 18 c6 45 e7 77 ad 86 61 18 48 92 84 2c cb 37 04 78 2f 79 4f 8c 10 98 71 50 4b 26 40 69 26 20 73 16 6c 35 16 30 73 1f a6 67 25 b3 3a 15 f0 e7 c2 6d ba 93 94 00 a7 cd 8e c4 8d b1 e3 bd df 86 29 04 cf ee 7f 93 3f f9 e9 bf d0 3f 36 7c 43 cf 55 d7 f5 77 36 a7 7e 09 e6 70 d9 f3 91 3d d6 bf 29 80 72 80 d6 62 49 e0 29 ef ab 20 d9 2e 09 5e 00 85 c5 65 5f ba d8 1f f3 bc 7e ec 76 07 c9 78 22 f7 5e 7d 61 05 ff e7 d1 df e7 48 4f 2b c3 b1 d0 05 10 2e 4d df 06 56 b3 f6 e0 74 6c 4d 4d b1 24 e9 74 24 bd 5d b5 24 f6 74 e6 e6 cc aa c3 d3 d1 40 34 c5 52 d5 2f 79 98 34 b1 4b ab 32 Data Ascii: 6.IFnwY-K$!\p1$2^jEwaH,7x/yOqPK&@i& sl50sg%:m)??6\|CUw6~p=)rbI) .^e_~vx"^}aHO+.MVtlMM$t$]$t@4R/y4K2
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 66 88 8b fc cc bd 14 56 bc 5d 4c f5 4b 7c fe 27 ff cc 57 3f fa 05 2a 02 45 98 e6 3b 6d 7a 32 c5 b5 2d 14 d7 b6 9c 2b ba 30 df a5 0a 3c 2e 6d de 79 0e e7 cf a9 b4 7e 0e a5 f5 73 a6 7c d6 b5 9d c3 38 8a 15 8a aa 9a 29 aa 6a 9e 72 e7 4d 53 5c f3 f9 68 ee 3c 16 af 5e 9b 7b 9d b7 68 05 98 a3 20 4b 53 3f 2f dd 65 6d ea b6 fa 89 4c ac b2 40 01 77 cc 5a c1 33 fb 36 11 4e c6 72 92 41 76 69 98 e1 69 64 22 cd 64 62 5d 5e 26 d6 64 c9 e9 50 ad f3 62 99 cb bb 84 2c f3 81 05 6b f9 e3 95 1f c1 6f 73 5f 9f bd 47 08 fa 86 fb c8 2f ce 47 d3 b4 eb b6 07 26 12 09 34 4d bb 22 09 fc 5e 8c 78 3c 8e c3 e1 b8 2a 99 61 8a 6c 50 e8 0f 31 1c f1 91 d1 27 39 93 45 76 6d 49 76 24 fe e8 a6 4b a7 52 da 95 cb 5e 58 57 0c 60 bb 62 e9 33 d3 51 55 9d aa a5 72 67 a6 b1 d3 4d ce 6b 9e 0e e8 df Data Ascii: fV]LK\|'W?E;mz2-+0<.my~s\|8)jrMS\h<^{h KS?/emL@wZ36NrAviid"db]^&dPb,kos_G/G&4M"^x<alP1'9EvmIv$KR^XW`b3QUrgMk
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 15 a7 12 bc 44 e0 5f 95 41 53 61 3a 04 5f e3 4e 98 e9 dc 50 4d b5 dc 69 f6 69 ec 5a 4e 5b b6 98 61 1a 3b af c7 6e 7d a7 cb 9e 9b 04 5e fb 54 2f d3 3b 0d 45 9e a8 2e ba d4 e7 5e a8 98 c1 3e 75 3f 15 a6 89 24 c9 17 de 74 4c 01 91 34 d2 25 36 ca 04 19 de 96 3b f8 ad 45 bf 8a 4f f3 5c d5 85 a3 1b 3a ed a1 76 5c 2e 17 1e 8f e7 ba 81 c6 30 0c 1c 0e c7 0d 93 0b 9d c9 64 70 bb dd 57 35 17 fa d2 00 be 54 a9 dc 8d 4c ec 9e 36 a6 5f 4e 68 88 e9 97 13 22 de 93 72 42 69 32 75 e9 24 62 f7 29 2a 76 b6 98 e1 82 b9 d0 b2 74 59 1b cb 2b 5d 3b 79 b6 6d 33 1f 6d dc 30 93 2b fd fe 74 62 cd 8c f7 f3 48 18 29 fe f9 d0 93 ac 2b 5b 42 a5 a7 f8 3d 93 3c d7 53 ea 5d ef 39 5c 68 2e d7 6a 3e 33 00 be 9e 0f 3c ab ca 0b 21 67 1d 52 57 98 4b f9 0e e3 d0 c8 69 be 7d e2 79 fe 74 d1 27 a6 Data Ascii: D_ASa:_NPMiiZN[a;n}^T/;E.^>u?$tL4%6;EO\:v\.0dpW5TL6_Nh"rBi2u$b)*vtY+];ym3m0+tbH)+[B=<S]9\h.j>3<!gRWKi}yt'
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 96 20 e1 4a 21 25 fc 78 8a 5d b9 4d 3b 76 aa 8d ee 94 4e 70 5e 09 63 fb fa c9 bb 75 3e 2e 2d 4e fb cb 6d a8 b3 5c 18 92 93 c2 65 55 0c 6f 6c c7 59 df 82 5b 1e 66 2c 12 a0 b4 29 4d f7 c9 21 64 5f 86 8c d3 87 28 80 64 7f 04 15 a7 ed d2 8b d1 ae c0 74 3a d9 c9 64 89 dd a7 d9 99 61 ba d4 02 0e d5 02 fc 74 02 e6 0e 75 7a 0d d1 24 ac 86 68 ce 69 74 3e 50 24 eb 3a 97 6a d4 26 61 11 93 8d 7f 65 4d 41 9c 1b 3a 12 d6 03 97 2e 75 5f f4 cc 15 17 ff b7 46 ba d9 31 78 84 0f fb cb af c8 69 a6 cb 3a 8a ac e4 fa 0f 4b 92 04 ef c7 54 6b c5 46 60 61 0b 95 cb cb 91 14 99 54 77 12 63 38 84 3a df 45 aa af 8f be bd fd f8 aa 9c c8 72 0a 3d 94 40 72 79 b1 39 35 2b 1c ac c8 56 48 70 bc ce 5b 96 f0 b4 d4 51 79 cb 2c a4 d8 08 43 29 13 9b c7 8e aa 1a 28 92 89 69 80 2d e0 43 d5 14 64 Data Ascii: J!%x]M;vNp^cu>.-Nm\eUolY[f,)M!d_(dt:datuz$hit>P$:j&aeMA:.u_F1xi:KTkF`aTwc8:Er=@ry95+VHp[Qy,C)(i-Cd
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: cf df 9c cd c5 b5 e1 b0 d9 10 5a 15 f3 f2 24 64 49 c2 98 c1 ce 0c 80 cf 5d d0 aa ac 60 53 6d 38 35 3b ba 69 10 8e 47 29 f4 05 a9 2d a9 24 e0 f6 12 4b 26 38 d5 d3 ce 40 68 78 0a 78 37 2c b9 85 df 7b f0 e3 54 14 14 23 49 32 3d 23 03 fc f5 4f fe 9d b3 bd 9d fc af 5f f9 3d ea cb aa 39 3d d4 45 91 23 c8 9d 8b d6 30 9c 8e 72 b8 ed 24 92 04 87 fb ce f2 93 bd af f3 f0 fc 75 cc ab 6c 64 fd d2 9b f9 af 8d cf f1 f1 78 94 ea 40 31 b7 cc 5a 4c 61 20 8f 3d dd 27 39 d3 d3 31 bd c4 11 2e 6d 27 4e 25 76 17 e7 e9 cf 39 62 f7 0b c5 86 b3 e5 87 57 83 7f aa 3f 36 c2 6b c7 de 62 b1 af e1 b2 cf 31 0c 83 81 91 01 92 c9 24 c9 64 92 74 3a 3d d3 f8 fb fd 0c 60 09 09 a7 dd 81 43 d3 88 c4 63 64 0c 1d 9b a2 72 f3 dc a5 d4 57 54 53 1c 2c a0 d8 93 47 be d7 8f cf e5 e5 b5 23 3b 79 61 d7 Data Ascii: Z$dI]`Sm85;iG)-$K&8@hxx7,{T#I2=#O_=9=E#0r$uldx@1ZLa ='91.m'N%v9bW?6kb1$dt:=`CcdrWTS,G#;ya
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 6d 18 a6 c9 68 68 14 73 38 86 91 e5 db 15 ba 01 29 03 12 19 94 8c 85 00 d3 30 10 89 0c f1 b1 08 f1 b1 88 d5 ec 2f 69 69 0e 86 ae 43 22 8d 6a 58 5a 83 69 9a 28 59 51 91 ef f0 a1 22 73 62 b0 83 ef ed 79 99 5d 87 f7 c1 48 82 f6 78 07 5d 43 bd 04 3d 3e 0e 74 9d 26 35 14 86 d8 65 78 9f 95 6c 6b 99 78 e6 1d 25 70 4e 83 31 85 d5 99 61 52 31 87 c8 96 13 be 57 c5 0c e7 8e e1 64 88 84 9e 7c cf 01 ec 2f a9 e7 be 0f 39 d1 63 3b 58 fd e8 5d 44 f7 be c1 b3 db 76 d0 33 d2 c6 2d 2b e6 d2 7d 66 08 53 ea 67 e7 db c7 29 a8 99 c3 5d b7 af 40 4d 0e b3 f5 f9 fd b4 dc 3e 8f a3 2f ee 62 24 76 8c 7d 9d 1a 46 a4 1e 8f 2c 23 84 c1 70 77 17 e1 e4 08 3b 77 ee 66 48 0e 51 d9 b4 88 c5 e5 32 47 da e1 a6 5b e6 a2 0f 77 f2 ec cf 5e 23 ed 2d e3 a6 45 75 ec de be 91 78 2a c8 2d 37 2f 60 fb Data Ascii: mhhs8)0/iiC"jXZi(YQ"sby]Hx]C=>t&5exlkx%pN1aR1Wd\|/9c;X]Dv3-+}fSg)]@M>/b$v}F,#pw;wfHQ2G[w^#-Eux*-7/`
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 4a 59 29 6b c5 7d d7 2f 5c cd 50 64 0c bb a6 4d b9 86 27 5b ea 11 cf 24 73 e6 a6 61 9a 17 44 cc f8 c6 95 d3 0a ae 36 a8 a4 89 79 e5 3c d0 59 af f2 35 77 9d 08 88 26 42 fc f7 a6 d7 59 da 7c 6f 96 88 2d 45 7b 77 07 b2 2b 80 2c 4b 78 f3 2a 98 ef f2 10 89 f5 90 97 57 f0 ae 3a 0e cb 36 17 b5 b3 6b 70 db 54 94 d2 72 aa 74 2f f6 84 8a 6e 97 09 7a 52 88 58 98 be ee 61 6a e6 ad c1 ad c9 28 66 80 9a 96 02 f6 1f 3f 4d 59 53 03 35 cd 45 f4 ee d8 cf a8 a3 9c 8a c6 12 52 29 70 39 41 cd 2b 40 4b f7 70 fc 78 07 a5 85 05 cc ca 2b 23 cf 69 39 a3 8a ea 16 53 7c e6 e7 bc f6 e6 0e 6e 59 39 1f 4f fb 26 46 6c 95 ac aa 2c e2 e0 96 67 d8 1e 73 b0 fa 96 3b c9 a7 8d a8 bd 8a 59 7e 07 5b 0f 1e 67 cc 1b a4 cc 0d 6d 03 43 54 36 2c 24 e0 54 b1 99 01 1a f2 fc 74 0e 27 98 d7 5c 8f 5d 95 Data Ascii: JY)k}/\PdM'[$saD6y<Y5w&BY\|o-E{w+,Kx*W:6kpTrt/nzRXaj(f?MYS5ER)p9A+@Kpx+#i9S\|nY9O&Fl,gs;Y~[gmCT6,$Tt'\]
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 91 c2 90 54 44 a8 9f b7 df 6a 25 50 5d 40 2a 9d 42 52 ed 48 b1 7e 5e 7f f9 04 8b 6e 9f 4b b8 37 46 d5 ac 0a dc 0e 27 a6 91 41 48 32 99 64 12 14 1b 2e 87 66 99 5c a6 4e 3c 1a c3 cc be 97 8c c5 41 b5 93 19 e9 65 f7 e6 33 04 fd 3a fe b9 2b 28 0a 3a 49 27 d3 a4 0d 1d 9b a6 91 49 24 91 ed 0e 62 5d 27 d8 b1 e5 14 4b ee ab 42 4f 25 48 66 4c 5c 1e 27 66 26 43 c6 d0 51 14 1b 99 54 0a 9b c3 89 4d 86 54 2a 85 2e 04 4e 97 1b 45 18 c4 62 31 64 cd 89 c3 26 13 8f 25 50 ed 4e 1c 9a 4c 22 1e c7 90 6d b8 9d 76 30 e2 9c 3d da 43 c5 ac 2a 14 61 60 08 70 b9 dd 28 92 49 d7 e1 bd 1c 3a 32 c8 da da 39 24 e3 11 4c a1 e0 72 69 64 92 69 74 61 22 23 a3 9b 19 54 9b 86 91 49 5f c8 06 9e 50 55 bf be eb 79 b6 9c 39 c0 df 6f f8 4d 6a 0b ca b3 2a b4 a5 b4 e4 24 70 76 6b ca 98 3a 86 61 70 Data Ascii: TDj%P]@BRH~^nK7F'AH2d.f\N<Ae3:+(:I'I$b]'KBO%HfL\'f&CQTMT.NEb1d&%PNL"mv0=Ca`p(I:29$Lridita"#TI_PUy9oMj$pvk:ap
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 5d ca ce 1f 3e 43 f9 8a bb 28 48 a7 71 bb a1 ae b1 91 82 80 1d 24 09 4d 85 44 34 4a 32 e5 45 73 38 70 64 9c 34 b4 54 51 94 6f a3 8b a9 ce 48 45 71 e1 72 39 71 ba ed b8 5c 01 6a 1b ca 08 7a 32 74 cb 12 36 bb 1d a7 d3 4e 41 59 2d e5 25 85 0c ec 8b e0 76 3b 49 3a 1d b8 45 1e e5 35 c5 78 f4 51 5c 19 37 76 d5 44 32 0c 6c b2 4e 2c 1a 25 e5 b1 e3 70 d9 31 dd 41 6a 6a 4b 29 29 2f 24 91 88 70 76 ef 19 e6 cc 6b c1 9b 5b 1f 1a 6e 97 1b bb 39 82 94 6d c1 22 65 35 33 4d 53 31 52 71 e2 c9 14 aa ea c0 a1 79 b0 6b 36 1c 76 0f 0e 87 1d af dd 8b d3 69 bf b8 17 7a dc 23 2c 4b 56 c0 5d 08 41 2c 95 e0 3b af 3f 43 a9 27 8f 82 60 3e 05 81 3c 8e 0e b4 f1 af 5b 9e a2 b5 ed 2c a4 0d 3a 86 7a f9 f2 0b df 62 44 24 e8 1b 1a a4 7f 28 c6 af fe eb 9f 11 53 0d 42 63 63 17 04 a0 29 4c 7a Data Ascii: ]>C(Hq$MD4J2Es8pd4TQoHEqr9q\jz2t6NAY-%v;I:E5xQ\7vD2lN,%p1AjjK))/$pvk[n9m"e53MS1Rqyk6viz#,KV]A,;?C'`><[,:zbD$(SBcc)Lz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49763	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:21 UTC	728	OUT	GET /wp-content/uploads/How-to-Clear-Data-Validation-in-Excel-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:21 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:21 GMT Content-Type: image/png Content-Length: 28267 Connection: close CF-Ray: 87a0b7f0e8d51f9d-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660d461b-6e6b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 03 Apr 2024 12:05:47 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kjSvCe%2BdN%2Ffdds3YuS7C07ZUxxzcz2hHq82VPVeX3GL60iIRhJ9nRQhZZTxoDSWC8CWz%2FoxSXOzFScp6kmQvmESuJvlwJluAcL%2Bb5VBVQAhbce4hWWkFrtaDwcMtpi6w%2Bdk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:21 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 6e 32 49 44 41 54 78 da ed fd 77 9c 64 d7 5d e7 8d bf cf b9 a1 72 ea aa ce 79 72 90 46 33 23 4b b2 6c 59 b2 6c cb 11 27 6c 0c 98 cc 92 bc bb f0 b0 2c ec 6b 59 e0 c7 02 4b 78 96 5d 78 f6 81 67 59 60 c9 c1 6b b0 0d 38 1b 07 39 28 a7 d1 48 33 9a 9c bb a7 73 aa 5c 75 ef 3d e7 f7 c7 ad aa ae ee ae ee e9 9e 99 6e 19 69 ce bc fa 35 dd 55 75 ef b9 f7 d6 f9 9c 6f fe 7c 05 1f bc 4d b3 d6 30 25 58 06 54 5d f0 96 7d 54 00 21 1b d0 50 72 60 f9 99 82 26 22 60 a2 8b 55 70 d4 d2 f7 a4 40 c4 83 a0 35 3a 5b 01 bd f6 65 dc 1a d7 1e c9 70 8c 4f ff ec ff c3 c1 a1 dd b7 1e c6 cb 38 3c ed 72 a2 f4 34 33 ee d8 8a f7 0a 79 17 a5 34 a6 25 09 04 24 ae ab 29 16 5c 62 81 18 fb c3 Data Ascii: PNGIHDR}#n2IDATxwd]ryrF3#KlYl'l,kYKx]xgY`k89(H3s\u=ni5Uuo\|M0%XT]}T!Pr`&"`Up@5:[epO8<r43y4%$)\b
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 30 b2 ee 0c ae ae b6 7c af 5c f2 08 47 0c ca 65 85 53 55 44 4d 93 4a 45 21 0d c1 4c 65 1a db 8a 13 0f 45 88 05 c3 78 4a 11 0f 47 b0 4d 8b 8a 53 a5 37 d5 81 5c f6 2c d6 06 b0 06 5d 74 c0 70 5b 83 cc f1 d0 f3 25 ff f7 3a 48 85 7f 1c 5a a3 e7 8a 68 b3 a6 7e d7 df ab 9d 97 92 83 1a cb fa 7f 57 bd fa 37 75 4b 95 be 81 d1 93 6c c7 12 12 a5 14 52 4a 3c cf c3 30 0c 7f 8f f4 bc c6 eb f5 d7 1c c7 41 08 41 a9 5c c6 34 0c 42 a1 d0 0a 60 69 ad 57 00 c8 f3 3c 72 b9 1c f1 78 bc f1 5e 36 9b 25 1c 0e 63 9a 66 63 1e ad 35 f9 7c 1e c3 30 08 87 c3 68 ad 71 1c 87 72 b9 4c 34 1a 45 6b 4d 36 eb af 01 a5 14 c1 60 90 50 28 d4 38 a7 d2 1a f1 2f 0c c0 5a 6b 0a 2a bb ea 46 14 8b fb 90 0b 87 0c 1c 4b a0 94 26 14 32 b0 6d 89 6d 7a b4 07 93 8c cc 4c 12 b4 6c 4c c3 04 34 b9 52 01 43 1a Data Ascii: 0\|\GeSUDMJE!LeExJGMS7\,]tp[%:HZh~W7uKlRJ<0AA\4B`iW<rx^6%cfc5\|0hqrL4EkM6`P(8/Zk*FK&2mmzLlL4RC
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 22 85 85 a0 cb 1a c2 d3 2e 57 2a a7 71 59 db 29 9b 30 32 74 59 83 1b 02 af d6 1a 8d be 31 00 eb 92 03 86 f4 43 46 e5 65 17 59 f5 7c 3b d9 36 7c 7b 77 99 4d ab b3 65 b4 29 fd 58 72 be b2 e2 bc 7a ae 08 21 0b 3d 57 5a 99 01 76 6b ac 18 43 ed 3d eb 52 b9 6e 8d 4d b4 7f b5 a6 e2 56 71 3d 8f 70 20 48 9f bd 93 b0 8c 31 52 3d 43 ce 9b 6f 29 8d e3 46 9a ed c1 03 58 22 b0 fe 39 74 91 d1 ea 79 4a 2a 77 83 12 d8 55 8b 71 e0 9a ea 2b 42 16 ba ea 41 d1 b7 6b 1b 71 61 43 fa 19 59 52 a0 73 65 a8 b8 a8 f1 ec e2 ee 19 b1 91 b1 80 0f de 6c 19 35 99 5f 8c 0b 5b d2 57 c7 a5 44 cd 16 7c 55 fd d6 58 32 76 74 f6 af 6f 07 d7 2b f4 b7 9b 27 9f f4 e2 7f fe a5 88 c5 73 6e b6 3a bc ec 3e b4 68 16 c7 5b 23 80 0b 95 12 9f 7e ee 1b cc e4 e7 b9 77 e7 1d 1c 1a da 43 da ec 26 61 a4 99 f7 Data Ascii: ".WqY)02tY1CFeY\|;6\|{wMe)Xrz!=WZvkC=RnMVq=p H1R=Co)FX"9tyJwUq+BAkqaCYRsel5_[WD\|UX2vto+'sn:>h[#~wC&a
2024-04-25 19:25:21 UTC	376	IN	Data Raw: c4 3b db 98 9e 9f a7 5a 72 e8 ed ea a9 a9 b1 12 43 d7 55 ee f5 d9 c0 d3 d3 d3 04 03 01 86 87 87 7d 59 55 75 39 72 e4 39 6e df b7 1b 43 6a a4 ef 30 f0 ad 3d 41 4d f2 7b 35 3d 44 a2 85 b1 e8 8b 10 d7 b6 75 57 bb 26 4b da ec 0a 1d 22 2a 52 9c 9e 7a 69 f3 00 8c 52 8b 76 58 3d 33 ab 79 c3 f6 14 e0 c7 82 f5 72 35 d8 6b 3a d6 55 cb 6c 60 ed 7f be fe 9a 7b 2b 40 dc 15 4b 83 d6 4c 4c 4c 90 4e 25 99 35 0c 94 d6 f5 30 fc 12 19 a0 94 87 9e 3a 85 59 9e 20 d8 1e 64 fc ea 25 cc ae 59 16 e6 a7 78 7c 34 c6 73 e3 15 b4 57 21 e5 4e f0 e0 ae 36 44 6e 96 0b 17 ce 73 ff 5b de 0e 42 b6 74 5c 08 ad 11 42 a3 85 6f 7f 1a 91 14 32 9e c6 12 06 96 56 d8 aa 8c 61 b6 61 00 b6 36 70 65 1e 0f 8d d1 e4 52 5b be 80 5b 01 a9 be b0 95 52 58 96 c5 5b de f2 96 46 7a a8 06 1c 60 7c 62 8c e9 c9 Data Ascii: ;ZrCU}YUu9r9nCj0=AM{5=DuW&K"*RziRvX=3yr5k:Ul`{+@KLLLN%50:Y d%Yx\|4sW!N6Dns[Bt\Bo2Vaa6peR[[RX[Fz`\|b
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 0c 2f 47 f9 ef 09 01 55 3f fc 24 93 61 7f b7 9d 2b be aa c1 2b 80 18 26 dd 9d 1d 74 77 76 32 3f 37 83 56 0e 12 bd b4 fe b6 e6 81 d2 9e 43 f1 f4 13 c4 83 25 20 48 34 d3 c3 f4 d8 65 16 cc 59 c6 9d 1e 64 47 37 b8 25 52 c2 e4 b6 db 77 e0 ce 8d f2 dc d3 4f f9 cf 7e 89 77 77 a9 6f 57 6a 8d d4 ca 77 7f 29 85 f4 14 4a 6a b4 02 8d c2 50 1e 06 0e 52 55 7d 07 d0 0d 64 8d d4 01 1c 8d 46 9b d2 38 c1 f5 14 b9 60 90 53 c5 05 22 a1 18 5e a5 48 3e 97 65 a0 7b 80 88 15 aa cd 59 2b 55 14 1b 03 af 52 8a cb 97 2f 37 80 e4 38 0e 89 64 1a 65 04 a9 48 13 8d c0 33 0d 94 10 28 ad b0 b5 ef e4 92 b8 b5 29 d7 6f 03 d7 f3 c7 85 10 b8 ae 4b a5 b2 34 4f c2 b4 2c a4 10 08 6e b2 0d 2c 62 7e 45 91 76 3c f4 5c 69 69 82 46 c8 67 e0 40 0a f4 42 d9 4f e4 98 29 2c 46 27 32 51 64 3c 88 2e 3b a8 Data Ascii: /GU?$a++&twv2?7VC% H4eYdG7%RwO~wwoWjw)JjPRU}dF8`S"^H>e{Y+UR/78deH3()oK4O,n,b~Ev<\iiFg@BO),F'2Qd<.;
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: f5 8c 9a ca fb 89 1e 4e 6d e1 05 4d 64 77 1c 2c 03 9d b7 51 23 0b b7 6a 82 57 0b 21 65 ba 29 e6 8a 9c 3c 79 12 c3 30 c8 2f cc 63 2d f3 74 fa d9 4a 3e 98 ec 40 88 f0 e0 1b 90 a1 0a 89 b6 bd 84 75 8e b4 84 c1 8e 04 d2 04 0f 41 a9 ea a2 4a 05 3a d3 29 02 76 80 85 c9 d1 7a 6a c8 1a ae 34 5f 3d ad 48 9b af bd 34 c9 13 57 35 42 6b aa d2 a0 2f 60 f0 c6 b8 4d a2 3a 41 7a 6f 0f a1 6d 6d 54 8e 9f a4 6a 59 90 4c 22 a4 40 36 fb c6 ae a1 56 2a a5 48 24 12 bc eb 5d ef f2 9d 58 80 23 a0 ac 3c 82 a3 b3 8c 7f f3 09 c2 3b fb 20 a0 e9 bb 63 37 e2 d1 17 28 96 1c 74 c4 f4 b3 b1 d6 09 de 46 1a 8c d0 28 ad 38 7f e1 1c d5 9a 70 52 da a5 cb b0 d9 de 1d 22 28 1d 64 a2 03 97 00 65 19 44 61 62 09 3f 9f ad 9e 3c 73 bd 43 6b cd cc cc 34 86 61 36 6c e0 44 22 41 38 1c 66 61 61 fe 06 25 Data Ascii: NmMdw,Q#jW!e)<y0/c-tJ>@uAJ:)vzj4_=H4W5Bk/`M:AzommTjYL"@6V*H$]X#<; c7(tF(8pR"(deDab?<sCk4a6lD"A8faa%
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: ba 52 e0 ca 86 6f ad f5 31 d7 32 82 9b 9e 9f 69 9a c4 62 f1 86 86 a0 97 c1 55 b7 dc 2c b9 2e 42 83 d5 af 53 37 42 4b 42 08 32 99 cc 06 01 ec 36 95 05 56 57 b2 62 e8 7c a5 16 03 f6 56 82 b8 e2 a2 a6 0b be f8 6f 41 dc ae 67 4b a8 4a 8d 2f fa 16 85 ce fa 3c d0 e9 4e 82 b6 dd 48 ea af 03 57 29 b5 06 d3 e3 6a 32 74 71 39 ea 46 9d 8e 5f b8 46 0b e5 79 49 8e 6e cd 4d 03 1e 52 29 6c aa b5 b0 92 40 68 1b a9 14 22 16 a4 64 7b 54 4c 81 54 12 c3 36 b1 ac 28 0e 1e 18 06 aa a9 d8 4f 6f 30 d9 bf 19 28 75 35 d9 8f 16 89 0d da bc 2d ee ad 05 3b e6 92 b2 fe d5 d8 33 75 eb 56 32 ad 00 ba 56 2b 9a 6b 55 49 5d 1b c0 75 6a d8 4a 8d 71 d2 f1 96 78 9a 45 64 31 96 8b d2 4b bb 2a 44 6c 44 d0 ac 31 4e 7a 3e 3b 65 c3 eb 21 10 c9 b0 bf 38 e6 4a 7e 32 47 b3 3d 7d 6b 5c 73 6c 6b ef 45 Data Ascii: Ro12ibU,.BS7BKB26VWb\|VoAgKJ/<NHW)j2tq9F_FyInMR)l@h"d{TLT6(Oo0(u5-;3uV2V+kUI]ujJqxEd1K*DlD1Nz>;e!8J~2G=}k\slkE
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 47 47 47 07 1d 1d 1d 8d 52 c2 91 91 11 e2 f1 38 c1 60 b0 a1 06 e7 72 39 b2 d9 2c fd fd fd 68 ad 19 1b f3 1b 7c 5b 96 45 3c 1e 67 7e 7e 9e be be 3e 92 c9 64 c3 57 11 08 04 08 06 83 94 4a 25 1c c7 69 34 76 ab 54 2a 78 9e d7 48 5a b1 2c 0b c7 71 70 1c 87 50 28 44 a5 52 59 85 13 4b 0a bf 5d 8a d2 8b 92 b3 d9 21 15 b6 fc fc e6 42 b5 91 b7 bc 68 51 4b 44 2c e8 db cb c5 6a 8d 26 61 b1 ed a8 48 84 fc 1a df b9 92 af 32 df ea 0b 7c dd 23 19 8a d2 93 e9 64 ba ea f7 38 8a c7 e3 c4 62 31 32 99 0c 23 23 23 f4 f5 f5 11 8f c7 5b 12 c1 99 a6 c9 8e 1d 3b 88 c7 e3 b8 ae 8b 61 18 4c 4d 4d 91 4c 26 31 4d 93 78 3c 4e 2a 95 22 93 c9 34 16 d0 8a f6 2a 80 90 92 ed db b7 d3 d1 d1 c1 e8 e8 28 07 6e bf 8d 42 a1 40 3a dd 45 32 99 24 14 8e 90 4a a7 d9 b9 77 37 86 61 30 3a 36 c6 f6 bd Data Ascii: GGGR8`r9,h\|[E<g~~>dWJ%i4vTxHZ,qpP(DRYK]!BhQKD,j&aH2\|#d8b12###[;aLMML&1Mx<N"4*(nB@:E2$Jw7a0:6
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 71 ec d8 31 76 ee dc c9 c5 8b 17 1b 21 8e e9 e9 69 b4 d6 9c 38 71 82 60 30 48 57 57 17 a6 69 72 f1 d2 25 46 ae 5c a1 bd bd 1d d3 34 79 f4 d1 47 1b de d7 70 38 cc e0 e0 20 00 a9 54 92 d3 93 13 20 05 89 44 92 b3 a7 fd 38 aa 06 2e 5e bc 84 6d db 44 22 61 94 d2 4c 4f cf 70 e6 cc 19 d2 99 74 23 8c 54 28 14 41 80 6d 59 cc cf 2f 90 cd 65 09 05 43 c4 e2 71 32 e9 0c 73 73 f3 fe 46 94 4e e3 b9 ee 12 e8 6c a9 40 68 f4 90 aa 25 80 6b 9a d2 5c 15 52 d7 c9 12 56 e6 b6 fb 2a b4 6e e1 6d 6e fe 5c d9 f5 c3 3c ad f2 9b 3d 0d 0b e5 c5 df 97 23 2a 57 f1 19 29 97 50 bf 8a 1b 14 9b e2 95 25 7a af e3 71 04 84 c9 d4 c8 18 86 ab 89 46 a3 f4 f5 f5 e1 79 1e 1d 1d 1d 4c 4d 4d 91 6e 6b a3 bd bd 9d 6c 36 4b a1 50 60 7a 7a 9a 4c 26 d3 f2 5c 96 65 b1 67 cf 1e 86 87 87 b9 72 e5 4a a3 41 Data Ascii: q1v!i8q`0HWWir%F\4yGp8 T D8.^mD"aLOpt#T(AmY/eCq2ssFNl@h%k\RVnmn\<=#W)P%zqFyLMMnkl6KP`zzL&\egrJA
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: d7 fe e1 8f 78 fe c2 49 d2 f1 24 1f ba f7 6d bc f7 f0 1b c9 c4 92 5c 9d 9b e2 cf be fe 4f 7c fa d9 af e1 36 a7 cf d5 80 de 9e 4c f3 e1 d7 bf 93 b7 df f1 3a 3a e2 6d cc 17 72 fc f5 a3 9f e5 2f be fe 29 ee dd 75 07 3f f7 6d 3f c0 d3 e7 8e f3 5b ff f8 27 8b 8e 0d 21 e8 cb 74 f1 1b df f5 53 a4 22 f1 c6 29 2b ae c3 af 7d f2 0f 39 7a fe 24 08 08 05 82 fc e2 b7 ff 38 07 06 76 b2 50 cc f3 0b 1f fb 3d 2e 4d 8e 02 60 5b 36 bf f4 81 1f e3 e0 e0 9e 9a c5 a2 b8 3c 33 ce 5f 7f f3 b3 3c 75 fa 05 b4 52 ac 97 f8 cb 94 06 c3 1d 3d 2d c1 7b ad d0 c7 6a 5e d3 6b 81 fb 5a a1 92 f5 6c 02 cd c9 09 ad 12 14 04 3e 33 65 a5 ec a2 a4 40 19 12 d5 d5 8e 3b d8 81 67 58 94 d1 54 2d 0f 94 89 e1 59 08 dd 44 77 f3 2f dc 7f 29 50 48 59 c5 45 60 ba 60 5d 1a c7 9b 5b 40 cf 2f 50 88 b4 61 9b Data Ascii: xI$m\O\|6L::mr/)u?m?['!tS")+}9z$8vP=.M`[6<3_<uR=-{j^kZl>3e@;gXT-YDw/)PHYE``][@/Pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49764	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:21 UTC	675	OUT	GET /wp-content/themes/edumall/assets/libs/polyfill/intersection-observer.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:21 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:21 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7f0efac676e-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-22fd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOEKneplFA0Y8R1CNcE7tD4%2FqWqArAsqlIVC0LO69YSZPzssBPWdrF0%2Bf5hmySo9ggX1uFWRYlcwnieAIc4Up2UFZ92ch6oMRVRlsqXCvvCuyC7wKt%2FxlMkr9%2FHhYusT06o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:21 UTC	427	IN	Data Raw: 32 32 66 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 69 66 28 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 22 69 6e 20 77 69 6e 64 6f 77 26 26 22 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 22 69 6e 20 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 2e 70 72 6f 74 6f 74 79 70 65 29 22 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 22 69 6e 20 77 69 6e 64 6f 77 2e 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 74 72 79 2e 70 72 6f 74 6f 74 Data Ascii: 22fd!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.protot
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2c 6f 3d 69 28 65 29 3b 6f 3b 29 6f 3d 69 28 65 3d 6f 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3b 72 65 74 75 72 6e 20 65 7d 28 29 2c 65 3d 5b 5d 2c 6f 3d 6e 75 6c 6c 2c 6e 3d 6e 75 6c 6c 3b 73 2e 70 72 6f 74 6f 74 79 70 65 2e 54 48 52 4f 54 54 4c 45 5f 54 49 4d 45 4f 55 54 3d 31 30 30 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 50 4f 4c 4c 5f 49 4e 54 45 52 56 41 4c 3d 6e 75 6c 6c 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 55 53 45 5f 4d 55 54 41 54 49 4f 4e 5f 4f 42 53 45 52 56 45 52 3d 21 30 2c 73 2e 5f 73 65 74 75 70 43 72 6f 73 73 4f 72 69 67 69 6e 55 70 64 61 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 6e 3d 74 26 26 6f 3f 6c 28 74 Data Ascii: indow.document,o=i(e);o;)o=i(e=o.ownerDocument);return e}(),e=[],o=null,n=null;s.prototype.THROTTLE_TIMEOUT=100,s.prototype.POLL_INTERVAL=null,s.prototype.USE_MUTATION_OBSERVER=!0,s._setupCrossOriginUpdater=function(){return o\|\|(o=function(t,o){n=t&&o?l(t
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 20 45 72 72 6f 72 28 22 74 68 72 65 73 68 6f 6c 64 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 20 62 65 74 77 65 65 6e 20 30 20 61 6e 64 20 31 20 69 6e 63 6c 75 73 69 76 65 6c 79 22 29 3b 72 65 74 75 72 6e 20 74 21 3d 3d 6f 5b 65 2d 31 5d 7d 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 70 61 72 73 65 52 6f 6f 74 4d 61 72 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 28 74 7c 7c 22 30 70 78 22 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 2f 5e 28 2d 3f 5c 64 2a 5c 2e 3f 5c 64 2b 29 28 70 78 7c 25 29 24 2f 2e 65 78 65 63 28 74 29 3b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 72 6f 6f 74 4d 61 72 67 69 6e 20 6d 75 73 74 20 62 65 20 73 70 Data Ascii: Error("threshold must be a number between 0 and 1 inclusively");return t!==o[e-1]})},s.prototype._parseRootMargin=function(t){var e=(t\|\|"0px").split(/\s+/).map(function(t){var e=/^(-?\d*\.?\d+)(px\|%)$/.exec(t);if(!e)throw new Error("rootMargin must be sp
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 6e 3b 29 7b 76 61 72 20 72 3d 69 28 6f 29 3b 69 66 28 28 6f 3d 72 26 26 72 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 3d 3d 65 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 29 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 55 6e 73 75 62 73 63 72 69 62 65 73 5b 6f 5d 3b 69 66 28 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 44 6f 63 75 6d 65 6e 74 73 2e 73 70 6c 69 63 65 28 6f 2c 31 29 2c 74 68 69 73 2e 5f 6d 6f 6e 69 74 6f 72 69 6e 67 55 6e 73 75 62 73 63 72 69 62 65 73 2e 73 70 6c 69 63 65 28 6f 2c 31 29 2c 72 28 29 2c 65 21 3d 6e 29 7b 76 61 72 20 73 3d 69 28 65 29 3b 73 26 26 74 68 69 73 2e 5f 75 6e 6d 6f 6e 69 74 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 28 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 7d Data Ascii: n;){var r=i(o);if((o=r&&r.ownerDocument)==e)return!0}return!1})){var r=this._monitoringUnsubscribes[o];if(this._monitoringDocuments.splice(o,1),this._monitoringUnsubscribes.splice(o,1),r(),e!=n){var s=i(e);s&&this._unmonitorIntersections(s.ownerDocument)}
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 29 7b 66 6f 72 28 76 61 72 20 73 2c 68 2c 63 2c 61 2c 66 2c 64 2c 67 2c 6d 2c 76 3d 69 2c 5f 3d 70 28 65 29 2c 62 3d 21 31 3b 21 62 26 26 5f 3b 29 7b 76 61 72 20 77 3d 6e 75 6c 6c 2c 79 3d 31 3d 3d 5f 2e 6e 6f 64 65 54 79 70 65 3f 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 5f 29 3a 7b 7d 3b 69 66 28 22 6e 6f 6e 65 22 3d 3d 79 2e 64 69 73 70 6c 61 79 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 5f 3d 3d 74 68 69 73 2e 72 6f 6f 74 7c 7c 39 3d 3d 5f 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 62 3d 21 30 2c 5f 3d 3d 74 68 69 73 2e 72 6f 6f 74 7c 7c 5f 3d 3d 74 29 6f 26 26 21 74 68 69 73 2e 72 6f 6f 74 3f 21 6e 7c 7c 30 3d 3d 6e 2e 77 69 64 74 68 26 26 30 3d 3d 6e 2e 68 65 69 67 68 74 3f 28 5f 3d 6e 75 6c 6c 2c 77 3d 6e 75 6c 6c 2c Data Ascii: ){for(var s,h,c,a,f,d,g,m,v=i,_=p(e),b=!1;!b&&_;){var w=null,y=1==_.nodeType?window.getComputedStyle(_):{};if("none"==y.display)return null;if(_==this.root\|\|9==_.nodeType)if(b=!0,_==this.root\|\|_==t)o&&!this.root?!n\|\|0==n.width&&0==n.height?(_=null,w=null,
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 2e 72 69 67 68 74 2d 6f 2e 6c 65 66 74 2c 6f 2e 68 65 69 67 68 74 3d 6f 2e 62 6f 74 74 6f 6d 2d 6f 2e 74 6f 70 2c 6f 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 68 61 73 43 72 6f 73 73 65 64 54 68 72 65 73 68 6f 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6f 3d 74 26 26 74 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 74 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 2c 6e 3d 65 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 65 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 3b 69 66 28 6f 21 3d 3d 6e 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 74 68 72 65 73 68 6f 6c Data Ascii: .right-o.left,o.height=o.bottom-o.top,o},s.prototype._hasCrossedThreshold=function(t,e){var o=t&&t.isIntersecting?t.intersectionRatio\|\|0:-1,n=e.isIntersecting?e.intersectionRatio\|\|0:-1;if(o!==n)for(var i=0;i<this.thresholds.length;i++){var r=this.threshol
2024-04-25 19:25:21 UTC	1369	IN	Data Raw: 69 6f 6e 22 29 3b 69 66 28 72 2e 72 6f 6f 74 26 26 31 21 3d 72 2e 72 6f 6f 74 2e 6e 6f 64 65 54 79 70 65 26 26 39 21 3d 72 2e 72 6f 6f 74 2e 6e 6f 64 65 54 79 70 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 72 6f 6f 74 20 6d 75 73 74 20 62 65 20 61 20 44 6f 63 75 6d 65 6e 74 20 6f 72 20 45 6c 65 6d 65 6e 74 22 29 3b 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 3d 28 6f 3d 74 68 69 73 2e 5f 63 68 65 63 6b 46 6f 72 49 6e 74 65 72 73 65 63 74 69 6f 6e 73 2e 62 69 6e 64 28 74 68 69 73 29 2c 6e 3d 74 68 69 73 2e 54 48 52 4f 54 54 4c 45 5f 54 49 4d 45 4f 55 54 2c 69 3d 6e 75 6c 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 7c 7c 28 69 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 29 2c 69 Data Ascii: ion");if(r.root&&1!=r.root.nodeType&&9!=r.root.nodeType)throw new Error("root must be a Document or Element");this._checkForIntersections=(o=this._checkForIntersections.bind(this),n=this.THROTTLE_TIMEOUT,i=null,function(){i\|\|(i=setTimeout(function(){o(),i
2024-04-25 19:25:21 UTC	324	IN	Data Raw: 69 67 68 74 3a 65 2e 68 65 69 67 68 74 2c 77 69 64 74 68 3a 65 2e 77 69 64 74 68 2c 62 6f 74 74 6f 6d 3a 6f 2b 65 2e 68 65 69 67 68 74 2c 72 69 67 68 74 3a 6e 2b 65 2e 77 69 64 74 68 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 65 3b 6f 3b 29 7b 69 66 28 6f 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 6f 3d 70 28 6f 29 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 72 20 6f 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 39 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 21 3d 74 3f 69 28 65 29 3a 28 6f 26 26 6f 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 26 26 28 6f 3d 6f 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 6f 26 26 31 31 3d 3d 6f 2e 6e 6f 64 Data Ascii: ight:e.height,width:e.width,bottom:o+e.height,right:n+e.width}}function f(t,e){for(var o=e;o;){if(o==t)return!0;o=p(o)}return!1}function p(e){var o=e.parentNode;return 9==e.nodeType&&e!=t?i(e):(o&&o.assignedSlot&&(o=o.assignedSlot.parentNode),o&&11==o.nod
2024-04-25 19:25:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49767	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:21 UTC	723	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-regular-400.woff2 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:22 UTC	903	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:21 GMT Content-Type: font/woff2 Content-Length: 174360 Connection: close CF-Ray: 87a0b7f38f677bd8-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32e0-2a918" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:08 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5MHmGtKEFtSiRmBx786BF5Pzf4p15P%2Fxs2AdmZy3KgjhPnaTfUTu9JRUBpSdRDoF1L0gQdPfkGBL7pIMJXFOgpuFIZXY7fkKv3w3LfDFPRwqnpPM9nmD7vm31JBZGPLQcqA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:22 UTC	466	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 a9 18 00 0d 00 00 00 06 f3 f4 00 02 a8 bc 01 4b 02 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 06 11 08 0a 99 95 14 93 f8 45 01 36 02 24 03 b9 72 0b b9 78 00 04 20 05 8a 46 07 81 bf 27 5b c5 87 95 83 b2 fb 82 10 80 74 1b 02 10 78 f3 cf b9 54 bf b9 42 6e 9e 29 9b 47 b3 ef a8 be 1d 22 06 17 d8 36 8d 60 7e b7 0d 28 ff 18 98 5c db cf fe ff ff ff ff 57 26 8d 50 a7 4e 76 74 6f ff b2 3f 83 18 c8 20 85 06 02 a5 63 31 c9 c5 c3 80 91 04 87 10 13 f2 50 50 23 a6 34 9a 64 c2 ec 8d 4c 6b bb 81 b0 dd 11 8d 54 dd ef a0 ee fb a5 ed 53 2e a4 da 6a ee ed 03 c2 63 2d 65 89 05 5b e2 07 54 e2 46 44 46 44 58 97 35 4a 19 4d 64 23 8e b4 1d 42 cb b9 99 53 7f b9 b7 f5 06 5b 76 a6 ea 61 db 5f e3 33 Data Ascii: wOF2K?FFTM`E6$rx F'[txTBn)G"6`~(\W&PNvto? c1PP#4dLkTS.jc-e[TFDFDX5JMd#BS[va_3
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: a5 94 52 90 57 f8 3f 5f c4 6e f0 15 79 05 4e 6e af 70 40 81 ca 38 03 49 d3 ab 91 36 d2 e1 b6 49 3d 92 4f ff f1 bb de 73 b3 2a 81 99 7d 6c fd 0f 33 79 c6 77 67 0b 31 19 d4 fa 02 91 21 d2 cd fb ff fc c8 e7 93 7c c6 06 f2 49 18 61 87 31 45 09 49 18 33 61 4c 91 84 61 c0 09 28 02 6a 15 9c 04 17 b8 c1 05 ae 3a 5b 70 4c 6c c1 aa d5 56 2d 8e d5 5a c4 56 ad 76 39 da 5a 3b 65 44 27 fa fe 65 23 61 a2 0d 55 b8 7e a2 72 c7 64 00 c0 3f 41 9e 48 bc d2 6e da 66 06 68 6e dd 60 5d 6c 03 96 30 72 83 8d e8 45 91 1b b0 0d 7a a3 46 0b 3d b0 00 51 99 8a 02 26 58 60 14 06 18 05 2a 18 8d 8f af fd 8a fa 6f ff bf e8 1b ef bf fe 4b 04 c0 7f df c1 ef ee 84 75 3c 1c d0 fc c3 f3 44 16 13 bc 91 7d a2 ce 00 06 b8 80 8b 51 53 6b b4 77 a0 65 42 aa b4 6a 6b 72 e2 32 9f f0 e1 c9 39 ff 25 04 Data Ascii: RW?_nyNnp@8I6I=Os}l3ywg1!\|Ia1EI3aLa(j:[pLlV-ZVv9Z;eD'e#aU~rd?AHnfhn`]l0rEzF=Q&X`oKu<D}QSkweBjkr29%
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 4b 1c 12 35 33 60 06 80 5a ab 52 3b b4 5a 83 3f ac 0e 3b 8b c7 59 c7 bd 43 06 10 fa ff af 54 eb db 82 92 65 cb 99 f5 cf 71 fa 4f ce 3f a6 ff e8 df 63 f6 e9 3e 7b 5b 99 35 ae fe 5f f6 6e 98 77 bd e4 7b f7 bd 17 8c 78 f1 22 84 08 0c 02 02 20 85 81 94 09 80 92 30 90 12 09 52 7e 11 00 a8 40 00 a4 41 4a 72 52 b4 b3 4a 52 3a ab 64 a5 ab 5a 92 9d bf 94 aa aa fe 02 41 ca a6 24 3b 45 c9 ce 4c db 59 e3 b0 ed 71 65 bb a6 b9 a7 79 d9 9b a5 4f af aa 6b d5 bd ed 55 2f 6b b1 59 f6 b6 77 6d e5 32 e3 7c 1c 32 24 eb 75 8c 2c 64 64 6a be ea 95 36 cc 6d 6b cb aa 93 ec 8c 22 20 46 e4 39 7c 86 0c ed 57 53 fb e8 8f fc 13 f8 09 3c 4a a5 ee 99 a9 b5 34 d6 26 fb 42 0c 6c ab ba df c8 55 3d 2d 5d b0 7d c1 bb e8 72 00 30 b2 83 f8 e0 3f 3d f9 e0 08 1f 14 c0 9a 4a f3 73 40 a5 c6 4b c3 Data Ascii: K53`ZR;Z?;YCTeqO?c>{[5_nw{x" 0R~@AJrRJR:dZA$;ELYqeyOkU/kYwm2\|2$u,ddj6mk" F9\|WS<J4&BlU=-]}r0?=Js@K
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: c0 77 c3 47 8d 50 52 37 90 6b f3 4c 3c e9 c5 8b 41 8c 2e 8a a9 ac 49 b6 bc 2b 86 0b 1e 12 24 e9 ae 2e da 97 a7 d7 b4 c8 c9 6a 42 72 4a 89 a8 59 df da 35 a7 b4 73 57 14 a6 e6 ed 19 99 5b ab 26 5d 14 b0 2b 78 ce c7 74 71 6a a0 1a c6 b5 d1 ad 28 8b 82 2f e9 12 5c ab 6a 0f 95 23 55 c7 ef a7 cb 04 cd a0 a6 db a4 8a 87 d2 5a 3f 2c d4 cf f5 d3 28 a8 d3 f3 a7 85 ac 2e 95 10 7c 0e 4d 1e 02 d0 ac 96 f0 40 8c 0c 8b 54 9b 25 cd db a9 df 9e 7a f0 cc 9a 01 14 da c5 43 18 81 17 08 0e 3d c1 6b 01 e3 54 ce 2d dc c1 db 67 6a b9 00 7b 5d 42 0b cf 7c 5b 51 70 2e a1 4e 83 32 c0 ab 6a d8 32 bc a2 2e b5 2d 0a c9 9c 9d a5 d6 57 ea 73 b9 b3 fc 13 f4 65 7d 03 e5 87 7a 2e 2a 2f 0d 3f ac 5a 74 fb c9 2e fc c6 33 e3 a9 d9 2c 70 cf 0a d9 8b 1c 3e 12 67 1a 05 66 63 84 ab 5b b6 f6 76 93 Data Ascii: wGPR7kL<A.I+$.jBrJY5sW[&]+xtqj(/\j#UZ?,(.\|M@T%zC=kT-gj{]B\|[Qp.N2j2.-Wse}z.*/?Zt.3,p>gfc[v
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 4c 81 8b fa cd d1 c7 49 5c 74 a6 e7 d2 2d 1e e2 d2 59 2b 6f 6d b2 38 25 4a a9 b8 52 0f cc 66 65 6e 85 15 55 1d 9c c8 56 80 5c 6a 01 c3 66 78 c0 f2 1c f4 a9 b7 9b 24 f3 90 61 99 ac 2e 72 91 23 9e 73 f9 91 5d 61 0d 09 e7 a6 75 91 e6 1a 9a e2 32 cb 45 54 ec a6 05 11 91 12 a7 66 11 cf d9 0f 13 73 6d 78 04 4c 4f 4d b6 85 8c 45 1c e1 0d b6 fa 50 af 44 12 f1 30 10 9c 53 39 fc 9a ad 34 91 dd 9d bb ea 39 8a c0 f1 a5 9e 7c 7a cc 92 eb 51 68 ba 32 31 d5 74 19 34 19 6a c5 2b 8f b9 b8 00 cf 44 30 ed ba 53 8d 1c ec db a0 2a e4 a5 90 be 4c 92 21 f9 22 5f 96 5b 9a 3e 69 87 89 15 9f f1 84 9f 65 e2 76 c5 71 e2 74 c1 0d 17 94 d0 b2 59 a0 b3 85 7c 9e 43 09 98 23 f6 12 7b ca 33 16 2f f4 a2 b8 11 d2 0f e1 67 af 45 5c 21 08 5f f4 6d 32 88 6c 16 89 5c 1b ff c0 e0 4f 2e 94 b3 73 Data Ascii: LI\t-Y+om8%JRfenUV\jfx$a.r#s]au2ETfsmxLOMEPD0S949\|zQh21t4j+D0S*L!"_[>ievqtY\|C#{3/gE\!_m2l\O.s
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: ae 81 ac 37 13 c0 d9 6e b5 32 69 35 05 c0 30 f0 32 71 48 ae 6d 11 2b 55 f5 96 ac dd b2 ba aa 16 b1 6a dd d5 3f 5f c4 ac 26 3e 60 ea 1d 3b ee f0 df 2f 9c a3 ee 5c 96 68 e7 6c 0c eb f2 b0 6a 10 52 ad 64 d6 2d 84 3f 41 d4 7e f7 94 08 01 8b 22 a1 c0 28 02 83 2c d3 cc 60 75 91 58 d1 d7 59 59 67 bb a7 99 96 a5 e6 17 78 cf b3 ea 55 33 cb 8a 9a 66 0b d6 9e a6 25 7d ca ca f5 43 82 e9 97 c9 b6 f0 e6 cf cc cb 46 7d 5d 87 38 12 89 60 be 0f 4e af 5d a5 4e 84 09 08 30 d9 54 51 6d da 1c 13 98 65 90 a6 19 94 64 b7 8f f2 0d 37 65 4a 8f 72 33 46 6c 57 4b 96 c8 0c 4a 4a 1d 96 76 ed b3 b5 d7 57 22 e6 f7 c9 09 2a 5b df 76 9c fb 6c a9 76 ac ec ae b9 82 be 34 20 87 64 ef 44 a0 fe b4 d6 1b 80 c1 7c 14 fa ac db 54 d3 bb 4b 0e d5 89 e7 e9 41 92 d1 79 77 2b 72 bd 65 b7 f6 9c 46 c6 Data Ascii: 7n2i502qHm+Uj?_&>`;/\hljRd-?A~"(,`uXYYgxU3f%}CF}]8`N]N0TQmed7eJr3FlWKJJvW"*[vlv4 dD\|TKAyw+reF
2024-04-25 19:25:22 UTC	881	IN	Data Raw: 4c be 5a dd 76 e0 25 ba 37 8f 9d 1e a9 d6 3a 87 3f 6c 65 00 2b cb f0 d6 4a a5 b4 12 da f7 ed db a7 ed 6e 91 df 3b 1f 67 a1 ee 0e 6b 09 86 ce f3 cb cb f5 85 31 6f d6 b4 1c 9d 22 17 a5 2b bc 21 1f fd 23 e0 de b6 5f dc f9 86 9a 3c 51 ee 6b 9a 76 9e a4 b3 19 93 66 27 42 21 6e d3 1b 2e bb 92 b4 66 17 80 20 74 02 79 eb ba a9 f9 a5 3d bf b3 1f 54 62 b9 d4 53 ef 2a d9 c4 79 fd 4b a7 e3 3c e4 76 9d cb 27 91 04 3e 79 af 22 0b 11 b8 7e 0d 6c c5 bf 57 11 2d 91 b2 b2 bc 30 fe 16 10 e4 64 38 bb 27 c7 5b 69 9e d9 f6 b2 1e 81 cf 9a f6 f2 96 87 bd 0c 8b a5 48 c6 53 35 5a c6 f8 f8 47 ef d3 37 09 09 67 56 7a ea 30 2e a3 92 1d 12 4b 4e ea c8 5c 6a 0a d8 81 6c 42 9f 52 3a 30 79 17 4b 24 3b bf aa bf 76 91 b8 2c 13 91 f3 2c 56 cd b2 e8 12 fa 14 8a 84 5e 0b e5 1a a9 8f 6c 37 1c Data Ascii: LZv%7:?le+Jn;gk1o"+!#_<Qkvf'B!n.f ty=TbS*yK<v'>y"~lW-0d8'[iHS5ZG7gVz0.KN\jlBR:0yK$;v,,V^l7
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: ac 10 33 bb 14 1f 5b 14 f9 12 a8 98 40 82 11 42 c1 09 42 4e eb e9 db eb d2 50 ed a5 e1 1c 3c 66 ac d5 e8 0d 39 dc 5e 60 58 f3 fd b4 e5 87 03 db a6 61 80 4f cd 8a 41 3b 81 0f d6 3f fb 19 44 50 18 b7 9c f7 68 62 73 ed 5b 8c 53 ec bd 59 99 be 4c d7 c8 06 32 af 4e dc c3 75 bd 0d 9f 2d 97 59 97 f9 d6 a5 4b 1f fd 3f 18 ab 47 91 df 99 3d 7e 43 75 23 fb ba 4e 45 d0 2c fb 8b 6a b6 ed 3d cc 51 12 c1 4e 22 53 d3 8b cc bd 14 99 55 cb e4 ea b5 88 c1 68 3d 7e 63 e1 49 a8 ec 79 e2 7d 1f 5b 38 88 3b 1c 9a 0d 07 7e 2b f9 ad df 48 22 4e bd 68 7f ba c9 7d 76 d6 cb 45 9e 8d 87 fd f5 52 cc 96 c4 53 76 fa 77 ad 19 42 f8 94 6e b6 e1 6f d5 c0 13 e3 5e 27 71 e6 6c 6b 22 b6 38 6d 06 93 46 38 94 78 6c 4b c8 e0 b9 ef 97 b9 5f 3a 21 d5 1e b7 5b f9 ed a4 b0 3f fb b3 fc ec e9 d2 f6 96 Data Ascii: 3[@BBNP<f9^`XaOA;?DPhbs[SYL2Nu-YK?G=~Cu#NE,j=QN"SUh=~cIy}[8;~+H"Nh}vERSvwBno^'qlk"8mF8xlK_:![?
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: a1 49 24 7d ea 17 eb 99 e9 17 96 0d 27 35 3a 88 8a 3e 0b 9d 02 71 48 b0 3b 3d a4 d5 10 fa 14 08 95 51 20 48 35 4b c1 b3 25 57 16 df 57 a1 0a d4 22 57 4b 35 50 58 dd 09 6a 81 d0 a2 56 0c 5a 41 6a 1b d9 36 f9 c2 8a ad a2 39 85 90 4b fd 45 37 a7 5f ca 95 bd b1 aa 60 e7 b8 ee 15 75 2b b9 25 d1 90 23 f5 c9 1f ca 9e bb 3a d3 c0 fa a4 30 ce 66 74 6e cd 19 45 51 72 9c d5 d1 b6 5a 16 e9 c6 76 ff a5 45 a5 b4 e9 9b 03 ae 92 5a 50 97 d0 2f da d5 b8 d4 4c 01 58 06 97 f1 74 19 23 08 58 9e 42 9a 48 3c bb 95 5d 57 50 08 ad 24 4f 2a 32 7f 4c ec 43 5f df 1f 5b d1 66 82 ea 41 81 a5 bd 64 58 d2 ea 94 57 6c c3 fb 9c 55 dc d6 92 b5 5d 41 1e cd 30 aa 95 10 a8 3c 22 7b 7c fc ec 38 44 14 1d 4a c8 a4 32 e3 f6 86 a9 88 a4 b6 a6 03 c9 57 2d e3 15 a0 ac 1c f2 52 ab 53 80 62 45 48 49 Data Ascii: I$}'5:>qH;=Q H5K%WW"WK5PXjVZAj69KE7_`u+%#:0ftnEQrZvEZP/LXt#XBH<]WP$O*2LC_[fAdXWlU]A0<"{\|8DJ2W-RSbEHI
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: fd d5 5b 3c 2d 81 38 06 98 ff 8f ec 97 7f d7 95 ca f8 cd 00 87 92 41 23 e1 e6 e3 fd bb 8b 00 42 a3 84 31 d0 98 0b ad de 62 34 e3 ac 1b f2 de 2b 80 4a 1b 1d f4 24 07 31 dd c8 bd 80 c9 0f bc 69 33 fb 1b d6 f8 7e de 1f de e6 1b e7 09 cb 2a 0c 03 31 f5 f7 a9 50 40 9b ea 90 9e 2a b9 b0 48 0a 3d a5 b1 f9 11 d6 08 d1 fe db d0 33 09 a9 c5 69 02 b9 aa ba 4f 5a 2a ed 29 9a 5b aa 4d a0 09 2f 24 38 48 7f c5 f3 8f 1f f3 2d 13 3c f9 d7 f2 bd 66 1a c6 8d 27 b3 8b 7d 5d 30 f5 96 4b f4 e6 8d 36 83 c3 b5 a6 59 b0 24 b7 0c 18 ae b6 6e a8 82 7f 9c 03 b0 36 ce c8 c8 17 c8 7f a7 0b ba 36 c2 01 03 b4 9a f1 12 3c e0 f2 c5 77 34 46 0f e5 e4 52 b0 68 b3 92 c4 1e e4 f4 be 42 d2 00 30 59 64 dd 6a e5 fa 0e fe a9 4e b6 cf d5 ab 87 67 e2 44 c7 29 9c aa 8d d3 20 df 12 a0 8e f6 d6 cd b2 Data Ascii: [<-8A#B1b4+J$1i3~1P@H=3iOZ*)[M/$8H-<f'}]0K6Y$n66<w4FRhB0YdjNgD)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49769	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:22 UTC	419	OUT	GET /wp-content/uploads/Earn-And-Excel-Logo-2-296x100.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:22 UTC	905	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:22 GMT Content-Type: image/png Content-Length: 5715 Connection: close CF-Ray: 87a0b7f5de7e6744-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df3303-1653" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:43 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q%2BbeJZttjexTImPpWnoPldnWL41ccBE88UdBURVk8%2FnsQTFb8In7PDxkL24s5C%2F2%2FlEEqGKv5hCbPkUfFnbPvnz3svRJwl5JL9VO0uA8DLHqMUP7xHtNSc5dftf1NIkmOIM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:22 UTC	464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 28 00 00 00 64 08 06 00 00 00 35 ea ad ba 00 00 16 1a 49 44 41 54 78 da ec db 5d 68 cd 71 1c c7 f1 df 1e 6d 76 d8 3c 46 99 79 ac 59 46 0a 43 13 17 8b 5a 8c 5c 48 0a 91 3b 29 e5 a1 76 23 17 ca 49 5a 2e dc a0 88 44 2e 14 b1 84 72 21 4f a3 64 25 0f 69 a5 79 28 0f b3 31 7b de f9 ff bd 3b fd 7f b5 d6 96 8e 9d f3 3f 4f 9f 77 bd 6e cf ee 3e 9d 7d cf ff 6f 94 52 4a 29 a5 94 52 4a 29 a5 94 52 4a 29 a5 94 52 ca df ae be 36 b9 9b 5f 56 56 94 bf d8 5d 59 dc b0 29 c7 28 a5 54 bc 63 98 b2 31 0f c1 03 8d 25 cd b3 9e 6d fc c8 40 1d c5 5c 64 19 a5 94 f2 39 86 29 6c 2a f6 e3 15 fa 6b 1b a7 b9 b3 1a 36 b8 0c 53 1f 1a b1 0f 53 60 94 52 ca 8f 61 ca c0 78 6c c7 23 74 c3 85 3b 60 a0 ac 2e 3c c0 56 8c 47 86 51 4a a9 18 7d Data Ascii: PNGIHDR(d5IDATx]hqmv<FyYFCZ\H;)v#IZ.D.r!Od%iy(1{;?Own>}oRJ)RJ)RJ)R6_VV]Y)(Tc1%m@\d9)l*k6SS`Raxl#t;`.<VGQJ}
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 06 f4 da 61 49 e0 81 b2 fa f0 12 7b 30 59 87 74 a5 52 24 6f 98 02 58 87 7a fc b6 83 92 44 03 65 75 e2 3e b6 a0 48 43 a5 54 92 e6 0d 53 1e 2a 71 09 ad 70 e0 26 f1 40 59 ed b8 8e 35 28 d0 7d 4a a9 24 ca bb 33 cd 43 1d 3e 0d 1c a6 14 19 28 17 0e be e1 2c 16 eb d5 19 a5 12 3c 7b 00 47 ed e0 03 78 0a 0e 94 15 c2 07 04 51 aa a1 52 89 50 55 55 55 16 26 a1 1c b3 91 be e7 08 ef d5 94 49 d8 85 e7 e8 b3 a3 91 06 03 65 85 f0 16 07 50 ac 57 67 54 3c 63 90 e6 e3 29 be e0 18 d2 ef 17 68 ef ce 94 8f f5 b8 3d f0 09 f0 34 1c 28 ab 1b 8f b1 5d 4f a4 ab 78 c5 20 ad 40 07 5c 9c 48 bb 81 62 10 72 b0 12 97 d0 02 07 ae 06 0a 40 3b ea 51 83 7c 33 44 a5 a5 a5 01 94 63 51 14 94 21 d7 28 a5 81 0a 0f 54 39 9a e0 26 8a 04 1b 28 ab 0d ab 87 19 a8 0a bc c1 d7 28 68 c0 74 a3 94 06 2a 3c Data Ascii: aI{0YtR$oXzDeu>HCTSqp&@Y5(}J$3C>(,<{GxQRPUUU&IePWgT<c)h=4(]Ox @\Hbr@;Q\|3DcQ!(T9&((ht<
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 0a 8c 84 94 03 0d f0 20 56 c3 5f 0d 13 35 a7 e8 04 54 1d b4 40 5a a8 6b 94 69 00 9d b0 51 a3 ed 97 4d 04 94 17 fd 91 0c 17 e2 91 82 6c b4 47 1a b7 1b 09 a8 17 e0 86 03 4e a4 e1 51 9c d6 b8 fe 45 b8 22 10 50 f5 b0 5a f5 a6 93 6b 51 40 39 d0 0d a7 21 e3 2b a4 6a bc e9 4d 46 00 12 66 c0 23 a6 19 98 0f a8 20 f6 62 0a 72 e1 32 71 f4 54 33 8c c7 5e 04 6c b0 16 4f 42 11 3e c4 f5 f0 18 0c 2a 27 b2 31 1c 9b 50 6e 83 80 32 33 1d e1 49 54 40 ae e4 53 13 01 75 1e b7 39 74 ca 60 40 4d 0c 71 7d 5d 2c d0 b8 7e 11 dc 11 08 a8 04 7c 00 19 45 e8 68 45 40 29 f7 64 62 23 64 ec c4 65 1a d7 ac 51 bd 3d dd 00 31 0f ca 64 40 15 60 36 da 21 de c4 06 77 99 78 02 9b 11 b0 e1 62 61 09 c7 f1 06 5a c1 65 b0 db 17 87 a6 98 8c fd 08 d8 21 a0 94 b7 11 0f b2 d0 1c 9d 71 3d da a1 29 fa c3 Data Ascii: V_5T@ZkiQMlGNQE"PZkQ@9!+jMFf# br2qT3^lOB>*'1Pn23IT@Su9t`@Mq}],~\|EhE@)db#deQ=1d@`6!wxbaZe!q=)
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 03 08 3a e0 49 bc 85 79 58 80 f9 98 8b 69 18 8d 81 e8 8c 1c c4 6b b4 d5 08 f7 60 00 ae 36 f1 0c ad 30 00 7d 61 34 60 5d 68 8c fe 78 09 9f 60 81 ca fb 78 0d 4f a1 db 85 e7 ae 6d 65 51 40 95 23 1f 4f 22 0b 4e 9b 1c 3b 55 07 bd f1 77 9c b3 24 a0 6c 52 ca 5b 95 07 75 2a f1 a0 76 75 03 54 5b e5 22 05 75 14 1e c4 c3 61 e7 52 c2 2a 19 75 54 92 6a 5d 77 2e 02 01 15 c4 3e 4c 46 53 b8 ec 74 2e 9e 6a 03 ba 34 fc 16 6b e1 ab 09 01 25 4a 54 ad a8 8b 08 a8 42 cc 46 27 c4 db fd 54 17 25 a8 1a 63 24 76 21 28 02 4a 94 28 9b 57 15 02 ea 2c 16 a1 07 58 b3 17 5b c7 4e 29 47 4e 5d 85 d7 70 08 41 11 50 a2 44 d9 b4 4c 04 94 0f 2b 70 3f 52 e1 88 e1 73 f1 1c 70 a3 0b fe 82 d3 22 a0 44 89 b2 61 19 08 a8 20 b6 a9 8f 38 37 b1 5d 4b 0e e6 47 31 a0 96 a2 85 89 ed 7c 1d a8 83 be f8 1a Data Ascii: :IyXik`60}a4`]hx`xOmeQ@#O"N;Uw$lR[uvuT["uaRuTj]w.>LFSt.j4k%JTBF'T%c$v!(J(W,X[N)GN]pAPDL+p?Rsp"Da 87]KG1\|
2024-04-25 19:25:22 UTC	1144	IN	Data Raw: 77 a3 20 cc 7a b8 57 e0 09 d3 56 02 de d0 99 71 de 8d cb ec 1a 50 29 22 a0 6a 68 45 21 a0 ca b0 0a 0f a0 a1 91 d9 ea 26 17 f7 36 c0 40 2c 47 59 6d 0a 28 e5 f3 1b e2 3b c8 1a 4a f1 38 5c 61 da 71 e3 6d 8d 36 4e e1 37 22 a0 44 a9 2b d6 03 2a 80 2d 78 1a 59 88 68 11 1e 97 e0 0f f8 19 15 b5 21 a0 54 5b bd 14 41 d6 b1 07 d7 19 08 a8 99 22 a0 44 d9 aa 22 10 50 41 1c c2 4b 68 09 97 23 4a 45 80 b8 d0 0c 93 b0 0f c1 6a 0e a8 83 58 8c 85 06 bc 8d 0c 93 63 50 d7 62 37 e4 30 24 7c 83 46 d0 db ef 69 b2 ce 92 9d de 51 0c a8 ed 58 68 d0 ff 22 51 04 54 0d 2d 0b 03 4a c2 49 bc 83 8e 70 23 da a5 1e 48 6f 87 19 38 0a a9 9a 02 ea 23 d4 83 c7 80 44 38 4d 7c c1 33 b1 04 92 89 69 06 d3 50 47 67 ea c2 08 8d f6 82 78 0c ce 28 05 d4 78 78 0c 4a 80 98 66 50 53 cb a2 80 3a 8f 05 b8 Data Ascii: w zWVqP)"jhE!&6@,GYm(;J8\aqm6N7"D+*-xYh!T[A"D"PAKh#JEjXcPb70$\|FiQXh"QT-JIp#Ho8#D8M\|3iPGgx(xxJfPS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49768	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:22 UTC	491	OUT	GET /wp-content/uploads/How-to-Add-a-Legend-in-Excel-770x400.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2024-04-25 19:25:22 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:22 GMT Content-Type: image/png Content-Length: 156902 Connection: close CF-Ray: 87a0b7f5db0117ef-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "648aa785-264e6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 15 Jun 2023 05:54:13 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AmBpUZHJjWp8QpFKlm5D0THk49ndnmIjPdYuKONGe5zVr5Uc2nQ%2FJxZwMXeJjhHOdJJQGpuxg2QptwaMJoKgZ%2F7yWB1gOjh7zh8TQ1mHEjAAY76FeBdUwx9NhvtvvHuGWi4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 02 00 00 01 90 08 06 00 00 00 1d 8d d7 d9 00 00 80 00 49 44 41 54 78 da ec fd 77 9c 24 d7 7d de 0b 7f 2b 57 e7 34 39 cf 6c 0e 58 e4 c8 04 90 20 09 66 12 a4 98 83 28 8a 92 4c 65 cb 94 e4 ab 60 4a ba b6 28 fb 95 ad d7 41 b6 7c 2d 5b 8e 92 6c 85 ab 48 31 93 00 88 8c cd 61 72 0e dd 3d 9d 73 57 3a f7 8f ee e9 9d 59 2c 48 84 45 12 fb c1 a7 3f d8 33 5d 55 7d 4e 9d 73 aa 7e f1 f9 49 c1 9f bd 5b 8c c6 fa 49 95 72 94 9b 35 14 59 66 30 dc 83 e5 da a4 cb 79 00 74 45 45 96 15 1a 76 93 2e ba e8 a2 8b 2e 5e 1a 4c 44 e2 fc d6 f5 ef c1 2a c6 39 fc 96 bb 99 ec 51 68 a6 1e e7 a1 07 b2 f8 87 06 09 8a 22 8b d3 25 12 6f 7e 0b 37 f5 3b ac 3e f8 1d 96 45 2f 93 27 4e 70 d3 78 14 45 96 5e b4 be 09 21 00 c8 16 0a e4 8b 65 86 Data Ascii: PNGIHDRIDATxw$}+W49lX f(Le`J(A\|-[lH1ar=sW:Y,HE?3]U}Ns~I[Ir5Yf0ytEEv..^LD*9Qh"%o~7;>E/'NpxE^!e
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: c6 75 5d b6 8a 59 fe d7 13 5f 66 31 b3 41 a5 d9 40 96 24 fe f2 ec 83 0c 45 12 64 ab 45 3c 21 78 6c f9 3c ff e1 c1 3f e7 fc e6 22 00 4b d9 4d fe d5 37 fe 90 47 97 2e 00 e0 09 8f ff f0 e0 9f 51 6e 54 69 38 16 00 7f 75 ee 41 be b3 70 86 62 a3 02 c0 62 66 83 5f fb 9b ff c4 62 76 13 80 62 bd c2 bf fa c6 1f 91 a9 14 00 b0 5d 87 bf 38 fb 00 48 e0 b5 dd e7 17 b6 16 59 cb a7 28 d6 ab 00 94 1b 55 fe c3 83 7f 4e b1 5e e9 4c c6 df 5d 7c 84 66 fb 37 01 4e af cf 75 3c 08 00 a5 46 85 87 16 ce 60 bb 0e 00 8e e7 72 76 63 be d3 06 58 cd a5 10 bb ac 29 95 66 9d 9a dd e8 b4 5d e1 b1 92 dd da b3 08 92 a5 6c a7 9f 00 f5 2b 42 c0 3c e1 e1 89 dd b6 1a b1 a7 9f 3b 7f 13 57 18 71 3c e1 75 77 58 17 5d bc 40 3c 91 5a 41 7b fd fb b9 67 60 8a 42 43 42 0e 0c 30 35 39 44 cc af e2 9b 3a Data Ascii: u]Y_f1A@$EdE<!xl<?"KM7G.QnTi8uApbbf_bvb]8HY(UN^L]\|f7Nu<F`rvcX)f]l+B<;Wq<uwX]@<ZA{g`BCB059D:
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 15 1e 5c 38 43 ae d6 3a c7 72 6c 1e 5c 38 cd 46 61 bb 3d 16 8f 0b 5b 4b a8 8a d2 19 7f ba 9c e3 ab d3 8f 77 c2 9a 9a 8e cd e3 2b 17 29 37 6a 9d c9 f8 f2 c5 47 49 97 73 9d f6 56 29 43 b6 56 ec b4 2d d7 66 31 bb d9 e9 97 eb 79 2c 64 36 a8 ef ca 01 c8 d7 ca 7b 26 b8 6e 35 d9 2a 66 3a 6d 4f 78 6c 95 b2 7b 8e 49 95 73 9d 6b 02 34 6d 7b 4f 9e 81 eb b9 b8 57 3c 9c 77 1f df 45 17 5d bc b8 d8 ae 14 f8 ce e2 59 6e 1a 3d d4 f1 88 be 72 84 b5 67 23 ae b5 72 88 84 e7 e2 38 36 8e e3 21 00 49 56 d0 34 0d 59 f6 68 94 4b 34 6d 09 25 10 25 68 c8 28 f2 ee 73 05 c2 f3 70 5d 01 b2 8c a2 c8 4f 63 32 7b 71 06 d7 1a 9d e7 39 b8 b6 83 e3 7a 08 49 46 52 54 34 45 d0 2c 57 68 ba 12 5a 20 48 d0 50 3b ef b3 57 8b 98 ed b9 2e b6 65 e1 7a bb 9f f8 12 92 2c a3 aa 2a aa aa b4 bd fa df eb Data Ascii: \8C:rl\8Fa=[Kw+)7jGIsV)CV-f1y,d6{&n5f:mOxl{Isk4m{OW<wE]Yn=rg#r86!IV4YhK4m%%h(sp]Oc2{q9zIFRT4E,WhZ HP;W.ez,
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 63 c1 b7 1d 3c 40 96 14 54 4d 6d 9d 23 3d 9f aa 2d 1e 8e 55 25 9f 5a 67 65 3b 47 72 35 45 55 0d 11 1d 18 62 b8 bf 0f d9 0c 13 0b 99 48 ae 85 eb 7a 08 49 41 51 55 54 a9 e5 21 f1 84 dc b2 7a e2 e2 b8 1e 95 c2 36 6b 8b f3 24 0b 3e a6 8e 1f 61 74 20 8a f1 3c ac d1 ad 79 13 7b 94 b1 e7 76 be 43 b3 96 61 e5 e2 25 96 36 72 d4 5c 50 15 05 3d dc 4b 49 f7 13 ae d5 a8 96 ab 98 95 1a f5 7a 1d 49 93 50 55 1d 4d 91 c0 73 b0 9d d6 78 24 49 46 56 54 34 55 06 04 9e e3 b6 64 1c 21 b0 ad 02 5b ab b3 2c cc 35 e8 3f 72 8c 7d 3e 83 90 2e 77 0c 8f d7 74 9f b9 4d aa d9 65 2e 9e be 44 55 1f e0 c8 09 13 43 8f a2 cb 1e 9e eb 22 24 b9 e5 91 10 2e 9e e7 a2 98 11 7a 87 74 a2 7a 08 bf 06 ae 6d e1 b8 2e ae 47 cb 32 bc b3 3e 79 0e 0a d0 ae 39 f0 5c 97 ad 95 1a 73 ab 2e 93 61 0d bf de 52 Data Ascii: c<@TMm#=-U%Zge;Gr5EUbHzIAQUT!z6k$>at <y{vCa%6r\P=KIzIPUMsx$IFVT4Ud![,5?r}>.wtMe.DUC"$.ztzm.G2>y9\s.aR
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 2c 9c 4a 15 4b 35 31 34 8f c2 fa 2c 17 cf 9d e1 d4 b9 65 d2 45 17 b3 37 82 5f 57 91 9f 83 22 e0 34 f2 54 b6 1e c7 a7 d5 d1 75 85 d5 d9 1a 4b 6b 0e 91 fd 41 fa 82 32 7a 4b 57 a2 51 b7 d9 d8 a8 72 f2 62 85 b9 a4 4d 5d 53 08 f9 64 74 09 aa f9 26 b3 f3 65 9e 5c a8 b1 90 6c 92 4c da e4 6d d0 0c 19 cd 71 48 6e d5 38 75 a1 c2 a5 b5 26 55 55 c6 e7 93 69 e4 9b ac af d7 59 c9 59 4c cf 55 59 4a db d8 8a 4c c0 54 90 85 47 21 d3 e0 c2 4c 89 b3 cb 75 96 4b 36 a9 a4 83 a2 aa 0c 4f f8 88 19 12 c2 83 72 55 c3 4c 5c 87 19 1a 40 92 be d7 3a b2 69 56 36 38 fd e5 0b 78 bd e3 4c dd 70 9c c9 be 30 41 d5 a2 90 de 20 67 05 09 84 fc f8 ed 6d e6 2f 9c e1 b1 93 67 99 5f 5a 23 53 b5 51 dc 02 0b 67 9f e4 d1 47 cf 30 bb 59 42 8e c4 e9 09 48 d4 b6 66 79 ea d4 69 ce 9e 9f 66 3d d7 c4 35 Data Ascii: ,JK514,eE7_W"4TuKkA2zKWQrbM]Sdt&e\lLmqHn8u&UUiYYLUYJLTG!LuK6OrUL\@:iV68xLp0A gm/g_Z#SQgG0YBHfyif=5
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 2f 5d 7c 94 8b c9 65 6a 56 9d 42 bd c2 83 f3 a7 79 64 e9 1c e5 46 8d ed 4a 9e 33 eb 73 7c e5 d2 e3 94 1a 55 36 8b db 2c 65 36 f9 f2 a5 47 49 96 b2 14 ea 15 e6 d2 6b 7c e5 e2 a3 2c 66 36 68 3a 36 17 93 4b 7c 63 f6 49 2e 26 97 f1 84 c7 fc f6 3a 8f 2c 9d e3 a1 85 b3 34 1c 8b 64 29 cb b7 e6 4e f2 c8 e2 79 6a 76 83 5c b5 c8 03 73 a7 79 60 e1 14 75 bb d9 2a 5c 96 5c e2 ab d3 8f 93 2e e7 11 40 aa 94 e5 eb 33 4f b2 94 dd ea 08 e3 0f 2f 9e 63 26 bd d2 11 a8 2f a5 56 b8 b8 b5 d4 b1 d4 6f 16 33 9c 5e 9f ed d0 f7 55 9a 75 4e ae cd 90 6b 27 18 ef f4 2d 55 ce 75 16 60 ba 9c 63 35 97 ba 6c cd b3 9b ac e6 93 bb 12 7d 5d 56 f3 a9 8e a5 1e a0 50 af 74 42 b4 76 ce d9 5d 70 4c 08 41 b1 51 dd 23 d8 d7 ed 66 27 3f a2 25 c4 db 58 bb 94 07 4f 78 7b 7e 03 c0 f6 dc 3d 6d f7 8a c2 Data Ascii: /]\|ejVBydFJ3s\|U6,e6GIk\|,f6h:6K\|cI.&:,4d)Nyjv\sy`u*\\.@3O/c&/Vo3^UuNk'-Uu`c5l}]VPtBv]pLAQ#f'?%XOx{~=m
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 9b a6 a4 12 ed ed c7 18 19 a5 2f 1a 41 b1 3c fa a3 41 56 6d 8f 66 63 9b 46 29 47 21 65 21 8f 96 c9 36 1a 28 4e 09 e1 d9 e0 0f 13 0c e9 64 b2 29 36 bc 0a d5 fa 18 83 83 7d 44 02 1a 0a 5c 5b eb bb b0 b0 9a 15 0a db 0d f4 80 45 a5 94 c7 ab 15 a9 0b 13 cb 91 f1 85 fa 18 18 ee 67 e1 f1 4b 34 63 87 e8 1d 18 60 d0 d7 a0 a9 eb 68 ba 86 ae 5d 03 06 25 e9 8a ff 3f 4b b7 99 70 5d 1c d7 41 f6 da ca ce ae b5 2a 49 12 8a a2 13 ef 1b a0 67 78 90 de 11 1d 51 db 26 7c ae 80 d7 70 51 0c a8 94 72 6c 67 eb 14 f2 79 1a f5 3a d5 aa 83 17 94 08 86 63 c4 06 07 e9 ef 4b 10 d0 f2 18 86 8e a6 d9 e8 9a 8a b2 e3 99 b9 a6 61 41 2e 76 25 4f 7a 63 8d 25 27 4a c0 93 89 88 32 c9 9c a0 e1 eb 61 b2 7f 98 48 bc 8f 90 ba ce 85 85 0d f4 f1 3b 38 7c 64 1f f1 ea 3c 49 41 8b b9 46 0b 12 8e ea e4 Data Ascii: /A<AVmfcF)G!e!6(Nd)6}D\[EgK4c`h]%?Kp]A*IgxQ&\|pQrlgy:cKaA.v%Ozc%'J2aH;8\|d<IAF
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: c7 f1 3a fd b9 b6 cf e1 2b f7 9b 10 02 d7 b6 a8 e4 f3 14 1c 19 3d ea 27 e4 15 49 af cf 72 61 b5 88 6c 6a 68 4e 1a f5 a3 b7 bc 85 cf bd fe 03 1c 9f 79 9c c7 96 2f 70 7c 68 1f 3f 73 cf 87 a9 34 6b 7c f5 d2 e3 14 ea 15 7e ee de 8f 32 1e 1f 60 3a b5 c2 4a 2e c9 a7 ef 78 17 f7 df 70 37 bd c1 18 0f cc 9f e2 8d 87 6e e1 1f be f1 23 3c b5 3a cd 97 2f 3e ca 44 7c 90 9f b9 e7 23 e8 aa ca 23 8b e7 59 cd 27 f9 f8 6d f7 f1 f6 63 77 71 72 75 9a 64 39 c7 1b 0f dd cc e7 ef fd 18 8a 2c 73 72 6d 86 83 bd a3 fc fc 9b 3f c1 e9 f5 59 be 72 e9 31 24 24 7e ec 75 f7 d3 13 8c f2 9d c5 b3 4c a7 56 78 f7 89 d7 f1 a9 db df ce 4c 6a 95 6f cc 3e c9 b1 a1 49 7e fe cd 1f c7 50 35 e6 b6 d7 88 98 41 7e ea ee 0f b2 92 4b 72 6a 6d 96 a6 63 71 df d1 3b 79 db b1 3b 79 7c f9 22 5b 76 86 7d bd Data Ascii: :+='IraljhNy/p\|h?s4k\|~2`:J.xp7n#<:/>D\|##Y'mcwqrud9,srm?Yr1$$~uLVxLjo>I~P5A~Krjmcq;y;y\|"[v}
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: b1 a7 ed 89 d6 3d d9 1d 76 54 6e d4 f6 84 2d 5d 99 23 e0 7a de 9e df 00 9e d6 be 32 ac a9 8b 2e ba 78 e5 42 00 0d c7 e2 be a3 77 e0 d3 cd 17 7e 35 71 15 c3 ed 73 10 66 aa cd 3a b5 66 9d 68 20 84 aa 7e 17 ce 72 e1 51 2f 6d 93 2b 5a e8 91 21 0e 1c 9a 20 11 f1 a3 ab 20 dc 1a a9 c5 75 ca b6 4e ec d0 7e 06 fd 2e b5 d4 22 33 17 2f 70 ee e2 2c f9 86 4a 20 18 41 54 56 99 5e 5a 21 5d d7 e8 0f 6b d4 73 9b cc 4c 5f 60 6e 6d 83 6c 53 41 91 c3 0c 8f 84 69 6c 15 70 8d 08 fd 87 f7 91 f0 b5 3c 03 46 b0 46 6a 65 8b 95 d9 05 96 93 79 0a b6 c1 d8 44 2f 7e 4d fd 2e f2 81 87 d3 cc 33 7f ee 14 4f 3e fc 30 4f 9d 39 c7 62 b2 84 d2 7f 8c 83 07 47 d0 ab 79 1a 42 27 34 30 48 8f e9 50 cd 67 28 39 7e 7a fa 83 58 c5 34 2b 33 d3 6c e4 f3 64 aa 36 e4 5c 06 8e 1f 26 44 8d 46 7a 93 cd ad Data Ascii: =vTn-]#z2.xBw~5qsf:fh ~rQ/m+Z! uN~."3/p,J ATV^Z!]ksL_`nmlSAilp<FFjeyD/~M.3O>0O9bGyB'40HPg(9~zX4+3ld6\&DFz
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 03 c4 fd 16 a5 74 0d 25 10 23 d6 1b c5 94 05 f5 72 96 e4 c6 0a a9 86 c1 d0 d0 08 43 3d 11 34 55 be 66 1e 01 bb 56 20 97 2f 50 70 7d 8c 0f 24 30 5b 1a 33 cd 62 8a 64 ae cc 7a 55 23 ae d6 f0 45 fa 48 44 43 38 b9 55 b2 d5 3a 8e 12 c1 f4 3c 08 45 89 f8 9a 6c 2f ad 92 ca 94 b0 fc 31 fa 86 27 d9 3f 14 c3 a7 ab 97 43 b9 9e 05 ea f9 25 52 a7 fe 6d ab a0 58 d4 cf f6 56 93 95 b5 26 39 0f 24 4d c6 1f 35 38 30 a8 13 56 3c d2 e9 06 2b 49 9b 26 32 5a d0 e0 d0 b8 41 4f 00 aa 39 8b d5 8d 06 a9 9a 4b d3 f2 d8 5a 77 08 4c 04 b8 e9 68 80 09 d3 23 b3 dd 64 79 cb a6 2e 40 0b 1a 4c 0c 69 84 f1 28 95 3d 94 98 41 af 09 cd 4a 2b 59 38 10 d2 08 1b 82 72 d1 62 79 bd 41 c9 01 7f 42 c7 74 20 a0 2b f4 0d 1a 84 74 09 c7 6e 15 14 8b 1c f8 30 91 c1 eb 91 be 67 5e 95 83 d5 c8 b2 f8 d4 34 Data Ascii: t%#rC=4UfV /Pp}$0[3bdzU#EHDC8U:<El/1'?C%RmXV&9$M580V<+I&2ZAO9KZwLh#dy.@Li(=AJ+Y8rbyABt +tn0g^4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49770	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:22 UTC	721	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:22 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:22 GMT Content-Type: font/woff2 Content-Length: 141600 Connection: close CF-Ray: 87a0b7f5eac51d80-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32e0-22920" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:08 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2F19uJt9K3YqIXgyPdug3LkQAlLPfloQ%2FCreihFa2ahBcm%2BdzZQCvwFwW7heiEzRZRFCXEdP9W5zdiOY%2Bj8bAjHlZEkLsNoJqWwO%2FSTK%2FJR5K3xCnDWUKVa0Xu0xMzytaNk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:22 UTC	456	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 29 20 00 0d 00 00 00 05 ed c8 00 02 28 c6 01 4b 02 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 06 11 08 0a 95 89 18 90 d0 7e 01 36 02 24 03 b9 72 0b b9 78 00 04 20 05 8a 16 07 81 bf 27 5b ce b3 94 83 d1 ed f6 44 a8 80 dc 26 02 c0 61 5f ae a7 d6 f8 e6 8a b1 31 6c 6b 3d b7 15 85 d2 b8 c8 5e 90 6d 3a 12 a8 5f bd e1 a9 50 35 df b6 c9 ec ff ff ff ff 7f 5d b2 10 99 bb bf d2 fb 26 cd 27 2d dd 00 c4 c9 60 30 1c 38 9d 0a 41 4c ee 7c 20 4a 39 61 2c c8 c9 94 30 63 62 49 10 ab cd 4e 36 91 b9 4f eb 62 a2 a4 ee 4b a5 ea c3 d3 73 6c 22 46 32 db 30 5b e6 bb 1a 11 d8 63 47 f6 df d0 88 1b 75 94 5d 07 8a 4d ac 76 39 e4 dc 46 fb bd 7f 2f 74 79 b2 09 cb 2a d3 ea 1a 5d c4 32 64 7e 10 f5 e6 68 Data Ascii: wOF2) (K?FFTM`~6$rx '[D&a_1lk=^m:_P5]&'-`08AL\| J9a,0cbIN6ObKsl"F20[cGu]Mv9F/ty*]2d~h
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: c4 81 05 99 b4 2e dc 07 bd bc fe 28 24 45 82 a7 b9 cf 79 9b cb 4f 0a bf b7 47 bc 15 a6 aa ea a0 ad 62 12 06 08 8c 40 a1 6b d4 09 55 4b 46 21 c4 ac 61 4b b2 9b 72 f7 ad 3a 6a 55 28 06 a1 ba 43 a2 3c 18 c9 78 14 e3 b1 82 e1 f9 b9 f5 c6 22 0a d8 18 0c 46 0f 36 68 d9 5f 11 b5 31 18 51 1b b5 01 a2 84 c0 30 37 15 65 58 a0 18 60 81 51 e0 89 91 a0 07 46 9d 78 56 a2 de 79 ea 79 77 46 9d 5e 2e 1f 28 f2 b1 80 dd 4d 85 17 e5 28 00 fe af 54 cb fa d6 ad 6a e5 f8 7f 7d 34 b0 9b 11 18 9c 42 e8 46 91 c2 05 60 8d b6 9d 71 e0 e1 02 5c bb d7 b7 0e 08 a4 24 5b 40 66 98 40 2a c4 c9 01 40 2b 5c a4 e1 bc 91 9d 4f 8e 80 89 fd 9e 79 47 a2 74 42 25 93 ea 4a 5a f2 a7 26 5f 66 3a b4 3f 5e 8d 2d 2f a4 ba 56 75 e0 83 f9 45 fe ff e1 60 be fb 45 32 48 12 4b 03 c2 08 47 c3 d9 f8 40 89 32 Data Ascii: .($EyOGb@kUKF!aKr:jU(C<x"F6h_1Q07eX`QFxVyywF^.(M(Tj}4BF`q\$[@f@*@+\OyGtB%JZ&_f:?^-/VuE`E2HKG@2
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: bd fc 33 ab 59 8e 3d 6f aa d9 82 8a 74 4a b1 96 3a bb 28 dd d9 9d dd b9 e4 be 79 7f a1 dd ff 77 71 48 14 11 a8 33 02 a9 23 16 10 0f 58 80 3a 10 94 b4 80 d3 02 8e 94 73 a2 e4 24 c9 49 77 95 80 05 a9 44 05 92 17 42 6a 0a 87 d4 da d5 15 a5 9b d2 3c bc dd f8 e0 08 1f 80 b7 56 f0 f7 81 5b f3 bc 2d bf 45 a9 e5 01 b7 45 14 60 40 16 58 5a b4 ca 59 f1 77 57 92 01 c4 0a 71 f7 10 37 60 56 b0 32 ef 2b ed 86 72 ce de bf 30 1b 11 61 8c 88 50 2a 2a 26 2a e6 3b f3 ab 26 09 cc 7e be 45 68 cc 52 84 c6 64 8d 11 5e 61 84 10 e2 21 84 09 7d dd c3 65 86 35 b5 92 61 da a0 cd 9a b8 98 2a 38 10 0c 64 dc 98 bf 7b de 20 db fa 7f 23 f4 ca bb f3 36 18 51 03 26 a0 60 02 52 65 bd fb 15 97 cc d5 60 b9 bb 6f 15 0b a1 1c 62 03 14 15 24 09 bb c9 2e 09 ff c7 98 66 cd 27 df 36 ff ed 76 ac 6c Data Ascii: 3Y=otJ:(ywqH3#X:s$IwDBj<V[-EE`@XZYwWq7`V2+r0aP*&;&~EhRd^a!}e5a*8d{ #6Q&`Re`ob$.f'6vl
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 0a 1b 08 07 fd 53 98 66 4a 1d 43 05 6d 23 8e fc a4 d7 d7 68 e2 0f 6c 35 04 e5 98 ff 87 62 42 48 e1 f2 e0 18 01 39 0e a3 51 03 d8 84 2e e3 70 90 f9 40 a1 47 c6 ec 42 88 47 90 24 48 03 47 ca b0 51 a0 61 13 a8 98 0d cd c0 46 e8 b7 6a f5 94 94 72 8a a6 52 bd c5 0f 76 d8 e0 3b 41 22 0e 85 14 ee f8 c5 95 b6 9a d2 da 35 bd 3d f2 b9 0e dc 16 30 a9 f1 a6 c1 a4 8e 74 d6 03 a5 3a 13 ba 43 66 69 bc e0 73 48 64 ac c3 0d 18 8d 9f 14 44 56 37 32 89 6a 90 cd 41 53 b0 52 50 81 19 06 d4 05 76 70 f3 d8 83 2b 11 62 f4 b4 87 89 c0 56 25 62 41 ea 29 39 9a dd 18 1b 90 e4 d4 cd 58 f5 b8 1e 0c e8 b7 b2 40 68 e1 3f 64 19 1c 37 6d 4e 11 51 f8 3e b9 62 f4 ce 48 4b 5b 38 e5 1c 4c 63 4b 18 2b ff 18 c0 5f 00 4f 80 23 9c 45 7c 1a be 5b 8e ac a1 46 70 55 88 07 da 95 00 77 0c 75 d3 5f fa Data Ascii: SfJCm#hl5bBH9Q.p@GBG$HGQaFjrRv;A"5=0t:CfisHdDV72jASRPvp+bV%bA)9X@h?d7mNQ>bHK[8LcK+_O#E\|[FpUwu_
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 71 33 c7 a1 6e db 7a 5e c2 b9 0a 0f 36 b7 08 61 8c bf 09 ad 24 63 ac 8d d1 4b 94 10 aa 10 05 e9 44 4e 4a ac d7 eb da bf ed 6f de 3e bd 4d bd fa 21 b5 54 5a bf dc e7 b8 c4 fd e2 b9 e0 0e 75 54 d5 d9 06 9d dd 2e 6a 44 2b 79 09 d9 f3 79 0e da 39 71 9d c3 1d 0e da b6 da c1 37 d1 6b fd f9 ac 5d d7 5a 52 95 a8 a3 c4 8c cb 5a c3 7c 5e d7 bb 5d df 6f 5d 77 0a 74 ed cc c5 65 b6 47 45 16 d5 f2 b4 19 9c c0 49 9e dd 77 d2 de 18 88 bc 4b e8 8c 15 49 4d 23 ea 4d b3 db 49 e4 76 ad 88 52 9d 74 37 a6 cc 6e fe 46 09 ab f9 48 fb 7e 58 c0 72 d3 c8 c3 70 05 04 8b 69 f5 62 2f 22 04 3d 22 9b d0 36 bc 02 2b e7 93 6c 95 24 23 09 4d 93 d9 99 33 a0 92 28 80 e3 a7 cc 77 db e7 d8 13 07 7d 19 0d 14 d7 d3 c4 ea 49 50 d5 dd 73 dc a3 7a 4e 83 ae 23 7a f7 05 71 40 63 4f 36 63 7d 10 a9 61 Data Ascii: q3nz^6a$cKDNJo>M!TZuT.jD+yy9q7k]ZRZ\|^]o]wteGEIwKIM#MIvRt7nFH~Xrpib/"="6+l$#M3(w}IPszN#zq@cO6c}a
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 04 2d cc ea 70 71 69 ca de 32 9d 2f 68 b2 d7 4b 90 2c 97 bd 6a 52 ec 56 69 8e bd 8a 3d a9 b3 14 99 d5 be ed 17 8b ee 2c 39 83 8c d6 86 ee b7 90 1c ce ce 64 f1 e6 d2 3c 26 c9 93 31 bd af 68 c7 01 c8 1d 61 ac 3a 7c 68 8c 9f 7a df 82 97 55 66 c1 91 2e 7e 46 01 b9 05 9c 8e 38 ae 54 5f 6c 86 76 a6 30 4d 54 ee 14 f0 7e 73 9e fb d5 99 78 7c 3a 0e 21 1d 9f da d4 b6 b9 d8 5e c4 2e cb 66 b9 e8 97 db 49 63 4d 33 71 a7 6f cb a4 25 4d c7 d6 8e ac 48 a9 44 fb 8f 53 9b 25 26 cb 84 ca 74 f6 65 cd a4 ae 85 e2 3e 39 bf be a3 50 90 d8 34 fd 11 ef 56 79 2c eb 59 2a af 44 75 72 ae 94 9e 7b 5d 42 2b f3 ec 62 07 3a de 64 d9 44 02 3b af 7a 67 b4 62 46 6a eb 00 3b d1 6b de 5f 62 1b 88 59 2e 7b f7 96 b8 f8 d9 00 db f1 66 2c ce da f7 bf 9b f6 6c 88 d6 3e 47 28 47 f1 8a b7 c6 8b df Data Ascii: -pqi2/hK,jRVi=,9d<&1ha:\|hzUf.~F8T_lv0MT~sx\|:!^.fIcM3qo%MHDS%&te>9P4Vy,Y*Dur{]B+b:dD;zgbFj;k_bY.{f,l>G(G
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 24 b5 01 55 25 1a 0b 51 76 d4 7a 53 66 c7 84 8b 24 51 79 9f e2 fb 7c 6f 7d 03 1f cd 56 b2 74 4d e8 69 bd 1b 7e 9a 3b 79 e0 ba 44 8b 65 33 6a ae b5 56 47 b0 d7 6c bd 46 e4 4c f3 02 cb 26 d5 03 8d 7c b1 f5 ea 1e 1e bd bb af 82 b2 da c9 2d dc 97 5c 99 b1 6a 3c 81 26 b5 36 35 49 72 96 cd f3 8e 50 6a 59 0b 7a fe 78 00 5c f8 60 24 04 b3 11 13 42 66 8c 18 1b de 58 47 85 61 ec 7a 60 80 ba ce 56 bd 00 25 cf 15 34 ab b7 b8 68 25 c6 da af b1 0d b4 a6 9a 95 d7 fc 91 e0 1b c3 c0 f7 11 8b d5 e0 a3 6f 09 17 fc 1b fc 2b ff 0f d6 36 c3 55 fd 8d 10 c9 df 7c 0e af 6a c8 c7 2f ed b6 35 9b 37 85 72 29 98 c2 e2 db 47 dc c3 dc c8 ed b7 e1 86 96 57 d0 02 bb 6a 3b 0d f9 94 f9 b7 b1 9f 6f 93 15 b9 ba c8 d2 64 e7 5c 7a 73 cd cd 9c b3 c9 f2 5f c2 f9 7b e9 b7 99 1f 58 fc f2 22 00 65 Data Ascii: $U%QvzSf$Qy\|o}VtMi~;yDe3jVGlFL&\|-\j<&65IrPjYzx\`$BfXGaz`V%4h%o+6U\|j/57r)GWj;od\zs_{X"e
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: a3 a7 c9 78 25 bc 83 71 6c f0 52 72 67 b6 dd b6 b6 58 b6 13 c9 01 c0 09 22 21 af 08 4d e0 bb 70 12 66 0c 34 af 63 a9 d6 8c be f7 3c 24 89 b4 aa c8 9d 41 5e 48 4b 83 26 6b 70 f0 69 cb 56 c5 87 f0 c5 07 98 ea 7f 2f 84 34 1c 05 c7 02 82 e4 4f 44 14 8e 33 31 97 08 a3 72 14 c1 d8 51 f2 8f 8a 2f 69 86 ef 2c f2 22 e6 cd f0 a5 33 1c d7 ca 20 69 be 4b 6d da d1 8b 73 85 c7 ac 93 4f 3a 09 f2 62 a4 d3 87 6d db 64 5c da 5f c4 41 ab fb 97 7f f9 80 70 32 73 e8 d5 10 50 c3 52 92 44 dd 6e c2 c1 38 73 99 d1 56 a5 39 3a 17 9d f6 d2 8e 5b df 6c 94 72 65 4d 36 d0 8a 32 a3 3c 11 35 db 28 69 58 6c 3b d8 b8 b7 39 2a 74 54 35 8a d6 aa a1 d2 9f 6a 80 34 71 be c3 d3 e1 40 4b 76 ca 21 7b 68 06 2c 21 09 a6 f2 34 16 28 c1 3c e3 2f 70 46 c4 89 e6 7f cc cd 58 75 94 bf 37 32 10 32 44 d6 Data Ascii: x%qlRrgX"!Mpf4c<$A^HK&kpiV/4OD31rQ/i,"3 iKmsO:bmd\_Ap2sPRDn8sV9:[lreM62<5(iXl;9*tT5j4q@Kv!{h,!4(</pFXu722D
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: e1 47 8f 2e 5d 61 28 45 99 24 f8 5a b7 64 45 5e a8 94 c7 e2 2b aa e2 00 ff 08 13 d4 ca 32 a0 93 3f d8 c1 29 99 64 76 1a 92 32 eb fb 3a 1b cd 21 12 cc 01 1c ad b2 3e 19 d9 26 d2 7a 76 47 fb 84 d0 83 f3 a7 25 01 8e 14 88 37 ea 3c be b4 b5 cf 42 19 a6 d2 59 9e d5 d2 be 1f 7a 87 db 6f 8c 68 84 31 af 21 89 99 68 0b e8 de f8 db 89 23 2c 9b 99 48 84 c8 ae 42 8f ff f3 1c 45 b2 94 f0 af 13 cf 81 0d 62 89 be 2e f1 2d 04 47 6e c0 52 fc 10 0b d6 0c 60 d5 45 c2 e2 6f d7 c9 a2 1e 97 e2 a2 86 57 06 45 4f df 3a c1 5b 3a 11 e3 1d 7d ea 06 f7 78 f8 9a 6c 70 32 21 9b 7c 7d 48 fa 74 f3 34 74 29 9e 84 36 9d bc 0d 2e 0e 5c 15 75 84 fd d3 fb b9 a2 39 87 66 ed 44 d2 94 8c ba 64 d4 9f a9 6c 49 35 da 58 cb 39 4e 34 76 eb ec b6 e6 31 67 af 51 60 d6 aa 52 dc 0c 3b 9d 85 0d 0b c1 09 Data Ascii: G.]a(E$ZdE^+2?)dv2:!>&zvG%7<BYzoh1!h#,HBEb.-GnR`EoWEO:[:}xlp2!\|}Ht4t)6.\u9fDdlI5X9N4v1gQ`R;
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 41 39 93 77 a7 42 e8 ec 4f 89 b7 86 9d 91 7c 1d 84 fd 60 1b 3b 14 35 a8 ce b0 3d 1d 72 d3 31 67 e8 aa 10 82 6e e5 69 73 f9 1d 2a 85 ed ee b8 3d 04 80 11 8f 86 ae 39 0f 44 55 78 36 8a ef 91 e7 f8 e8 d6 41 70 13 22 d3 3c 58 5e cd 49 00 1c 26 ef 67 18 9d 86 e8 14 01 97 67 00 c9 77 6a 84 66 d3 51 71 01 3a a8 36 7b 49 46 01 2c 8a a2 db 9b 6a 94 17 e7 80 8f 38 66 a4 f8 0c 18 b4 38 8a e6 8f 18 45 3f a6 10 85 f8 03 72 87 74 b4 44 f7 68 b1 f0 2c a2 d5 f2 bc 54 50 64 e0 9d 63 21 27 bd a2 52 af 5b 43 6a b7 85 12 b1 c7 16 41 53 77 6c be ec bc 75 fc a2 ed 4a 01 b1 4a 27 01 74 47 bb 81 c7 e4 19 24 89 75 e9 48 28 a4 d8 2a d6 12 fe 19 ff 82 62 59 d8 46 8a 00 ce 2b 29 fa 55 19 52 6d ca 8a 18 5a 60 3d cd 6d 29 65 58 1b 03 4c 8d cf e5 db c6 24 58 21 e9 ba 55 52 2a a7 04 4a Data Ascii: A9wBO\|`;5=r1gnis=9DUx6Ap"<X^I&ggwjfQq:6{IF,j8f8E?rtDh,TPdc!'R[CjASwluJJ'tG$uH(bYF+)URmZ`=m)eXL$X!UR*J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49772	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:22 UTC	722	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:22 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:22 GMT Content-Type: font/woff2 Content-Length: 76636 Connection: close CF-Ray: 87a0b7f5f818677d-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32df-12b5c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zFunAZiCyOwzfpGwxuRU3T1CIsehEWtQKrTotmM2Oe69ZFdJ5XNidQvowH7UjTGTmV%2BNmxq36Bif45dGNwX5BY5hPlH3iSh5GvfoAgOCE9gaKIji0k9%2FxE4Y8OC43YDRBQI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:22 UTC	465	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2b 5c 00 0d 00 00 00 02 06 78 00 01 2b 03 01 4b 02 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 6a 11 08 0a 87 b3 5c 85 e6 7c 01 36 02 24 03 8d 74 0b 86 7c 00 04 20 05 8b 05 07 a9 3c 5b b6 9b 71 a7 ea 22 ac 7e 64 b0 17 b7 49 04 00 b0 76 59 a6 ed e1 13 cd 46 c4 6e 07 b9 d0 8b 58 53 30 8e 59 01 1b 07 30 c6 bb fd b3 ff ff ff ff f4 04 ff 12 63 db 76 c7 fb bb 43 00 15 8c aa 0a d5 81 57 41 aa 65 94 f4 f1 32 59 eb 36 6b 59 af d9 23 01 76 73 ba fb 4e 15 86 b0 5e 2f 5b 9d 7d 6f 8f 6d 72 1f c1 e1 08 70 04 38 02 dc 61 63 9f c7 0a 9b 3b bc ae f6 19 c8 7d 05 38 05 94 1c db 6e 1b 2d 98 fd ad 64 5e 0d 9a fb 1e dc 23 ea 46 d4 8c f0 87 78 22 04 4b c4 6f ca 80 5e 32 af 46 e5 64 30 99 7e 32 Data Ascii: wOF2+\x+K?FFTM`j\\|6$t\| <[q"~dIvYFnXS0Y0cvCWAe2Y6kY#vsN^/[}omrp8ac;}8n-d^#Fx"Ko^2Fd0~2
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 00 c1 52 69 16 2c 67 6b 67 e7 ce d2 fc a7 ba f2 fd 3f 1d fa 0a aa 62 9e 17 44 75 ef 06 f0 20 d6 b8 22 5c 7d a2 7a 22 15 fd 7f dc 83 ee 79 3f 93 04 03 1e c0 88 95 a8 56 29 75 4a 50 90 8a 74 a6 cc 77 60 9e b5 bd 8f d2 35 3c 3f b7 de ff 7f 15 7f 91 d4 92 c8 8d c1 88 5a 11 bd 20 22 25 52 51 19 25 22 a2 84 62 24 46 25 da 67 c6 9d 18 79 e1 59 75 e1 be 2d ab 7f af 03 66 4b aa aa 67 fe b2 1f 6e fe cb 7e bb 0a 5b 80 1a 23 79 24 91 0a 35 5f 2d f5 ff ab ee dd 55 bd 65 c1 80 c0 89 bb a7 07 6c cb 8e 05 96 21 0e 98 6f 1c 6c 88 a3 4d 14 9d fb f4 f9 d1 62 d3 bd 9d fe 9f 0b 06 04 86 61 49 96 41 04 c1 eb c4 b1 b9 7b fa c1 ee dd b3 ff 11 e0 7f ae 59 94 7c ae 1c 28 90 83 bb 1b df a9 30 0b 81 c5 1f 2a 09 af ce ea f7 96 fe f1 b1 79 b7 46 bb 7f 95 03 40 e6 31 6d 38 49 48 b9 b8 Data Ascii: Ri,gkg?bDu "\}z"y?V)uJPtw`5<?Z "%RQ%"b$F%gyYu-fKgn~[#y$5_-Uel!olMbaIA{Y\|(0*yF@1m8IH
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: b4 12 a6 44 95 09 0b f6 e9 ca 0f de e6 c4 9a 65 6a 55 bb ba f0 94 04 19 72 14 28 d5 9c 7a 4e e9 ac 2e 04 6e f4 3c d1 4b bd 09 f8 9a 07 a6 2d 9a 60 6d f9 2d e3 b9 bd 72 d2 ca ef f2 cb 95 53 7a f8 d0 a2 5b b9 0f 3c ba c5 7c 32 8c 4a fe b3 ba b1 e2 8a 87 f3 ff 88 a2 ff a8 af fb db 4d 5d 95 69 12 79 86 aa 48 22 81 fc 6d 79 12 eb b2 c0 bf 22 21 bf a6 2a 32 0b 10 c4 0f a5 c1 1f a3 c1 5b 6f bc f4 c0 65 17 5d 10 2f 82 99 89 81 4e 98 50 21 82 04 0a e0 4f 4b 4d c5 97 17 4f ee 94 dc 28 38 73 22 21 24 c0 c5 c1 c6 fa bf 8f eb fc d5 cb 5e fa d4 ee 76 b9 f3 9d e9 b7 82 9d ed 58 07 db df a2 cc 2a ab a8 ac d0 82 f7 68 97 b7 7f e7 b6 7f 72 f3 a7 ec ac 24 4b 36 89 93 88 84 c4 bf c4 7f c4 27 e2 c7 e2 bb e2 25 f1 39 f1 9c f8 94 f8 a4 b8 50 5c 20 ca a2 28 7c 26 bc 2f 5c 10 5e Data Ascii: DejUr(zN.n<K-`m-rSz[<\|2JM]iyH"my"!2[oe]/NP!OKMO(8s"!$^vXhr$K6'%9P\ (\|&/\^
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: c1 b0 69 8b 41 cc 93 52 4e 0e dd 3c 63 7a e3 c7 38 4d b4 bd 62 27 96 b5 7b f0 58 d0 82 8e ec 08 c6 07 fc 18 c4 cd 74 8c 4d a2 de ff 6f 70 36 0f a4 fd f2 ab 31 fa 8a 1b 02 40 a5 28 25 7c 41 2a 85 70 de ad ec cf 11 49 0e fc 52 7c 50 5d 6f 5c f0 67 bc 38 db ed e3 89 b3 4b f7 06 15 1e 6c 31 a8 d8 a3 c1 2d 61 e3 92 b2 8c 23 6a 53 ac b5 7d b0 72 90 d4 b2 49 eb 54 f4 c5 f9 ee 61 40 ac 11 55 c8 32 e4 9c 24 1a 00 f6 9b d3 b6 90 bd 0f 38 b7 a8 95 50 5a 0b 05 58 16 bf 50 1f 98 57 74 31 1d ca ce d6 12 3f 83 a8 54 b2 30 29 74 e6 60 51 85 8b b3 ea 79 7b ba 9b 57 7c ef e9 e5 61 07 c0 5a 73 03 ad 82 a7 80 b4 3c e6 84 18 ab b8 29 d3 b8 8f 73 b2 4c ce cb 2a 35 81 f8 4d a6 c8 d3 b8 c9 16 fd 96 2a 28 c9 03 60 57 90 57 96 34 f9 42 03 90 5f 76 ea cb f0 75 05 d7 61 da 10 1b bc Data Ascii: iARN<cz8Mb'{XtMop61@(%\|ApIR\|P]o\g8Kl1-a#jS}rITa@U2$8PZXPWt1?T0)t`Qy{W\|aZs<)sL5M*(`WW4B_vua
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 72 18 1c f1 9c df f2 5b 40 28 c8 d0 77 36 fa 8f 20 f6 a3 7a bf 16 07 87 f1 bd e4 4e 74 e5 8b c4 c5 3e 0d 52 bf 75 3d 9a 44 39 fe de 30 d5 0a 98 04 dd 5b 17 77 af 52 ff c8 3d 55 e6 fa 4e ec 0b db 05 67 39 22 ca 24 89 24 c8 c3 12 8b 14 54 36 a3 48 50 54 8e a0 d4 c4 e6 ed 34 55 aa 27 7b dc e8 7a 25 7d cf c6 8b 8e 9b 5f 0f 69 7b 22 d5 93 e0 56 64 f8 2a 5f ae f7 07 4c 1b 02 60 9c 8a 56 ea 14 7f 1c 40 e8 87 63 92 46 fa 2b e1 d3 93 0b 60 8c 84 e6 f8 30 69 df ae 24 d0 b9 0b e4 2f fe f6 57 98 22 7d 76 03 65 ae 46 76 4c 31 22 45 0b 8c 03 87 3a e4 82 27 d7 af 41 bb 20 0e 7a ab f3 13 a5 19 71 bd 11 45 d4 8e e4 96 9c bd 39 9b 59 84 48 5c fd 1b 55 5b 84 b4 d7 fd 40 2c 8d 2f 96 78 77 b8 f0 c7 21 10 20 c3 1e 13 2e 24 f1 6d f4 1d 69 a3 ff 08 9a 1b c6 11 02 91 04 6a e3 48 Data Ascii: r[@(w6 zNt>Ru=D90[wR=UNg9"$$T6HPT4U'{z%}_i{"Vd*_L`V@cF+`0i$/W"}veFvL1"E:'A zqE9YH\U[@,/xw! .$mijH
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 88 52 40 3a 9e 03 cc 5a d6 ad 1e 80 b5 15 56 7d 7d 97 54 1e a6 08 da 0a c5 11 fa d9 96 81 96 87 90 09 a8 b3 1c 0e 13 1b ed e2 3c 8f 95 f2 c8 4a a7 14 3a c4 aa e2 6f 40 f2 03 fa 29 36 2a 0a 3e a7 87 6a ac e6 cc 06 f2 45 c3 08 bd 5d 9f ef cd 47 f6 60 c9 e5 a7 0c 47 b7 1b 95 60 23 fc 65 f2 7a d6 bd 7b f1 18 da 21 b9 b5 a4 b7 78 3d bc 4c 71 fb 3a eb 01 0a a2 e2 ef 17 d4 4e 04 34 18 10 c5 0b ee 41 b3 62 2a 07 e5 70 33 43 88 cf 08 77 34 01 79 73 4b da f9 ae ed 92 fe a1 a2 36 5f c7 76 fb fe d0 a5 56 79 16 51 78 fe cd 4d d6 b9 db ad ee 07 53 a7 fb 24 aa f3 a6 ed 0b 96 7b 37 ce 5f d1 c1 42 0a 18 e1 ca 0a 9b 19 80 ad 05 17 7f 49 5d 95 e1 32 e6 e8 62 1c da b1 b7 f7 70 fb 0a 54 66 91 72 00 58 1d de bc 78 59 f8 18 6e 4e 9d 78 ce e3 5e 24 05 e0 1a 1c 20 50 ff 92 e2 d0 Data Ascii: R@:ZV}}T<J:o@)6>jE]G`G`#ez{!x=Lq:N4Abp3Cw4ysK6_vVyQxMS${7_BI]2bpTfrXxYnNx^$ P
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 60 65 8c b0 27 a2 f0 c7 19 c2 cc 02 b5 c6 9d f6 5a 46 b5 f8 cb 98 cc 90 ab 98 55 5a 31 43 9c 4a 53 77 b6 82 05 17 ea 0e ef d3 6d 9c 89 76 b2 04 8e 98 f3 06 9a a6 de 0d 22 f2 24 c0 5d 6e 0f 6e fb e5 f8 03 f2 25 83 ab 80 5a 1a 9d 18 68 60 02 1a c8 4f 1e 32 51 42 0b 03 06 c9 c5 09 82 a8 60 fb 15 21 07 c6 32 d7 5f 48 d7 ff e1 c7 54 e7 be 33 cb 37 11 9d ef 6b 9f 7e e3 db 12 91 10 74 4d 02 76 3c 96 5a 4c 29 98 fb 76 be 74 91 a0 a8 4c 29 71 fa 3d e9 5a 80 90 7c d5 10 34 05 65 76 64 5b d5 69 45 15 50 b8 5a d2 5c b3 5d 6e 0b 36 b5 27 d4 2f 28 7d 17 9d a6 14 f2 cf 02 c7 d2 9f 2c 98 40 f0 0d 9b e9 45 04 ee 19 0a 1c e0 00 20 0e 66 98 03 c9 40 46 18 61 03 80 0d 4e a1 d2 24 3d f6 00 cf 2a 55 10 60 99 c9 d1 61 66 9f f9 56 2d a9 9a 16 bf 16 21 4e eb 69 42 88 a6 b3 9f 0f Data Ascii: `e'ZFUZ1CJSwmv"$]nn%Zh`O2QB`!2_HT37k~tMv<ZL)vtL)q=Z\|4evd[iEPZ\]n6'/(},@E f@FaN$=*U`afV-!NiB
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 81 fd 50 40 4a a4 bc 1c 4e 6f 57 85 f8 3a 30 67 32 73 83 68 94 79 91 52 c8 c9 20 26 ea 02 ba e2 fa 6f 7a f7 e9 c7 cd 97 6c a5 21 25 3f 12 88 55 10 c6 b9 11 e8 97 85 c9 ff b5 4e f0 93 55 3f 61 5c fb 71 d7 f6 ca db 1e 52 4c 41 07 8b b3 8f c6 3b 10 25 c6 c2 a2 cb 30 11 90 41 e9 76 a3 2a e7 10 c5 d9 80 81 06 e0 d7 33 96 90 87 22 96 85 b5 76 14 dd 51 28 2d 44 cd c3 7e 49 8c 84 ce 01 1b 0f e4 dc 74 b3 20 21 a7 4c 43 d3 5c eb ee d3 3f f4 15 45 c9 a4 e4 90 8b 04 f8 69 46 d2 67 6d 2d ad 46 22 c9 55 2f 70 e1 a4 89 79 06 89 d4 14 6a d6 da 18 8b 13 1c f6 de 34 d5 5a 65 46 39 09 1f 64 b2 24 ce 92 84 14 f5 02 90 ee 44 a3 5d 6b 6b 82 c6 a7 bc 3d 88 61 aa 22 f5 5c 34 95 83 0b f9 64 d4 50 04 88 96 aa e0 42 51 52 eb 87 9b 74 64 03 7c e9 52 84 b4 0f 93 c6 65 9a 17 98 94 11 Data Ascii: P@JNoW:0g2shyR &ozl!%?UNU?a\qRLA;%0Av*3"vQ(-D~It !LC\?EiFgm-F"U/pyj4ZeF9d$D]kk=a"\4dPBQRtd\|Re
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 81 58 29 a3 da 32 e8 4b 07 fe 79 c2 ce f2 3c 97 fa 6d 45 4e e4 db b7 f7 ef 6b 10 46 b2 77 7a 7a 9e 85 da 75 ee e2 0f 52 eb 2e d2 56 dc c4 6a 69 84 2c 9d 51 da 2b 15 ce 6a 89 a7 08 2b 92 45 80 d1 b5 59 09 02 a0 a9 9f 65 63 32 8c 0e d9 99 ed 79 2e 48 ab 92 fb f9 01 4b b6 5e b8 78 bf 28 d9 e6 e5 4b 8e b9 8e 30 cb 12 3b b0 b5 07 74 f1 b2 89 74 4a 65 f3 d5 0b bf 3c 32 03 2c a3 2f 65 3b 51 97 41 0f d3 28 28 cf 07 f5 90 62 65 62 31 99 3c 8d 02 b5 d6 99 9f eb 77 b3 a1 c5 85 fd 42 32 7f 46 1f 2e 97 8d be cf c7 51 fc d8 5f cd e6 bd 12 a7 7c 5c fc f0 37 ad 92 18 59 fa eb 41 5a 71 ec 0a 57 6c 46 5f 1b 34 00 41 66 80 8d 27 72 2e a1 f1 38 39 6e 3a ed 03 1b 2b 3e 00 ab 43 03 7b e4 0e 97 e6 95 18 1a a2 01 2a 4d 0d d0 52 81 cf 84 2b 8f f4 b0 d1 c8 69 83 57 0b 77 44 f5 df Data Ascii: X)2Ky<mENkFwzzuR.Vji,Q+j+EYec2y.HK^x(K0;ttJe<2,/e;QA((beb1<wB2F.Q_\|\7YAZqWlF_4Af'r.89n:+>C{*MR+iWwD
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: ef 38 6c 51 da ff 7e fb cf 93 ad 37 71 e4 70 2b 3a b3 af 54 62 63 96 ef 3e 65 fc 1c 01 ef 63 ef ec 82 17 f8 ef 8f 3c a8 0c db 7b af 10 05 51 67 68 a5 90 87 cf df a2 0f 25 81 12 e3 45 ce 8f a8 da 4d 95 b7 76 95 a0 92 fe fd 1c e7 1a 5d 31 cc d6 a2 f8 a5 14 ae 66 cc 39 7e ec d9 bf d6 cf 45 28 a6 69 6b 92 6c 80 38 0a c4 bc 90 a3 cb b5 48 b9 0c 60 36 2c 86 e7 94 1e b7 95 2c 9e 41 5b a0 77 53 36 37 e0 a3 5e ca ce 0c 2a f3 28 c3 41 6e 9b cf f7 a0 bc 7f 87 0d 14 87 b8 9f 81 41 42 5e 99 0c c1 f2 39 4d 67 b3 01 7f 47 d3 50 da 41 a6 02 1c 61 c5 da f9 c7 39 61 73 84 80 84 29 38 9d 90 99 82 f4 62 8f 56 fa 60 60 52 92 23 de d1 4f ec 66 56 d9 4c 51 f9 a3 bb da 90 5a 41 d8 cb 32 c7 e1 c1 67 6a a2 4d c5 e9 90 b6 48 0e 2d c5 b4 6e 7d 84 1e 38 52 21 ac 13 13 21 8b d8 0a d6 Data Ascii: 8lQ~7qp+:Tbc>ec<{Qgh%EMv]1f9~E(ikl8H`6,,A[wS67^*(AnAB^9MgGPAa9as)8bV``R#OfVLQZA2gjMH-n}8R!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49771	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:22 UTC	721	OUT	GET /wp-content/themes/edumall/assets/fonts/awesome/webfonts/fa-light-300.woff2 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/awesome/css/fontawesome-all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:22 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:22 GMT Content-Type: font/woff2 Content-Length: 190440 Connection: close CF-Ray: 87a0b7f5fd6b7b95-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60df32e0-2e7e8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:08 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xSaIxY5%2BDSIc9d4N%2BxKiTKs%2FBo3lNfsubjPaZFy%2FYW5zgIGPCpC6OA4Np8c2k8fDzVtwLDOTyTQZYjIAhyVIDxvoi3SOXW4sXtJ%2F%2BvH0bFsy%2FuoPfxW4ujGezFOv9pK3dzo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:22 UTC	454	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 e7 e8 00 0d 00 00 00 07 8d b0 00 02 e7 8c 01 4b 02 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 91 06 11 08 0a 9b c9 00 95 f9 4a 01 36 02 24 03 b9 72 0b b9 78 00 04 20 05 8a 16 07 81 bf 27 5b 1a 08 96 43 b1 f3 2f 11 18 60 90 6d 0c 00 00 2d f1 fb db a6 d5 52 31 6e 79 74 8e 4d 3b e8 49 a7 01 44 ba 11 dd fc 13 95 19 94 37 a2 59 a1 6a f7 fb b3 b3 ff ff ff ff ff 5d c9 42 64 f3 ff 92 de a7 49 f2 09 94 56 54 14 44 50 75 db 36 4d 4b b3 c9 9c 75 92 54 c4 80 a9 2a 2d a9 a4 8a 27 a9 1d 58 ce 32 4b 1e 19 ee a4 c0 fd 94 96 ee ee de c3 0e 68 ac 6d ab 35 3f 48 41 47 69 31 2b 22 6a f2 08 eb 41 bb 79 cc 39 da 93 7a 5e f5 b2 87 c7 8e 53 f8 1c ee b8 42 1b 41 1b e0 64 4e fa a4 5f f4 ab 3e 5f 60 Data Ascii: wOF2K?FFTM`J6$rx '[C/`m-R1nytM;ID7Yj]BdIVTDPu6MKuT*-'X2Khm5?HAGi1+"jAy9z^SBAdN_>_`
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: e6 79 45 9b 3b 9e 78 43 db 8a 2f fe 0e 4f ba f9 ef 6e e7 72 49 2e d9 84 91 4b 58 61 87 31 1d 39 48 80 b0 c3 58 2a 24 08 02 4e 02 22 e0 4c 70 c6 3a 00 27 ae 82 63 57 c1 31 f1 17 6c 9d 55 2b 6a 1d 1d 16 3a ed 72 75 69 fb db 42 3c fd 5a f9 f6 cb 9d 5a 17 40 e1 50 01 e9 94 cf cc c2 f1 2c dc c9 90 30 bd 36 67 c3 20 1c 90 8a 4b 45 02 49 2c 1f 9e ff e7 86 f7 fd d7 29 2c e3 24 98 4e 78 27 9b 0c 27 38 96 cd 57 3a eb ab de dc aa de de 48 0a 2d 89 dc 2d 11 1c 14 11 46 44 11 c7 66 4c 05 18 2e 08 c1 ea 34 1b 0f 97 ee 3d 76 cd dc f0 c4 88 53 c6 84 ec 90 05 54 d8 fd 39 c2 bf fe 1e f7 d1 24 04 83 40 19 31 72 0e a3 bd 2d 5b f6 06 68 6e dd 22 82 0d 58 11 a3 07 1b 91 6b a2 36 60 83 76 a3 46 2a a5 0c 03 37 44 65 26 68 63 0d a3 40 c5 68 d4 61 34 8a 55 08 6f ff ab 18 fd fe bb Data Ascii: yE;xC/OnrI.KXa19HX$N"Lp:'cW1lU+j:ruiB<ZZ@P,06g KEI,),$Nx''8W:H--FDfL.4=vST9$@1r-[hn"Xk6`vF7De&hc@ha4Uo
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 60 05 3a 0c fa f7 f6 ee 7e 11 35 d9 cc 04 51 0b cc 59 62 5b d2 da 26 fd ee cc 62 8c 31 62 18 c4 20 94 f2 bc 67 69 df 1c 6b 1a 39 10 b7 54 10 11 7b 82 f6 5d 4d 6c 25 cd 5c ff 9e df 89 ff 4f 92 ee ef f7 d4 8a 75 d5 53 55 15 11 63 cc 1e e3 18 23 aa 32 52 0c 41 d3 31 6d 59 f6 01 21 eb 7f 88 79 cf bf 4b 67 44 e4 dd b5 68 4e 9a 28 42 c6 7c e3 ff fd ff 7e eb ff 17 8e 93 9e 4a ed 01 8c 04 64 23 28 de 8a bf 7e 71 ec a7 f5 8f 94 6d d9 ec fb 4a 53 88 a6 b4 35 a6 6a 04 81 61 06 70 ef 90 39 ff 1f ad b5 63 bf 57 05 07 4e 2c a2 e2 06 19 09 19 77 97 90 ff 0f 59 b3 ff af d5 de f6 bd db ed ba be 5f b5 1e 78 02 72 4b 20 81 24 cc 64 12 f9 79 d4 ed ff 17 5b 70 a1 be 2f 58 15 2a 54 e8 48 07 1d 74 24 fb 26 77 cc 73 47 22 83 cc d9 ff 45 b1 b6 b5 e3 dd b5 0a 56 01 51 10 c2 50 b4 Data Ascii: `:~5QYb[&b1b gik9T{]Ml%\OuSUc#2RA1mY!yKgDhN(B\|~Jd#(~qmJS5jap9cWN,wY_xrK $dy[p/X*THt$&wsG"EVQP
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: f6 35 df 2c 2e 85 95 71 8f ad a2 4a ee b8 80 f0 e3 42 63 ab dd cb 06 f4 d3 52 6a 01 2b ba d0 a6 f4 e6 8e bd a4 1d d8 90 d9 6c 39 2e 11 3f d6 13 7b d3 13 1d 28 a7 95 39 ce 87 a7 de f2 06 6a 5f 2e 63 15 3b 52 9c 12 cf a8 3d 36 36 78 d6 f2 50 4e a5 fe fd c1 f7 b2 c5 45 12 15 0e 6b 58 b2 15 63 aa c2 7f c8 ca be 4c fe 19 dc 2b ef 1c 20 e2 1c 7d 85 de 0c 8c 6d c9 c8 16 29 be 61 08 7c 6e c1 90 f1 b8 db 62 ac 79 4c 65 0b 70 f6 b7 be 90 70 6c b0 6a f1 e2 00 83 78 cc 9d d2 23 89 ac d6 17 00 36 98 87 e3 8f 5c 77 63 d6 a3 95 ab d7 76 1c 8b bc bb 8e 52 fa 42 a7 c0 c2 95 d1 22 ff 26 bb 3a 6e c1 b5 6c 3b 23 41 04 91 e0 78 4c f4 32 14 72 40 1a 58 3b 65 7d 79 ab 9d 47 10 aa 62 16 d6 f2 b3 63 d8 71 f9 33 c5 26 c1 d4 dc 9a ec 73 59 c5 99 3c f7 b4 40 7f 5d e5 be 1d 4d de f0 Data Ascii: 5,.qJBcRj+l9.?{(9j_.c;R=66xPNEkXcL+ }m)a\|nbyLeppljx#6\wcvRB"&:nl;#AxL2r@X;e}yGbcq3&sY<@]M
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: dd 10 e9 84 60 0e a0 0a 8a 43 84 80 13 89 09 95 28 5a f3 82 8b 01 06 bc 7c b1 7b b6 1b 57 9a b6 b4 da 37 62 94 a1 9a b3 b8 58 44 cc 00 b3 b9 cb 49 79 20 3f f0 9c 6b 10 e9 67 b3 33 80 82 be 82 a5 f0 03 21 bb ef 3b 0b fe 8a f2 b8 6a 57 08 ed 60 46 2c f0 8a 3b fc 3c 46 9c 2d b0 1f d9 e1 02 a7 b8 44 b9 3d 93 88 80 58 83 f7 98 05 8c 1c 7d 02 ac 09 1a 50 b7 6b 82 ef 26 96 01 1d 40 2e e7 bb da 3f 79 c2 09 51 ab a1 cf 10 a8 50 9b 45 3b 27 56 45 27 b0 91 da 2a 25 56 37 5b b1 96 b6 fb 6a b8 5d 3d 8c 9b 87 db f1 99 99 a7 e7 ee 0c bc 30 83 84 41 6b 8d 60 06 ed 99 a4 b3 0e 72 17 c7 23 11 35 7e ae 9c 50 48 54 37 82 99 3f d3 e0 9a 8d cf 8c 99 34 44 6a 65 75 68 8f 48 43 c8 e3 34 11 00 e8 fe c7 f8 9b a7 05 1e d7 e7 cf fa f9 ba 35 f8 b4 6e b1 ec 8e 76 02 ec a6 9d bc 3b 88 Data Ascii: `C(Z\|{W7bXDIy ?kg3!;jW`F,;<F-D=X}Pk&@.?yQPE;'VE'*%V7[j]=0Ak`r#5~PHT7?4DjeuhHC45nv;
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: e5 34 ca a8 d3 f6 f1 1c 2d cf 48 51 bc d8 f8 84 51 ac ed 2e 15 94 51 6d a2 54 52 31 51 b4 7a 28 62 75 60 2e 13 a7 45 d7 d1 bb 24 7a 1f 25 9c 02 78 a9 67 9e c7 25 e5 11 96 c9 53 aa 83 3d 2d d8 68 fd 61 46 e7 ea be 1f ba 99 08 c2 bc 73 b4 3a c2 77 df 43 ea 4f af 58 7d 79 0b 00 92 24 b7 bc 53 00 b9 06 00 6b 73 5d 16 4e 19 45 99 6b ef 52 c0 ea a2 f4 05 90 1d 8e 72 c6 e6 ab 34 5d 4a a6 ba d0 ba c8 4d b9 d0 5d 8a bc ee 19 93 65 fa f3 02 70 40 40 e9 b4 10 2d ab d0 4e b7 a2 0b b3 e3 40 a2 01 e7 98 bc c5 a7 5a f2 07 6d c5 b7 4d a6 88 80 1a ab 64 f4 52 56 6e 05 87 00 58 20 94 c2 37 64 59 8d 87 bd 23 3d 29 fa 56 c4 86 f4 5c 58 25 98 e9 59 8c 18 84 70 74 01 e0 10 13 ef 95 9b 7b fd 52 90 68 6e c3 39 b8 32 6d 3a e8 29 e5 98 79 53 1f d7 3c b9 e2 bd 76 be f3 74 a5 28 01 Data Ascii: 4-HQQ.QmTR1Qz(bu`.E$z%xg%S=-haFs:wCOX}y$Sks]NEkRr4]JM]ep@@-N@ZmMdRVnX 7dY#=)V\X%Ypt{Rhn92m:)yS<vt(
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 97 c3 a2 27 5d 0a 09 b1 06 30 46 e7 cd cc b2 05 80 25 79 0a 7a d0 ba 43 0b 96 6b 0f aa 39 dc 04 34 db be de 02 ea 0a 00 ba b3 8f fb c5 22 23 44 81 fc ca ac d9 be ac 03 8d 4e 5a 0c 62 0a ec 7e df 4c 7b fd 53 b1 c9 ba bb ac 5d 66 d9 f1 62 1a c3 f2 30 2d db bb 6e 36 fb d2 ef 66 65 01 5c 36 c0 6e 9c d9 a6 1d 2e d6 d5 5a 34 ca f2 e7 ca 9a 98 59 68 73 00 9a 19 b7 0e b8 51 84 cf 7d 57 01 80 f7 d7 21 f3 02 ac 72 e0 02 d7 3f 87 07 ba e7 38 e8 16 da 46 21 52 6c ed 4f 2d ba d0 7a c9 8b 7c 63 6c c9 7a ea 9a 39 33 0f ed 6c f1 df 4b 8d 5f 6b 2f 95 ff 54 bd f5 6c 18 d6 50 92 71 19 f5 cb d4 b2 b4 93 b0 13 f9 6d 40 04 01 9b b8 37 96 28 32 cb 3e ef 5b fb 74 d7 b5 f6 e1 cd 4a 29 ad d5 14 44 86 8e 7c c9 88 89 18 db 0d 91 8c 04 18 21 74 20 34 af f6 b8 42 09 3c 14 90 1a 78 01 Data Ascii: ']0F%yzCk94"#DNZb~L{S]fb0-n6fe\6n.Z4YhsQ}W!r?8F!RlO-z\|clz93lK_k/TlPqm@7(2>[tJ)D\|!t 4B<x
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: b4 87 07 4e b5 1e 40 3b 0d b4 b3 d9 ce 34 f3 77 7c 9b dd 09 0d 8e 3e 40 9e 07 f1 5e 68 9b ad 1c bd c3 5b 01 70 55 d0 5b 80 4f 41 33 28 21 92 09 88 8a e6 f2 96 00 21 11 79 d4 85 bd bb 42 8c e3 eb 4d 97 b2 ce 98 28 ff b3 0d 37 66 da d1 2f eb e2 ed 8b 19 e5 d3 3f e0 a7 e2 d0 c1 80 38 67 b0 d5 69 6f f3 1b a5 a2 b7 90 0a b7 82 b3 2c b8 f7 d8 8d f0 a1 a6 a2 5b b1 47 70 57 53 d7 11 7f 45 55 ed 64 06 86 19 92 ce 4a 2a e1 4c 55 e8 97 87 8c 35 60 cf dd c6 18 90 9b b6 58 7b 89 b1 bf 43 02 a1 dd 46 1a 04 42 e3 5f ef 0e 30 d0 81 37 27 26 53 ea bc a8 51 e9 3c 49 48 cf 0e 8e 65 ae e9 16 fe 8e 90 51 e9 5c a0 b0 ec 17 1a e0 36 29 9e fa ea 8a 31 7e c1 54 39 78 a2 08 96 16 58 a5 02 a5 c9 57 fa 8d 10 22 4a 94 4e a8 80 8a 12 4f d0 ee 66 73 45 cf 5d 98 65 d9 66 40 53 e7 5b 1a Data Ascii: N@;4w\|>@^h[pU[OA3(!!yBM(7f/?8gio,[GpWSEUdJ*LU5`X{CFB_07'&SQ<IHeQ\6)1~T9xXW"JNOfsE]ef@S[
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: 3a 02 b6 1c ee e0 64 b0 d2 09 25 d1 23 d9 6d 47 2a f8 df 8f 0c bd 03 10 f2 02 a9 2d 94 0a aa 0a 4a 45 95 0c a3 c8 98 25 47 53 a9 dc 21 ae e4 74 bb 4a 52 eb e0 8a db bb a9 1c c1 6d 69 72 3b b0 b2 63 5c 33 f7 5e 89 39 5b c8 27 0b 1d 1c 79 72 3e 98 35 a4 16 e7 07 78 dd 60 6b 29 d3 c9 45 1e 72 f3 8a a9 f2 08 cc 0e 44 a9 9d f6 8f a9 43 e2 75 a7 20 1e a0 c1 20 b9 10 5a 19 13 88 68 43 e4 65 1e e4 6f ad 71 15 75 72 e4 2a 52 a5 0c f2 03 0b b6 95 78 1a ab d4 55 c5 23 2a c2 0f d8 00 1d bf 52 9d f3 34 49 11 15 95 4e 2c 9d 60 42 57 5b a3 65 00 70 48 35 f3 7c a8 4b 80 0c 00 61 bd f3 69 ea 18 39 a4 7d c4 42 15 9c 34 7f 81 5b cc 9e dd c1 81 e4 da ba 79 a0 68 22 07 2f 66 4e cc a2 45 55 81 5c eb 29 57 42 2a 4f 41 ce c3 c3 a8 a5 91 19 7c 5a 9d de f0 c9 c1 b6 ac 02 07 af ad Data Ascii: :d%#mG-JE%GS!tJRmir;c\3^9['yr>5x`k)ErDCu ZhCeoqurRxU#R4IN,`BW[epH5\|Kai9}B4[yh"/fNEU\)WBOA\|Z
2024-04-25 19:25:22 UTC	1369	IN	Data Raw: a0 75 d1 a5 2d 86 91 6c 13 c2 05 3c f4 12 a6 bd 70 38 eb db 2c 26 7d 3c 44 69 9c d9 e7 e7 ea 0e b6 81 e4 18 4b 51 dc 0d 1a 11 46 61 54 ca f8 66 3e a6 f4 75 19 0b de 7e ef 65 1b f2 c7 12 33 dd 86 60 64 61 df db 0b e1 e0 26 56 e6 fd d3 dd 61 78 04 11 ed a2 76 fd 50 fa 9d ab 8b 7a 7e 6a 27 7d ad e1 0d e8 28 ec 1e 4a c2 c5 3b e2 a0 c4 7f 45 4f bf 0f 2a 5c 6e 40 07 ae 37 65 d7 2c 94 72 47 d0 28 15 72 fb 57 8f 57 0e 6f 5a 47 b7 2b fb 07 d7 ab c2 7e 88 14 d5 7d 88 67 f3 32 0a 56 4d 3d 04 ea 24 7a a3 f7 1c 2b b4 79 ea d4 62 40 49 a2 92 a6 87 8f 9d 10 3c e7 54 00 a6 23 4a 8f b5 b2 58 a9 d0 2d e0 28 2c ea 2b 93 b2 c4 4b 4f ff 9d 77 65 5d 64 2d 6b cd 04 9d 63 ea 26 51 15 32 8e 58 17 a5 2f 81 47 a9 18 4f 50 55 47 b9 c0 d7 04 b2 52 07 b0 4d 64 ee b0 c6 5c 42 3f b8 f9 Data Ascii: u-l<p8,&}<DiKQFaTf>u~e3`da&VaxvPz~j'}(J;EO*\n@7e,rG(rWWoZG+~}g2VM=$z+yb@I<T#JX-(,+KOwe]d-kc&Q2X/GOPUGRMd\B?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49780	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	494	OUT	GET /wp-content/uploads/How-to-Fix-Spill-Error-in-Excel-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2024-04-25 19:25:23 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:23 GMT Content-Type: image/png Content-Length: 17176 Connection: close CF-Ray: 87a0b7fc3a1ead83-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660ff203-4318" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 05 Apr 2024 12:43:47 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RC1QVdUqNtqIUOqQIY5bEJI04iqYck01sSKsGLtG0CiafpKicOX40bqEHDdMFLINUkGKfPEc%2FvVJGhbwFmGVamph37a2GyfxEKM7t8%2Fcz1BACc5e7SIrKQYII%2BeTkGglIJg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:23 UTC	465	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 42 df 49 44 41 54 78 da ed bd 77 9c 64 57 79 e7 fd bd a1 72 ea 9c e3 74 98 9c 34 33 9a a0 19 65 21 24 24 21 23 03 0b 2c 92 85 31 c6 01 63 ef ae d7 c6 78 31 78 e5 c5 2c 8b 61 fd 9a 64 60 11 58 02 19 10 42 46 28 21 8d 46 a3 d1 04 4d ce a9 73 ce 5d d5 95 eb 86 f3 fe 71 bb ab bb 67 46 d2 e4 aa 9e a9 9f 3e ad a9 74 ee 3d f7 de f3 3b cf 73 9e f3 04 89 3f 59 2b c8 e1 b2 22 df e5 e3 ab ef ff 53 3e b4 e2 76 9c 0e 27 36 9b 6d 4e f5 df 34 21 1e b7 fe bd 5e 21 49 e0 76 83 2c 67 77 3f d5 1c dd 2e 3f c6 e3 61 fe e6 b9 ef 90 d4 35 3e b4 ec 36 64 a4 ab 7a 7e 21 04 5e af 17 87 c3 71 51 ed 93 49 78 e1 05 41 38 7c 7d 3e 3f 21 c0 e1 30 d9 b4 29 4c 41 81 8a c7 e3 41 92 a4 Data Ascii: PNGIHDR}#BIDATxwdWyrt43e!$$!#,1cx1x,ad`XBF(!FMs]qgF>t=;s?Y+"S>v'6mN4!^!Iv,gw?.?a5>6dz~!^qQIxA8\|}>?!0)LAA
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 9f a1 f2 aa a8 ea f9 3d ce 48 24 42 57 57 17 cd cd cd d8 ed f6 4b 26 5e 3c d8 cf b1 d3 5d 08 9b 9b 05 0b 16 e2 24 46 eb e9 56 c6 c2 71 6c 9e 7c 9a 9a 1a b1 69 63 1c 3f 76 9a a4 a9 12 28 ad a0 d4 0b 1d ed 3d 44 93 1a 8a dd 49 75 7d 2d f1 de d3 68 c5 8b 58 5a 5b 48 3c 34 c4 c9 b6 6e 2a 1a 96 50 ec b3 13 0f 0e 72 b2 a5 9d a4 b0 53 3f 7f 09 25 fe e9 7e 47 46 7a 68 e9 1d a3 be 79 31 01 97 82 96 88 d2 dd 7e 1a cd 5b 45 73 55 21 91 d1 5e 4e b6 74 23 7b 0a 68 a8 2f a3 75 ef 3e f2 16 ad 65 5e 89 07 69 8e 8f 2b 85 1b ab be 98 a3 d7 d5 41 52 4f b1 ad ed 20 8a ac 70 43 f5 7c 6c ca c5 cf 9f 43 43 c3 6c de b2 85 bd fb f6 d3 db d7 47 71 51 31 1e 8f db 9a 2c 12 09 24 49 c2 f9 36 0b b8 a9 ef 5c 2e d7 39 8d 34 9a 06 27 4f 42 43 83 b5 95 72 06 63 49 25 63 84 23 51 e2 f1 04 Data Ascii: =H$BWWK&^<]$FVql\|ic?v(=DIu}-hXZ[H<4n*PrS?%~GFzhy1~[EsU!^Nt#{h/u>e^i+ARO pC\|lCClGqQ1,$I6\.94'OBCrcI%c#Q
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: f0 ec b3 82 bb ee 12 e7 e5 c8 71 e6 b6 8f 04 88 d9 3a 3f ef aa af 9a 71 0e bc b1 0d 6a 56 b2 a2 be 28 dd b7 f3 dd 52 3a df df 9a 5a 84 37 5f 7a 19 ff 92 5b 58 5e 5f 74 4e 2b 74 7f 3f bc f0 82 c4 ef fc 8e 20 3f 7f 8e 18 b1 4c 21 d2 e4 05 d0 27 c9 6b 7d 67 ce 52 91 a7 c8 3b d5 2e 47 de 4b c3 ee ce e3 fc ed 73 df 61 2c 1a ba 3a b3 f6 e4 80 bc 5c 83 72 e6 f1 24 49 82 33 de 4b e7 f8 cd 59 6d 64 17 8b 6e 5c 4f 53 79 60 d6 c4 f2 6e ed 66 5e c7 f9 fc 4e 56 9d ac b8 e9 0e 16 56 17 70 0d 68 d0 d3 6b e0 7c b7 1f af c3 45 f7 f8 20 00 f3 4b 6a e8 1c 1f 20 a1 a5 28 f1 e6 a3 c8 32 fd 13 a3 48 48 cc 2f ad a1 75 a4 17 cd d0 c9 73 79 f1 39 3d e9 76 39 5c 84 61 17 c1 af 0e 6d a5 a1 a8 92 bf bd fb 51 1c ea a5 ef cd 5e 2a 74 1d ba ba 60 7c fc ea 29 83 e0 bb 0a e7 b1 01 79 f0 Data Ascii: q:?qjV(R:Z7_z[X^_tN+t? ?L!'k}gR;.GKsa,:\r$I3KYmdn\OSy`nf^NVVphk\|E Kj (2HH/usy9=v9\amQ^*t`\|)y
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: bb 70 3a 61 c9 12 a8 ab 83 8b 4c ab 9d 19 09 3c 15 31 92 fe 62 86 2f ae 94 ce 6b 70 ae ef c8 ed 53 5e 25 6c 6f 3f cc 93 7b 5e ba 2c eb c6 4b 1a 34 8a 93 e6 1b d6 b3 a6 b9 88 ae d6 6e 92 22 53 93 89 8c df 61 32 10 1a 25 6e 98 24 b5 38 49 e3 c2 8e e7 70 98 78 bd 06 92 34 dd 17 59 86 fc fc 73 c4 42 67 33 81 2b f3 4a 58 52 3e 2f fd c5 86 79 4b f1 4d aa cd f5 45 15 34 97 54 4f 92 57 62 63 c3 72 5c 93 9e 58 65 fe 22 96 96 37 e4 d8 75 15 a0 19 3a df da fa 34 27 87 ba 32 48 60 09 9b 5d a5 ff f4 41 0e b6 8c 50 51 53 81 fd 12 e6 ef 4b 9a 8c 24 89 da b2 5a 8c 70 2b cf 1e dc c2 e6 b6 53 84 75 e3 42 9a a7 ff ce bc 2f 67 7e 97 ad 48 07 33 28 b2 8c 2c c9 69 0f 2b 87 6a 27 a5 6b 08 2c 5f 68 20 1d f7 6b 7d 37 e9 0b 2d c9 c8 b2 3c 2b 46 38 87 2b f9 c0 24 fe 68 d3 07 f8 a7 Data Ascii: p:aL<1b/kpS^%lo?{^,K4n"Sa2%n$8Ipx4YsBg3+JXR>/yKME4TOWbcr\Xe"7u:4'2H`]APQSK$Zp+SuB/g~H3(,i+j'k,_h k}7-<+F8+$h
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 59 4c ca fd c9 c9 c3 ca 8b 05 c3 83 2a 5e b7 42 4d cd 94 1f b4 94 f5 04 ce 25 76 bf 86 70 df c2 db f8 5f f7 fc b7 77 f5 91 76 39 14 2a 32 b4 0f 3c 93 48 f1 54 92 13 dd 83 84 63 a9 49 52 31 e3 df f4 ff 66 5b 9e df ee f3 b3 06 f6 8c 57 d2 b9 3f 93 66 bc 16 86 4c e7 c9 22 6a cb 03 6c da 68 e5 85 9e 59 73 29 a7 42 e7 70 c5 b1 b3 f3 00 6d 63 5d 2c 2e 6b 7c 47 83 91 a1 6b 4c 4c 68 5c 2c 7f 85 10 e8 ba 7e de c6 9f 99 d9 3f a6 33 41 9a ec eb 3a ce d7 5f 7d 12 89 33 f3 73 09 de 8e a1 17 23 6d a4 77 fc 60 92 a4 42 a5 2c 75 17 25 f9 37 11 0c ea 69 02 3b 1c 0e 5c 2e 57 ce 95 32 87 2b 8f d1 d8 38 db ba b6 73 e7 e2 25 6f 9b 24 4e 98 26 13 13 21 6c 36 d7 45 ab d0 86 61 d0 d6 d6 76 b6 8a 29 cc c9 f8 bb e9 cf 52 a9 14 75 75 75 78 bd de b3 08 9c 34 34 6c aa c2 ed 2b 96 33 Data Ascii: YL^BM%vp_wv92<HTcIR1f[W?fL"jlhYs)Bpmc],.k\|GkLLh\,~?3A:_}3s#mw`B,u%7i;\.W2+8s%o$N&!l6Eav)Ruuux44l+3
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: eb 3a ce a2 8a 06 5c 93 7b e4 53 fd bd e6 3d b1 5c 36 07 b7 34 dd 80 43 b5 f1 46 cb 01 c6 62 13 00 e4 bb fd dc dc b0 02 cd d4 d9 72 7a 1f b1 94 55 04 cd eb 70 b1 bc b2 89 f9 a5 b5 d8 15 95 8e d1 7e 76 b4 1f 21 94 88 60 57 6c dc d2 b4 12 9f c3 cd 8e f6 c3 f4 4f 8c 5a 0f a6 aa 99 c6 a2 4a 92 ba c6 d6 96 fd 84 12 51 54 59 61 63 c3 72 dc 36 27 5b 5a ac e3 db 14 95 4d 0d 2b 28 70 fb ce d9 57 53 08 de ea 3c 4a 4f 70 f8 ec 7e 8c f5 b3 a7 f3 38 23 e7 28 17 23 4b 32 1b 1b 96 51 e2 9d 4d 88 a4 a1 b1 bb f3 38 2b aa 9a 71 a8 36 76 b4 1f 66 41 69 1d 25 de 3c da c7 fa d9 d7 75 02 01 94 fb 8b 58 57 bf 84 60 2c cc b6 b6 83 57 3c 97 f6 c0 c4 28 2d 7d 1d d8 4a 66 13 29 1e 8f 5f 92 83 82 69 9a 24 12 09 ba ba ba 66 ed f3 0a b3 1c 69 5c 40 70 3a f1 7c 38 1c 46 55 d5 74 02 f7 Data Ascii: :\{S=\64CFbrzUp~v!`WlOZJQTYacr6'[ZM+(pWS<JOp~8#(#K2QM8+q6vfAi%<uXW`,W<(-}Jf)_i$fi\@p:\|8FUt
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: a6 a5 a1 84 94 ae 2a af c8 32 85 9e 00 92 24 d1 13 1c 9a 55 73 49 08 81 29 04 b2 24 61 57 54 fa 43 23 9c 1c ec e4 b6 e6 55 ac af 5f ca ba fa 25 0c 87 c7 f9 d5 a1 ad dc de bc 9a 9a 82 32 36 35 2c 67 41 69 2d 6f b6 1d a2 3f 34 7a 41 fd 2c f2 e4 21 cb f2 59 fd 30 4c 93 68 d2 aa af f3 76 81 f1 4e 9b 9d 3f dc f8 60 da 4b 70 47 c7 11 76 b5 1f 3d 87 6a a6 b3 b3 e3 08 29 5d c7 69 b3 d3 31 da 4f ea 22 3c 93 2e 05 53 06 bf fb 97 6e cc 3a c9 62 0a 41 fb 60 9c 55 0b 32 4f 18 d3 14 84 63 3a 65 81 b9 b5 31 73 d9 7b 1b d7 92 fc 8f e7 be cb 89 c1 4e cb d8 51 52 c3 63 f7 fd a1 45 0e 61 32 1e 9b 40 08 41 4d 7e 29 aa ac cc aa 78 e8 b1 3b 49 ea 29 fa 27 46 89 69 49 76 77 1e e3 ae 05 37 f2 a1 1b ee a4 a9 b8 86 03 bd a7 38 dc db c2 d1 fe 76 96 56 36 f2 d1 35 77 53 e4 cd 63 67 Data Ascii: *2$UsI)$aWTC#U_%265,gAi-o?4zA,!Y0LhvN?`KpGv=j)]i1O"<.Sn:bA`U2Oc:e1s{NQRcEa2@AM~)x;I)'FiIvw78vV65wScg
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 54 a4 d9 a9 43 85 10 b3 8c 33 b2 24 a1 c8 4a fa 73 59 92 51 64 19 53 98 69 83 56 da 10 24 cb c8 92 8c 61 9a 67 c5 87 9e d9 97 73 f9 ce 4e 9d c3 26 2b e9 bd c5 33 fb 73 ae f6 86 69 a4 af e7 6c 23 81 e5 64 a2 ca 0a 49 43 3b 2b 04 f0 dd ce 35 fb 58 52 3a d8 c1 ba 17 56 3f ce bc de a9 cf cf 75 8f 2e 05 5d 63 03 8c 46 43 78 b1 67 c5 e0 13 42 30 1e d6 30 cd cc 9b 61 12 29 93 a3 1d 11 d6 34 3a af 3d 02 2f 29 6f e0 f7 37 dc cf 8a 2a 2b 84 6c 77 e7 31 be b3 ed 19 da 47 fb f8 e8 9a bb f9 c0 8a 5b 27 9f 88 b5 3d 73 b8 af 95 67 0e 6e e1 f8 40 07 b7 35 ad e2 4f 6f f9 20 87 fa 5a 78 ec c5 1f f2 e0 b2 9b f9 e8 9a bb 79 b3 f5 10 ff b4 f9 a7 e9 81 2b 4b 32 ff e5 f6 8f b2 61 de 52 9e 78 eb 45 9e 3e f0 da db f6 e7 9e c5 1b f8 e4 86 07 ce fa 7c 7f f7 29 7e b8 f3 39 fe ee de Data Ascii: TC3$JsYQdSiV$agsN&+3sil#dIC;+5XR:V?u.]cFCxgB00a)4:=/)o7*+lw1G['=sgn@5Oo Zxy+K2aRxE>\|)~9
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: d6 a6 1b 70 d9 1c 8c 46 43 3c f6 e2 0f f9 97 d7 7f 3e cb da 5b 93 5f 4a 7d 61 05 42 98 bc 70 6c 3b 5f 7a e1 07 f4 04 87 d2 d1 42 86 69 9c e5 17 eb b6 bb d2 d2 ff 42 ce f5 4e e8 09 0e f1 c4 5b 2f f2 e3 87 bf c0 67 6e f9 20 af 5f c1 7c 59 c3 91 20 e3 93 9a d3 d5 f6 f9 3d 33 9b 25 62 ba 9c 58 a6 fd 8f 35 43 30 30 9e c4 34 1d e7 2c 8c 36 27 3d b1 dc 76 27 9b 1a 96 53 e8 09 f0 d7 cf 7e 13 bb a2 72 4b d3 0d 7c fd a1 3f 67 59 65 13 cb 2b 9b d2 bf 7d f9 c4 2e 9e 78 eb 45 a2 a9 38 c7 07 3a 68 19 ee b9 e2 be be 5b 5b 0f f0 c9 27 ff 21 7d 9e 84 96 4c a7 b6 09 c6 c3 7c 7d f3 53 fc d9 ad 1f 42 91 65 0e f6 9e 4e 67 ca 9c d9 67 9b a2 72 c7 fc 35 0c 86 c7 39 3e d0 01 40 c7 68 1f 9a a9 d3 54 52 43 4d 41 19 a7 86 ac 2c 8b 01 97 97 3b e7 af 41 37 8d 59 19 40 ce e7 5c ef 86 Data Ascii: pFC<>[_J}aBpl;_zBiBN[/gn _\|Y =3%bX5C004,6'=v'S~rK\|?gYe+}.xE8:h[['!}L\|}SBeNggr59>@hTRCMA,;A7Y@\
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 1f 1f e8 e0 f1 5d bf e1 ef ee f9 7d a2 a9 04 0f ff f8 4b ec e9 3a ce c7 d7 dc c3 97 de f7 07 ec ea 38 ca a3 4f fc 4f 12 5a 8a f5 f5 4b f8 ef 77 7d 9c b5 75 8b f1 3b 3d e8 a6 41 d7 d8 20 ff f2 fa cf 79 f6 f0 56 be fb 91 bf 62 49 79 c3 6c 95 ce 34 f8 83 9f 7c 99 e6 92 6a 3e f7 9e 47 f8 d5 a1 ad 7c fa a9 7f bc ac 41 f5 d9 00 c3 34 08 27 a2 e9 d4 36 57 55 ea ce 70 e6 90 b0 8c 58 b2 4c 46 fa 72 26 81 85 98 f6 14 4b f7 51 3a 77 91 be 1c 81 df 69 3d 62 73 52 e4 cd a3 37 38 cc 91 fe 36 a6 82 86 db 47 fb 79 e9 d8 4e ee 9c bf 86 0f af ba 93 bf bc f3 3f f3 b9 ff f8 16 1f 5f 7b 0f aa a2 f0 9d 6d bf 64 2c 36 c1 ba ba 25 3c fe f1 2f d0 50 54 49 fb 68 1f 7b ba 4e 90 ef f6 b1 b2 aa 99 2f dc fb 09 ba 83 83 04 5c 3e bc 0e 37 bb 3b 8f a5 03 e9 0d d3 64 3c 16 4e 9f df e7 70 Data Ascii: ]}K:8OOZKw}u;=A yVbIyl4\|j>G\|A4'6WUpXLFr&KQ:wi=bsR786GyN?_{md,6%</PTIh{N/\>7;d<Np

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49779	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	500	OUT	GET /wp-content/uploads/How-to-Clear-Data-Validation-in-Excel-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2024-04-25 19:25:23 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:23 GMT Content-Type: image/png Content-Length: 28267 Connection: close CF-Ray: 87a0b7fc3c0e44e7-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660d461b-6e6b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 03 Apr 2024 12:05:47 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R63QRK6rq%2FqENIi%2Fu1HvEleVKY4tM2j0pkBpp4%2FonLplHzIJynXtwjuKy2vC5dekvYtqDkPPGHV0sVVIrnq0qp%2FqsYD4sdTJAjdMyGEaLErIElofEVaR2ujfQ5aigO9JhFs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:23 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 6e 32 49 44 41 54 78 da ed fd 77 9c 64 d7 5d e7 8d bf cf b9 a1 72 ea aa ce 79 72 90 46 33 23 4b b2 6c 59 b2 6c cb 11 27 6c 0c 98 cc 92 bc bb f0 b0 2c ec 6b 59 e0 c7 02 4b 78 96 5d 78 f6 81 67 59 60 c9 c1 6b b0 0d 38 1b 07 39 28 a7 d1 48 33 9a 9c bb a7 73 aa 5c 75 ef 3d e7 f7 c7 ad aa ae ee ae ee e9 9e 99 6e 19 69 ce bc fa 35 dd 55 75 ef b9 f7 d6 f9 9c 6f fe 7c 05 1f bc 4d b3 d6 30 25 58 06 54 5d f0 96 7d 54 00 21 1b d0 50 72 60 f9 99 82 26 22 60 a2 8b 55 70 d4 d2 f7 a4 40 c4 83 a0 35 3a 5b 01 bd f6 65 dc 1a d7 1e c9 70 8c 4f ff ec ff c3 c1 a1 dd b7 1e c6 cb 38 3c ed 72 a2 f4 34 33 ee d8 8a f7 0a 79 17 a5 34 a6 25 09 04 24 ae ab 29 16 5c 62 81 18 fb c3 Data Ascii: PNGIHDR}#n2IDATxwd]ryrF3#KlYl'l,kYKx]xgY`k89(H3s\u=ni5Uuo\|M0%XT]}T!Pr`&"`Up@5:[epO8<r43y4%$)\b
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: ee 0c ae ae b6 7c af 5c f2 08 47 0c ca 65 85 53 55 44 4d 93 4a 45 21 0d c1 4c 65 1a db 8a 13 0f 45 88 05 c3 78 4a 11 0f 47 b0 4d 8b 8a 53 a5 37 d5 81 5c f6 2c d6 06 b0 06 5d 74 c0 70 5b 83 cc f1 d0 f3 25 ff f7 3a 48 85 7f 1c 5a a3 e7 8a 68 b3 a6 7e d7 df ab 9d 97 92 83 1a cb fa 7f 57 bd fa 37 75 4b 95 be 81 d1 93 6c c7 12 12 a5 14 52 4a 3c cf c3 30 0c 7f 8f f4 bc c6 eb f5 d7 1c c7 41 08 41 a9 5c c6 34 0c 42 a1 d0 0a 60 69 ad 57 00 c8 f3 3c 72 b9 1c f1 78 bc f1 5e 36 9b 25 1c 0e 63 9a 66 63 1e ad 35 f9 7c 1e c3 30 08 87 c3 68 ad 71 1c 87 72 b9 4c 34 1a 45 6b 4d 36 eb af 01 a5 14 c1 60 90 50 28 d4 38 a7 d2 1a f1 2f 0c c0 5a 6b 0a 2a bb ea 46 14 8b fb 90 0b 87 0c 1c 4b a0 94 26 14 32 b0 6d 89 6d 7a b4 07 93 8c cc 4c 12 b4 6c 4c c3 04 34 b9 52 01 43 1a 44 02 Data Ascii: \|\GeSUDMJE!LeExJGMS7\,]tp[%:HZh~W7uKlRJ<0AA\4B`iW<rx^6%cfc5\|0hqrL4EkM6`P(8/Zk*FK&2mmzLlL4RCD
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 85 a0 cb 1a c2 d3 2e 57 2a a7 71 59 db 29 9b 30 32 74 59 83 1b 02 af d6 1a 8d be 31 00 eb 92 03 86 f4 43 46 e5 65 17 59 f5 7c 3b d9 36 7c 7b 77 99 4d ab b3 65 b4 29 fd 58 72 be b2 e2 bc 7a ae 08 21 0b 3d 57 5a 99 01 76 6b ac 18 43 ed 3d eb 52 b9 6e 8d 4d b4 7f b5 a6 e2 56 71 3d 8f 70 20 48 9f bd 93 b0 8c 31 52 3d 43 ce 9b 6f 29 8d e3 46 9a ed c1 03 58 22 b0 fe 39 74 91 d1 ea 79 4a 2a 77 83 12 d8 55 8b 71 e0 9a ea 2b 42 16 ba ea 41 d1 b7 6b 1b 71 61 43 fa 19 59 52 a0 73 65 a8 b8 a8 f1 ec e2 ee 19 b1 91 b1 80 0f de 6c 19 35 99 5f 8c 0b 5b d2 57 c7 a5 44 cd 16 7c 55 fd d6 58 32 76 74 f6 af 6f 07 d7 2b f4 b7 9b 27 9f f4 e2 7f fe a5 88 c5 73 6e b6 3a bc ec 3e b4 68 16 c7 5b 23 80 0b 95 12 9f 7e ee 1b cc e4 e7 b9 77 e7 1d 1c 1a da 43 da ec 26 61 a4 99 f7 a6 99 Data Ascii: .WqY)02tY1CFeY\|;6\|{wMe)Xrz!=WZvkC=RnMVq=p H1R=Co)FX"9tyJwUq+BAkqaCYRsel5_[WD\|UX2vto+'sn:>h[#~wC&a
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: db 98 9e 9f a7 5a 72 e8 ed ea a9 a9 b1 12 43 d7 55 ee f5 d9 c0 d3 d3 d3 04 03 01 86 87 87 7d 59 55 75 39 72 e4 39 6e df b7 1b 43 6a a4 ef 30 f0 ad 3d 41 4d f2 7b 35 3d 44 a2 85 b1 e8 8b 10 d7 b6 75 57 bb 26 4b da ec 0a 1d 22 2a 52 9c 9e 7a 69 f3 00 8c 52 8b 76 58 3d 33 ab 79 c3 f6 14 e0 c7 82 f5 72 35 d8 6b 3a d6 55 cb 6c 60 ed 7f be fe 9a 7b 2b 40 dc 15 4b 83 d6 4c 4c 4c 90 4e 25 99 35 0c 94 d6 f5 30 fc 12 19 a0 94 87 9e 3a 85 59 9e 20 d8 1e 64 fc ea 25 cc ae 59 16 e6 a7 78 7c 34 c6 73 e3 15 b4 57 21 e5 4e f0 e0 ae 36 44 6e 96 0b 17 ce 73 ff 5b de 0e 42 b6 74 5c 08 ad 11 42 a3 85 6f 7f 1a 91 14 32 9e c6 12 06 96 56 d8 aa 8c 61 b6 61 00 b6 36 70 65 1e 0f 8d d1 e4 52 5b be 80 5b 01 a9 be b0 95 52 58 96 c5 5b de f2 96 46 7a a8 06 1c 60 7c 62 8c e9 c9 71 02 Data Ascii: ZrCU}YUu9r9nCj0=AM{5=DuW&K"*RziRvX=3yr5k:Ul`{+@KLLLN%50:Y d%Yx\|4sW!N6Dns[Bt\Bo2Vaa6peR[[RX[Fz`\|bq
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: f9 05 16 ca 2e 25 21 98 91 16 e7 e6 0b 78 b1 2a 3b 62 71 a4 e9 80 d2 a4 02 11 e6 ca d3 a0 17 63 dd f5 ad 6e 23 09 69 75 d3 c0 f3 3c aa 95 ea 62 05 99 86 4c a6 9d 60 28 78 83 00 16 02 82 be 37 98 8a eb ab c5 c5 6a cd 09 85 cf 4a 69 1a 3e 28 4b 0e aa 9a f3 ef c4 55 8b d2 56 e3 87 90 66 0a 78 0b 65 ff 58 a5 7d 89 6c 9b e8 42 05 9d af e0 5d 72 6a 36 f0 2d a7 55 f3 18 48 77 61 09 03 c7 55 04 43 11 16 66 67 70 3d 6f a5 a5 5c f3 90 56 4a 65 26 47 af 90 0a a4 a8 06 fa 39 35 ed 31 3a 37 43 2e 5b 05 82 78 d2 a3 e4 78 8c 8f e7 68 0f 8f 90 cd 97 28 97 4a 48 14 aa e6 74 6c 29 2d 84 40 63 50 96 21 26 b3 79 cc 85 92 ef fd 16 90 f6 20 90 5f c0 8e 19 18 a6 47 c0 94 e8 82 26 37 3f 47 5b 5b 0a 65 80 96 4d 36 b6 58 5b 2a 39 8e c3 d1 a3 47 49 24 12 08 29 6b aa 3d 78 68 02 5a Data Ascii: .%!x;bqcn#iu<bL`(x7jJi>(KUVfxeX}lB]rj6-UHwaUCfgp=o\VJe&G951:7C.[xxh(JHtl)-@cP!&y _G&7?G[[eM6X[9GI$)k=xhZ
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 58 05 62 d9 ae 26 a4 40 bb 1a cf 75 37 ca 4a 69 34 6c 5e 84 58 cc 5d 6e 0a f7 88 b0 e5 03 7b ba b0 54 72 06 2d 44 2a bc 58 d0 b0 2c 01 43 b6 85 11 89 a0 4f 88 57 99 bf 55 a4 b0 8e 91 8a 24 e8 48 66 08 0e 4b 16 a6 27 fc af 59 29 b6 0d 0f d3 fc d5 2f 8d fa 68 c2 b6 49 a4 a3 cf 57 11 85 9f d4 60 68 8d c2 ac 41 c1 3f da d0 69 94 90 28 61 ac b9 14 35 02 57 58 78 c2 a0 2f 63 f0 d6 bd 25 aa a2 82 16 16 0e 90 f2 3c ba 8a 53 c4 03 9a b6 9d 3b 30 a4 45 f9 e2 38 63 e7 2e d1 bf 7b 07 81 90 85 ab 45 53 85 d0 da aa b4 10 82 64 32 d9 90 91 8b cb 5b 20 b5 46 09 45 75 30 88 a7 34 9e 10 b8 06 35 69 a8 37 54 97 dc 5c 53 3c 3c b8 8d ae 8e 2e 68 84 b9 14 a6 65 61 4b 85 40 e0 49 b3 75 b0 e8 3a 1c 58 f5 4c b4 c5 6c 34 bd e8 70 17 a0 b5 c2 b4 24 1d 9d ed 1b 04 b0 5e 2c fc 6c 99 Data Ascii: Xb&@u7Ji4l^X]n{Tr-D*X,COWU$HfK'Y)/hIW`hA?i(a5WXx/c%<S;0E8c.{ESd2[ FEu045i7T\S<<.heaK@Iu:XLl4p$^,l
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 30 c8 cc cc 0c dd dd dd 8c 8c 8c e0 79 1e f7 de 7b 6f 23 5e bc 9a 54 f7 3c 8f 91 91 11 0e 1e 3c 48 2a 95 62 7a 7a 9a 67 9f 7d 16 ad 35 1d 1d 1d 5c bc 78 91 40 20 40 7b 7b 3b c5 62 91 ce ce 4e 2e 5f be 8c 10 c2 df 3c ca 65 4e 9c 38 81 69 9a e4 f3 79 ca e5 32 97 2e 5d e2 f8 f1 e3 a4 52 29 8a c5 22 85 42 81 ab 57 af 72 f8 f0 61 f6 ed db d7 e8 6a 51 97 a6 63 63 63 28 a5 b0 6d 9b 40 20 40 2e 97 a3 52 a9 a0 94 6a 6c b0 f5 2a 25 d3 34 29 14 0a 5c bb 67 45 d1 f1 ed de 56 4c 90 35 56 4a 3d 5f 5a e9 35 d6 a0 e7 8a 8b 59 56 cb 8d 95 8a 8b 1a cb fa 4c 1b b7 d2 23 37 3c 12 a1 28 bb 87 b6 93 c9 64 08 04 02 64 32 19 d2 e9 34 b9 5c 8e ae ae 2e 94 52 8d 32 34 bd 4c 0d 04 48 26 93 ec d9 b3 87 70 38 4c 2e 97 a3 54 2a 51 2a 95 48 24 12 14 f2 79 84 10 ec db b7 0f c7 71 1a 12 Data Ascii: 0y{o#^T<<Hbzzg}5\x@ @{{;bN._<eN8iy2.]R)"BWrajQccc(m@ @.Rjl%4)\gEVL5VJ=_Z5YVL#7<(dd24\.R24LH&p8L.TQH$yq
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: d3 57 ab f7 0d 98 7e 7c 77 b9 37 d9 10 90 08 fa c7 ce 97 57 66 58 c5 82 7e 21 fe 42 69 51 ea 5e 57 72 e8 b5 16 fd 2b 14 c8 ab 7c f1 01 cb a2 23 92 e4 d2 a5 4b 54 ab 55 0a 85 42 c3 c9 d1 db db cb f8 f8 38 8e e3 d0 df df cf f8 c4 04 bd 3d 3d a4 52 a9 96 0b 32 97 cb 11 0c 06 e9 e9 e9 21 97 cb 31 31 31 81 e7 f9 d1 83 3a 80 1b d2 aa 06 86 7a ec 35 12 89 70 ec d8 31 06 06 06 48 26 93 64 b3 59 f2 f9 3c 95 4a 85 68 34 ca e4 e4 24 91 48 84 7c 3e cf c8 c8 08 1d 1d 1d cc cf cf a3 94 e2 dc b9 73 a4 52 29 06 07 07 99 99 99 21 95 4a 91 cd 66 19 1a 1a 6a 5c e7 c4 f8 38 a2 56 71 74 e6 f4 69 a2 d1 28 73 73 73 44 22 11 72 b9 1c d3 d3 d3 e4 6b 0e b7 85 85 85 c6 e6 b2 6f df 3e ff f8 89 09 94 52 b4 b7 b7 37 6c cf 81 81 01 a4 94 4c 4d 4d 35 ec ca e5 9b d4 8d 74 45 5c 6f 17 c8 Data Ascii: W~\|w7WfX~!BiQ^Wr+\|#KTUB8==R2!111:z5p1H&dY<Jh4$H\|>sR)!Jfj\8Vqti(sssD"rko>R7lLMM5tE\o
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: be 82 0d d3 c4 34 8c 65 8b d7 7f cf 71 fc 94 32 6a 85 d3 91 60 88 80 65 53 aa 54 28 55 9a 28 67 97 0b 42 21 10 52 10 0a 04 09 d9 01 2a 8e 43 a1 5c 6c 48 2c cb b4 56 5c 47 7d 53 b3 2d bb d1 f3 b6 0e 60 c7 75 51 75 02 b9 da ee 6e 18 12 ad fd 7c 55 ad 17 49 6d 4c cb ac f5 d5 a9 e5 b7 b8 2e ca 5b ac bd 5d b1 fa d6 18 3b bb 06 5a 3a 5b 5a 56 ce 2c 8b 43 ae 65 0b 5f cb f1 a2 eb de e2 16 9b 81 d6 1a cb b2 68 6f 6f 5f d6 c9 6f e5 46 d1 6a 93 11 02 3f 4b cb 73 89 4e 4d e1 fe c3 a7 d1 ae 47 25 e8 33 69 b8 ae 47 d5 f4 30 d1 d8 5e 8d 69 aa 0e fe 25 11 9b e6 8d 6b f1 71 ca e6 6a ad 25 ed 4d 04 89 da eb 73 42 fa af eb ad 35 82 05 1a 43 49 1c 29 71 84 41 a8 aa d1 9d 29 22 ff ea 03 54 3a 7a a8 1a 81 3a e7 c8 8a 61 b6 d4 f4 2a 2e bb fa 86 f9 d5 ef f8 37 3c 75 fe 18 bf fb Data Ascii: 4eq2j`eST(U(gB!RC\lH,V\G}S-`uQun\|UImL.[];Z:[ZV,Ce_hoo_oFj?KsNMG%3iG0^i%kqj%MsB5CI)qA)"T:z:a.7<u
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 87 d6 a0 1c 0c 5d c2 b1 2a 38 71 0b 11 89 60 63 62 7b 1e a6 06 25 45 ad 17 70 8d d0 1d bf 91 9b 81 5c 49 c5 23 58 6c 7a de f0 27 2c 55 df eb 86 a5 ae d9 a2 5a d4 c2 3a b5 f5 a3 45 0d e6 ba 4e cb a3 1b bf fb 2d 4d 59 42 16 bf 08 f9 6b 68 36 cd ec 03 2a 4c 45 48 4a 46 01 d7 72 81 1c 05 77 96 8a 57 20 e0 d8 b5 4e 87 2b 37 c3 1a d9 ac d7 64 6b 0a 42 76 90 03 03 bb 98 2f e6 18 99 9d 20 64 d8 ec ef dd 46 22 1c e5 f1 73 2f 30 5b 5c e0 7d 87 1f e4 8e c1 5d 3c 7c e2 19 fe fb e7 fe 92 7c 2e cf 85 c9 51 ce 4e 5c e1 8e 81 5d 58 a6 85 6d 5a c4 82 11 2a ae 43 a1 52 e2 fb 5f ff 6d 9c 9d 1c a1 3d 96 62 22 3b c3 fd 7b ee a4 23 9e e2 53 cf 7d 9d d1 d9 c9 25 00 3e 31 72 8e 60 30 44 2c e4 1f ff cf 2f 3e c1 93 67 5e 00 ed 4b b4 0f dd f3 56 ca 4e 95 ff f2 8f 7f cc 23 27 9e 03 Data Ascii: ]8q`cb{%Ep\I#Xlz',UZ:EN-MYBkh6LEHJFrwW N+7dkBv/ dF"s/0[\}]<\|\|.QN\]XmZ*CR_m=b";{#S}%>1r`0D,/>g^KVN#'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49778	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	508	OUT	GET /wp-content/uploads/How-to-Copy-Numbers-in-Excel-Without-Formulas-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2024-04-25 19:25:23 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:23 GMT Content-Type: image/png Content-Length: 29516 Connection: close CF-Ray: 87a0b7fc394bb036-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660e8285-734c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 04 Apr 2024 10:35:49 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GNYrPmdQcXGcbBP3DobfEItEFzgRyWeZa%2FGStguReLlX3k9P8D358v9DwTBpysmRrl1eEXnR53CqXO96oyg3%2BsueWlvej6Vhk%2FZdWdq4A8VFbRzcAoNUy%2B4I20cqjpwXk%2Bg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:23 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 73 13 49 44 41 54 78 da ed bd 77 9c 1d e7 5d ef ff 9e 72 e6 f4 b6 bd f7 a6 de bb 6d c9 45 b6 e5 1a 27 2e 71 1c 12 12 48 20 10 08 2d 81 cb 0f 42 e0 5e 2e 04 72 2f 25 10 c2 85 54 52 4c 8a 7b e2 6e c9 b2 ba ac de db 6a 7b 6f a7 b7 99 79 7e 7f cc d9 b3 bb 6a d6 ca b2 a4 38 fb f8 25 ef 9e b3 33 67 9e 33 f3 7c 9e 6f ff 7c 25 f7 1f dc 2a fe e9 43 bf c7 c6 93 7b f8 fe 9e 57 18 1f 0b 2a 1a b9 7b ee 2a fe 71 e3 7f 93 4a a5 72 ef 4b 92 84 10 82 4b 0e 09 78 87 43 a6 0c 59 b2 7e 9a 62 7a e7 08 31 bd eb 28 92 75 8d e9 9c a3 ca a0 9b 97 7f bc 94 9d 9b 71 e9 8b 28 b2 6c 1d 6b dd 54 90 60 59 e5 6c fe e9 c3 7f 48 55 7e c9 3b 4f 4b 92 09 aa 6e 14 49 66 66 fc a2 0f 31 69 Data Ascii: PNGIHDR}#sIDATxw]rmE'.qH -B^.r/%TRL{nj{oy~j8%3g3\|o\|%C{W{*qJrKKxCY~bz1(uq(lkT`YlHU~;OKnIff1i
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: c0 9b 36 2e ff 1c 9f 1d a2 e9 e9 49 fa a0 03 46 93 d3 93 f2 6e 0d c2 a9 77 94 c0 e3 0f 59 d8 2d 00 4b f1 0c b2 24 f1 81 85 eb f8 c7 0f ff 21 85 ee 00 8a a2 5c 70 31 24 cd 0c 32 12 9a ac 5e b7 85 6a 18 c6 45 e7 77 ad 86 61 18 48 92 84 2c cb 37 04 78 2f 79 4f 8c 10 98 71 50 4b 26 40 69 26 20 73 16 6c 35 16 30 73 1f a6 67 25 b3 3a 15 f0 e7 c2 6d ba 93 94 00 a7 cd 8e c4 8d b1 e3 bd df 86 29 04 cf ee 7f 93 3f f9 e9 bf d0 3f 36 7c 43 cf 55 d7 f5 77 36 a7 7e 09 e6 70 d9 f3 91 3d d6 bf 29 80 72 80 d6 62 49 e0 29 ef ab 20 d9 2e 09 5e 00 85 c5 65 5f ba d8 1f f3 bc 7e ec 76 07 c9 78 22 f7 5e 7d 61 05 ff e7 d1 df e7 48 4f 2b c3 b1 d0 05 10 2e 4d df 06 56 b3 f6 e0 74 6c 4d 4d b1 24 e9 74 24 bd 5d b5 24 f6 74 e6 e6 cc aa c3 d3 d1 40 34 c5 52 d5 2f 79 98 34 b1 4b ab 32 Data Ascii: 6.IFnwY-K$!\p1$2^jEwaH,7x/yOqPK&@i& sl50sg%:m)??6\|CUw6~p=)rbI) .^e_~vx"^}aHO+.MVtlMM$t$]$t@4R/y4K2
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 66 88 8b fc cc bd 14 56 bc 5d 4c f5 4b 7c fe 27 ff cc 57 3f fa 05 2a 02 45 98 e6 3b 6d 7a 32 c5 b5 2d 14 d7 b6 9c 2b ba 30 df a5 0a 3c 2e 6d de 79 0e e7 cf a9 b4 7e 0e a5 f5 73 a6 7c d6 b5 9d c3 38 8a 15 8a aa 9a 29 aa 6a 9e 72 e7 4d 53 5c f3 f9 68 ee 3c 16 af 5e 9b 7b 9d b7 68 05 98 a3 20 4b 53 3f 2f dd 65 6d ea b6 fa 89 4c ac b2 40 01 77 cc 5a c1 33 fb 36 11 4e c6 72 92 41 76 69 98 e1 69 64 22 cd 64 62 5d 5e 26 d6 64 c9 e9 50 ad f3 62 99 cb bb 84 2c f3 81 05 6b f9 e3 95 1f c1 6f 73 5f 9f bd 47 08 fa 86 fb c8 2f ce 47 d3 b4 eb b6 07 26 12 09 34 4d bb 22 09 fc 5e 8c 78 3c 8e c3 e1 b8 2a 99 61 8a 6c 50 e8 0f 31 1c f1 91 d1 27 39 93 45 76 6d 49 76 24 fe e8 a6 4b a7 52 da 95 cb 5e 58 57 0c 60 bb 62 e9 33 d3 51 55 9d aa a5 72 67 a6 b1 d3 4d ce 6b 9e 0e e8 df Data Ascii: fV]LK\|'W?E;mz2-+0<.my~s\|8)jrMS\h<^{h KS?/emL@wZ36NrAviid"db]^&dPb,kos_G/G&4M"^x<alP1'9EvmIv$KR^XW`b3QUrgMk
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 15 a7 12 bc 44 e0 5f 95 41 53 61 3a 04 5f e3 4e 98 e9 dc 50 4d b5 dc 69 f6 69 ec 5a 4e 5b b6 98 61 1a 3b af c7 6e 7d a7 cb 9e 9b 04 5e fb 54 2f d3 3b 0d 45 9e a8 2e ba d4 e7 5e a8 98 c1 3e 75 3f 15 a6 89 24 c9 17 de 74 4c 01 91 34 d2 25 36 ca 04 19 de 96 3b f8 ad 45 bf 8a 4f f3 5c d5 85 a3 1b 3a ed a1 76 5c 2e 17 1e 8f e7 ba 81 c6 30 0c 1c 0e c7 0d 93 0b 9d c9 64 70 bb dd 57 35 17 fa d2 00 be 54 a9 dc 8d 4c ec 9e 36 a6 5f 4e 68 88 e9 97 13 22 de 93 72 42 69 32 75 e9 24 62 f7 29 2a 76 b6 98 e1 82 b9 d0 b2 74 59 1b cb 2b 5d 3b 79 b6 6d 33 1f 6d dc 30 93 2b fd fe 74 62 cd 8c f7 f3 48 18 29 fe f9 d0 93 ac 2b 5b 42 a5 a7 f8 3d 93 3c d7 53 ea 5d ef 39 5c 68 2e d7 6a 3e 33 00 be 9e 0f 3c ab ca 0b 21 67 1d 52 57 98 4b f9 0e e3 d0 c8 69 be 7d e2 79 fe 74 d1 27 a6 Data Ascii: D_ASa:_NPMiiZN[a;n}^T/;E.^>u?$tL4%6;EO\:v\.0dpW5TL6_Nh"rBi2u$b)*vtY+];ym3m0+tbH)+[B=<S]9\h.j>3<!gRWKi}yt'
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 96 20 e1 4a 21 25 fc 78 8a 5d b9 4d 3b 76 aa 8d ee 94 4e 70 5e 09 63 fb fa c9 bb 75 3e 2e 2d 4e fb cb 6d a8 b3 5c 18 92 93 c2 65 55 0c 6f 6c c7 59 df 82 5b 1e 66 2c 12 a0 b4 29 4d f7 c9 21 64 5f 86 8c d3 87 28 80 64 7f 04 15 a7 ed d2 8b d1 ae c0 74 3a d9 c9 64 89 dd a7 d9 99 61 ba d4 02 0e d5 02 fc 74 02 e6 0e 75 7a 0d d1 24 ac 86 68 ce 69 74 3e 50 24 eb 3a 97 6a d4 26 61 11 93 8d 7f 65 4d 41 9c 1b 3a 12 d6 03 97 2e 75 5f f4 cc 15 17 ff b7 46 ba d9 31 78 84 0f fb cb af c8 69 a6 cb 3a 8a ac e4 fa 0f 4b 92 04 ef c7 54 6b c5 46 60 61 0b 95 cb cb 91 14 99 54 77 12 63 38 84 3a df 45 aa af 8f be bd fd f8 aa 9c c8 72 0a 3d 94 40 72 79 b1 39 35 2b 1c ac c8 56 48 70 bc ce 5b 96 f0 b4 d4 51 79 cb 2c a4 d8 08 43 29 13 9b c7 8e aa 1a 28 92 89 69 80 2d e0 43 d5 14 64 Data Ascii: J!%x]M;vNp^cu>.-Nm\eUolY[f,)M!d_(dt:datuz$hit>P$:j&aeMA:.u_F1xi:KTkF`aTwc8:Er=@ry95+VHp[Qy,C)(i-Cd
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: cf df 9c cd c5 b5 e1 b0 d9 10 5a 15 f3 f2 24 64 49 c2 98 c1 ce 0c 80 cf 5d d0 aa ac 60 53 6d 38 35 3b ba 69 10 8e 47 29 f4 05 a9 2d a9 24 e0 f6 12 4b 26 38 d5 d3 ce 40 68 78 0a 78 37 2c b9 85 df 7b f0 e3 54 14 14 23 49 32 3d 23 03 fc f5 4f fe 9d b3 bd 9d fc af 5f f9 3d ea cb aa 39 3d d4 45 91 23 c8 9d 8b d6 30 9c 8e 72 b8 ed 24 92 04 87 fb ce f2 93 bd af f3 f0 fc 75 cc ab 6c 64 fd d2 9b f9 af 8d cf f1 f1 78 94 ea 40 31 b7 cc 5a 4c 61 20 8f 3d dd 27 39 d3 d3 31 bd c4 11 2e 6d 27 4e 25 76 17 e7 e9 cf 39 62 f7 0b c5 86 b3 e5 87 57 83 7f aa 3f 36 c2 6b c7 de 62 b1 af e1 b2 cf 31 0c 83 81 91 01 92 c9 24 c9 64 92 74 3a 3d d3 f8 fb fd 0c 60 09 09 a7 dd 81 43 d3 88 c4 63 64 0c 1d 9b a2 72 f3 dc a5 d4 57 54 53 1c 2c a0 d8 93 47 be d7 8f cf e5 e5 b5 23 3b 79 61 d7 Data Ascii: Z$dI]`Sm85;iG)-$K&8@hxx7,{T#I2=#O_=9=E#0r$uldx@1ZLa ='91.m'N%v9bW?6kb1$dt:=`CcdrWTS,G#;ya
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 6d 18 a6 c9 68 68 14 73 38 86 91 e5 db 15 ba 01 29 03 12 19 94 8c 85 00 d3 30 10 89 0c f1 b1 08 f1 b1 88 d5 ec 2f 69 69 0e 86 ae 43 22 8d 6a 58 5a 83 69 9a 28 59 51 91 ef f0 a1 22 73 62 b0 83 ef ed 79 99 5d 87 f7 c1 48 82 f6 78 07 5d 43 bd 04 3d 3e 0e 74 9d 26 35 14 86 d8 65 78 9f 95 6c 6b 99 78 e6 1d 25 70 4e 83 31 85 d5 99 61 52 31 87 c8 96 13 be 57 c5 0c e7 8e e1 64 88 84 9e 7c cf 01 ec 2f a9 e7 be 0f 39 d1 63 3b 58 fd e8 5d 44 f7 be c1 b3 db 76 d0 33 d2 c6 2d 2b e6 d2 7d 66 08 53 ea 67 e7 db c7 29 a8 99 c3 5d b7 af 40 4d 0e b3 f5 f9 fd b4 dc 3e 8f a3 2f ee 62 24 76 8c 7d 9d 1a 46 a4 1e 8f 2c 23 84 c1 70 77 17 e1 e4 08 3b 77 ee 66 48 0e 51 d9 b4 88 c5 e5 32 47 da e1 a6 5b e6 a2 0f 77 f2 ec cf 5e 23 ed 2d e3 a6 45 75 ec de be 91 78 2a c8 2d 37 2f 60 fb Data Ascii: mhhs8)0/iiC"jXZi(YQ"sby]Hx]C=>t&5exlkx%pN1aR1Wd\|/9c;X]Dv3-+}fSg)]@M>/b$v}F,#pw;wfHQ2G[w^#-Eux*-7/`
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 4a 59 29 6b c5 7d d7 2f 5c cd 50 64 0c bb a6 4d b9 86 27 5b ea 11 cf 24 73 e6 a6 61 9a 17 44 cc f8 c6 95 d3 0a ae 36 a8 a4 89 79 e5 3c d0 59 af f2 35 77 9d 08 88 26 42 fc f7 a6 d7 59 da 7c 6f 96 88 2d 45 7b 77 07 b2 2b 80 2c 4b 78 f3 2a 98 ef f2 10 89 f5 90 97 57 f0 ae 3a 0e cb 36 17 b5 b3 6b 70 db 54 94 d2 72 aa 74 2f f6 84 8a 6e 97 09 7a 52 88 58 98 be ee 61 6a e6 ad c1 ad c9 28 66 80 9a 96 02 f6 1f 3f 4d 59 53 03 35 cd 45 f4 ee d8 cf a8 a3 9c 8a c6 12 52 29 70 39 41 cd 2b 40 4b f7 70 fc 78 07 a5 85 05 cc ca 2b 23 cf 69 39 a3 8a ea 16 53 7c e6 e7 bc f6 e6 0e 6e 59 39 1f 4f fb 26 46 6c 95 ac aa 2c e2 e0 96 67 d8 1e 73 b0 fa 96 3b c9 a7 8d a8 bd 8a 59 7e 07 5b 0f 1e 67 cc 1b a4 cc 0d 6d 03 43 54 36 2c 24 e0 54 b1 99 01 1a f2 fc 74 0e 27 98 d7 5c 8f 5d 95 Data Ascii: JY)k}/\PdM'[$saD6y<Y5w&BY\|o-E{w+,Kx*W:6kpTrt/nzRXaj(f?MYS5ER)p9A+@Kpx+#i9S\|nY9O&Fl,gs;Y~[gmCT6,$Tt'\]
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 91 c2 90 54 44 a8 9f b7 df 6a 25 50 5d 40 2a 9d 42 52 ed 48 b1 7e 5e 7f f9 04 8b 6e 9f 4b b8 37 46 d5 ac 0a dc 0e 27 a6 91 41 48 32 99 64 12 14 1b 2e 87 66 99 5c a6 4e 3c 1a c3 cc be 97 8c c5 41 b5 93 19 e9 65 f7 e6 33 04 fd 3a fe b9 2b 28 0a 3a 49 27 d3 a4 0d 1d 9b a6 91 49 24 91 ed 0e 62 5d 27 d8 b1 e5 14 4b ee ab 42 4f 25 48 66 4c 5c 1e 27 66 26 43 c6 d0 51 14 1b 99 54 0a 9b c3 89 4d 86 54 2a 85 2e 04 4e 97 1b 45 18 c4 62 31 64 cd 89 c3 26 13 8f 25 50 ed 4e 1c 9a 4c 22 1e c7 90 6d b8 9d 76 30 e2 9c 3d da 43 c5 ac 2a 14 61 60 08 70 b9 dd 28 92 49 d7 e1 bd 1c 3a 32 c8 da da 39 24 e3 11 4c a1 e0 72 69 64 92 69 74 61 22 23 a3 9b 19 54 9b 86 91 49 5f c8 06 9e 50 55 bf be eb 79 b6 9c 39 c0 df 6f f8 4d 6a 0b ca b3 2a b4 a5 b4 e4 24 70 76 6b ca 98 3a 86 61 70 Data Ascii: TDj%P]@BRH~^nK7F'AH2d.f\N<Ae3:+(:I'I$b]'KBO%HfL\'f&CQTMT.NEb1d&%PNL"mv0=Ca`p(I:29$Lridita"#TI_PUy9oMj$pvk:ap
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 5d ca ce 1f 3e 43 f9 8a bb 28 48 a7 71 bb a1 ae b1 91 82 80 1d 24 09 4d 85 44 34 4a 32 e5 45 73 38 70 64 9c 34 b4 54 51 94 6f a3 8b a9 ce 48 45 71 e1 72 39 71 ba ed b8 5c 01 6a 1b ca 08 7a 32 74 cb 12 36 bb 1d a7 d3 4e 41 59 2d e5 25 85 0c ec 8b e0 76 3b 49 3a 1d b8 45 1e e5 35 c5 78 f4 51 5c 19 37 76 d5 44 32 0c 6c b2 4e 2c 1a 25 e5 b1 e3 70 d9 31 dd 41 6a 6a 4b 29 29 2f 24 91 88 70 76 ef 19 e6 cc 6b c1 9b 5b 1f 1a 6e 97 1b bb 39 82 94 6d c1 22 65 35 33 4d 53 31 52 71 e2 c9 14 aa ea c0 a1 79 b0 6b 36 1c 76 0f 0e 87 1d af dd 8b d3 69 bf b8 17 7a dc 23 2c 4b 56 c0 5d 08 41 2c 95 e0 3b af 3f 43 a9 27 8f 82 60 3e 05 81 3c 8e 0e b4 f1 af 5b 9e a2 b5 ed 2c a4 0d 3a 86 7a f9 f2 0b df 62 44 24 e8 1b 1a a4 7f 28 c6 af fe eb 9f 11 53 0d 42 63 63 17 04 a0 29 4c 7a Data Ascii: ]>C(Hq$MD4J2Es8pd4TQoHEqr9q\jz2t6NAY-%v;I:E5xQ\7vD2lN,%p1AjjK))/$pvk[n9m"e53MS1Rqyk6viz#,KV]A,;?C'`><[,:zbD$(SBcc)Lz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49775	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	701	OUT	GET /wp-content/themes/edumall/assets/images/cursor/light-close.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/wp-content/themes/edumall/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:23 UTC	898	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:23 GMT Content-Type: image/png Content-Length: 172 Connection: close CF-Ray: 87a0b7fc3a4c8bb9-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dfea3f-ac" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 04:40:31 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wkaIeisiWYsvfYekHFYoWKDjeN1GDIBlmS7OsuPdoDdcQvmjNgHw2VyGlRwOxk0JeuA0Nfv8ZK%2FVV%2F4wiEpfhzN2towmhm6RFV4NhVAXX6T6QWFAYqRFtsLBQKh3DA3bMoo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:23 UTC	172	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 02 03 00 00 00 9d 19 d5 6b 00 00 00 0c 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff 38 c0 3b a8 00 00 00 03 74 52 4e 53 00 60 cf 94 50 70 58 00 00 00 4c 49 44 41 54 08 d7 2d 8e c1 0d 00 21 0c c3 72 9f 63 0a 76 61 28 06 61 34 46 22 96 0c 48 8d 62 da 26 27 3d 7f 36 65 f6 26 d5 63 25 df e5 21 81 13 8c c2 a9 0f 07 d5 02 15 16 01 8b 2c 9a 7e b1 c1 76 87 39 da 45 ae 35 84 91 0c f8 00 08 43 12 67 6a ce 41 66 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRkPLTE8;tRNS`PpXLIDAT-!rcva(a4F"Hb&'=6e&c%!,~v9E5CgjAfIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49781	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	640	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:23 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 25 Apr 2024 19:25:23 GMT Expires: Thu, 25 Apr 2024 19:25:23 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 229 / 19838 / m202404220101 / config-hash: 1750746794179451698 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 97316 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:23 UTC	470	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="fun
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 Data Ascii: ject"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa="function"===typeof Symbol&&"symbol"===t
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 62 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 Data Ascii: Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ba(d.prototype,a,{configurable:!0,writ
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6f 61 3b 61 3a 7b 76 61 72 20 70 61 3d 7b 61 3a 21 30 7d 2c 72 61 3d 7b 7d 3b 74 72 79 7b 72 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 70 61 3b 6f 61 3d 72 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6f 61 3d 21 31 7d 6e 61 3d 6f 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 73 61 3d 6e 61 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: ect.setPrototypeOf;else{var oa;a:{var pa={a:!0},ra={};try{ra.__proto__=pa;oa=ra.a;break a}catch(a){}oa=!1}na=oa?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var sa=na,B=function(a,b){a.prototype
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 72 20 68 3b 21 28 68 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 21 63 28 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 6b 61 28 67 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 62 61 28 67 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 6b 61 28 67 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 67 29 3b 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 66 2e 70 72 6f 74 Data Ascii: r h;!(h=g.next()).done;)h=h.value,this.set(h[0],h[1])}};f.prototype.set=function(g,h){if(!c(g))throw Error("Invalid WeakMap key");if(!ka(g,d)){var k=new b;ba(g,d,{value:k})}if(!ka(g,d))throw Error("WeakMap key fail: "+g);g[d][this.g]=h;return this};f.prot
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 42 29 2c 74 68 69 73 5b 31 5d 2e 47 2e 6e 65 78 74 3d 6c 2e 42 2c 74 68 69 73 5b 31 5d 2e 47 3d 6c 2e 42 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 42 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 42 2e 47 2e 6e 65 78 74 3d 68 2e 42 2e 6e 65 78 74 2c 68 2e 42 2e 6e 65 78 74 2e 47 3d 68 2e 42 2e 47 Data Ascii: [1],key:h,value:k},l.list.push(l.B),this[1].G.next=l.B,this[1].G=l.B,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.B&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.B.G.next=h.B.next,h.B.next.G=h.B.G
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 3d 6c 2e 47 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 47 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 76 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 76 28 22 4e 75 6d 62 65 72 2e 69 Data Ascii: =l.G;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.G=h.next=h.head=h},g=0;return c},"es6");v("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");v("Number.i
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 22 69 73 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 65 73 37 22 29 3b 76 61 72 20 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f Data Ascii: "is").call(Object,f,b))return!0}return!1}},"es7");var ua=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.proto
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 Data Ascii: push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");v("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal(
2024-04-25 19:25:23 UTC	1255	IN	Data Raw: 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 76 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 6b 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 76 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 Data Ascii: ){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es6");v("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)ka(b,d)&&c.push([d,b[d]]);return c}},"es8");v("String.prototype.startsWith",function(a){return a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49776	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	711	OUT	GET /wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:23 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:23 GMT Content-Type: image/png Content-Length: 2472 Connection: close CF-Ray: 87a0b7fc3a7e7b94-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dfe9f9-9a8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 04:39:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8n%2Brte%2FXUbpXS0kiNXIKNXwlnqovBfgcDnt1ZDKrjVlubzYOa4tEip1%2FWM8RIm1b5NtadY%2FCZgo3eJOnEU3EGKo7zp%2BP4f5bgUWF%2FBciTsaeH1sV3AWZE0UK36TfbM1WGds%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:23 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 94 00 00 00 32 08 03 00 00 00 8d a7 02 15 00 00 02 07 50 4c 54 45 00 00 00 2d 2d 2d 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 44 44 44 28 28 28 28 28 28 3a 3a 3a 28 28 28 28 28 28 28 28 28 a9 d6 00 1d c9 52 28 28 28 28 28 28 28 28 28 28 28 28 31 31 31 a9 d6 00 44 44 44 44 44 44 28 28 28 28 28 28 44 44 44 9f d5 0a 44 44 44 28 28 28 28 28 28 1d c9 51 28 28 28 28 28 28 a9 d6 00 28 28 28 28 28 28 44 44 44 a9 d6 00 1d c9 52 28 28 28 44 44 44 28 28 28 44 44 44 44 44 44 44 44 44 28 28 28 44 44 44 28 28 28 1d c9 52 28 28 28 44 44 44 28 28 28 28 28 28 28 28 28 2d 2d 2d 44 44 44 28 28 28 1d c9 52 1d c9 52 28 28 28 a9 d6 00 1d c9 52 28 28 28 28 28 28 1d c9 52 28 Data Ascii: PNGIHDR2PLTE---((((((((((((((((((((((((((((((DDD((((((:::(((((((((R((((((((((((111DDDDDD((((((DDDDDD((((((Q((((((((((((DDDR(((DDD(((DDDDDDDDD(((DDD(((R(((DDD(((((((((---DDD(((RR(((R((((((R(
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: a9 d6 00 44 44 44 44 44 44 1d c9 52 44 44 44 44 44 44 44 44 44 21 ca 50 a9 d6 00 1e ca 51 a4 d6 03 a9 d6 00 a9 d6 00 1d c9 52 1d c9 52 1d c9 52 8d d3 11 a9 d6 00 a9 d6 00 1d c9 52 a9 d6 00 1d c9 52 a9 d6 00 1d c9 52 28 28 28 1d c9 52 7c d2 1c a9 d6 00 1d c9 52 a9 d6 00 28 28 28 25 ca 4d 8c d3 11 1b 56 2a 55 00 00 00 a8 74 52 4e 53 00 03 05 80 ad f9 66 fc 5c e7 c9 f6 05 ec fe 0a 0e 53 26 8d 99 f1 2d dc a3 07 fd 1e 94 35 15 0e 03 c1 24 1d f8 8c 3b fa 99 19 65 0a fc c0 a5 76 15 dc d1 71 52 48 05 df ca 9d 32 21 11 ef 50 09 ea d1 cc c9 b5 b1 8a 88 86 4c 44 42 0e f6 f0 ef ea e7 e2 dd d5 d5 d4 d1 c3 c2 b5 7a 78 6a 45 40 37 35 26 1d 1a 14 06 e5 e3 c6 bb a9 a9 a4 58 4a 4a 3a 30 23 1b d9 d0 cf b7 ae a0 92 8c 74 6c 57 4b 3d 34 2f 23 1d 15 0f f2 d9 be b6 a9 98 96 94 Data Ascii: DDDDDDRDDDDDDDDD!PQRRRRRR(((R\|R(((%MV*UtRNSf\S&-5$;evqRH2!PLDBzxjE@75&XJJ:0#tlWK=4/#
2024-04-25 19:25:23 UTC	642	IN	Data Raw: 23 24 53 2e 8f ca 05 00 c7 67 b9 3c 33 04 3f 43 07 4a 72 22 d5 ae 42 2b 87 3f b9 49 b2 e0 23 34 c1 56 43 e5 9b 67 c9 b4 82 7e 3c 5c e7 5f 12 ea fb 99 56 d1 99 fe 72 80 50 e2 01 37 5b a7 0a 4f 08 f9 20 54 28 88 aa 13 b3 3b 55 41 18 cd 71 5c 14 f1 90 63 c7 47 e8 56 5c 0d c7 6b d9 0b fb c5 7d 4b d5 a9 fa c1 59 a0 5a a3 4c 0a 5b 0b a2 ce 03 ad 4c 41 f8 76 e8 d0 11 85 4c 0b 76 35 21 fa c8 b2 d2 31 c5 04 47 a5 4c 91 94 54 c7 ea a5 18 dd 53 a7 24 8d e6 75 fc 82 c8 8d 0f f3 80 30 a9 92 dc 38 24 0f e3 95 57 82 df cc a5 84 9c b7 03 64 a2 a1 2b 42 10 f2 42 13 80 4a 0d c4 b1 db b4 6b 92 ea 7e bc 27 51 52 41 0f 3f bd d4 2a d1 4a 39 c7 fe 5d e5 37 43 21 06 30 87 27 39 59 00 16 35 d1 27 e5 03 83 49 25 81 9b 35 48 d5 4a 95 58 b9 02 38 f1 44 aa 15 df 8a 5a 74 86 c8 50 25 Data Ascii: #$S.g<3?CJr"B+?I#4VCg~<\_VrP7[O T(;UAq\cGV\k}KYZL[LAvLv5!1GLTS$u08$Wd+BBJk~'QRA?*J9]7C!0'9Y5'I%5HJX8DZtP%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49782	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	699	OUT	GET /wp-content/uploads/QUIZ-PIC-480x262.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0
2024-04-25 19:25:23 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:23 GMT Content-Type: image/png Content-Length: 161785 Connection: close CF-Ray: 87a0b7ff2aa55083-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "65750340-277f9" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sun, 10 Dec 2023 00:16:00 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uGieO%2B7%2FcJT2InCdNiykhz%2Bmp%2BukdK6GhtqYzdFzEsjoQaMBna9b2TJ2Q%2BP0JlChmLvWtrnRiOV0MkMQdgNNBSg5PqkJx5oybzw6b1RiyK26zYKygqocoAqzMLjRwW5krRA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:23 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 06 08 06 00 00 00 bd c9 46 0a 00 00 80 00 49 44 41 54 78 da ec fd 79 b0 65 59 76 d6 09 fe f6 3e f3 bd f7 8d ee cf 67 f7 f0 98 e7 21 27 45 64 2a 94 91 91 4a 21 21 24 21 8a b9 81 c6 d4 06 4d 51 0c d6 98 b5 41 57 99 b0 2e a0 4c 5d 66 74 d3 58 37 66 40 43 03 26 61 a8 e9 2e 28 10 1a 21 07 49 39 44 0e ca 8c c8 98 07 8f 08 4f 0f 9f df 78 e7 33 ee dd 7f ec 33 ec 73 ee 7d ee a1 22 43 6d b4 c5 cd 74 8b e7 cf ef 3d f7 8c 7b ad f5 ad 6f 7d 1f 7c f8 fa f0 f5 e1 eb c3 d7 87 af 0f 5f 1f be 3e 7c 7d f8 fa f0 f5 e1 eb c3 d7 87 af 0f 5f 1f be 3e 7c 7d f8 fa f0 f5 e1 eb c3 d7 87 af 0f 5f 1f be 3e 7c 7d f8 fa f0 f5 e1 eb c3 d7 87 af ff 7f 79 89 5f fd c2 6f df 71 e2 f4 29 7a bd 90 74 36 e7 fa 95 2b cc 27 33 Data Ascii: PNGIHDRFIDATxyeYv>g!'Ed*J!!$!MQAW.L]ftX7f@C&a.(!I9DOx33s}"Cmt={o}\|_>\|}_>\|}_>\|}y_oq)zt6+'3
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: a2 fa b0 f9 7f b3 6f c2 1c 07 d2 41 38 12 21 1c 5c d7 c5 75 3d 1c cf c7 f3 7d 82 30 c2 0f 02 c2 30 c0 f3 5c 54 91 32 9f 4c 19 ed ed 32 3a d8 23 cf 0b b2 b4 40 03 51 e4 23 1d 17 a5 05 5a 69 26 93 31 97 de 79 9b ab 17 df 21 1e 1d e0 08 8d eb 09 5c d7 45 4a 89 e3 3a 48 21 10 4a 23 85 40 4b 81 10 12 89 30 67 4e 0a 64 b9 ff e6 1c 99 73 29 a4 a8 cf ae 39 0d a2 3e 5f 20 70 44 75 e4 e5 7b a4 44 5a 57 a4 ba 2f 04 a0 ca 13 a2 d0 88 f2 5c 6b 61 f6 df 7c d4 45 38 0e 38 01 da f5 f0 fd 2d ee fd f8 67 f9 f4 33 f7 b2 ea 6b 73 5a cb f7 9a ab 62 ae 47 b5 cd 24 2b 98 cc e6 e4 4a 91 2b 4d 51 14 28 a5 50 4a 51 a8 f2 e7 42 91 64 29 a3 f1 8c dd a1 62 b0 75 8c 47 ce af 30 f0 a0 de 58 75 af 48 41 9e 15 1c 4c 66 0c e7 31 85 2a 98 27 09 59 3a 47 2a 85 ca 33 26 b3 39 af 5c b8 8c f4 Data Ascii: oA8!\u=}00\T2L2:#@Q#Zi&1y!\EJ:H!J#@K0gNds)9>_ pDu{DZW/\ka\|E88-g3ksZbG$+J+MQ(PJQBd)buG0XuHALf1'Y:G3&9\
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 73 65 12 17 6b b9 b3 a2 74 0b 51 b0 d7 3d 21 a5 a9 7e a5 53 27 51 8e ef 13 f8 01 7e 10 12 84 21 41 18 e0 38 02 9d a7 4c 26 13 46 07 fb cc c6 23 f2 2c 33 c1 51 60 82 6e 01 49 9a 93 e6 1a e9 47 f4 56 56 70 3c cf fc bb 2e 90 9e ac 03 b0 94 4e b3 60 88 66 21 93 e5 cf 25 c8 60 25 11 75 a1 db 7c ae 5a 5c aa 22 a9 ba 14 65 12 56 3d a8 b2 ac 74 75 b9 6d b9 6c 2d 53 56 02 84 36 09 81 f4 10 c2 45 ba 21 7e 6f 83 13 77 3e c8 c3 4f 3c c2 9d e7 b6 18 44 0e 8e 49 a5 eb 7d d5 55 8c d0 90 17 8a 79 9a 91 e4 99 a9 22 34 e6 be 2d 14 aa 28 d0 5a 51 e4 05 49 96 31 9b 27 cc 53 08 a2 01 77 1e 1f 70 64 c5 c7 77 28 97 f7 72 21 2f 17 0e 29 65 8d 70 08 51 26 4c 5a d6 c7 58 05 5e 94 c9 5f 0b ad 50 4b 17 53 51 1e a9 75 8b 15 1a c7 73 c8 d3 bc 15 44 aa 57 91 e6 38 be 83 f6 04 3a 53 e6 Data Ascii: sektQ=!~S'Q~!A8L&F#,3Q`nIGVVp<.N`f!%`%u\|Z\"eV=tuml-SV6E!~ow>O<DI}Uy"4-(ZQI1'Swpdw(r!/)epQ&LZX^_PKSQusDW8:S
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 4c bf d7 fc f1 4c c6 9e 26 4c 46 43 86 7b 7b cc 26 63 54 91 d5 95 8c d6 9a 22 cf 99 cd a6 0c 87 43 b2 2c 27 0c 23 82 fe 0a fd b5 55 bc c0 43 e5 0e 52 4a 3c d7 45 56 0b 66 5d f1 54 10 72 53 3d 08 ab 5a ad 1f f6 f2 c8 a4 c0 aa 78 3b b8 6a 19 d0 b5 68 2f ee a2 13 84 11 a2 0c fa 4d 42 a3 85 04 e9 22 85 44 ba 1e 52 06 f8 fd 2d 8e 9f 7f 90 87 9f 78 94 7b ee 3e 4a df 97 88 3a a9 d2 d8 a7 5b a1 c9 73 c5 3c cb 49 b2 8c bc 0c bc 45 d9 db 2d 8a 82 5c 2b 8a 3c 27 4d 33 b2 5c a1 85 4b b8 b2 c6 d9 8d 3e ab 3d 89 5b df af aa 8d 94 56 68 80 16 48 a7 4c da ca 44 cb 3c c3 12 55 26 5f a2 4a 03 84 b6 b2 0d d5 54 9f d5 bd 67 4e 54 eb 3c 6a 1b 66 76 24 aa 68 d0 1b f3 de 26 21 ad 2a 61 c7 83 22 cb 9b 94 af 7e a6 04 06 f4 57 4d fb c3 ba 2e 5d 08 5a 88 45 18 5a 58 49 87 ae 4f 86 Data Ascii: LL&LFC{{&cT"C,'#UCRJ<EVf]TrS=Zx;jh/MB"DR-x{>J:[s<IE-\+<'M3\K>=[VhHLD<U&_JTgNT<jfv$h&!*a"~WM.]ZEZXIO
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 41 ff 18 77 dc ff 18 8f 7c e4 61 ce 9e 5e a7 57 06 de e6 fa d9 84 40 48 f2 82 24 2d 48 f2 dc 54 ba aa 0c b6 4a a1 f3 0a 66 ce 98 c7 19 93 79 06 5e c4 d1 ad 4d 8e 6d 84 44 6e 53 ad 56 3d fd a6 c3 b6 48 fe ab 50 0b 5d 12 0e 45 f9 8c 4a 21 ca 3f b2 24 d2 75 a0 e5 8a b1 af 97 02 92 34 df dc 0e 65 aa d0 08 57 92 e7 86 63 51 ed 83 d2 cd 35 d0 1a 92 a4 84 a3 5d 07 95 a9 a6 33 6b b5 72 b5 0d d4 56 8d 7a dd 30 9f db ec 1f dd 9c 17 d1 b0 fb eb 04 b6 44 1e 9a 67 5b 59 cf ea 21 d3 0c 2d 72 55 f5 bc 08 10 ca 10 c2 aa 0a bf 4b a3 aa 92 12 29 09 57 42 e6 a3 79 27 11 b7 f7 a7 8d 58 d8 49 60 bd 5c 94 10 34 65 ef b8 28 14 ae e7 92 26 59 d3 fa ee 20 70 d5 71 26 93 98 68 2d 22 18 04 c4 e3 a4 84 a1 ab 69 91 ce 3e 59 48 26 9d 15 ca eb f9 a6 10 9b 67 16 54 d0 26 f2 35 98 54 1b Data Ascii: Aw\|a^W@H$-HTJfy^MmDnSV=HP]EJ!?$u4eWcQ5]3krVz0Dg[Y!-rUK)WBy'XI`\4e(&Y pq&h-"i>YH&gT&5T
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 2b 78 d4 73 c4 e5 c8 98 b0 37 dd cc de a3 db 7d 6c 37 30 63 8d f1 3c 2f c7 31 1b a8 bb 99 d9 af de af 17 98 c9 75 b5 8d 6e 05 2c a1 35 45 5a 10 ac 07 88 f1 dc e2 7d 89 05 14 ae 46 02 94 66 3e 9c d3 5b 8f 50 bb 05 79 6e f7 a2 cb 75 4a 29 33 7e d3 aa 4c cd 9d dc 5b 8f c8 e2 0c 95 ab 56 22 d1 da df 65 ad 1c da 44 ac 6e 0f 5a 58 ec fb 2e 5c 3d d9 9d b2 72 6c 85 68 bd c7 6c 7f 86 12 d6 48 25 6d e2 54 3c 8e c9 e6 29 bd 23 7d fc be cf 78 67 5c f3 0b 96 3d 1b f1 30 66 3e 9a e3 45 1e 83 23 03 34 9a d9 c1 cc 8c 30 95 84 ae b0 1f 90 0c 02 d3 63 56 2d 2c a6 44 68 7f 0f 02 f0 b2 a6 b3 d6 dd cc 4f 2f 0c b5 8b 25 8c 60 51 43 2f 94 a4 a8 b2 5a a6 53 5d 4b d9 54 d4 52 96 cc 52 fb 3d 9d cb ad ad b1 1d 5d a0 54 41 96 67 cc e3 98 38 cd 71 1c 87 28 ea 11 04 e1 6d 9b e8 ef a7 Data Ascii: +xs7}l70c</1un,5EZ}Ff>[PynuJ)3~L[V"eDnZX.\=rlhlH%mT<)#}xg\=0f>E#40cV-,DhO/%`QC/ZS]KTRR=]TAg8q(m
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: bf f4 06 a3 ed 11 8e 2b 49 e7 19 d3 bd 09 69 9c 7d b0 15 f0 fb ea 89 2e 55 77 5a 0c d6 5d 36 f5 ad c6 66 9a 31 04 f3 5f d3 07 52 4b ab c1 06 7a 6c ca 02 c3 1a 35 d9 ad e7 f9 f8 be 8f eb 7a e5 fd 6e 8d 46 20 0f ef e7 2e 9b e7 5d c2 72 3e ac 47 db 62 2f 76 82 78 37 31 d1 2c 21 58 2d 81 75 aa 00 dd 65 ec 55 df 55 91 76 aa ca 57 a9 a2 85 3a 58 a1 c6 64 fe d6 e8 0d 95 94 a7 74 70 1c 89 e3 fa 38 9e 8f 1b 04 04 61 8f 5e bf 4f 18 45 f8 be 07 14 cc 27 66 ac 68 b4 bf 47 96 c4 25 f2 60 f6 31 4d 53 e2 f9 8c 83 bd 1d b6 b7 6f 30 dc db a1 48 12 5c 20 70 cd f6 ab d6 83 74 1c 90 02 a1 30 52 8d e5 f1 cc c7 3b bc f3 f6 f7 38 75 62 03 cf 81 49 9c 91 a3 cd b8 9b 10 ed aa d6 66 42 57 e7 58 56 44 2d ac 59 44 ab 2d 64 b3 56 64 c3 83 56 15 22 23 3d 84 e3 22 dd 1e fd cd 33 dc f5 Data Ascii: +Ii}.UwZ]6f1_RKzl5znF .]r>Gb/vx71,!X-ueUUvW:Xdtp8a^OE'fhG%`1MSo0H\ pt0R;8ubIfBWXVD-YD-dVdV"#="3
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 77 3e f0 38 8f 3e 7e 1f 67 4e ac 10 7a b2 53 74 35 bd 35 53 f1 16 24 55 e0 2d ab b8 4a 32 b2 50 46 65 6c 1e a7 24 19 38 5e c0 f1 e3 03 36 07 1e 61 6b 94 c8 9a f5 16 56 f0 ad e0 3d cd 82 3e ee d2 0a 8a 76 10 5a a6 96 66 bf 5f 58 e2 2a b2 32 f3 68 7d 5e 37 ed 01 2b 70 d7 0b 96 8d ae d8 2c e4 6a 0e b6 bc ca 2a 57 b8 be 53 56 e3 ed 6a 5e 60 82 6f 4d 8e 2a b7 9d 27 05 6e e0 96 04 ac c2 ec 63 29 3f 2a ac 81 17 5a f8 46 03 73 56 e5 a3 b6 d0 b1 45 06 ab b2 d2 97 8e 18 4e 2b 40 eb 4e 6a d1 9c 0b dd 1a db 03 bf ef 93 cd 52 ab 20 d0 b5 7e b5 d6 62 91 32 5d 71 e5 5b 7d 4a d1 51 d4 2a f7 4e 19 48 df 2e 3a 84 10 38 4e 29 2f ba 84 8e 22 2c c9 18 3b 75 d2 5a 33 db 37 a4 ac c9 ae 91 35 d5 a5 dc 65 b5 6f e1 6a 8f f9 38 21 cf 54 3d 26 54 b5 f0 74 43 45 31 84 b9 12 01 5a 42 Data Ascii: w>8>~gNzSt55S$U-J2PFel$8^6akV=>vZf_X2h}^7+p,jWSVj^`oM'nc)?ZFsVEN+@NjR ~b2]q[}JQ*NH.:8N)/",;uZ375eoj8!T=&TtCE1ZB
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: d2 8c fc a4 b6 ee c7 a6 21 23 cb e0 3f df 9f b1 7a 7c 85 c1 66 8f c9 ee d4 4a 02 f5 c2 b3 60 b6 2d 6b 89 d6 3c cd 19 5d 1b d2 3b d2 67 e3 cc 06 e3 ed 31 c9 2c c1 16 b4 ae 4d 27 80 22 35 fc 16 d7 73 98 6c 4f e8 6d f4 d8 3c bb c9 78 ef 83 d5 85 76 8b a2 e8 78 e1 2e 66 d4 cb c8 56 ef f7 25 6e e1 3a 74 ab ac fd 56 50 75 f7 d2 b6 6d 04 17 b5 93 17 c7 36 b0 02 61 37 c0 9b aa b2 09 ee 2c cc c1 71 48 36 f6 7e 18 d1 4d 82 d3 de 8e 7d 1e 2a fd e6 6a b6 b7 b9 51 1a 53 03 61 57 7e 25 44 55 31 c9 a5 63 7a e3 66 ac c8 b8 15 f9 7d 43 b2 8a 7a 3d 7c d7 43 a8 9c d9 c1 98 fd fd 1d 86 fb 7b 64 69 d2 04 de 52 c5 6a 32 3a 30 81 77 7b 9b f9 74 8c 52 05 ae e3 e0 3b 2e ae 34 d5 ac 94 a6 df ab ad b9 f9 9a 90 61 55 80 15 1c 8d 34 59 b2 96 20 3d 87 c1 6a 9f 8a 73 b3 da 8b 8c 18 83 Data Ascii: !#?z\|fJ`-k<];g1,M'"5slOm<xvx.fV%n:tVPum6a7,qH6~M}*jQSaW~%DU1czf}Cz=\|C{diRj2:0w{tR;.4aU4Y =js
2024-04-25 19:25:23 UTC	1369	IN	Data Raw: 9b 40 8b 68 d2 f2 3e 68 67 4c cd ef 45 dd 73 6d 9f 0f dd 91 be d4 f5 68 54 5b 99 4b b6 82 6f 55 f1 b6 44 35 3a 48 84 ee 1a 40 00 52 38 65 c5 eb 96 7d 5e a3 62 15 46 7d 33 5a d4 0b f0 5c 87 22 4b 98 8c 47 ec ed ec 30 1d 1d 50 64 a9 09 e6 ca 38 f0 cc e6 53 c6 07 fb ec 6f 6f 73 b0 b7 47 16 cf 90 42 e1 97 ec 66 e9 c8 5a 3c 05 29 5b e3 04 52 58 e0 77 05 75 0a 10 c2 41 22 4b 5b bf 0e 89 57 15 64 71 52 9b b7 14 5a d1 ee ce 89 3a a0 75 cf 49 d3 0f 37 55 bf 70 7d 84 37 60 b0 75 8e 3b 1f fc 08 a7 ce 1c e5 df fd f2 2f b6 de 5f c9 ae 56 8b 54 5e 06 de 34 37 de d1 45 19 38 aa 44 28 cf 15 49 92 93 64 0a e9 fa 1c 3b b6 ce e6 c0 27 f4 64 9d 20 1c 6a 4b 6e df cf 1d 21 88 f7 d5 c6 59 22 82 b0 d0 53 b3 99 66 5a 70 f9 bd cb bc f5 e6 5b 64 59 7b 76 31 cb 32 be f8 9f be c0 3d Data Ascii: @h>hgLEsmhT[KoUD5:H@R8e}^bF}3Z\"KG0Pd8SoosGBfZ<)[RXwuA"K[WdqRZ:uI7Up}7`u;/_VT^47E8D(Id;'d jKn!Y"SfZp[dY{v12=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49783	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	719	OUT	GET /wp-content/plugins/link-whisper-premium/js/frontend.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22}
2024-04-25 19:25:24 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:24 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b7ff5cdf53b1-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df3865-23bd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 16:01:41 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hA%2BN9SjDUL88QilaAX6lcQz%2FwUiFjWt96aase1wglaVDM6XPhQBd3%2BG42YApSy%2F2E8vhb6x%2F06PYFoFODhlkslY%2BhfwoXE8OBYXe46rxa1Dx5y5wZxQ4xJFi7ruICaJoRDY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:24 UTC	423	IN	Data Raw: 32 33 62 64 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 5b 5d 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 61 27 29 2c 20 66 75 6e 63 74 69 6f 6e 28 65 6c 29 20 7b 0d 0a 20 20 20 20 65 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 77 70 69 6c 5f 6c 69 6e 6b 5f 63 6c 69 63 6b 65 64 29 3b 0d 0a 20 20 20 20 65 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 61 75 78 63 6c 69 63 6b 27 2c 20 77 70 69 6c 5f 6c 69 6e 6b 5f 63 6c 69 63 6b 65 64 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 77 70 69 6c 5f 6c 69 6e 6b 5f 63 6c 69 63 6b 65 64 28 65 29 7b 0d 0a 2f 2f 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 Data Ascii: 23bd"use strict";[].forEach.call(document.querySelectorAll('a'), function(el) { el.addEventListener('click', wpil_link_clicked); el.addEventListener('auxclick', wpil_link_clicked);});function wpil_link_clicked(e){// e.preventD
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 67 27 2c 20 27 73 76 67 27 5d 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 69 66 20 74 68 65 20 63 6c 69 63 6b 20 77 61 73 6e 27 74 20 61 20 70 72 69 6d 61 72 79 20 6f 72 20 6d 69 64 64 6c 65 20 63 6c 69 63 6b 2c 20 6f 72 20 74 68 65 72 65 27 73 20 6e 6f 20 6c 69 6e 6b 2c 20 65 78 69 74 0d 0a 20 20 20 20 69 66 28 21 28 65 2e 77 68 69 63 68 20 3d 3d 20 31 20 7c 7c 20 65 2e 62 75 74 74 6f 6e 20 3d 3d 20 30 20 29 20 26 26 20 21 28 65 2e 77 68 69 63 68 20 3d 3d 20 32 20 7c 7c 20 65 2e 62 75 74 74 6f 6e 20 3d 3d 20 34 20 29 20 7c 7c 20 6c 69 6e 6b 2e 6c 65 6e 67 74 68 20 3c 20 31 29 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 28 27 31 27 20 3d 3d 3d 20 77 70 69 6c 46 72 6f 6e 74 65 6e 64 2e 64 69 73 61 62 6c Data Ascii: g', 'svg']; // if the click wasn't a primary or middle click, or there's no link, exit if(!(e.which == 1 \|\| e.button == 0 ) && !(e.which == 2 \|\| e.button == 4 ) \|\| link.length < 1){ return; } if('1' === wpilFrontend.disabl
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 20 7d 0d 0a 0d 0a 20 20 20 20 66 69 6e 64 4c 69 6e 6b 54 65 78 74 28 6c 69 6e 6b 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 28 6c 69 6e 6b 41 6e 63 68 6f 72 20 3d 3d 3d 20 27 27 20 26 26 20 68 61 73 49 6d 61 67 65 29 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 69 6d 61 67 65 54 69 74 6c 65 20 21 3d 3d 20 27 27 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 6b 41 6e 63 68 6f 72 20 3d 20 77 70 69 6c 46 72 6f 6e 74 65 6e 64 2e 63 6c 69 63 6b 73 49 31 38 6e 2e 69 6d 61 67 65 54 65 78 74 20 2b 20 69 6d 61 67 65 54 69 74 6c 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 65 6c 73 65 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 6b 41 6e 63 68 6f 72 20 3d 20 77 70 69 6c 46 72 6f 6e 74 65 6e 64 2e 63 6c 69 63 6b 73 49 31 38 6e 2e 69 6d 61 67 65 4e 6f 54 65 78 74 Data Ascii: } findLinkText(link); if(linkAnchor === '' && hasImage){ if(imageTitle !== ''){ linkAnchor = wpilFrontend.clicksI18n.imageText + imageTitle; }else{ linkAnchor = wpilFrontend.clicksI18n.imageNoText
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 20 3d 3d 20 30 29 20 29 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 5b 5d 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 61 27 29 2c 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 69 66 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 6e 6f 74 20 61 20 6e 61 76 20 6c 69 6e 6b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 21 68 61 73 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 73 28 65 6c 65 6d 65 6e 74 2c 20 27 68 65 61 64 65 72 2c 20 66 6f 6f 74 65 72 2c 20 6e 61 76 2c 20 5b 69 64 7e 3d 68 65 61 64 65 72 5d 2c 20 5b 69 64 7e 3d 6d 65 6e 75 5d 2c 20 5b 69 64 7e 3d 66 6f 6f 74 65 72 5d 2c 20 5b 69 Data Ascii: == 0) ){ return; } [].forEach.call(document.querySelectorAll('a'), function(element) { // if the link is not a nav link if(!hasParentElements(element, 'header, footer, nav, [id~=header], [id~=menu], [id~=footer], [i
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 3d 20 70 61 72 65 6e 74 4c 69 73 74 2e 73 70 6c 69 74 28 27 2c 27 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 76 61 72 20 66 6f 75 6e 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 66 6f 72 28 76 61 72 20 69 20 69 6e 20 70 61 72 65 6e 74 4c 69 73 74 29 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6a 20 3d 20 70 61 72 65 6e 74 4c 69 73 74 5b 69 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 69 66 28 2d 31 20 21 3d 3d 20 6a 2e 69 6e 64 65 78 4f 66 28 27 69 64 7e 3d 27 29 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 64 20 3d 20 6a 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 69 64 7e 3d 7c 5c 5d 2f 67 2c 20 27 27 29 2e 74 72 69 6d 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 75 6e 64 65 66 69 6e 65 64 20 21 3d 3d 20 65 6c 65 Data Ascii: = parentList.split(','); } var found = false; for(var i in parentList){ var j = parentList[i]; if(-1 !== j.indexOf('id~=')){ var id = j.replace(/\[id~=\|\]/g, '').trim(); if(undefined !== ele
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 66 61 6c 73 65 3b 0d 0a 7d 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 6b 65 41 6a 61 78 43 61 6c 6c 28 63 61 6c 6c 44 61 74 61 20 3d 20 7b 7d 29 7b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 73 70 6f 6e 64 28 64 61 74 29 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 28 64 61 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 61 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 72 65 73 70 6f 6e 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 61 6a 61 78 50 6f 73 74 20 28 64 61 74 61 2c 20 63 61 6c 6c 62 61 63 6b 29 20 7b 0d 0a 20 20 20 20 Data Ascii: false;};function makeAjaxCall(callData = {}){ function respond(dat){ if(dat.currentTarget !== undefined){ console.log(dat.currentTarget.response); } } async function ajaxPost (data, callback) {
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 69 66 28 21 65 6c 65 6d 65 6e 74 20 7c 7c 20 65 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 27 68 74 6d 6c 27 29 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 6f 63 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 76 61 72 20 66 6f 75 6e 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 4c 6f 6f 70 3a 0d 0a 20 20 20 20 66 6f 72 28 76 61 72 20 73 65 63 74 69 6f 6e 20 69 6e 20 73 65 63 74 69 6f 6e 73 29 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 65 63 74 69 6f 6e 44 61 74 61 20 3d 20 73 65 63 74 69 6f 6e 73 5b 73 65 63 74 69 6f 6e 5d 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f Data Ascii: }; if(!element \|\| element.tagName.toLowerCase() === 'html'){ return location; } var found = false; elementLoop: for(var section in sections){ var sectionData = sections[section]; fo
2024-04-25 19:25:24 UTC	520	IN	Data Raw: 6e 74 4c 6f 6f 70 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 65 6c 73 65 20 69 66 28 21 6a 2e 6d 61 74 63 68 28 2f 5b 5e 61 2d 7a 41 2d 5a 5d 2f 29 29 7b 20 2f 2f 20 74 61 67 20 6d 61 74 63 68 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 64 20 3d 20 6a 2e 74 72 69 6d 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 65 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 69 64 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 75 6e 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 61 74 69 6f 6e 20 3d 20 73 65 63 74 69 6f 6e Data Ascii: ntLoop; } }else if(!j.match(/[^a-zA-Z]/)){ // tag match var id = j.trim(); if(element.tagName.toLowerCase() === id){ found = true; location = section
2024-04-25 19:25:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49777	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	605	OUT	GET /wp-content/themes/edumall/assets/images/cursor/light-close.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:24 UTC	900	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:24 GMT Content-Type: image/png Content-Length: 172 Connection: close CF-Ray: 87a0b7ffab1b454c-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dfea3f-ac" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 04:40:31 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QTXaDP4BO5CB4%2Bx%2BaqXDyk1OFBlUu9988Ka10PNzO7CGBPg1CYfUwwLAYUmMHd5Yvva9Ik1T7Lf21pavSyFtNAAjGHlyh0EyYPNvZyMSIQWIaocBQ8Q5C453%2FjEkjT5uy7A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:24 UTC	172	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 02 03 00 00 00 9d 19 d5 6b 00 00 00 0c 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff 38 c0 3b a8 00 00 00 03 74 52 4e 53 00 60 cf 94 50 70 58 00 00 00 4c 49 44 41 54 08 d7 2d 8e c1 0d 00 21 0c c3 72 9f 63 0a 76 61 28 06 61 34 46 22 96 0c 48 8d 62 da 26 27 3d 7f 36 65 f6 26 d5 63 25 df e5 21 81 13 8c c2 a9 0f 07 d5 02 15 16 01 8b 2c 9a 7e b1 c1 76 87 39 da 45 ae 35 84 91 0c f8 00 08 43 12 67 6a ce 41 66 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRkPLTE8;tRNS`PpXLIDAT-!rcva(a4F"Hb&'=6e&c%!,~v9E5CgjAfIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49785	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:23 UTC	594	OUT	GET /wp-content/uploads/Earn-And-Excel-Logo-1-148x50.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:24 UTC	900	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:24 GMT Content-Type: image/png Content-Length: 2472 Connection: close CF-Ray: 87a0b8021bc4b03e-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "60dfe9f9-9a8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 03 Jul 2021 04:39:21 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ixy1nwGTEfaDZb8jDSVjiuzBsaLgShGBxjiAL1CdOwl7jiDqk8vN53wUBOYpp1bhbHlANmK9Tk1EJWaOp2H6lSEldYRVd%2BWJPTR4qq99PK8HXLqJ3ZN808SQ3JAo8%2F4ylk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:24 UTC	469	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 94 00 00 00 32 08 03 00 00 00 8d a7 02 15 00 00 02 07 50 4c 54 45 00 00 00 2d 2d 2d 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 44 44 44 28 28 28 28 28 28 3a 3a 3a 28 28 28 28 28 28 28 28 28 a9 d6 00 1d c9 52 28 28 28 28 28 28 28 28 28 28 28 28 31 31 31 a9 d6 00 44 44 44 44 44 44 28 28 28 28 28 28 44 44 44 9f d5 0a 44 44 44 28 28 28 28 28 28 1d c9 51 28 28 28 28 28 28 a9 d6 00 28 28 28 28 28 28 44 44 44 a9 d6 00 1d c9 52 28 28 28 44 44 44 28 28 28 44 44 44 44 44 44 44 44 44 28 28 28 44 44 44 28 28 28 1d c9 52 28 28 28 44 44 44 28 28 28 28 28 28 28 28 28 2d 2d 2d 44 44 44 28 28 28 1d c9 52 1d c9 52 28 28 28 a9 d6 00 1d c9 52 28 28 28 28 28 28 1d c9 52 28 Data Ascii: PNGIHDR2PLTE---((((((((((((((((((((((((((((((DDD((((((:::(((((((((R((((((((((((111DDDDDD((((((DDDDDD((((((Q((((((((((((DDDR(((DDD(((DDDDDDDDD(((DDD(((R(((DDD(((((((((---DDD(((RR(((R((((((R(
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 44 1d c9 52 44 44 44 44 44 44 44 44 44 21 ca 50 a9 d6 00 1e ca 51 a4 d6 03 a9 d6 00 a9 d6 00 1d c9 52 1d c9 52 1d c9 52 8d d3 11 a9 d6 00 a9 d6 00 1d c9 52 a9 d6 00 1d c9 52 a9 d6 00 1d c9 52 28 28 28 1d c9 52 7c d2 1c a9 d6 00 1d c9 52 a9 d6 00 28 28 28 25 ca 4d 8c d3 11 1b 56 2a 55 00 00 00 a8 74 52 4e 53 00 03 05 80 ad f9 66 fc 5c e7 c9 f6 05 ec fe 0a 0e 53 26 8d 99 f1 2d dc a3 07 fd 1e 94 35 15 0e 03 c1 24 1d f8 8c 3b fa 99 19 65 0a fc c0 a5 76 15 dc d1 71 52 48 05 df ca 9d 32 21 11 ef 50 09 ea d1 cc c9 b5 b1 8a 88 86 4c 44 42 0e f6 f0 ef ea e7 e2 dd d5 d5 d4 d1 c3 c2 b5 7a 78 6a 45 40 37 35 26 1d 1a 14 06 e5 e3 c6 bb a9 a9 a4 58 4a 4a 3a 30 23 1b d9 d0 cf b7 ae a0 92 8c 74 6c 57 4b 3d 34 2f 23 1d 15 0f f2 d9 be b6 a9 98 96 94 85 74 6b 64 61 5d 56 42 Data Ascii: DRDDDDDDDDD!PQRRRRRR(((R\|R(((%MV*UtRNSf\S&-5$;evqRH2!PLDBzxjE@75&XJJ:0#tlWK=4/#tkda]VB
2024-04-25 19:25:24 UTC	634	IN	Data Raw: c7 67 b9 3c 33 04 3f 43 07 4a 72 22 d5 ae 42 2b 87 3f b9 49 b2 e0 23 34 c1 56 43 e5 9b 67 c9 b4 82 7e 3c 5c e7 5f 12 ea fb 99 56 d1 99 fe 72 80 50 e2 01 37 5b a7 0a 4f 08 f9 20 54 28 88 aa 13 b3 3b 55 41 18 cd 71 5c 14 f1 90 63 c7 47 e8 56 5c 0d c7 6b d9 0b fb c5 7d 4b d5 a9 fa c1 59 a0 5a a3 4c 0a 5b 0b a2 ce 03 ad 4c 41 f8 76 e8 d0 11 85 4c 0b 76 35 21 fa c8 b2 d2 31 c5 04 47 a5 4c 91 94 54 c7 ea a5 18 dd 53 a7 24 8d e6 75 fc 82 c8 8d 0f f3 80 30 a9 92 dc 38 24 0f e3 95 57 82 df cc a5 84 9c b7 03 64 a2 a1 2b 42 10 f2 42 13 80 4a 0d c4 b1 db b4 6b 92 ea 7e bc 27 51 52 41 0f 3f bd d4 2a d1 4a 39 c7 fe 5d e5 37 43 21 06 30 87 27 39 59 00 16 35 d1 27 e5 03 83 49 25 81 9b 35 48 d5 4a 95 58 b9 02 38 f1 44 aa 15 df 8a 5a 74 86 c8 50 25 12 e7 3e 28 f0 b4 a2 b7 Data Ascii: g<3?CJr"B+?I#4VCg~<\_VrP7[O T(;UAq\cGV\k}KYZL[LAvLv5!1GLTS$u08$Wd+BBJk~'QRA?*J9]7C!0'9Y5'I%5HJX8DZtP%>(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49784	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:24 UTC	821	OUT	GET /wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:24 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:24 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b801cc59672e-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5efa0dc4-183ee" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 29 Jun 2020 15:50:28 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ip7R%2FNE4tM0Gq7TLUePeRaahT1GAs80NMviwF40zPpJgofpdfrEcb%2FqfnS5BujK6VC83BjVB90jBlIJjAgVGnJ7QzAWtZgQL5aLzGLaevMbjIYnL%2BI9BibOzSJ%2Bu9seHTLg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:24 UTC	426	IN	Data Raw: 37 63 30 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 20 72 28 63 2c 61 2c 66 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 74 29 7b 69 66 28 21 61 5b 6e 5d 29 7b 69 66 28 21 63 5b 6e 5d 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 74 26 26 65 29 72 65 74 75 72 6e 20 65 28 6e 2c 21 30 29 3b 69 66 28 73 29 72 65 74 75 72 6e 20 73 28 6e 2c 21 30 29 3b 76 61 72 20 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6e 2b 22 27 22 29 3b 74 68 72 6f 77 20 69 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 69 7d 76 61 72 20 75 3d 61 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 63 5b 6e 5d Data Ascii: 7c00!function r(c,a,f){function o(n,t){if(!a[n]){if(!c[n]){var e="function"==typeof require&&require;if(!t&&e)return e(n,!0);if(s)return s(n,!0);var i=new Error("Cannot find module '"+n+"'");throw i.code="MODULE_NOT_FOUND",i}var u=a[n]={exports:{}};c[n]
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6f 7d 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 28 32 29 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 28 74 28 31 35 29 29 3b 65 2e 64 65 66 61 75 6c 74 2e 5f 62 61 62 65 6c 50 6f 6c 79 66 69 6c 6c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 40 62 61 62 65 6c 2f 70 6f 6c 79 66 69 6c 6c 20 69 73 20 6c 6f 61 64 65 64 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 Data Ascii: eturn o}({1:[function(t,n,r){"use strict";t(2);var e=function _interopRequireDefault(t){return t&&t.__esModule?t:{default:t}}(t(15));e.default._babelPolyfill&&"undefined"!=typeof console&&console.warn&&console.warn("@babel/polyfill is loaded more than onc
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 2c 74 28 31 36 37 29 2c 74 28 31 35 37 29 2c 74 28 31 37 32 29 2c 74 28 31 35 35 29 2c 74 28 31 37 30 29 2c 74 28 31 36 39 29 2c 74 28 31 36 32 29 2c 74 28 31 36 36 29 2c 74 28 31 35 34 29 2c 74 28 31 35 36 29 2c 74 28 31 35 39 29 2c 74 28 31 35 38 29 2c 74 28 31 37 34 29 2c 74 28 31 36 34 29 2c 74 28 32 34 37 29 2c 74 28 32 34 38 29 2c 74 28 32 35 34 29 2c 74 28 32 34 39 29 2c 74 28 32 35 30 29 2c 74 28 32 35 31 29 2c 74 28 32 35 32 29 2c 74 28 32 35 33 29 2c 74 28 32 33 32 29 2c 74 28 31 38 33 29 2c 74 28 32 35 35 29 2c 74 28 32 39 30 29 2c 74 28 32 39 31 29 2c 74 28 32 37 39 29 2c 74 28 32 38 30 29 2c 74 28 32 38 35 29 2c 74 28 32 38 38 29 2c 74 28 32 38 39 29 2c 74 28 32 38 33 29 2c 74 28 32 38 36 29 2c 74 28 32 38 34 29 2c 74 28 32 38 37 29 2c 74 28 Data Ascii: ,t(167),t(157),t(172),t(155),t(170),t(169),t(162),t(166),t(154),t(156),t(159),t(158),t(174),t(164),t(247),t(248),t(254),t(249),t(250),t(251),t(252),t(253),t(232),t(183),t(255),t(290),t(291),t(279),t(280),t(285),t(288),t(289),t(283),t(286),t(284),t(287),t(
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 37 3a 32 37 37 2c 32 37 38 3a 32 37 38 2c 32 37 39 3a 32 37 39 2c 32 38 30 3a 32 38 30 2c 32 38 31 3a 32 38 31 2c 32 38 32 3a 32 38 32 2c 32 38 33 3a 32 38 33 2c 32 38 34 3a 32 38 34 2c 32 38 35 3a 32 38 35 2c 32 38 36 3a 32 38 36 2c 32 38 37 3a 32 38 37 2c 32 38 38 3a 32 38 38 2c 32 38 39 3a 32 38 39 2c 32 39 30 3a 32 39 30 2c 32 39 31 3a 32 39 31 2c 35 32 3a 35 32 7d 5d 2c 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 74 28 32 39 32 29 2c 6e 2e 65 78 70 6f 72 74 73 3d 74 28 35 32 29 2e 41 72 72 61 79 2e 66 6c 61 74 4d 61 70 7d 2c 7b 32 39 32 3a 32 39 32 2c 35 32 3a 35 32 7d 5d 2c 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 74 28 32 39 33 29 2c 6e 2e 65 78 70 6f 72 74 73 3d 74 28 35 32 29 2e 41 72 72 61 79 2e 69 6e 63 6c 75 64 65 Data Ascii: 7:277,278:278,279:279,280:280,281:281,282:282,283:283,284:284,285:285,286:286,287:287,288:288,289:289,290:290,291:291,52:52}],4:[function(t,n,r){t(292),n.exports=t(52).Array.flatMap},{292:292,52:52}],5:[function(t,n,r){t(293),n.exports=t(52).Array.include
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 36 2e 31 31 22 7d 3b 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 65 26 26 28 5f 5f 65 3d 65 29 7d 2c 7b 7d 5d 2c 31 39 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 74 28 31 36 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 74 29 7b 69 66 28 6f 28 65 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 65 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 69 2c 74 29 7d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 69 2c 74 2c 6e 29 7d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f Data Ascii: 6.11"};"number"==typeof __e&&(__e=e)},{}],19:[function(t,n,r){var o=t(16);n.exports=function(e,i,t){if(o(e),void 0===i)return e;switch(t){case 1:return function(t){return e.call(i,t)};case 2:return function(t,n){return e.call(i,t,n)};case 3:return functio
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 31 39 2c 32 34 3a 32 34 2c 32 35 3a 32 35 2c 32 36 3a 32 36 7d 5d 2c 32 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 74 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 7d 2c 7b 7d 5d 2c 32 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 6e 2e 65 78 70 6f 72 74 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 4d 61 74 68 3d 3d 4d 61 74 68 3f 73 65 6c 66 3a 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 Data Ascii: 19,24:24,25:25,26:26}],23:[function(t,n,r){n.exports=function(t){try{return!!t()}catch(t){return!0}}},{}],24:[function(t,n,r){var e=n.exports="undefined"!=typeof window&&window.Math==Math?window:"undefined"!=typeof self&&self.Math==Math?self:Function("ret
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 6e 67 29 26 26 21 69 28 65 3d 72 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 74 2e 76 61 6c 75 65 4f 66 29 26 26 21 69 28 65 3d 72 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 21 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 74 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 69 28 65 3d 72 2e 63 61 6c 6c 28 74 29 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 7d 2c 7b 32 38 3a 32 38 7d 5d 2c 33 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 74 28 Data Ascii: ng)&&!i(e=r.call(t)))return e;if("function"==typeof(r=t.valueOf)&&!i(e=r.call(t)))return e;if(!n&&"function"==typeof(r=t.toString)&&!i(e=r.call(t)))return e;throw TypeError("Can't convert object to primitive value")}},{28:28}],32:[function(t,n,r){var e=t(
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 74 28 31 34 32 29 2c 61 3d 74 28 31 33 37 29 2c 66 3d 74 28 31 34 31 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 66 69 6c 6c 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 63 28 74 68 69 73 29 2c 72 3d 66 28 6e 2e 6c 65 6e 67 74 68 29 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 61 28 31 3c 65 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 72 29 2c 6f 3d 32 3c 65 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 72 3a 61 28 6f 2c 72 29 3b 69 3c 75 3b 29 6e 5b 69 2b 2b 5d 3d 74 3b 72 65 74 75 72 6e 20 6e 7d 7d 2c 7b 31 33 37 3a 31 33 37 2c 31 34 31 3a 31 34 31 2c 31 34 32 3a 31 34 32 7d 5d 2c Data Ascii: ){"use strict";var c=t(142),a=t(137),f=t(141);n.exports=function fill(t){for(var n=c(this),r=f(n.length),e=arguments.length,i=a(1<e?arguments[1]:void 0,r),o=2<e?arguments[2]:void 0,u=void 0===o?r:a(o,r);i<u;)n[i++]=t;return n}},{137:137,141:141,142:142}],
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 74 28 38 31 29 2c 69 3d 74 28 37 39 29 2c 6f 3d 74 28 31 35 32 29 28 22 73 70 65 63 69 65 73 22 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 69 28 74 29 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 28 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7c 7c 6e 21 3d 3d 41 72 72 61 79 26 26 21 69 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 7c 7c 28 6e 3d 76 6f 69 64 20 30 29 2c 65 28 6e 29 26 26 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 5b 6f 5d 29 26 26 28 6e 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 41 72 72 61 79 3a 6e 7d 7d 2c 7b 31 35 32 3a 31 35 32 2c 37 39 3a 37 39 2c 38 31 3a 38 31 7d 5d 2c Data Ascii: :[function(t,n,r){var e=t(81),i=t(79),o=t(152)("species");n.exports=function(t){var n;return i(t)&&("function"!=typeof(n=t.constructor)\|\|n!==Array&&!i(n.prototype)\|\|(n=void 0),e(n)&&null===(n=n[o])&&(n=void 0)),void 0===n?Array:n}},{152:152,79:79,81:81}],
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 3d 6e 29 72 65 74 75 72 6e 20 72 7d 76 61 72 20 75 3d 74 28 39 39 29 2e 66 2c 63 3d 74 28 39 38 29 2c 61 3d 74 28 31 31 37 29 2c 66 3d 74 28 35 34 29 2c 73 3d 74 28 33 37 29 2c 6c 3d 74 28 36 38 29 2c 65 3d 74 28 38 35 29 2c 69 3d 74 28 38 37 29 2c 6f 3d 74 28 31 32 33 29 2c 68 3d 74 28 35 38 29 2c 70 3d 74 28 39 34 29 2e 66 61 73 74 4b 65 79 2c 76 3d 74 28 31 34 39 29 2c 67 3d 68 3f 22 5f 73 22 3a 22 73 69 7a 65 22 3b 6e 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 43 6f 6e 73 74 72 75 63 74 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 72 2c 65 29 7b 76 61 72 20 69 3d 74 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 73 28 74 2c 69 2c 6f 2c 22 5f 69 22 29 2c 74 2e 5f 74 3d 6f 2c 74 2e 5f 69 3d 63 28 6e 75 6c 6c 29 2c 74 2e 5f 66 3d 76 6f 69 64 20 30 2c 74 2e Data Ascii: =n)return r}var u=t(99).f,c=t(98),a=t(117),f=t(54),s=t(37),l=t(68),e=t(85),i=t(87),o=t(123),h=t(58),p=t(94).fastKey,v=t(149),g=h?"_s":"size";n.exports={getConstructor:function(t,o,r,e){var i=t(function(t,n){s(t,i,o,"_i"),t._t=o,t._i=c(null),t._f=void 0,t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49791	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:24 UTC	808	OUT	GET /wp-includes/js/dist/hooks.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:24 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:24 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b804886fb0d9-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"61398447-1b43" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Sep 2021 03:49:27 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r2QNyg8havUsqt0XMwSABONZUXK8QxJt5NgYxsKsF5EmlgpjxtAj2h7UJOph%2FZo9yg85hYmU3wVai6LdjsZFly5k1G79Pg74aYybs4cB1l3lwDHn9l6zgOZz6wHpvyBytzI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:24 UTC	433	IN	Data Raw: 31 62 34 33 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 74 68 69 73 2e 77 70 3d 74 68 69 73 2e 77 70 7c 7c 7b 7d 2c 74 68 69 73 2e 77 70 2e 68 6f 6f 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 74 5b 65 5d 29 72 65 74 75 72 6e 20 74 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 72 2e 6d 3d 6e 2c 72 2e 63 3d 74 2c 72 2e 64 3d 66 75 Data Ascii: 1b43/! This file is auto-generated /this.wp=this.wp\|\|{},this.wp.hooks=function(n){var t={};function r(e){if(t[e])return t[e].exports;var i=t[e]={i:e,l:!1,exports:{}};return n[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=n,r.c=t,r.d=fu
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 72 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 31 26 74 26 26 28 6e 3d 72 28 6e 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 72 2e 72 28 65 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 Data Ascii: ag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 22 29 3b 76 61 72 20 69 3d 72 28 22 32 35 42 45 22 29 2c 6f 3d 72 28 22 42 73 57 44 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 65 2e 61 29 28 6e 29 7d 28 6e 29 7c 7c 4f 62 6a 65 63 74 28 69 2e 61 29 28 6e 29 7c 7c 4f 62 6a 65 63 74 28 6f 2e 61 29 28 6e 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 73 70 72 65 61 64 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 Data Ascii: ");var i=r("25BE"),o=r("BsWD");function c(n){return function(n){if(Array.isArray(n))return Object(e.a)(n)}(n)\|\|Object(i.a)(n)\|\|Object(o.a)(n)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-a
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 22 31 4f 79 42 22 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 22 3d 3d 3d 6e 3f 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 54 68 65 20 6e 61 6d 65 73 70 61 63 65 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 73 74 72 69 6e 67 2e 22 29 2c 21 31 29 3a 21 21 2f 5e 5b 61 2d 7a 41 2d 5a 5d 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2e 5c 2d 5c 2f 5d 2a 24 2f 2e 74 65 73 74 28 6e 29 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 54 68 65 20 6e 61 6d 65 73 70 61 63 65 20 63 61 6e 20 6f 6e 6c 79 20 63 6f 6e 74 61 69 6e 20 6e 75 6d 62 65 72 73 2c 20 6c 65 74 74 65 72 73 2c 20 64 61 73 68 65 73 2c 20 70 65 72 69 6f 64 73 2c 20 75 6e 64 65 72 73 63 6f Data Ascii: "1OyB");var i=function(n){return"string"!=typeof n\|\|""===n?(console.error("The namespace must be a non-empty string."),!1):!!/^[a-zA-Z][a-zA-Z0-9_.\-\/]*$/.test(n)\|\|(console.error("The namespace can only contain numbers, letters, dashes, periods, undersco
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 69 28 63 29 29 29 7b 69 66 28 21 75 5b 65 5d 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 73 3d 30 3b 69 66 28 72 29 73 3d 75 5b 65 5d 2e 68 61 6e 64 6c 65 72 73 2e 6c 65 6e 67 74 68 2c 75 5b 65 5d 3d 7b 72 75 6e 73 3a 75 5b 65 5d 2e 72 75 6e 73 2c 68 61 6e 64 6c 65 72 73 3a 5b 5d 7d 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 75 5b 65 5d 2e 68 61 6e 64 6c 65 72 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 61 5b 6e 5d 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 63 26 26 28 61 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 73 2b 2b 2c 75 2e 5f 5f 63 75 72 72 65 6e 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 6e 61 6d 65 3d 3d 3d 65 26 26 74 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 3e 3d 6e 26 26 74 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 Data Ascii: i(c))){if(!u[e])return 0;var s=0;if(r)s=u[e].handlers.length,u[e]={runs:u[e].runs,handlers:[]};else for(var a=u[e].handlers,l=function(n){a[n].namespace===c&&(a.splice(n,1),s++,u.__current.forEach((function(t){t.name===e&&t.currentIndex>=n&&t.currentIndex
2024-04-25 19:25:24 UTC	1078	IN	Data Raw: 5b 72 5d 26 26 65 5b 72 5d 2e 72 75 6e 73 3f 65 5b 72 5d 2e 72 75 6e 73 3a 30 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 4f 62 6a 65 63 74 28 65 2e 61 29 28 74 68 69 73 2c 6e 29 2c 74 68 69 73 2e 61 63 74 69 6f 6e 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 68 69 73 2e 61 63 74 69 6f 6e 73 2e 5f 5f 63 75 72 72 65 6e 74 3d 5b 5d 2c 74 68 69 73 2e 66 69 6c 74 65 72 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 74 68 69 73 2e 66 69 6c 74 65 72 73 2e 5f 5f 63 75 72 72 65 6e 74 3d 5b 5d 2c 74 68 69 73 2e 61 64 64 41 63 74 69 6f 6e 3d 63 28 74 68 69 73 2c 22 61 63 74 69 6f 6e 73 22 29 2c 74 68 69 73 2e 61 64 64 46 69 6c 74 65 72 3d 63 28 74 68 69 73 2c 22 66 69 6c 74 65 72 73 22 29 2c 74 68 69 73 2e 72 65 Data Ascii: [r]&&e[r].runs?e[r].runs:0}},h=function n(){Object(e.a)(this,n),this.actions=Object.create(null),this.actions.__current=[],this.filters=Object.create(null),this.filters.__current=[],this.addAction=c(this,"actions"),this.addFilter=c(this,"filters"),this.re
2024-04-25 19:25:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49790	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:24 UTC	807	OUT	GET /wp-includes/js/dist/i18n.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:24 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:24 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8048c817bc9-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"61398447-27d6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Sep 2021 03:49:27 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RPh5c99XLv4pQva7i1%2B1N5qtucOmQl2Sbajo7ygHrPTXBF%2BP0AGx5FqgLrtoqCkQPW7z7wPE4bS777bKw94KKfYdRrqgqmX9SqFdigb2551%2BbRsS9p%2BkS1DD0tw38XOca6c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:24 UTC	427	IN	Data Raw: 32 37 64 36 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 74 68 69 73 2e 77 70 3d 74 68 69 73 2e 77 70 7c 7c 7b 7d 2c 74 68 69 73 2e 77 70 2e 69 31 38 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e Data Ascii: 27d6/! This file is auto-generated /this.wp=this.wp\|\|{},this.wp.i18n=function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=fun
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 6e 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 Data Ascii: ringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumera
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 20 22 25 73 22 27 2c 75 2e 6b 65 79 73 5b 61 5d 2c 75 2e 6b 65 79 73 5b 61 2d 31 5d 29 29 3b 6e 3d 6e 5b 75 2e 6b 65 79 73 5b 61 5d 5d 7d 65 6c 73 65 20 6e 3d 75 2e 70 61 72 61 6d 5f 6e 6f 3f 65 5b 75 2e 70 61 72 61 6d 5f 6e 6f 5d 3a 65 5b 64 2b 2b 5d 3b 69 66 28 69 2e 6e 6f 74 5f 74 79 70 65 2e 74 65 73 74 28 75 2e 74 79 70 65 29 26 26 69 2e 6e 6f 74 5f 70 72 69 6d 69 74 69 76 65 2e 74 65 73 74 28 75 2e 74 79 70 65 29 26 26 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 26 26 28 6e 3d 6e 28 29 29 2c 69 2e 6e 75 6d 65 72 69 63 5f 61 72 67 2e 74 65 73 74 28 75 2e 74 79 70 65 29 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 26 26 69 73 4e 61 4e 28 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: ndefined value "%s"',u.keys[a],u.keys[a-1]));n=n[u.keys[a]]}else n=u.param_no?e[u.param_no]:e[d++];if(i.not_type.test(u.type)&&i.not_primitive.test(u.type)&&n instanceof Function&&(n=n()),i.numeric_arg.test(u.type)&&"number"!=typeof n&&isNaN(n))throw new
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 28 21 69 2e 6e 75 6d 62 65 72 2e 74 65 73 74 28 75 2e 74 79 70 65 29 7c 7c 6c 26 26 21 75 2e 73 69 67 6e 3f 66 3d 22 22 3a 28 66 3d 6c 3f 22 2b 22 3a 22 2d 22 2c 6e 3d 6e 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 69 2e 73 69 67 6e 2c 22 22 29 29 2c 63 3d 75 2e 70 61 64 5f 63 68 61 72 3f 22 30 22 3d 3d 3d 75 2e 70 61 64 5f 63 68 61 72 3f 22 30 22 3a 75 2e 70 61 64 5f 63 68 61 72 2e 63 68 61 72 41 74 28 31 29 3a 22 20 22 2c 70 3d 75 2e 77 69 64 74 68 2d 28 66 2b 6e 29 2e 6c 65 6e 67 74 68 2c 73 3d 75 2e 77 69 64 74 68 26 26 70 3e 30 3f 63 2e 72 65 70 65 61 74 28 70 29 3a 22 22 2c 68 2b 3d 75 2e 61 6c 69 67 6e 3f 66 2b 6e 2b 73 3a 22 30 22 3d 3d 3d 63 3f 66 2b 73 2b 6e 3a 73 2b 66 2b 6e 29 7d 72 65 74 75 72 6e 20 68 7d 76 61 72 20 73 3d 4f Data Ascii: (!i.number.test(u.type)\|\|l&&!u.sign?f="":(f=l?"+":"-",n=n.toString().replace(i.sign,"")),c=u.pad_char?"0"===u.pad_char?"0":u.pad_char.charAt(1):" ",p=u.width-(f+n).length,s=u.width&&p>0?c.repeat(p):"",h+=u.align?f+n+s:"0"===c?f+s+n:s+f+n)}return h}var s=O
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 6f 2c 61 2c 75 3d 6e 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3a 66 6f 72 28 3b 75 3b 29 7b 69 66 28 75 2e 61 72 67 73 2e 6c 65 6e 67 74 68 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c 73 3b 61 2b 2b 29 69 66 28 75 2e 61 72 67 73 5b 61 5d 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 7b 75 3d 75 2e 6e 65 78 74 3b 63 6f 6e 74 69 6e 75 65 20 74 7d 72 65 74 75 72 6e 20 75 21 3d 3d 6e 26 26 28 75 3d 3d 3d 72 26 26 28 72 3d 75 2e 70 72 65 76 29 2c 75 2e 70 72 65 76 2e 6e 65 78 74 3d 75 2e 6e 65 78 74 2c 75 2e 6e 65 78 74 26 26 28 75 2e 6e 65 78 74 Data Ascii: orts=function(t,e){var n,r,i=0;function o(){var o,a,u=n,s=arguments.length;t:for(;u;){if(u.args.length===arguments.length){for(a=0;a<s;a++)if(u.args[a]!==arguments[a]){u=u.next;continue t}return u!==n&&(u===r&&(r=u.prev),u.prev.next=u.next,u.next&&(u.next
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 2f 7c 25 7c 5c 2b 7c 2d 7c 3c 7c 3e 7c 5c 3f 7c 5c 29 7c 3a 2f 3b 76 61 72 20 67 3d 7b 22 21 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 7d 2c 22 2a 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2a 65 7d 2c 22 2f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2f 65 7d 2c 22 25 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 25 65 7d 2c 22 2b 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2b 65 7d 2c 22 2d 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2d 65 7d 2c 22 3c 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3c 65 7d 2c 22 3c 3d 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 Data Ascii: /\|%\|\+\|-\|<\|>\|\?\|\)\|:/;var g={"!":function(t){return!t},"":function(t,e){return te},"/":function(t,e){return t/e},"%":function(t,e){return t%e},"+":function(t,e){return t+e},"-":function(t,e){return t-e},"<":function(t,e){return t<e},"<=":function(t,e){r
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 72 3d 72 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 62 28 4f 62 6a 65 63 74 28 6e 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f Data Ascii: rtySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function x(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?b(Object(n),!0).forEach((functio
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 61 5b 65 5d 29 2c 74 29 2c 72 2e 64 61 74 61 5b 65 5d 5b 22 22 5d 3d 78 28 78 28 7b 7d 2c 5f 5b 22 22 5d 29 2c 72 2e 64 61 74 61 5b 65 5d 5b 22 22 5d 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 64 65 66 61 75 6c 74 22 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 76 6f 69 64 20 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3a 76 6f Data Ascii: a[e]),t),r.data[e][""]=x(x({},_[""]),r.data[e][""])},o=function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"default",e=arguments.length>1?arguments[1]:void 0,n=arguments.length>2?arguments[2]:void 0,o=arguments.length>3?arguments[3]:vo
2024-04-25 19:25:24 UTC	196	IN	Data Raw: 73 7d 2c 72 65 50 42 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 6e 2c 74 7d 6e 2e 64 28 65 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 29 7d 7d 29 3b 0d 0a Data Ascii: s},rePB:function(t,e,n){"use strict";function r(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}n.d(e,"a",(function(){return r}))}});
2024-04-25 19:25:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49792	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:24 UTC	823	OUT	GET /wp-content/plugins/tutor/assets/js/tutor.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:25 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:24 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b80489d37bc0-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-6639e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P1N7HYv4OgbsM9EckihNHSBd8xtmemNvMKDn7cHzbQFpvpPFdXNVKVaAPamo9ROHTPf06Ph2IcBw0rv6v1eInal7yiFmq6slZ72vKCVQ%2FGDxTT5yf%2FOBUU61EEc3ozaVQws%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:25 UTC	430	IN	Data Raw: 32 37 38 66 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 6e 3d 7b 31 32 33 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 72 28 74 29 3b 72 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 63 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 44 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 278f(()=>{var n={1237:(e,t,r)=>{"use strict";r.r(t);r.d(t,{default:()=>c});function D(e){"@babel/helpers - typeof";return D="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 2d 20 6c 69 63 65 6e 73 65 20 28 4d 49 54 29 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 61 63 65 62 6f 6f 6b 2f 72 65 67 65 6e 65 72 61 74 6f 72 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 20 2a 2f 5f 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 69 7d 3b 76 61 72 20 69 3d 7b 7d 2c 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 63 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 2c 61 3d 74 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 2c 72 3d 74 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 7c 7c 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 6e 3d 74 2e Data Ascii: - license (MIT): https://github.com/facebook/regenerator/blob/main/LICENSE */_=function e(){return i};var i={},e=Object.prototype,c=e.hasOwnProperty,t="function"==typeof Symbol?Symbol:{},a=t.iterator\|\|"@@iterator",r=t.asyncIterator\|\|"@@asyncIterator",n=t.
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 72 20 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 7d 76 61 72 20 76 3d 7b 7d 3b 6f 28 76 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 3b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6d 3d 68 26 26 68 28 68 28 43 28 5b 5d 29 29 29 3b 6d 26 26 6d 21 3d 3d 65 26 26 63 2e 63 61 6c 6c 28 6d 2c 61 29 26 26 28 76 3d 6d 29 3b 76 61 72 20 79 3d 70 2e 70 72 6f 74 6f 74 79 70 65 3d 6c 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 76 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 5b 22 6e 65 78 74 22 2c 22 74 68 72 6f 77 22 2c 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 Data Ascii: r s={};function l(){}function f(){}function p(){}var v={};o(v,a,function(){return this});var h=Object.getPrototypeOf,m=h&&h(h(C([])));m&&m!==e&&c.call(m,a)&&(v=m);var y=p.prototype=l.prototype=Object.create(v);function g(e){["next","throw","return"].forEa
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3d 7b 74 72 79 4c 6f 63 3a 65 5b 30 5d 7d 3b 31 20 69 6e 20 65 26 26 28 74 2e 63 61 74 63 68 4c 6f 63 3d 65 5b 31 5d 29 2c 32 20 69 6e 20 65 26 26 28 74 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 65 5b 32 5d 2c 74 2e 61 66 74 65 72 4c 6f 63 3d 65 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 74 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 Data Ascii: delegate=null,s)}function k(e){var t={tryLoc:e[0]};1 in e&&(t.catchLoc=e[1]),2 in e&&(t.finallyLoc=e[2],t.afterLoc=e[3]),this.tryEntries.push(t)}function x(e){var t=e.completion\|\|{};t.type="normal",delete t.arg,e.completion=t}function S(e){this.tryEntries
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 53 74 72 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 29 2c 69 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 72 29 7b 6e 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 6e 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 6e 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 74 3d 6e 2e 70 6f 70 28 29 3b 69 66 28 74 20 69 6e 20 72 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 3d 74 2c 65 2e 64 6f 6e 65 3d 21 31 2c 65 7d 72 65 74 75 72 6e 20 65 2e 64 6f 6e 65 3d 21 30 2c 65 7d 7d 2c 69 2e 76 61 6c 75 65 73 3d 43 2c 53 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 Data Ascii: String",function(){return"[object Generator]"}),i.keys=function(r){var n=[];for(var e in r){n.push(e)}return n.reverse(),function e(){for(;n.length;){var t=n.pop();if(t in r)return e.value=t,e.done=!1,e}return e.done=!0,e}},i.values=C,S.prototype={constru
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 72 20 61 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 6e 5d 3b 69 66 28 61 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 63 2e 63 61 6c 6c 28 61 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 6f 3d 61 3b 62 72 65 61 6b 7d 7d 6f 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 74 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 74 29 26 26 6f 2e 74 72 79 4c 6f 63 3c 3d 72 26 26 72 3c 3d 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 6f 3d 6e 75 6c 6c 29 3b 76 61 72 20 69 3d 6f 3f 6f 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 69 2e 74 79 70 65 3d 74 2c 69 2e 61 72 67 3d 72 2c 6f 3f 28 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 Data Ascii: r a=this.tryEntries[n];if(a.tryLoc<=this.prev&&c.call(a,"finallyLoc")&&this.prev<a.finallyLoc){var o=a;break}}o&&("break"===t\|\|"continue"===t)&&o.tryLoc<=r&&r<=o.finallyLoc&&(o=null);var i=o?o.completion:{};return i.type=t,i.arg=r,o?(this.method="next",th
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 28 75 6e 64 65 66 69 6e 65 64 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 74 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 72 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 28 72 3d 73 28 74 29 29 7c 7c 65 26 26 74 26 26 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 69 66 28 72 29 74 3d 72 3b 76 61 72 20 6e 3d 30 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 7d 3b 72 65 74 75 72 6e 7b 73 3a 61 2c 6e 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6e 3e 3d 74 2e 6c 65 6e 67 74 68 29 72 65 Data Ascii: (undefined)})}}function w(t,e){var r=typeof Symbol!=="undefined"&&t[Symbol.iterator]\|\|t["@@iterator"];if(!r){if(Array.isArray(t)\|\|(r=s(t))\|\|e&&t&&typeof t.length==="number"){if(r)t=r;var n=0;var a=function e(){};return{s:a,n:function e(){if(n>=t.length)re
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 22 74 75 74 6f 72 2d 62 61 63 6b 65 6e 64 2d 66 69 6c 74 65 72 2d 63 6f 75 72 73 65 22 29 3b 69 66 28 65 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 63 28 22 63 6f 75 72 73 65 2d 69 64 22 2c 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 7d 2c 7b 6f 6e 63 65 3a 74 72 75 65 7d 29 7d 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 75 74 6f 72 2d 62 61 63 6b 65 6e 64 2d 66 69 6c 74 65 72 2d 63 61 74 65 67 6f 72 79 22 29 3b 69 66 28 74 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f Data Ascii: "tutor-backend-filter-course");if(e){e.addEventListener("change",function(e){window.location=c("course-id",e.target.value)},{once:true})}var t=document.getElementById("tutor-backend-filter-category");if(t){t.addEventListener("change",function(e){window.lo
2024-04-25 19:25:25 UTC	122	IN	Data Raw: 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 75 74 6f 72 2d 61 64 6d 69 6e 2d 62 75 6c 6b 2d 61 63 74 69 6f 6e 2d 66 6f 72 6d 22 29 3b 69 66 28 68 29 7b 68 2e 6f 6e 73 75 62 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 62 28 5f 28 29 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 76 61 72 20 0d 0a Data Ascii: =document.getElementById("tutor-admin-bulk-action-form");if(h){h.onsubmit=function(){var t=b(_().mark(function e(r){var
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 35 64 63 36 0d 0a 6e 2c 61 2c 6f 2c 69 2c 75 2c 6c 2c 73 2c 63 2c 64 2c 66 2c 70 2c 76 3b 72 65 74 75 72 6e 20 5f 28 29 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 77 68 69 6c 65 28 31 29 7b 73 77 69 74 63 68 28 74 2e 70 72 65 76 3d 74 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 72 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 6e 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 68 29 3b 61 3d 5b 5d 3b 6f 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 74 75 74 6f 72 2d 62 75 6c 6b 2d 63 68 65 63 6b 62 6f 78 22 29 3b 69 3d 77 28 6f 29 3b 74 72 79 7b 66 6f 72 28 69 2e 73 28 29 3b 21 28 75 3d 69 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 6c 3d 75 2e Data Ascii: 5dc6n,a,o,i,u,l,s,c,d,f,p,v;return _().wrap(function e(t){while(1){switch(t.prev=t.next){case 0:r.preventDefault();r.stopPropagation();n=new FormData(h);a=[];o=document.querySelectorAll(".tutor-bulk-checkbox");i=w(o);try{for(i.s();!(u=i.n()).done;){l=u.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49794	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:24 UTC	582	OUT	GET /wp-content/uploads/QUIZ-PIC-480x262.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:25 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: image/png Content-Length: 161785 Connection: close CF-Ray: 87a0b8056feb44db-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "65750340-277f9" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sun, 10 Dec 2023 00:16:00 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GglR6Bt%2F8JroHmdxNjmwPR78QP98ELwKJbNCndBTDi6VH3uehJefWSDqW2JHRFBAXTKh3MIgCO6vtUzJTIv6EhjVA39zHO1CWsKyYsDHW9OTakpyLK3A6694F1TmKeQ83Rk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:25 UTC	467	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 06 08 06 00 00 00 bd c9 46 0a 00 00 80 00 49 44 41 54 78 da ec fd 79 b0 65 59 76 d6 09 fe f6 3e f3 bd f7 8d ee cf 67 f7 f0 98 e7 21 27 45 64 2a 94 91 91 4a 21 21 24 21 8a b9 81 c6 d4 06 4d 51 0c d6 98 b5 41 57 99 b0 2e a0 4c 5d 66 74 d3 58 37 66 40 43 03 26 61 a8 e9 2e 28 10 1a 21 07 49 39 44 0e ca 8c c8 98 07 8f 08 4f 0f 9f df 78 e7 33 ee dd 7f ec 33 ec 73 ee 7d ee a1 22 43 6d b4 c5 cd 74 8b e7 cf ef 3d f7 8c 7b ad f5 ad 6f 7d 1f 7c f8 fa f0 f5 e1 eb c3 d7 87 af 0f 5f 1f be 3e 7c 7d f8 fa f0 f5 e1 eb c3 d7 87 af 0f 5f 1f be 3e 7c 7d f8 fa f0 f5 e1 eb c3 d7 87 af 0f 5f 1f be 3e 7c 7d f8 fa f0 f5 e1 eb c3 d7 87 af ff 7f 79 89 5f fd c2 6f df 71 e2 f4 29 7a bd 90 74 36 e7 fa 95 2b cc 27 33 Data Ascii: PNGIHDRFIDATxyeYv>g!'Ed*J!!$!MQAW.L]ftX7f@C&a.(!I9DOx33s}"Cmt={o}\|_>\|}_>\|}_>\|}y_oq)zt6+'3
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 1c 07 d2 41 38 12 21 1c 5c d7 c5 75 3d 1c cf c7 f3 7d 82 30 c2 0f 02 c2 30 c0 f3 5c 54 91 32 9f 4c 19 ed ed 32 3a d8 23 cf 0b b2 b4 40 03 51 e4 23 1d 17 a5 05 5a 69 26 93 31 97 de 79 9b ab 17 df 21 1e 1d e0 08 8d eb 09 5c d7 45 4a 89 e3 3a 48 21 10 4a 23 85 40 4b 81 10 12 89 30 67 4e 0a 64 b9 ff e6 1c 99 73 29 a4 a8 cf ae 39 0d a2 3e 5f 20 70 44 75 e4 e5 7b a4 44 5a 57 a4 ba 2f 04 a0 ca 13 a2 d0 88 f2 5c 6b 61 f6 df 7c d4 45 38 0e 38 01 da f5 f0 fd 2d ee fd f8 67 f9 f4 33 f7 b2 ea 6b 73 5a cb f7 9a ab 62 ae 47 b5 cd 24 2b 98 cc e6 e4 4a 91 2b 4d 51 14 28 a5 50 4a 51 a8 f2 e7 42 91 64 29 a3 f1 8c dd a1 62 b0 75 8c 47 ce af 30 f0 a0 de 58 75 af 48 41 9e 15 1c 4c 66 0c e7 31 85 2a 98 27 09 59 3a 47 2a 85 ca 33 26 b3 39 af 5c b8 8c f4 57 f9 ec a7 3f ce c9 55 Data Ascii: A8!\u=}00\T2L2:#@Q#Zi&1y!\EJ:H!J#@K0gNds)9>_ pDu{DZW/\ka\|E88-g3ksZbG$+J+MQ(PJQBd)buG0XuHALf1'Y:G3&9\W?U
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 74 0b 51 b0 d7 3d 21 a5 a9 7e a5 53 27 51 8e ef 13 f8 01 7e 10 12 84 21 41 18 e0 38 02 9d a7 4c 26 13 46 07 fb cc c6 23 f2 2c 33 c1 51 60 82 6e 01 49 9a 93 e6 1a e9 47 f4 56 56 70 3c cf fc bb 2e 90 9e ac 03 b0 94 4e b3 60 88 66 21 93 e5 cf 25 c8 60 25 11 75 a1 db 7c ae 5a 5c aa 22 a9 ba 14 65 12 56 3d a8 b2 ac 74 75 b9 6d b9 6c 2d 53 56 02 84 36 09 81 f4 10 c2 45 ba 21 7e 6f 83 13 77 3e c8 c3 4f 3c c2 9d e7 b6 18 44 0e 8e 49 a5 eb 7d d5 55 8c d0 90 17 8a 79 9a 91 e4 99 a9 22 34 e6 be 2d 14 aa 28 d0 5a 51 e4 05 49 96 31 9b 27 cc 53 08 a2 01 77 1e 1f 70 64 c5 c7 77 28 97 f7 72 21 2f 17 0e 29 65 8d 70 08 51 26 4c 5a d6 c7 58 05 5e 94 c9 5f 0b ad 50 4b 17 53 51 1e a9 75 8b 15 1a c7 73 c8 d3 bc 15 44 aa 57 91 e6 38 be 83 f6 04 3a 53 e6 16 ac ce ed b2 e7 ca 0a Data Ascii: tQ=!~S'Q~!A8L&F#,3Q`nIGVVp<.N`f!%`%u\|Z\"eV=tuml-SV6E!~ow>O<DI}Uy"4-(ZQI1'Swpdw(r!/)epQ&LZX^_PKSQusDW8:S
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 26 4c 46 43 86 7b 7b cc 26 63 54 91 d5 95 8c d6 9a 22 cf 99 cd a6 0c 87 43 b2 2c 27 0c 23 82 fe 0a fd b5 55 bc c0 43 e5 0e 52 4a 3c d7 45 56 0b 66 5d f1 54 10 72 53 3d 08 ab 5a ad 1f f6 f2 c8 a4 c0 aa 78 3b b8 6a 19 d0 b5 68 2f ee a2 13 84 11 a2 0c fa 4d 42 a3 85 04 e9 22 85 44 ba 1e 52 06 f8 fd 2d 8e 9f 7f 90 87 9f 78 94 7b ee 3e 4a df 97 88 3a a9 d2 d8 a7 5b a1 c9 73 c5 3c cb 49 b2 8c bc 0c bc 45 d9 db 2d 8a 82 5c 2b 8a 3c 27 4d 33 b2 5c a1 85 4b b8 b2 c6 d9 8d 3e ab 3d 89 5b df af aa 8d 94 56 68 80 16 48 a7 4c da ca 44 cb 3c c3 12 55 26 5f a2 4a 03 84 b6 b2 0d d5 54 9f d5 bd 67 4e 54 eb 3c 6a 1b 66 76 24 aa 68 d0 1b f3 de 26 21 ad 2a 61 c7 83 22 cb 9b 94 af 7e a6 04 06 f4 57 4d fb c3 ba 2e 5d 08 5a 88 45 18 5a 58 49 87 ae 4f 86 68 fd 3b 16 f8 2f 6c 04 Data Ascii: &LFC{{&cT"C,'#UCRJ<EVf]TrS=Zx;jh/MB"DR-x{>J:[s<IE-\+<'M3\K>=[VhHLD<U&_JTgNT<jfv$h&!*a"~WM.]ZEZXIOh;/l
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 7c e4 61 ce 9e 5e a7 57 06 de e6 fa d9 84 40 48 f2 82 24 2d 48 f2 dc 54 ba aa 0c b6 4a a1 f3 0a 66 ce 98 c7 19 93 79 06 5e c4 d1 ad 4d 8e 6d 84 44 6e 53 ad 56 3d fd a6 c3 b6 48 fe ab 50 0b 5d 12 0e 45 f9 8c 4a 21 ca 3f b2 24 d2 75 a0 e5 8a b1 af 97 02 92 34 df dc 0e 65 aa d0 08 57 92 e7 86 63 51 ed 83 d2 cd 35 d0 1a 92 a4 84 a3 5d 07 95 a9 a6 33 6b b5 72 b5 0d d4 56 8d 7a dd 30 9f db ec 1f dd 9c 17 d1 b0 fb eb 04 b6 44 1e 9a 67 5b 59 cf ea 21 d3 0c 2d 72 55 f5 bc 08 10 ca 10 c2 aa 0a bf 4b a3 aa 92 12 29 09 57 42 e6 a3 79 27 11 b7 f7 a7 8d 58 d8 49 60 bd 5c 94 10 34 65 ef b8 28 14 ae e7 92 26 59 d3 fa ee 20 70 d5 71 26 93 98 68 2d 22 18 04 c4 e3 a4 84 a1 ab 69 91 ce 3e 59 48 26 9d 15 ca eb f9 a6 10 9b 67 16 54 d0 26 f2 35 98 54 1b 01 b0 03 b4 ea b4 17 6a Data Ascii: \|a^W@H$-HTJfy^MmDnSV=HP]EJ!?$u4eWcQ5]3krVz0Dg[Y!-rUK)WBy'XI`\4e(&Y pq&h-"i>YH&gT&5Tj
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: b0 37 dd cc de a3 db 7d 6c 37 30 63 8d f1 3c 2f c7 31 1b a8 bb 99 d9 af de af 17 98 c9 75 b5 8d 6e 05 2c a1 35 45 5a 10 ac 07 88 f1 dc e2 7d 89 05 14 ae 46 02 94 66 3e 9c d3 5b 8f 50 bb 05 79 6e f7 a2 cb 75 4a 29 33 7e d3 aa 4c cd 9d dc 5b 8f c8 e2 0c 95 ab 56 22 d1 da df 65 ad 1c da 44 ac 6e 0f 5a 58 ec fb 2e 5c 3d d9 9d b2 72 6c 85 68 bd c7 6c 7f 86 12 d6 48 25 6d e2 54 3c 8e c9 e6 29 bd 23 7d fc be cf 78 67 5c f3 0b 96 3d 1b f1 30 66 3e 9a e3 45 1e 83 23 03 34 9a d9 c1 cc 8c 30 95 84 ae b0 1f 90 0c 02 d3 63 56 2d 2c a6 44 68 7f 0f 02 f0 b2 a6 b3 d6 dd cc 4f 2f 0c b5 8b 25 8c 60 51 43 2f 94 a4 a8 b2 5a a6 53 5d 4b d9 54 d4 52 96 cc 52 fb 3d 9d cb ad ad b1 1d 5d a0 54 41 96 67 cc e3 98 38 cd 71 1c 87 28 ea 11 04 e1 6d 9b e8 ef a7 c9 7e a8 78 46 07 02 be Data Ascii: 7}l70c</1un,5EZ}Ff>[PynuJ)3~L[V"eDnZX.\=rlhlH%mT<)#}xg\=0f>E#40cV-,DhO/%`QC/ZS]KTRR=]TAg8q(m~xF
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 49 e7 19 d3 bd 09 69 9c 7d b0 15 f0 fb ea 89 2e 55 77 5a 0c d6 5d 36 f5 ad c6 66 9a 31 04 f3 5f d3 07 52 4b ab c1 06 7a 6c ca 02 c3 1a 35 d9 ad e7 f9 f8 be 8f eb 7a e5 fd 6e 8d 46 20 0f ef e7 2e 9b e7 5d c2 72 3e ac 47 db 62 2f 76 82 78 37 31 d1 2c 21 58 2d 81 75 aa 00 dd 65 ec 55 df 55 91 76 aa ca 57 a9 a2 85 3a 58 a1 c6 64 fe d6 e8 0d 95 94 a7 74 70 1c 89 e3 fa 38 9e 8f 1b 04 04 61 8f 5e bf 4f 18 45 f8 be 07 14 cc 27 66 ac 68 b4 bf 47 96 c4 25 f2 60 f6 31 4d 53 e2 f9 8c 83 bd 1d b6 b7 6f 30 dc db a1 48 12 5c 20 70 cd f6 ab d6 83 74 1c 90 02 a1 30 52 8d e5 f1 cc c7 3b bc f3 f6 f7 38 75 62 03 cf 81 49 9c 91 a3 cd b8 9b 10 ed aa d6 66 42 57 e7 58 56 44 2d ac 59 44 ab 2d 64 b3 56 64 c3 83 56 15 22 23 3d 84 e3 22 dd 1e fd cd 33 dc f5 d0 63 3c f4 c8 bd 9c 3b Data Ascii: Ii}.UwZ]6f1_RKzl5znF .]r>Gb/vx71,!X-ueUUvW:Xdtp8a^OE'fhG%`1MSo0H\ pt0R;8ubIfBWXVD-YD-dVdV"#="3c<;
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 67 4e ac 10 7a b2 53 74 35 bd 35 53 f1 16 24 55 e0 2d ab b8 4a 32 b2 50 46 65 6c 1e a7 24 19 38 5e c0 f1 e3 03 36 07 1e 61 6b 94 c8 9a f5 16 56 f0 ad e0 3d cd 82 3e ee d2 0a 8a 76 10 5a a6 96 66 bf 5f 58 e2 2a b2 32 f3 68 7d 5e 37 ed 01 2b 70 d7 0b 96 8d ae d8 2c e4 6a 0e b6 bc ca 2a 57 b8 be 53 56 e3 ed 6a 5e 60 82 6f 4d 8e 2a b7 9d 27 05 6e e0 96 04 ac c2 ec 63 29 3f 2a ac 81 17 5a f8 46 03 73 56 e5 a3 b6 d0 b1 45 06 ab b2 d2 97 8e 18 4e 2b 40 eb 4e 6a d1 9c 0b dd 1a db 03 bf ef 93 cd 52 ab 20 d0 b5 7e b5 d6 62 91 32 5d 71 e5 5b 7d 4a d1 51 d4 2a f7 4e 19 48 df 2e 3a 84 10 38 4e 29 2f ba 84 8e 22 2c c9 18 3b 75 d2 5a 33 db 37 a4 ac c9 ae 91 35 d5 a5 dc 65 b5 6f e1 6a 8f f9 38 21 cf 54 3d 26 54 b5 f0 74 43 45 31 84 b9 12 01 5a 42 85 69 ae 54 43 24 58 80 Data Ascii: gNzSt55S$U-J2PFel$8^6akV=>vZf_X2h}^7+p,jWSVj^`oM'nc)?ZFsVEN+@NjR ~b2]q[}JQ*NH.:8N)/",;uZ375eoj8!T=&TtCE1ZBiTC$X
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 21 23 cb e0 3f df 9f b1 7a 7c 85 c1 66 8f c9 ee d4 4a 02 f5 c2 b3 60 b6 2d 6b 89 d6 3c cd 19 5d 1b d2 3b d2 67 e3 cc 06 e3 ed 31 c9 2c c1 16 b4 ae 4d 27 80 22 35 fc 16 d7 73 98 6c 4f e8 6d f4 d8 3c bb c9 78 ef 83 d5 85 76 8b a2 e8 78 e1 2e 66 d4 cb c8 56 ef f7 25 6e e1 3a 74 ab ac fd 56 50 75 f7 d2 b6 6d 04 17 b5 93 17 c7 36 b0 02 61 37 c0 9b aa b2 09 ee 2c cc c1 71 48 36 f6 7e 18 d1 4d 82 d3 de 8e 7d 1e 2a fd e6 6a b6 b7 b9 51 1a 53 03 61 57 7e 25 44 55 31 c9 a5 63 7a e3 66 ac c8 b8 15 f9 7d 43 b2 8a 7a 3d 7c d7 43 a8 9c d9 c1 98 fd fd 1d 86 fb 7b 64 69 d2 04 de 52 c5 6a 32 3a 30 81 77 7b 9b f9 74 8c 52 05 ae e3 e0 3b 2e ae 34 d5 ac 94 a6 df ab ad b9 f9 9a 90 61 55 80 15 1c 8d 34 59 b2 96 20 3d 87 c1 6a 9f 8a 73 b3 da 8b 8c 18 83 35 7b 58 65 d8 b3 38 e1 Data Ascii: !#?z\|fJ`-k<];g1,M'"5slOm<xvx.fV%n:tVPum6a7,qH6~M}*jQSaW~%DU1czf}Cz=\|C{diRj2:0w{tR;.4aU4Y =js5{Xe8
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 67 4c cd ef 45 dd 73 6d 9f 0f dd 91 be d4 f5 68 54 5b 99 4b b6 82 6f 55 f1 b6 44 35 3a 48 84 ee 1a 40 00 52 38 65 c5 eb 96 7d 5e a3 62 15 46 7d 33 5a d4 0b f0 5c 87 22 4b 98 8c 47 ec ed ec 30 1d 1d 50 64 a9 09 e6 ca 38 f0 cc e6 53 c6 07 fb ec 6f 6f 73 b0 b7 47 16 cf 90 42 e1 97 ec 66 e9 c8 5a 3c 05 29 5b e3 04 52 58 e0 77 05 75 0a 10 c2 41 22 4b 5b bf 0e 89 57 15 64 71 52 9b b7 14 5a d1 ee ce 89 3a a0 75 cf 49 d3 0f 37 55 bf 70 7d 84 37 60 b0 75 8e 3b 1f fc 08 a7 ce 1c e5 df fd f2 2f b6 de 5f c9 ae 56 8b 54 5e 06 de 34 37 de d1 45 19 38 aa 44 28 cf 15 49 92 93 64 0a e9 fa 1c 3b b6 ce e6 c0 27 f4 64 9d 20 1c 6a 4b 6e df cf 1d 21 88 f7 d5 c6 59 22 82 b0 d0 53 b3 99 66 5a 70 f9 bd cb bc f5 e6 5b 64 59 7b 76 31 cb 32 be f8 9f be c0 3d 0f 3e c0 9f f9 0b 7f be Data Ascii: gLEsmhT[KoUD5:H@R8e}^bF}3Z\"KG0Pd8SoosGBfZ<)[RXwuA"K[WdqRZ:uI7Up}7`u;/_VT^47E8D(Id;'d jKn!Y"SfZp[dY{v12=>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49793	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:24 UTC	801	OUT	GET /wp-admin/js/editor.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:24 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:24 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b80578814564-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-33ab" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Atg0dfq3%2BYjCulmkf1DyNfyjyJV5TeZpAd2dga6AWo8HsuWtthcDfJFhyyeaEuxprhDd%2BjWYdQFBDKgELLmCW04RQvnV80iu9kT9av9OsBQNE5yvdFfJNTmBFrt9TrxTI1A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:24 UTC	431	IN	Data Raw: 33 33 61 62 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 77 70 3d 77 69 6e 64 6f 77 2e 77 70 7c 7c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 67 29 7b 67 2e 65 64 69 74 6f 72 3d 67 2e 65 64 69 74 6f 72 7c 7c 7b 7d 2c 77 69 6e 64 6f 77 2e 73 77 69 74 63 68 45 64 69 74 6f 72 73 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 76 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 68 26 26 77 69 6e 64 6f 77 2e 74 69 6e 79 6d 63 65 26 26 28 68 3d 77 69 6e 64 6f 77 2e 74 69 6e 79 6d 63 65 2c 28 76 3d 68 2e 24 29 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 76 28 65 2e 74 61 72 67 65 74 29 Data Ascii: 33ab/! This file is auto-generated /window.wp=window.wp\|\|{},function(l,g){g.editor=g.editor\|\|{},window.switchEditors=new function(){var h,v,t={};function e(){!h&&window.tinymce&&(h=window.tinymce,(v=h.$)(document).on("click",function(e){e=v(e.target)
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 6e 74 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 65 26 26 31 30 3c 65 26 26 65 3c 32 30 30 3f 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3a 33 30 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 22 74 6f 67 67 6c 65 22 3b 76 61 72 20 6e 2c 72 2c 69 2c 61 2c 6f 2c 63 2c 70 2c 73 2c 64 2c 6c 2c 67 3d 68 2e 67 65 74 28 65 3d 65 7c 7c 22 63 6f 6e 74 65 6e 74 22 29 2c 75 3d 76 28 22 23 77 70 2d 22 2b 65 2b 22 2d 77 72 61 70 22 29 2c 77 3d 76 28 22 23 22 2b 65 29 2c 66 3d 77 5b 30 5d 3b 69 66 28 22 74 6d 63 65 22 3d 3d 3d 28 74 3d 22 74 6f 67 67 6c 65 22 3d 3d 3d 74 3f 67 26 26 21 67 2e 69 73 48 69 64 64 65 6e 28 29 3f 22 68 74 6d 6c 22 3a 22 74 6d 63 65 22 3a 74 29 7c 7c 22 74 69 6e 79 6d 63 65 22 3d 3d 3d 74 29 7b 69 66 28 67 26 26 21 67 2e 69 Data Ascii: ntHeight;return e&&10<e&&e<200?parseInt(e,10):30}function n(e,t){t=t\|\|"toggle";var n,r,i,a,o,c,p,s,d,l,g=h.get(e=e\|\|"content"),u=v("#wp-"+e+"-wrap"),w=v("#"+e),f=w[0];if("tmce"===(t="toggle"===t?g&&!g.isHidden()?"html":"tmce":t)\|\|"tinymce"===t){if(g&&!g.i
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 4f 53 26 26 6d 26 26 35 30 3c 28 6d 3d 6d 2d 62 28 67 29 2b 31 34 29 26 26 6d 3c 35 65 33 26 26 67 2e 74 68 65 6d 65 2e 72 65 73 69 7a 65 54 6f 28 6e 75 6c 6c 2c 6d 29 2c 67 2e 67 65 74 50 61 72 61 6d 28 22 77 70 5f 6b 65 65 70 5f 73 63 72 6f 6c 6c 5f 70 6f 73 69 74 69 6f 6e 22 29 26 26 53 28 67 29 29 3a 68 2e 69 6e 69 74 28 77 69 6e 64 6f 77 2e 74 69 6e 79 4d 43 45 50 72 65 49 6e 69 74 2e 6d 63 65 49 6e 69 74 5b 65 5d 29 2c 75 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 74 6d 6c 2d 61 63 74 69 76 65 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 6d 63 65 2d 61 63 74 69 76 65 22 29 2c 77 2e 61 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 21 30 29 2c 77 69 6e 64 6f 77 2e 73 65 74 55 73 65 72 53 65 74 74 69 6e 67 28 22 65 64 69 74 6f 72 22 2c 22 74 69 Data Ascii: OS&&m&&50<(m=m-b(g)+14)&&m<5e3&&g.theme.resizeTo(null,m),g.getParam("wp_keep_scroll_position")&&S(g)):h.init(window.tinyMCEPreInit.mceInit[e]),u.removeClass("html-active").addClass("tmce-active"),w.attr("aria-hidden",!0),window.setUserSetting("editor","ti
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 61 6e 3e 22 29 2c 61 3d 6f 2e 6d 61 74 63 68 28 65 29 2c 6e 3d 6f 2e 6d 61 74 63 68 28 69 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 3d 61 2e 69 6e 64 65 78 2c 6f 3d 61 5b 30 5d 2e 6c 65 6e 67 74 68 2c 69 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 2d 31 21 3d 3d 61 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 6d 63 65 2d 6f 62 6a 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 22 29 26 26 28 6f 2d 3d 61 5b 31 5d 2e 6c 65 6e 67 74 68 29 2c 61 3d 6e 2e 69 6e 64 65 78 2c 2d 31 21 3d 3d 6e 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 6d 63 65 2d 6f 62 6a 65 63 74 2d 73 65 6c 65 63 74 69 6f 6e 22 29 26 26 28 61 2d 3d 6e 5b 31 5d 2e 6c 65 6e 67 74 68 29 2c 69 3d 61 2d 6f 29 2c 7b 73 74 61 72 74 3a 65 2c 65 6e 64 3a 69 7d 7d Data Ascii: an>"),a=o.match(e),n=o.match(i);if(!a)return null;e=a.index,o=a[0].length,i=null;return n&&(-1!==a[0].indexOf("data-mce-object-selection")&&(o-=a[1].length),a=n.index,-1!==n[0].indexOf("data-mce-object-selection")&&(a-=n[1].length),i=a-o),{start:e,end:i}}
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 78 65 63 28 65 29 3b 29 74 3d 7b 73 68 6f 72 74 63 6f 64 65 4e 61 6d 65 3a 22 75 72 6c 22 2c 73 68 6f 77 41 73 50 6c 61 69 6e 54 65 78 74 3a 21 31 2c 73 74 61 72 74 49 6e 64 65 78 3a 72 2e 69 6e 64 65 78 2c 65 6e 64 49 6e 64 65 78 3a 72 2e 69 6e 64 65 78 2b 72 5b 30 5d 2e 6c 65 6e 67 74 68 2c 6c 65 6e 67 74 68 3a 72 5b 30 5d 2e 6c 65 6e 67 74 68 2c 75 72 6c 41 74 53 74 61 72 74 4f 66 43 6f 6e 74 65 6e 74 3a 22 22 3d 3d 3d 72 5b 31 5d 2c 75 72 6c 41 74 45 6e 64 4f 66 43 6f 6e 74 65 6e 74 3a 22 22 3d 3d 3d 72 5b 33 5d 7d 2c 61 2e 70 75 73 68 28 74 29 3b 72 65 74 75 72 6e 20 61 7d 28 65 29 2c 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 72 5d 3b 69 66 28 74 3e 3d 69 2e 73 74 61 72 74 49 6e 64 65 78 26 26 74 3c 3d 69 2e Data Ascii: xec(e);)t={shortcodeName:"url",showAsPlainText:!1,startIndex:r.index,endIndex:r.index+r[0].length,length:r[0].length,urlAtStartOfContent:""===r[1],urlAtEndOfContent:""===r[3]},a.push(t);return a}(e),r=0;r<n.length;r++){var i=n[r];if(t>=i.startIndex&&t<=i.
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 76 61 72 20 74 3d 22 62 6c 6f 63 6b 71 75 6f 74 65 7c 75 6c 7c 6f 6c 7c 6c 69 7c 64 6c 7c 64 74 7c 64 64 7c 74 61 62 6c 65 7c 74 68 65 61 64 7c 74 62 6f 64 79 7c 74 66 6f 6f 74 7c 74 72 7c 74 68 7c 74 64 7c 68 5b 31 2d 36 5d 7c 66 69 65 6c 64 73 65 74 7c 66 69 67 75 72 65 22 2c 6e 3d 74 2b 22 7c 64 69 76 7c 70 22 2c 72 3d 74 2b 22 7c 70 72 65 22 2c 69 3d 21 31 2c 74 3d 21 31 2c 61 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 3f 28 2d 31 21 3d 3d 28 65 3d 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3c 73 63 72 69 70 74 22 29 7c 7c 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3c 73 74 79 6c 65 22 29 3f 65 2e 72 65 70 6c 61 63 65 28 2f 3c 28 73 63 72 69 70 74 7c 73 74 79 6c 65 29 5b 5e 3e 5d 2a 3e 5b 5c 73 5c 53 Data Ascii: )}function $(e){var t="blockquote\|ul\|ol\|li\|dl\|dt\|dd\|table\|thead\|tbody\|tfoot\|tr\|th\|td\|h[1-6]\|fieldset\|figure",n=t+"\|div\|p",r=t+"\|pre",i=!1,t=!1,a=[];return e?(-1!==(e=-1!==e.indexOf("<script")\|\|-1!==e.indexOf("<style")?e.replace(/<(script\|style)[^>]*>[\s\S
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 6e 5c 6e 2b 5c 5b 63 61 70 74 69 6f 6e 2f 67 2c 22 63 61 70 74 69 6f 6e 5d 5c 6e 5c 6e 5b 63 61 70 74 69 6f 6e 22 29 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 73 2a 3c 28 28 3f 3a 22 2b 72 2b 22 29 28 3f 3a 20 5b 5e 3e 5d 2a 29 3f 29 5c 5c 73 2a 3e 22 2c 22 67 22 29 2c 22 5c 6e 3c 24 31 3e 22 29 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 73 2a 3c 2f 28 22 2b 72 2b 22 29 3e 5c 5c 73 2a 22 2c 22 67 22 29 2c 22 3c 2f 24 31 3e 5c 6e 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 3c 28 28 6c 69 7c 64 74 7c 64 64 29 5b 5e 3e 5d 2a 29 3e 2f 67 2c 22 20 5c 74 3c 24 31 3e 22 29 29 2e 69 6e 64 65 78 4f 66 28 22 3c 6f 70 74 69 6f 6e 22 29 3f 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2a 3c 6f 70 74 69 6f 6e 2f Data Ascii: n\n+\[caption/g,"caption]\n\n[caption")).replace(new RegExp("\\s<((?:"+r+")(?: [^>])?)\\s>","g"),"\n<$1>")).replace(new RegExp("\\s</("+r+")>\\s","g"),"</$1>\n")).replace(/<((li\|dt\|dd)[^>])>/g," \t<$1>")).indexOf("<option")?(e=e.replace(/\s*<option/
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 2f 67 2c 22 3c 77 70 2d 6c 69 6e 65 2d 62 72 65 61 6b 3e 22 29 7d 29 29 2c 2d 31 21 3d 3d 28 65 3d 2d 31 21 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3c 66 69 67 63 61 70 74 69 6f 6e 22 29 3f 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2a 28 3c 66 69 67 63 61 70 74 69 6f 6e 5b 5e 3e 5d 2a 3e 29 2f 67 2c 22 24 31 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 2f 66 69 67 63 61 70 74 69 6f 6e 3e 5c 73 2a 2f 67 2c 22 3c 2f 66 69 67 63 61 70 74 69 6f 6e 3e 22 29 3a 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 63 61 70 74 69 6f 6e 22 29 26 26 28 6e 3d 21 30 2c 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 63 61 70 74 69 6f 6e 5b 5c 73 5c 53 5d 2b 3f 5c 5b 5c 2f 63 Data Ascii: /g,function(e){return e.replace(/\n/g,"<wp-line-break>")})),-1!==(e=-1!==e.indexOf("<figcaption")?(e=e.replace(/\s(<figcaption[^>]>)/g,"$1")).replace(/<\/figcaption>\s*/g,"</figcaption>"):e).indexOf("[caption")&&(n=!0,e=e.replace(/\[caption[\s\S]+?\[\/c
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 2f 3e 22 2c 22 67 69 22 29 2c 22 24 31 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 3c 62 72 20 5c 2f 3e 28 5c 73 2a 3c 5c 2f 3f 28 3f 3a 70 7c 6c 69 7c 64 69 76 7c 64 6c 7c 64 64 7c 64 74 7c 74 68 7c 70 72 65 7c 74 64 7c 75 6c 7c 6f 6c 29 3e 29 2f 67 69 2c 22 24 31 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 28 3f 3a 3c 70 3e 7c 3c 62 72 20 3f 5c 2f 3f 3e 29 2a 5c 73 2a 5c 5b 63 61 70 74 69 6f 6e 28 5b 5e 5c 5b 5d 2b 29 5c 5b 5c 2f 63 61 70 74 69 6f 6e 5c 5d 5c 73 2a 28 3f 3a 3c 5c 2f 70 3e 7c 3c 62 72 20 3f 5c 2f 3f 3e 29 2a 2f 67 69 2c 22 5b 63 61 70 74 69 6f 6e 24 31 5b 2f 63 61 70 74 69 6f 6e 5d 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 28 3c 28 3f 3a 64 69 76 7c 74 68 7c 74 64 7c 66 6f 72 6d 7c 66 69 65 6c 64 73 65 74 7c 64 64 29 5b 5e 3e 5d 2a 3e 29 28 2e 2a 3f Data Ascii: />","gi"),"$1")).replace(/<br \/>(\s<\/?(?:p\|li\|div\|dl\|dd\|dt\|th\|pre\|td\|ul\|ol)>)/gi,"$1")).replace(/(?:<p>\|<br ?\/?>)\s\[caption([^\[]+)\[\/caption\]\s(?:<\/p>\|<br ?\/?>)/gi,"[caption$1[/caption]")).replace(/(<(?:div\|th\|td\|form\|fieldset\|dd)[^>]>)(.*?
2024-04-25 19:25:24 UTC	1369	IN	Data Raw: 69 6e 79 6d 63 65 3a 21 30 7d 29 2e 74 69 6e 79 6d 63 65 26 26 74 2e 71 75 69 63 6b 74 61 67 73 26 26 28 72 3d 6c 28 22 23 22 2b 65 29 2c 69 3d 6c 28 22 3c 64 69 76 3e 22 29 2e 61 74 74 72 28 7b 63 6c 61 73 73 3a 22 77 70 2d 63 6f 72 65 2d 75 69 20 77 70 2d 65 64 69 74 6f 72 2d 77 72 61 70 20 74 6d 63 65 2d 61 63 74 69 76 65 22 2c 69 64 3a 22 77 70 2d 22 2b 65 2b 22 2d 77 72 61 70 22 7d 29 2c 61 3d 6c 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d 65 64 69 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 27 29 2c 6f 3d 6c 28 22 3c 62 75 74 74 6f 6e 3e 22 29 2e 61 74 74 72 28 7b 74 79 70 65 3a 22 62 75 74 74 6f 6e 22 2c 22 64 61 74 61 2d 77 70 2d 65 64 69 74 6f 72 2d 69 64 22 3a 65 7d 29 2c 63 3d 6c 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 70 2d 65 64 Data Ascii: inymce:!0}).tinymce&&t.quicktags&&(r=l("#"+e),i=l("<div>").attr({class:"wp-core-ui wp-editor-wrap tmce-active",id:"wp-"+e+"-wrap"}),a=l('<div class="wp-editor-container">'),o=l("<button>").attr({type:"button","data-wp-editor-id":e}),c=l('<div class="wp-ed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49795	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:24 UTC	807	OUT	GET /wp-includes/js/quicktags.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:25 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8075ae344df-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-2b8d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1bgY93uhgF3PdXXD8C99qMcrZyphgJUOfRifTho10v3M4H22ji9gBkVeP%2FRyInO%2FR8Ew2oHk75M9aw3aijFXDBejlZ0zk%2BdhlQKXbR0DsdoM6SL0TOQ%2BhQQkUCCK%2BTQaGuM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:25 UTC	425	IN	Data Raw: 32 62 38 64 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 65 64 42 75 74 74 6f 6e 73 3d 5b 5d 2c 77 69 6e 64 6f 77 2e 65 64 41 64 64 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 43 68 65 63 6b 4f 70 65 6e 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 43 6c 6f 73 65 41 6c 6c 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 49 6e 73 65 72 74 49 6d 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 49 6e 73 65 72 74 4c 69 6e 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 49 6e 73 65 72 74 54 61 67 3d 66 75 6e 63 74 69 6f 6e Data Ascii: 2b8d/! This file is auto-generated /window.edButtons=[],window.edAddTag=function(){},window.edCheckOpenTags=function(){},window.edCloseAllTags=function(){},window.edInsertImage=function(){},window.edInsertLink=function(){},window.edInsertTag=function
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 53 70 65 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 6e 64 6f 77 2e 65 64 54 6f 6f 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 6f 2c 61 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 3f 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 74 29 3a 28 28 65 3d 75 29 2e 66 75 6e 63 73 3d 5b 5d 2c 65 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 65 2e 69 73 52 65 61 64 79 29 66 6f 72 28 65 2e 69 73 52 65 61 64 79 3d 21 30 2c 6e 3d 30 3b 6e 3c 65 2e 66 75 6e 63 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 2e 66 75 6e 63 73 5b 6e 5d 28 29 7d 2c 65 2e 69 Data Ascii: Spell=function(){},window.edToolbar=function(){},function(){var t,e,u=function(t){var e,n,o,a;"undefined"!=typeof jQuery?jQuery(document).ready(t):((e=u).funcs=[],e.ready=function(){if(!e.isReady)for(e.isReady=!0,n=0;n<e.funcs.length;n++)e.funcs[n]()},e.i
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 64 6d 69 6e 70 61 67 65 3f 6c 2b 22 5f 74 6f 6f 6c 62 61 72 22 3a 28 77 69 6e 64 6f 77 2e 65 64 43 61 6e 76 61 73 3d 73 2c 22 65 64 5f 74 6f 6f 6c 62 61 72 22 29 2c 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6f 29 29 7c 7c 28 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2e 69 64 3d 6f 2c 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 71 75 69 63 6b 74 61 67 73 2d 74 6f 6f 6c 62 61 72 22 29 2c 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 73 29 2c 61 2e 74 6f 6f 6c 62 61 72 3d 65 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 28 74 3d 74 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 74 61 72 67 65 74 7c 7c 74 2e 73 72 Data Ascii: dminpage?l+"_toolbar":(window.edCanvas=s,"ed_toolbar"),(e=document.getElementById(o))\|\|((e=document.createElement("div")).id=o,e.className="quicktags-toolbar"),s.parentNode.insertBefore(e,s),a.toolbar=e,n=function(t){var e=(t=t\|\|window.event).target\|\|t.sr
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 28 6e 20 69 6e 20 69 2e 62 75 74 74 6f 6e 73 26 26 28 75 3d 22 2c 22 2b 69 2e 62 75 74 74 6f 6e 73 2b 22 2c 22 29 2c 65 64 42 75 74 74 6f 6e 73 29 65 64 42 75 74 74 6f 6e 73 5b 6e 5d 26 26 28 65 3d 65 64 42 75 74 74 6f 6e 73 5b 6e 5d 2e 69 64 2c 75 26 26 2d 31 21 3d 3d 22 2c 73 74 72 6f 6e 67 2c 65 6d 2c 6c 69 6e 6b 2c 62 6c 6f 63 6b 2c 64 65 6c 2c 69 6e 73 2c 69 6d 67 2c 75 6c 2c 6f 6c 2c 6c 69 2c 63 6f 64 65 2c 6d 6f 72 65 2c 63 6c 6f 73 65 2c 22 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 65 2b 22 2c 22 29 26 26 2d 31 3d 3d 3d 75 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 65 2b 22 2c 22 29 7c 7c 65 64 42 75 74 74 6f 6e 73 5b 6e 5d 2e 69 6e 73 74 61 6e 63 65 26 26 65 64 42 75 74 74 6f 6e 73 5b 6e 5d 2e 69 6e 73 74 61 6e 63 65 21 3d 3d 74 7c 7c 28 6c 5b 65 5d 3d Data Ascii: (n in i.buttons&&(u=","+i.buttons+","),edButtons)edButtons[n]&&(e=edButtons[n].id,u&&-1!==",strong,em,link,block,del,ins,img,ul,ol,li,code,more,close,".indexOf(","+e+",")&&-1===u.indexOf(","+e+",")\|\|edButtons[n].instance&&edButtons[n].instance!==t\|\|(l[e]=
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 6e 67 28 6e 2c 61 2e 6c 65 6e 67 74 68 29 2c 69 2e 73 65 6c 65 63 74 69 6f 6e 53 74 61 72 74 3d 65 2b 74 2e 6c 65 6e 67 74 68 2c 69 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 3d 65 2b 74 2e 6c 65 6e 67 74 68 2c 69 2e 73 63 72 6f 6c 6c 54 6f 70 3d 6f 29 3a 69 2e 76 61 6c 75 65 2b 3d 74 2c 69 2e 66 6f 63 75 73 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 3f 28 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 48 54 4d 4c 45 76 65 6e 74 73 22 29 29 2e 69 6e 69 74 45 76 65 6e 74 28 22 63 68 61 6e 67 65 22 2c 21 31 2c 21 30 29 2c 69 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 74 29 29 3a 69 2e 66 69 72 65 45 76 65 6e 74 26 26 69 2e 66 69 72 65 45 76 65 6e 74 28 22 6f 6e 63 68 61 6e 67 65 22 29 2c 21 30 29 7d 2c 72 Data Ascii: ng(n,a.length),i.selectionStart=e+t.length,i.selectionEnd=e+t.length,i.scrollTop=o):i.value+=t,i.focus(),document.createEvent?((t=document.createEvent("HTMLEvents")).initEvent("change",!1,!0),i.dispatchEvent(t)):i.fireEvent&&i.fireEvent("onchange"),!0)},r
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 74 68 69 73 2e 61 74 74 72 2e 61 72 69 61 4c 61 62 65 6c 43 6c 6f 73 65 29 29 7d 2c 72 2e 54 61 67 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 69 73 4f 70 65 6e 28 65 29 3b 21 31 21 3d 3d 6e 26 26 65 2e 6f 70 65 6e 54 61 67 73 2e 73 70 6c 69 63 65 28 6e 2c 31 29 2c 74 2e 76 61 6c 75 65 3d 74 68 69 73 2e 64 69 73 70 6c 61 79 2c 74 68 69 73 2e 61 74 74 72 2e 61 72 69 61 4c 61 62 65 6c 26 26 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 6c 61 62 65 6c 22 2c 74 68 69 73 2e 61 74 74 72 2e 61 72 69 61 4c 61 62 65 6c 29 7d 2c 72 2e 54 61 67 42 75 74 74 6f 6e 2e 70 72 6f Data Ascii: Attribute("aria-label",this.attr.ariaLabelClose))},r.TagButton.prototype.closeTag=function(t,e){var n=this.isOpen(e);!1!==n&&e.openTags.splice(n,1),t.value=this.display,this.attr.ariaLabel&&t.setAttribute("aria-label",this.attr.ariaLabel)},r.TagButton.pro
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 76 61 6c 75 65 2b 3d 63 2e 74 61 67 53 74 61 72 74 2c 65 2e 66 6f 63 75 73 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 3f 28 28 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 48 54 4d 4c 45 76 65 6e 74 73 22 29 29 2e 69 6e 69 74 45 76 65 6e 74 28 22 63 68 61 6e 67 65 22 2c 21 31 2c 21 30 29 2c 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 63 29 29 3a 65 2e 66 69 72 65 45 76 65 6e 74 26 26 65 2e 66 69 72 65 45 76 65 6e 74 28 22 6f 6e 63 68 61 6e 67 65 22 29 7d 2c 72 2e 53 70 65 6c 6c 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 72 2e 43 6c 6f 73 65 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 42 75 74 74 6f 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 22 63 6c 6f 73 65 22 2c 71 75 69 Data Ascii: value+=c.tagStart,e.focus(),document.createEvent?((c=document.createEvent("HTMLEvents")).initEvent("change",!1,!0),e.dispatchEvent(c)):e.fireEvent&&e.fireEvent("onchange")},r.SpellButton=function(){},r.CloseButton=function(){r.Button.call(this,"close",qui
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 2c 6f 29 3b 61 26 26 28 6f 3d 70 72 6f 6d 70 74 28 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 65 6e 74 65 72 49 6d 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 2c 22 22 29 2c 74 68 69 73 2e 74 61 67 53 74 61 72 74 3d 27 3c 69 6d 67 20 73 72 63 3d 22 27 2b 61 2b 27 22 20 61 6c 74 3d 22 27 2b 6f 2b 27 22 20 2f 3e 27 2c 72 2e 54 61 67 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 65 2c 6e 29 29 7d 2c 72 2e 44 46 57 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 42 75 74 74 6f 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 22 64 66 77 22 2c 22 22 2c 22 66 22 2c 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 64 66 77 29 7d 2c 72 2e 44 46 57 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 Data Ascii: ,o);a&&(o=prompt(quicktagsL10n.enterImageDescription,""),this.tagStart='<img src="'+a+'" alt="'+o+'" />',r.TagButton.prototype.callback.call(this,t,e,n))},r.DFWButton=function(){r.Button.call(this,"dfw","","f",quicktagsL10n.dfw)},r.DFWButton.prototype=new
2024-04-25 19:25:25 UTC	1149	IN	Data Raw: 64 65 6c 2c 61 72 69 61 4c 61 62 65 6c 43 6c 6f 73 65 3a 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 64 65 6c 43 6c 6f 73 65 7d 29 2c 65 64 42 75 74 74 6f 6e 73 5b 36 30 5d 3d 6e 65 77 20 72 2e 54 61 67 42 75 74 74 6f 6e 28 22 69 6e 73 22 2c 22 69 6e 73 22 2c 27 3c 69 6e 73 20 64 61 74 65 74 69 6d 65 3d 22 27 2b 74 2b 27 22 3e 27 2c 22 3c 2f 69 6e 73 3e 22 2c 22 22 2c 22 22 2c 22 22 2c 7b 61 72 69 61 4c 61 62 65 6c 3a 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 69 6e 73 2c 61 72 69 61 4c 61 62 65 6c 43 6c 6f 73 65 3a 71 75 69 63 6b 74 61 67 73 4c 31 30 6e 2e 69 6e 73 43 6c 6f 73 65 7d 29 2c 65 64 42 75 74 74 6f 6e 73 5b 37 30 5d 3d 6e 65 77 20 72 2e 49 6d 67 42 75 74 74 6f 6e 2c 65 64 42 75 74 74 6f 6e 73 5b 38 30 5d 3d 6e 65 77 20 72 2e 54 61 67 42 75 74 74 Data Ascii: del,ariaLabelClose:quicktagsL10n.delClose}),edButtons[60]=new r.TagButton("ins","ins",'<ins datetime="'+t+'">',"</ins>","","","",{ariaLabel:quicktagsL10n.ins,ariaLabelClose:quicktagsL10n.insClose}),edButtons[70]=new r.ImgButton,edButtons[80]=new r.TagButt
2024-04-25 19:25:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49796	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:24 UTC	812	OUT	GET /wp-includes/js/dist/dom-ready.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:25 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8075abb454e-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"61398447-4c9" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Sep 2021 03:49:27 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tAC7KSMDrhqcv%2FjUo9FF3GTeQ%2FQ04ZGoWMy6swFwr1SYX56Lnuic%2FH8gSSxQZldwQjS9Un3uIwEEqhOqEqrl8SgmNVyQ%2F7mgxlV61YfjviZmOkZj9%2BqgasNoC4c2n9kZWVQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:25 UTC	426	IN	Data Raw: 34 63 39 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 74 68 69 73 2e 77 70 3d 74 68 69 73 2e 77 70 7c 7c 7b 7d 2c 74 68 69 73 2e 77 70 2e 64 6f 6d 52 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d Data Ascii: 4c9/! This file is auto-generated /this.wp=this.wp\|\|{},this.wp.domReady=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=
2024-04-25 19:25:25 UTC	806	IN	Data Raw: 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 6e 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 Data Ascii: toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enu
2024-04-25 19:25:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49798	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	807	OUT	GET /wp-includes/js/dist/a11y.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:25 UTC	947	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8087b1507e6-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"61398447-bf1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 09 Sep 2021 03:49:27 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c0TYBbGqnQC8bu%2ByRmDT%2FooD%2BurV%2FGfKUSW7Weutiu8dDn9jJoAFR%2FI7ogJioIOXSkaC0%2F%2BYMAO1okJ8QOz7zCSnmCyOi2NHRUqntvVLFEhNHTa5dHWB9rCQc874ThoplMY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:25 UTC	422	IN	Data Raw: 62 66 31 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 74 68 69 73 2e 77 70 3d 74 68 69 73 2e 77 70 7c 7c 7b 7d 2c 74 68 69 73 2e 77 70 2e 61 31 31 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 Data Ascii: bf1/! This file is auto-generated /this.wp=this.wp\|\|{},this.wp.a11y=function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=t,n.c=e,n.d=func
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 6e 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 31 26 65 26 26 28 74 3d 6e 28 74 29 29 2c 38 26 65 29 72 65 74 75 72 6e 20 74 3b 69 66 28 34 26 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 72 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 Data Ascii: toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enu
2024-04-25 19:25:25 UTC	1273	IN	Data Raw: 6f 6e 20 75 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 31 31 79 2d 73 70 65 61 6b 2d 69 6e 74 72 6f 2d 74 65 78 74 22 29 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 31 31 79 2d 73 70 65 61 6b 2d 61 73 73 65 72 74 69 76 65 22 29 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 31 31 79 2d 73 70 65 61 6b 2d 70 6f 6c 69 74 65 22 29 3b 6e 75 6c 6c 3d 3d 3d 74 26 26 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 22 29 3b 74 2e 69 64 3d 22 61 31 31 79 2d 73 70 65 61 6b 2d 69 6e 74 72 6f 2d 74 65 78 74 22 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 3d Data Ascii: on u(){var t=document.getElementById("a11y-speak-intro-text"),e=document.getElementById("a11y-speak-assertive"),n=document.getElementById("a11y-speak-polite");null===t&&function(){var t=document.createElement("p");t.id="a11y-speak-intro-text",t.className=
2024-04-25 19:25:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49800	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	812	OUT	GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:25 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b809ba7b8834-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-5133" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i6VTI6EUex7GUKseFgKvBmLNqu7UrCkGZlFDyuq%2Bprgyc4j%2F8KfWYMSHsbv6MoZc%2Fj1oqfCRwaw2syDmYNcLeVyt6t1KG6LYREZu930sfJc9P6wk%2BUiYvwJrNwpJ9214pAE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:25 UTC	427	IN	Data Raw: 32 37 37 36 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 32 30 2d 30 39 2d 32 35 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 73 63 61 70 65 2d 73 65 6c 65 63 74 6f 72 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 66 6f 72 6d 2e 6a 73 2c 20 69 65 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 31 2d 37 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 70 6c 75 67 69 6e 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 73 61 66 65 2d 61 63 74 69 76 65 2d 65 6c Data Ascii: 2776/! jQuery UI - v1.12.1 - 2020-09-25 http://jqueryui.com* Includes: data.js, disable-selection.js, escape-selector.js, focusable.js, form-reset-mixin.js, form.js, ie.js, jquery-1-7.js, keycode.js, labels.js, plugin.js, position.js, safe-active-el
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 76 61 72 20 74 2c 65 2c 6e 2c 57 2c 43 2c 6f 2c 73 2c 72 2c 6c 2c 61 2c 69 2c 68 3b 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 5b 70 61 72 73 65 46 6c 6f 61 74 28 74 5b 30 5d 29 2a 28 61 2e 74 65 73 74 28 74 5b 30 5d 29 3f 65 2f 31 30 30 3a 31 29 2c 70 61 72 73 65 46 6c 6f 61 74 28 74 5b 31 5d 29 2a 28 61 2e 74 65 73 74 28 74 5b 31 5d 29 3f 69 2f 31 30 30 3a 31 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 78 2e 63 73 73 28 74 2c Data Ascii: function"==typeof define&&define.amd?define(["jquery"],t):t(jQuery)}(function(x){var t,e,n,W,C,o,s,r,l,a,i,h;function E(t,e,i){return[parseFloat(t[0])(a.test(t[0])?e/100:1),parseFloat(t[1])(a.test(t[1])?i/100:1)]}function H(t,e){return parseInt(x.css(t,
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 78 2e 75 69 2e 66 6f 63 75 73 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 2c 6f 2c 73 2c 72 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 61 72 65 61 22 3d 3d 3d 72 3f 28 6e 3d 28 69 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2e 6e 61 6d 65 2c 21 28 21 74 2e 68 72 65 66 7c 7c 21 6e 7c 7c 22 6d 61 70 22 21 3d 3d 69 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 28 30 3c 28 6e 3d 78 28 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 2b 6e 2b 22 27 5d 22 29 29 2e 6c 65 6e 67 74 68 26 26 6e 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 29 3a 28 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 Data Ascii: /license */x.ui.focusable=function(t,e){var i,n,o,s,r=t.nodeName.toLowerCase();return"area"===r?(n=(i=t.parentNode).name,!(!t.href\|\|!n\|\|"map"!==i.nodeName.toLowerCase())&&(0<(n=x("img[usemap='#"+n+"']")).length&&n.is(":visible"))):(/^(input\|select\|texta
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 74 3b 74 68 69 73 2e 66 6f 72 6d 2e 6c 65 6e 67 74 68 26 26 28 28 74 3d 74 68 69 73 2e 66 6f 72 6d 2e 64 61 74 61 28 22 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 2d 69 6e 73 74 61 6e 63 65 73 22 29 29 2e 73 70 6c 69 63 65 28 78 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 74 29 2c 31 29 2c 74 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 66 6f 72 6d 2e 64 61 74 61 28 22 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 2d 69 6e 73 74 61 6e 63 65 73 22 2c 74 29 3a 74 68 69 73 2e 66 6f 72 6d 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 2d 69 6e 73 74 61 6e 63 65 73 22 29 2e 6f 66 66 28 22 72 65 73 65 74 2e 75 69 2d 66 6f 72 6d 2d 72 65 73 65 74 22 29 29 7d 7d 2c 78 2e 75 69 2e 69 65 3d 21 21 2f 6d 73 69 65 20 5b 5c 77 2e 5d 2b 2f 2e 65 78 65 63 28 Data Ascii: t;this.form.length&&((t=this.form.data("ui-form-reset-instances")).splice(x.inArray(this,t),1),t.length?this.form.data("ui-form-reset-instances",t):this.form.removeData("ui-form-reset-instances").off("reset.ui-form-reset"))}},x.ui.ie=!!/msie [\w.]+/.exec(
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 78 2e 75 69 2e 6b 65 79 43 6f 64 65 3d 7b 42 41 43 4b 53 50 41 43 45 3a 38 2c 43 4f 4d 4d 41 3a 31 38 38 2c 44 45 4c 45 54 45 3a 34 36 2c 44 4f 57 4e 3a 34 30 2c 45 4e 44 3a 33 35 2c 45 4e 54 45 52 3a 31 33 2c 45 53 43 41 50 45 3a 32 37 2c 48 4f 4d 45 3a 33 36 2c 4c 45 46 54 3a 33 37 2c 50 41 47 45 5f 44 4f 57 4e 3a 33 34 2c 50 41 47 45 5f 55 50 3a 33 33 2c 50 45 52 49 4f 44 3a 31 39 30 2c Data Ascii: * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */x.ui.keyCode={BACKSPACE:8,COMMA:188,DELETE:46,DOWN:40,END:35,ENTER:13,ESCAPE:27,HOME:36,LEFT:37,PAGE_DOWN:34,PAGE_UP:33,PERIOD:190,
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 72 69 67 68 74 2f 2c 73 3d 2f 74 6f 70 7c 63 65 6e 74 65 72 7c 62 6f 74 74 6f 6d 2f 2c 72 3d 2f 5b 5c 2b 5c 2d 5d 5c 64 2b 28 5c 2e 5b 5c 64 5d 2b 29 3f 25 3f 2f 2c 6c 3d 2f 5e 5c 77 2b 2f 2c 61 3d 2f 25 24 2f 2c 69 3d 78 2e 66 6e 2e 70 6f 73 69 74 69 6f 6e 2c 78 2e 70 6f 73 69 74 69 6f 6e 3d 7b 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 74 2c 65 3d 78 28 22 3c 64 69 76 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 27 3e 3c 64 69 76 20 73 74 79 6c 65 3d Data Ascii: right/,s=/top\|center\|bottom/,r=/[\+\-]\d+(\.[\d]+)?%?/,l=/^\w+/,a=/%$/,i=x.fn.position,x.position={scrollbarWidth:function(){if(void 0!==n)return n;var t,e=x("<div style='display:block;position:absolute;width:50px;height:50px;overflow:hidden;'><div style=
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 6c 65 66 74 3a 30 7d 7d 3a 78 2e 69 73 57 69 6e 64 6f 77 28 74 29 3f 7b 77 69 64 74 68 3a 65 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 65 2e 68 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 65 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 6c 65 66 74 3a 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 7d 7d 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 7b 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 74 2e 70 61 67 65 59 2c 6c 65 66 74 3a 74 2e 70 61 67 65 58 7d 7d 3a 7b 77 69 64 74 68 3a 65 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 65 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 65 2e 6f 66 66 73 65 74 28 29 7d 3b 72 65 74 75 72 6e 20 76 5b 30 5d 2e 70 72 65 Data Ascii: left:0}}:x.isWindow(t)?{width:e.width(),height:e.height(),offset:{top:e.scrollTop(),left:e.scrollLeft()}}:t.preventDefault?{width:0,height:0,offset:{top:t.pageY,left:t.pageX}}:{width:e.outerWidth(),height:e.outerHeight(),offset:e.offset()};return v[0].pre
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 61 72 67 65 74 57 69 64 74 68 3a 64 2c 74 61 72 67 65 74 48 65 69 67 68 74 3a 70 2c 65 6c 65 6d 57 69 64 74 68 3a 6c 2c 65 6c 65 6d 48 65 69 67 68 74 3a 61 2c 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 3a 69 2c 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 3a 6f 2c 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 3a 73 2c 6f 66 66 73 65 74 3a 5b 75 5b 30 5d 2b 63 5b 30 5d 2c 75 5b 31 5d 2b 63 5b 31 5d 5d 2c 6d 79 3a 66 2e 6d 79 2c 61 74 3a 66 2e 61 74 2c 77 69 74 68 69 6e 3a 62 2c 65 6c 65 6d 3a 72 7d 29 7d 29 2c 66 2e 75 73 69 6e 67 26 26 28 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 67 2e 6c 65 66 74 2d 68 2e 6c 65 66 74 2c 69 3d 65 2b 64 2d 6c 2c 6e 3d 67 2e 74 6f 70 2d 68 2e 74 6f 70 2c 6f 3d 6e 2b 70 2d 61 2c 73 3d 7b 74 61 72 67 65 Data Ascii: argetWidth:d,targetHeight:p,elemWidth:l,elemHeight:a,collisionPosition:i,collisionWidth:o,collisionHeight:s,offset:[u[0]+c[0],u[1]+c[1]],my:f.my,at:f.at,within:b,elem:r})}),f.using&&(t=function(t){var e=g.left-h.left,i=e+d-l,n=g.top-h.top,o=n+p-a,s={targe
2024-04-25 19:25:25 UTC	100	IN	Data Raw: 2c 65 29 7b 76 61 72 20 69 3d 65 2e 77 69 74 68 69 6e 2c 6e 3d 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2b 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 2c 6f 3d 69 2e 77 69 64 74 68 2c 73 3d 69 2e 69 73 57 69 6e 64 6f 77 3f 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 3a 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 0d 0a Data Ascii: ,e){var i=e.within,n=i.offset.left+i.scrollLeft,o=i.width,s=i.isWindow?i.scrollLeft:i.offset.left,
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 32 39 62 64 0d 0a 72 3d 74 2e 6c 65 66 74 2d 65 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 6c 3d 72 2d 73 2c 61 3d 72 2b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 6f 2d 73 2c 68 3d 22 6c 65 66 74 22 3d 3d 3d 65 2e 6d 79 5b 30 5d 3f 2d 65 2e 65 6c 65 6d 57 69 64 74 68 3a 22 72 69 67 68 74 22 3d 3d 3d 65 2e 6d 79 5b 30 5d 3f 65 2e 65 6c 65 6d 57 69 64 74 68 3a 30 2c 69 3d 22 6c 65 66 74 22 3d 3d 3d 65 2e 61 74 5b 30 5d 3f 65 2e 74 61 72 67 65 74 57 69 64 74 68 3a 22 72 69 67 68 74 22 3d 3d 3d 65 2e 61 74 5b 30 5d 3f 2d 65 2e 74 61 72 67 65 74 57 69 64 74 68 3a 30 2c 72 3d 2d 32 2a 65 2e 6f 66 66 73 65 74 5b 30 5d 3b 6c 3c 30 3f 28 28 6e 3d 74 2e 6c 65 66 74 2b 68 2b 69 2b 72 2b 65 2e 63 6f 6c 6c 69 73 Data Ascii: 29bdr=t.left-e.collisionPosition.marginLeft,l=r-s,a=r+e.collisionWidth-o-s,h="left"===e.my[0]?-e.elemWidth:"right"===e.my[0]?e.elemWidth:0,i="left"===e.at[0]?e.targetWidth:"right"===e.at[0]?-e.targetWidth:0,r=-2*e.offset[0];l<0?((n=t.left+h+i+r+e.collis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49799	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	804	OUT	GET /wp-includes/js/wplink.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:25 UTC	948	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b809bf59674a-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-2c13" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UROkAHO85aMf8gqvlXVYTau%2FoaMqaq%2BoDGtpa95wo2chKeyjhktb3qqPtWlWFdBWCzp3oS5H9KFLUQLSDZE4R3exY%2F%2FsjT2%2FZiBwXLsLOd051oEzjdKgEstjBmwK8qk%2F1%2Bo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:25 UTC	421	IN	Data Raw: 32 63 31 33 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 73 2c 6c 2c 6f 29 7b 76 61 72 20 63 2c 65 2c 74 2c 6e 2c 69 2c 68 3d 2f 5e 5b 41 2d 5a 30 2d 39 2e 5f 25 2b 2d 5d 2b 40 5b 41 2d 5a 30 2d 39 2e 2d 5d 2b 5c 2e 5b 41 2d 5a 5d 7b 32 2c 36 33 7d 24 2f 69 2c 75 3d 2f 5e 28 68 74 74 70 73 3f 7c 66 74 70 29 3a 5c 2f 5c 2f 5b 41 2d 5a 30 2d 39 2e 2d 5d 2b 5c 2e 5b 41 2d 5a 5d 7b 32 2c 36 33 7d 5b 5e 20 22 5d 2a 24 2f 69 2c 70 3d 7b 7d 2c 61 3d 7b 7d 2c 72 3d 22 6f 6e 74 6f 75 63 68 65 6e 64 22 69 6e 20 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 63 3f 63 2e 24 28 27 61 5b 64 61 74 61 2d 77 70 6c 69 6e 6b 2d 65 64 69 74 Data Ascii: 2c13/! This file is auto-generated /!function(s,l,o){var c,e,t,n,i,h=/^[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,63}$/i,u=/^(https?\|ftp):\/\/[A-Z0-9.-]+\.[A-Z]{2,63}[^ "]*$/i,p={},a={},r="ontouchend"in document;function d(){return c?c.$('a[data-wplink-edit
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 77 72 61 70 3d 73 28 22 23 77 70 2d 6c 69 6e 6b 2d 77 72 61 70 22 29 2c 70 2e 64 69 61 6c 6f 67 3d 73 28 22 23 77 70 2d 6c 69 6e 6b 22 29 2c 70 2e 62 61 63 6b 64 72 6f 70 3d 73 28 22 23 77 70 2d 6c 69 6e 6b 2d 62 61 63 6b 64 72 6f 70 22 29 2c 70 2e 73 75 62 6d 69 74 3d 73 28 22 23 77 70 2d 6c 69 6e 6b 2d 73 75 62 6d 69 74 22 29 2c 70 2e 63 6c 6f 73 65 3d 73 28 22 23 77 70 2d 6c 69 6e 6b 2d 63 6c 6f 73 65 22 29 2c 70 2e 74 65 78 74 3d 73 28 22 23 77 70 2d 6c 69 6e 6b 2d 74 65 78 74 22 29 2c 70 2e 75 72 6c 3d 73 28 22 23 77 70 2d 6c 69 6e 6b 2d 75 72 6c 22 29 2c 70 2e 6e 6f 6e 63 65 3d 73 28 22 23 5f 61 6a 61 78 5f 6c 69 6e 6b 69 6e 67 5f 6e 6f 6e 63 65 22 29 2c 70 2e 6f 70 65 6e 49 6e 4e 65 77 54 61 62 3d 73 28 22 23 77 Data Ascii: unction(){p.wrap=s("#wp-link-wrap"),p.dialog=s("#wp-link"),p.backdrop=s("#wp-link-backdrop"),p.submit=s("#wp-link-submit"),p.close=s("#wp-link-close"),p.text=s("#wp-link-text"),p.url=s("#wp-link-url"),p.nonce=s("#_ajax_linking_nonce"),p.openInNewTab=s("#w
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 2e 63 6f 72 72 65 63 74 55 52 4c 29 7d 2c 63 6f 72 72 65 63 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 73 2e 74 72 69 6d 28 70 2e 75 72 6c 2e 76 61 6c 28 29 29 3b 65 26 26 69 21 3d 3d 65 26 26 21 2f 5e 28 3f 3a 5b 61 2d 7a 5d 2b 3a 7c 23 7c 5c 3f 7c 5c 2e 7c 5c 2f 29 2f 2e 74 65 73 74 28 65 29 26 26 28 70 2e 75 72 6c 2e 76 61 6c 28 22 68 74 74 70 3a 2f 2f 22 2b 65 29 2c 69 3d 65 29 7d 2c 6f 70 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 73 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 3b 69 2e 61 64 64 43 6c 61 73 73 28 22 6d 6f 64 61 6c 2d 6f 70 65 6e 22 29 2c 77 70 4c 69 6e 6b 2e 6d 6f 64 61 6c 4f 70 65 6e 3d 21 30 2c 77 70 4c 69 6e 6b 2e 72 61 6e 67 65 3d 6e 75 6c 6c 2c 65 26 26 28 77 69 6e 64 6f 77 Data Ascii: .correctURL)},correctURL:function(){var e=s.trim(p.url.val());e&&i!==e&&!/^(?:[a-z]+:\|#\|\?\|\.\|\/)/.test(e)&&(p.url.val("http://"+e),i=e)},open:function(e,t,n){var i=s(document.body);i.addClass("modal-open"),wpLink.modalOpen=!0,wpLink.range=null,e&&(window
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 5c 2f 2f 2c 22 22 29 7d 2c 68 61 73 53 65 6c 65 63 74 65 64 54 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 2c 61 3d 63 2e 73 65 6c 65 63 74 69 6f 6e 2e 67 65 74 43 6f 6e 74 65 6e 74 28 29 3b 69 66 28 2f 3c 2f 2e 74 65 73 74 28 61 29 26 26 28 21 2f 5e 3c 61 20 5b 5e 3e 5d 2b 3e 5b 5e 3c 5d 2b 3c 5c 2f 61 3e 24 2f 2e 74 65 73 74 28 61 29 7c 7c 2d 31 3d 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 68 72 65 66 3d 22 29 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 2e 6c 65 6e 67 74 68 29 7b 69 66 28 21 28 6e 3d 65 5b 30 5d 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7c 7c 21 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 6e 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 69 3b 69 2d 2d 29 69 66 28 33 21 3d 28 74 3d 6e 5b 69 5d Data Ascii: \//,"")},hasSelectedText:function(e){var t,n,i,a=c.selection.getContent();if(/</.test(a)&&(!/^<a [^>]+>[^<]+<\/a>$/.test(a)\|\|-1===a.indexOf("href=")))return!1;if(e.length){if(!(n=e[0].childNodes)\|\|!n.length)return!1;for(i=n.length-1;0<=i;i--)if(3!=(t=n[i]
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 28 29 29 2c 74 61 72 67 65 74 3a 70 2e 6f 70 65 6e 49 6e 4e 65 77 54 61 62 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 29 3f 22 5f 62 6c 61 6e 6b 22 3a 6e 75 6c 6c 7d 7d 2c 62 75 69 6c 64 48 74 6d 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 27 3c 61 20 68 72 65 66 3d 22 27 2b 65 2e 68 72 65 66 2b 27 22 27 3b 72 65 74 75 72 6e 20 65 2e 74 61 72 67 65 74 26 26 28 74 2b 3d 27 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 20 74 61 72 67 65 74 3d 22 27 2b 65 2e 74 61 72 67 65 74 2b 27 22 27 29 2c 74 2b 22 3e 22 7d 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 77 70 4c 69 6e 6b 2e 69 73 4d 43 45 28 29 3f 77 70 4c 69 6e 6b 2e 6d 63 65 55 70 64 61 74 65 28 29 3a 77 70 4c 69 6e 6b 2e 68 74 6d 6c 55 70 64 61 74 65 28 29 7d 2c 68 74 6d 6c Data Ascii: ()),target:p.openInNewTab.prop("checked")?"_blank":null}},buildHtml:function(e){var t='<a href="'+e.href+'"';return e.target&&(t+=' rel="noopener" target="'+e.target+'"'),t+">"},update:function(){wpLink.isMCE()?wpLink.mceUpdate():wpLink.htmlUpdate()},html
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 6c 69 6e 6b 3d 22 31 22 5d 27 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 64 61 74 61 2d 77 70 2d 74 65 6d 70 2d 6c 69 6e 6b 22 29 2c 6e 3d 73 2e 74 72 69 6d 28 65 2e 74 65 78 74 28 29 29 29 2c 65 2e 6c 65 6e 67 74 68 3f 28 70 2e 77 72 61 70 2e 68 61 73 43 6c 61 73 73 28 22 68 61 73 2d 74 65 78 74 2d 66 69 65 6c 64 22 29 26 26 28 28 74 3d 70 2e 74 65 78 74 2e 76 61 6c 28 29 29 3f 65 2e 74 65 78 74 28 74 29 3a 6e 7c 7c 65 2e 74 65 78 74 28 69 2e 68 72 65 66 29 29 2c 69 5b 22 64 61 74 61 2d 77 70 6c 69 6e 6b 2d 65 64 69 74 22 5d 3d 6e 75 6c 6c 2c 69 5b 22 64 61 74 61 2d 6d 63 65 2d 68 72 65 66 22 5d 3d 69 2e 68 72 65 66 2c 65 2e 61 74 74 72 28 69 29 29 3a 63 2e 65 78 65 63 43 6f 6d 6d 61 6e 64 28 22 75 6e 6c 69 6e 6b 22 29 7d 29 2c 77 70 4c 69 6e 6b 2e 63 6c Data Ascii: link="1"]').removeAttr("data-wp-temp-link"),n=s.trim(e.text())),e.length?(p.wrap.hasClass("has-text-field")&&((t=p.text.val())?e.text(t):n\|\|e.text(i.href)),i["data-wplink-edit"]=null,i["data-mce-href"]=i.href,e.attr(i)):c.execCommand("unlink")}),wpLink.cl
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 6e 28 29 7b 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 73 2d 61 63 74 69 76 65 22 29 7d 29 29 29 3a 28 61 2e 73 65 61 72 63 68 2e 68 69 64 65 28 29 2c 61 2e 72 65 63 65 6e 74 2e 73 68 6f 77 28 29 29 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 65 61 72 63 68 2e 6e 65 78 74 28 29 2c 61 2e 72 65 63 65 6e 74 2e 6e 65 78 74 28 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 65 61 72 63 68 2e 70 72 65 76 28 29 2c 61 2e 72 65 63 65 6e 74 2e 70 72 65 76 28 29 7d 2c 6b 65 79 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 32 37 3d 3d 3d 65 2e 6b 65 79 43 6f 64 65 3f 28 77 70 4c 69 6e 6b 2e 63 6c 6f 73 65 28 29 2c 65 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 3a Data Ascii: n(){e.removeClass("is-active")}))):(a.search.hide(),a.recent.show())},next:function(){a.search.next(),a.recent.next()},prev:function(){a.search.prev(),a.recent.prev()},keydown:function(e){var t;27===e.keyCode?(wpLink.close(),e.stopImmediatePropagation()):
2024-04-25 19:25:25 UTC	1369	IN	Data Raw: 6e 28 65 29 7b 6e 2e 73 65 6c 65 63 74 28 73 28 74 68 69 73 29 2c 65 29 7d 29 7d 2c 73 2e 65 78 74 65 6e 64 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 72 65 66 72 65 73 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 65 73 65 6c 65 63 74 28 29 2c 74 68 69 73 2e 76 69 73 69 62 6c 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 7d 2c 73 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 76 69 73 69 62 6c 65 7c 7c 28 74 68 69 73 2e 64 65 73 65 6c 65 63 74 28 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 73 68 6f 77 28 29 2c 74 68 69 73 2e 76 69 73 69 62 6c 65 3d 21 30 29 7d 2c 68 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 68 69 64 65 28 29 2c 74 68 69 73 2e 76 69 Data Ascii: n(e){n.select(s(this),e)})},s.extend(t.prototype,{refresh:function(){this.deselect(),this.visible=this.element.is(":visible")},show:function(){this.visible\|\|(this.deselect(),this.element.show(),this.visible=!0)},hide:function(){this.element.hide(),this.vi
2024-04-25 19:25:25 UTC	1287	IN	Data Raw: 2b 6e 2b 27 22 3e 27 3a 22 3c 6c 69 3e 22 2c 69 2b 3d 27 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 63 6c 61 73 73 3d 22 69 74 65 6d 2d 70 65 72 6d 61 6c 69 6e 6b 22 20 76 61 6c 75 65 3d 22 27 2b 74 68 69 73 2e 70 65 72 6d 61 6c 69 6e 6b 2b 27 22 20 2f 3e 27 2c 69 2b 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 74 65 6d 2d 74 69 74 6c 65 22 3e 27 2c 69 2b 3d 74 68 69 73 2e 74 69 74 6c 65 7c 7c 6c 2e 6e 6f 54 69 74 6c 65 2c 69 2b 3d 27 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 74 65 6d 2d 69 6e 66 6f 22 3e 27 2b 74 68 69 73 2e 69 6e 66 6f 2b 22 3c 2f 73 70 61 6e 3e 3c 2f 6c 69 3e 22 2c 61 3d 21 61 7d 29 3a 74 26 26 28 69 2b 3d 27 3c 6c 69 20 63 6c 61 73 73 3d 22 75 6e 73 65 6c 65 63 74 61 62 6c 65 20 6e 6f 2d 6d Data Ascii: +n+'">':"<li>",i+='<input type="hidden" class="item-permalink" value="'+this.permalink+'" />',i+='<span class="item-title">',i+=this.title\|\|l.noTitle,i+='</span><span class="item-info">'+this.info+"</span></li>",a=!a}):t&&(i+='<li class="unselectable no-m
2024-04-25 19:25:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49802	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	812	OUT	GET /wp-includes/js/jquery/ui/menu.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:26 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b80c99f6b042-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-253b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aWVVyNbsIYkWgMgWOSJs%2BWHLmOqv2JQnwEPTNIs57Qe9%2Bm7HtOETXhQUckl0fL%2F8BwoVZcUq%2By687MnHEKTc5O3UzLKY5PpGlgrhXvJ7UtT%2FH4i2u80XxiddAuX02zBp7pc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	425	IN	Data Raw: 32 35 33 62 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 4d 65 6e 75 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 2e 2f 63 Data Ascii: 253b/! jQuery UI Menu 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"function"==typeof define&&define.amd?define(["jquery","./c
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 3a 22 75 6c 22 2c 70 6f 73 69 74 69 6f 6e 3a 7b 6d 79 3a 22 6c 65 66 74 20 74 6f 70 22 2c 61 74 3a 22 72 69 67 68 74 20 74 6f 70 22 7d 2c 72 6f 6c 65 3a 22 6d 65 6e 75 22 2c 62 6c 75 72 3a 6e 75 6c 6c 2c 66 6f 63 75 73 3a 6e 75 6c 6c 2c 73 65 6c 65 63 74 3a 6e 75 6c 6c 7d 2c 5f 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6d 6f 75 73 65 48 61 6e 64 6c 65 64 3d 21 31 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 75 6e 69 71 75 65 49 64 28 29 2e 61 74 74 72 28 7b 72 6f 6c 65 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 6f 6c 65 2c 74 61 62 49 6e 64 65 78 3a 30 7d 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 6d 65 6e 75 22 2c 22 75 69 Data Ascii: :"ul",position:{my:"left top",at:"right top"},role:"menu",blur:null,focus:null,select:null},_create:function(){this.activeMenu=this.element,this.mouseHandled=!1,this.element.uniqueId().attr({role:this.options.role,tabIndex:0}),this._addClass("ui-menu","ui
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 6f 6e 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2c 7b 63 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 63 6c 6f 73 65 4f 6e 44 6f 63 75 6d 65 6e 74 43 6c 69 63 6b 28 65 29 26 26 74 68 69 73 2e 63 6f 6c 6c 61 70 73 65 41 6c 6c 28 65 29 2c 74 68 69 73 2e 6d 6f 75 73 65 48 61 6e 64 6c 65 64 3d 21 31 7d 7d 29 7d 2c 5f 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 72 6f 6c 65 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 29 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 22 29 2e 72 65 6d 6f 76 65 55 6e 69 71 Data Ascii: his._on(this.document,{click:function(e){this._closeOnDocumentClick(e)&&this.collapseAll(e),this.mouseHandled=!1}})},_destroy:function(){var e=this.element.find(".ui-menu-item").removeAttr("role aria-disabled").children(".ui-menu-item-wrapper").removeUniq
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 21 30 3a 69 3d 74 2b 69 2c 74 3d 74 68 69 73 2e 5f 66 69 6c 74 65 72 4d 65 6e 75 49 74 65 6d 73 28 69 29 2c 28 74 3d 73 26 26 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 28 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 28 29 29 3f 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 41 6c 6c 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 3a 74 29 2e 6c 65 6e 67 74 68 7c 7c 28 69 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 2e 6b 65 79 43 6f 64 65 29 2c 74 3d 74 68 69 73 2e 5f 66 69 6c 74 65 72 4d 65 6e 75 49 74 65 6d 73 28 69 29 29 2c 74 2e 6c 65 6e 67 74 68 3f 28 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 74 29 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 69 6c 74 65 72 3d 69 2c 74 68 69 73 2e 66 69 6c 74 65 72 54 69 6d 65 72 3d 74 68 69 73 2e Data Ascii: !0:i=t+i,t=this._filterMenuItems(i),(t=s&&-1!==t.index(this.active.next())?this.active.nextAll(".ui-menu-item"):t).length\|\|(i=String.fromCharCode(e.keyCode),t=this._filterMenuItems(i)),t.length?(this.focus(e,t),this.previousFilter=i,this.filterTimer=this.
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 6f 6c 65 3a 74 68 69 73 2e 5f 69 74 65 6d 52 6f 6c 65 28 29 7d 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 2c 22 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 2e 5f 61 64 64 43 6c 61 73 73 28 69 2c 22 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 2d 77 72 61 70 70 65 72 22 29 2c 65 2e 66 69 6c 74 65 72 28 22 2e 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 22 74 72 75 65 22 29 2c 74 68 69 73 2e 61 63 74 69 76 65 26 26 21 61 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2c 74 68 69 73 2e 61 63 74 69 76 65 5b 30 5d 29 26 26 74 68 69 73 2e 62 6c 75 72 28 29 7d 2c 5f 69 74 65 6d 52 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6d 65 6e 75 Data Ascii: ole:this._itemRole()}),this._addClass(t,"ui-menu-item")._addClass(i,"ui-menu-item-wrapper"),e.filter(".ui-state-disabled").attr("aria-disabled","true"),this.active&&!a.contains(this.element[0],this.active[0])&&this.blur()},_itemRole:function(){return{menu
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 64 74 68 22 29 29 7c 7c 30 2c 73 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 63 73 73 28 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 5b 30 5d 2c 22 70 61 64 64 69 6e 67 54 6f 70 22 29 29 7c 7c 30 2c 74 3d 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 69 2d 73 2c 69 3d 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 73 3d 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 68 65 69 67 68 74 28 29 2c 65 3d 65 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 74 3c 30 3f 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 28 69 2b 74 29 3a 73 3c 74 2b 65 26 26 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 73 63 72 6f 6c 6c Data Ascii: dth"))\|\|0,s=parseFloat(a.css(this.activeMenu[0],"paddingTop"))\|\|0,t=e.offset().top-this.activeMenu.offset().top-i-s,i=this.activeMenu.scrollTop(),s=this.activeMenu.height(),e=e.outerHeight(),t<0?this.activeMenu.scrollTop(i+t):s<t+e&&this.activeMenu.scroll
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 2c 22 66 61 6c 73 65 22 29 7d 2c 5f 63 6c 6f 73 65 4f 6e 44 6f 63 75 6d 65 6e 74 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 61 28 65 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 75 69 2d 6d 65 6e 75 22 29 2e 6c 65 6e 67 74 68 7d 2c 5f 69 73 44 69 76 69 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 2f 5b 5e 5c 2d 5c 75 32 30 31 34 5c 75 32 30 31 33 5c 73 5d 2f 2e 74 65 73 74 28 65 2e 74 65 78 74 28 29 29 7d 2c 63 6f 6c 6c 61 70 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 61 63 74 69 76 65 26 26 74 68 69 73 2e 61 63 74 69 76 65 2e 70 61 72 65 6e 74 28 29 2e 63 6c 6f 73 65 73 74 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 2c 74 68 69 73 2e 65 6c 65 6d 65 Data Ascii: ,"false")},_closeOnDocumentClick:function(e){return!a(e.target).closest(".ui-menu").length},_isDivider:function(e){return!/[^\-\u2014\u2013\s]/.test(e.text())},collapse:function(e){var t=this.active&&this.active.parent().closest(".ui-menu-item",this.eleme
2024-04-25 19:25:26 UTC	900	IN	Data Raw: 73 2e 6e 65 78 74 28 65 29 7d 2c 70 72 65 76 69 6f 75 73 50 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 2c 73 3b 74 68 69 73 2e 61 63 74 69 76 65 3f 74 68 69 73 2e 69 73 46 69 72 73 74 49 74 65 6d 28 29 7c 7c 28 74 68 69 73 2e 5f 68 61 73 53 63 72 6f 6c 6c 28 29 3f 28 69 3d 74 68 69 73 2e 61 63 74 69 76 65 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 73 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 68 65 69 67 68 74 28 29 2c 74 68 69 73 2e 61 63 74 69 76 65 2e 70 72 65 76 41 6c 6c 28 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 3c 28 74 3d 61 28 74 68 69 73 29 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 69 2b 73 7d 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 65 2c Data Ascii: s.next(e)},previousPage:function(e){var t,i,s;this.active?this.isFirstItem()\|\|(this._hasScroll()?(i=this.active.offset().top,s=this.element.height(),this.active.prevAll(".ui-menu-item").each(function(){return 0<(t=a(this)).offset().top-i+s}),this.focus(e,
2024-04-25 19:25:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49801	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	820	OUT	GET /wp-includes/js/jquery/ui/autocomplete.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:26 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b80c9f60ad94-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"600877e6-215b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 20 Jan 2021 18:35:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LR7%2Bqhxys731IeCGBsa9%2FJfpGKZ5RCUy06MrhRa7%2B8VIRu6gPBdMwLShMrEQudivVUKzwobW0neW876BJvHGhdmY8gjhdQi7LG0DV3EzAJeqIeab5n5Shp1rXt5COdud%2BFI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	427	IN	Data Raw: 32 31 35 62 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 41 75 74 6f 63 6f 6d 70 6c 65 74 65 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 Data Ascii: 215b/! jQuery UI Autocomplete 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"function"==typeof define&&define.amd?define(["jque
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 6d 69 6e 4c 65 6e 67 74 68 3a 31 2c 70 6f 73 69 74 69 6f 6e 3a 7b 6d 79 3a 22 6c 65 66 74 20 74 6f 70 22 2c 61 74 3a 22 6c 65 66 74 20 62 6f 74 74 6f 6d 22 2c 63 6f 6c 6c 69 73 69 6f 6e 3a 22 6e 6f 6e 65 22 7d 2c 73 6f 75 72 63 65 3a 6e 75 6c 6c 2c 63 68 61 6e 67 65 3a 6e 75 6c 6c 2c 63 6c 6f 73 65 3a 6e 75 6c 6c 2c 66 6f 63 75 73 3a 6e 75 6c 6c 2c 6f 70 65 6e 3a 6e 75 6c 6c 2c 72 65 73 70 6f 6e 73 65 3a 6e 75 6c 6c 2c 73 65 61 72 63 68 3a 6e 75 6c 6c 2c 73 65 6c 65 63 74 3a 6e 75 6c 6c 7d 2c 72 65 71 75 65 73 74 49 6e 64 65 78 3a 30 2c 70 65 6e 64 69 6e 67 3a 30 2c 5f 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 73 2c 6e 2c 65 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 Data Ascii: minLength:1,position:{my:"left top",at:"left bottom",collision:"none"},source:null,change:null,close:null,focus:null,open:null,response:null,search:null,select:null},requestIndex:0,pending:0,_create:function(){var i,s,n,e=this.element[0].nodeName.toLowerC
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 47 45 5f 44 4f 57 4e 3a 74 68 69 73 2e 5f 6d 6f 76 65 28 22 6e 65 78 74 50 61 67 65 22 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 2e 55 50 3a 74 68 69 73 2e 5f 6b 65 79 45 76 65 6e 74 28 22 70 72 65 76 69 6f 75 73 22 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 2e 44 4f 57 4e 3a 74 68 69 73 2e 5f 6b 65 79 45 76 65 6e 74 28 22 6e 65 78 74 22 2c 65 29 7d 7d 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 3d 21 31 2c 76 6f 69 64 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 74 68 69 73 2e 5f 73 65 61 72 63 68 54 69 6d 65 6f 75 74 28 65 29 7d 2c 66 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 3d 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 Data Ascii: GE_DOWN:this._move("nextPage",e);break;case t.UP:this._keyEvent("previous",e);break;case t.DOWN:this._keyEvent("next",e)}}},input:function(e){if(n)return n=!1,void e.preventDefault();this._searchTimeout(e)},focus:function(){this.selectedItem=null,this.pre
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 6d 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 73 3d 74 68 69 73 2e 70 72 65 76 69 6f 75 73 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b 30 5d 21 3d 3d 6f 2e 75 69 2e 73 61 66 65 41 63 74 69 76 65 45 6c 65 6d 65 6e 74 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 29 26 26 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 3d 73 2c 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 76 69 6f 75 73 3d 73 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 3d 69 7d 29 29 2c 21 31 21 3d 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 73 65 6c 65 63 74 22 2c 65 2c 7b 69 74 65 6d 3a 69 7d 29 26 26 74 68 69 73 2e 5f 76 61 6c 75 65 28 69 2e 76 Data Ascii: mplete-item"),s=this.previous;this.element[0]!==o.ui.safeActiveElement(this.document[0])&&(this.element.trigger("focus"),this.previous=s,this._delay(function(){this.previous=s,this.selectedItem=i})),!1!==this._trigger("select",e,{item:i})&&this._value(i.v
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 73 2c 6e 3d 74 68 69 73 3b 6f 2e 69 73 41 72 72 61 79 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 6f 75 72 63 65 29 3f 28 69 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 6f 75 72 63 65 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 66 69 6c 74 65 72 28 69 2c 65 2e 74 65 72 6d 29 29 7d 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 6f 75 72 63 65 3f 28 73 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 6f 75 72 63 65 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 2e 78 68 72 26 26 6e 2e 78 68 72 2e 61 62 6f 72 74 28 29 2c 6e 2e 78 68 Data Ascii: nction(){var i,s,n=this;o.isArray(this.options.source)?(i=this.options.source,this.source=function(e,t){t(o.ui.autocomplete.filter(i,e.term))}):"string"==typeof this.options.source?(s=this.options.source,this.source=function(e,t){n.xhr&&n.xhr.abort(),n.xh
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 29 3a 74 68 69 73 2e 5f 63 6c 6f 73 65 28 29 7d 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 63 61 6e 63 65 6c 53 65 61 72 63 68 3d 21 30 2c 74 68 69 73 2e 5f 63 6c 6f 73 65 28 65 29 7d 2c 5f 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 6f 66 66 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2c 22 6d 6f 75 73 65 64 6f 77 6e 22 29 2c 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 28 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 2e 68 69 64 65 28 29 2c 74 68 69 73 2e 6d 65 6e 75 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 69 73 4e 65 77 4d 65 6e 75 3d 21 30 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 63 6c 6f 73 65 22 2c 65 29 29 7d 2c 5f 63 68 61 6e Data Ascii: ):this._close()},close:function(e){this.cancelSearch=!0,this._close(e)},_close:function(e){this._off(this.document,"mousedown"),this.menu.element.is(":visible")&&(this.menu.element.hide(),this.menu.blur(),this.isNewMenu=!0,this._trigger("close",e))},_chan
2024-04-25 19:25:26 UTC	1275	IN	Data Raw: 65 6d 28 29 26 26 2f 5e 6e 65 78 74 2f 2e 74 65 73 74 28 65 29 3f 28 74 68 69 73 2e 69 73 4d 75 6c 74 69 4c 69 6e 65 7c 7c 74 68 69 73 2e 5f 76 61 6c 75 65 28 74 68 69 73 2e 74 65 72 6d 29 2c 76 6f 69 64 20 74 68 69 73 2e 6d 65 6e 75 2e 62 6c 75 72 28 29 29 3a 76 6f 69 64 20 74 68 69 73 2e 6d 65 6e 75 5b 65 5d 28 74 29 3b 74 68 69 73 2e 73 65 61 72 63 68 28 6e 75 6c 6c 2c 74 29 7d 2c 77 69 64 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 7d 2c 5f 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 5f 6b 65 79 45 76 65 6e 74 Data Ascii: em()&&/^next/.test(e)?(this.isMultiLine\|\|this._value(this.term),void this.menu.blur()):void this.menu[e](t);this.search(null,t)},widget:function(){return this.menu.element},_value:function(){return this.valueMethod.apply(this.element,arguments)},_keyEvent
2024-04-25 19:25:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49803	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	811	OUT	GET /wp-includes/js/thickbox/thickbox.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:26 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:25 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b80ca93d53f6-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6035251e-338a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 23 Feb 2021 15:54:06 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dAOCuAy5GbXaojyOXX7RItTJzwq%2Bqx1ysK%2BeuX2mMJ7MVfWFGXtRQ7wm47BHQTpQTH8%2FZ0W4XY2i%2BygfIK9ZrRkeR0PjRyZsb3GFI5BayGqPa%2BwpmF%2Bi9NhS6q0EKxJC2ig%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	423	IN	Data Raw: 33 33 38 61 0d 0a 2f 2a 0a 20 2a 20 54 68 69 63 6b 62 6f 78 20 33 2e 31 20 2d 20 4f 6e 65 20 42 6f 78 20 54 6f 20 52 75 6c 65 20 54 68 65 6d 20 41 6c 6c 2e 0a 20 2a 20 42 79 20 43 6f 64 79 20 4c 69 6e 64 6c 65 79 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 63 6f 64 79 6c 69 6e 64 6c 65 79 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 37 20 63 6f 64 79 20 6c 69 6e 64 6c 65 79 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 2a 2f 0a 0a 69 66 20 28 20 74 79 70 65 6f 66 20 74 62 5f 70 61 74 68 54 6f 49 6d 61 67 65 20 21 3d Data Ascii: 338a/* * Thickbox 3.1 - One Box To Rule Them All. * By Cody Lindley (http://www.codylindley.com) * Copyright (c) 2007 cody lindley * Licensed under the MIT License: http://www.opensource.org/licenses/mit-license.php*/if ( typeof tb_pathToImage !=
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 64 20 63 61 6c 6c 20 74 62 5f 69 6e 69 74 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 74 62 5f 69 6e 69 74 28 27 61 2e 74 68 69 63 6b 62 6f 78 2c 20 61 72 65 61 2e 74 68 69 63 6b 62 6f 78 2c 20 69 6e 70 75 74 2e 74 68 69 63 6b 62 6f 78 27 29 3b 2f 2f 70 61 73 73 20 77 68 65 72 65 20 74 6f 20 61 70 70 6c 79 20 74 68 69 63 6b 62 6f 78 0a 09 69 6d 67 4c 6f 61 64 65 72 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 29 3b 2f 2f 20 70 72 65 6c 6f 61 64 20 69 6d 61 67 65 0a 09 69 6d 67 4c 6f 61 64 65 72 2e 73 72 63 20 3d 20 74 62 5f 70 61 74 68 54 6f 49 6d 61 67 65 3b 0a 7d 29 3b 0a 0a 2f 2a 0a 20 2a 20 41 64 64 20 74 68 69 63 6b 62 6f 78 20 74 6f 20 68 72 65 66 20 26 20 61 72 65 61 20 65 6c 65 6d 65 6e Data Ascii: d call tb_initjQuery(document).ready(function(){tb_init('a.thickbox, area.thickbox, input.thickbox');//pass where to apply thickboximgLoader = new Image();// preload imageimgLoader.src = tb_pathToImage;});/* * Add thickbox to href & area elemen
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 7d 65 6c 73 65 7b 2f 2f 61 6c 6c 20 6f 74 68 65 72 73 0a 09 09 09 69 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 54 42 5f 6f 76 65 72 6c 61 79 22 29 20 3d 3d 3d 20 6e 75 6c 6c 29 7b 0a 09 09 09 09 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 22 3c 64 69 76 20 69 64 3d 27 54 42 5f 6f 76 65 72 6c 61 79 27 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 27 54 42 5f 77 69 6e 64 6f 77 27 20 63 6c 61 73 73 3d 27 74 68 69 63 6b 62 6f 78 2d 6c 6f 61 64 69 6e 67 27 3e 3c 2f 64 69 76 3e 22 29 3b 0a 09 09 09 09 6a 51 75 65 72 79 28 22 23 54 42 5f 6f 76 65 72 6c 61 79 22 29 2e 6f 6e 28 20 27 63 6c 69 63 6b 27 2c 20 74 62 5f 72 65 6d 6f 76 65 20 29 3b 0a 09 09 09 09 6a 51 75 65 72 79 28 20 27 62 6f 64 79 27 20 29 Data Ascii: }else{//all othersif(document.getElementById("TB_overlay") === null){jQuery("body").append("<div id='TB_overlay'></div><div id='TB_window' class='thickbox-loading'></div>");jQuery("#TB_overlay").on( 'click', tb_remove );jQuery( 'body' )
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 3b 0a 09 09 09 09 66 6f 72 20 28 54 42 5f 43 6f 75 6e 74 65 72 20 3d 20 30 3b 20 28 28 54 42 5f 43 6f 75 6e 74 65 72 20 3c 20 54 42 5f 54 65 6d 70 41 72 72 61 79 2e 6c 65 6e 67 74 68 29 20 26 26 20 28 54 42 5f 4e 65 78 74 48 54 4d 4c 20 3d 3d 3d 20 22 22 29 29 3b 20 54 42 5f 43 6f 75 6e 74 65 72 2b 2b 29 20 7b 0a 09 09 09 09 09 76 61 72 20 75 72 6c 54 79 70 65 54 65 6d 70 20 3d 20 54 42 5f 54 65 6d 70 41 72 72 61 79 5b 54 42 5f 43 6f 75 6e 74 65 72 5d 2e 68 72 65 66 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 75 72 6c 53 74 72 69 6e 67 29 3b 0a 09 09 09 09 09 09 69 66 20 28 21 28 54 42 5f 54 65 6d 70 41 72 72 61 79 5b 54 42 5f 43 6f 75 6e 74 65 72 5d 2e 68 72 65 66 20 3d 3d 20 75 72 6c 29 29 20 7b 0a 09 09 09 09 09 09 09 69 66 20 28 54 Data Ascii: ;for (TB_Counter = 0; ((TB_Counter < TB_TempArray.length) && (TB_NextHTML === "")); TB_Counter++) {var urlTypeTemp = TB_TempArray[TB_Counter].href.toLowerCase().match(urlString);if (!(TB_TempArray[TB_Counter].href == url)) {if (T
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 20 7b 0a 09 09 09 09 09 69 6d 61 67 65 57 69 64 74 68 20 3d 20 69 6d 61 67 65 57 69 64 74 68 20 2a 20 28 79 20 2f 20 69 6d 61 67 65 48 65 69 67 68 74 29 3b 0a 09 09 09 09 09 69 6d 61 67 65 48 65 69 67 68 74 20 3d 20 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 69 6d 61 67 65 48 65 69 67 68 74 20 3e 20 79 29 20 7b 0a 09 09 09 09 69 6d 61 67 65 57 69 64 74 68 20 3d 20 69 6d 61 67 65 57 69 64 74 68 20 2a 20 28 79 20 2f 20 69 6d 61 67 65 48 65 69 67 68 74 29 3b 0a 09 09 09 09 69 6d 61 67 65 48 65 69 67 68 74 20 3d 20 79 3b 0a 09 09 09 09 69 66 20 28 69 6d 61 67 65 57 69 64 74 68 20 3e 20 78 29 20 7b 0a 09 09 09 09 09 69 6d 61 67 65 48 65 69 67 68 74 20 3d 20 69 6d 61 67 65 48 65 69 67 68 74 20 2a 20 28 78 20 2f 20 69 6d 61 67 65 57 69 Data Ascii: {imageWidth = imageWidth * (y / imageHeight);imageHeight = y;}} else if (imageHeight > y) {imageWidth = imageWidth * (y / imageHeight);imageHeight = y;if (imageWidth > x) {imageHeight = imageHeight * (x / imageWi
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 29 29 20 7b 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 20 67 6f 4e 65 78 74 28 29 7b 0a 09 09 09 09 09 6a 51 75 65 72 79 28 22 23 54 42 5f 77 69 6e 64 6f 77 22 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 09 09 09 09 6a 51 75 65 72 79 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 22 3c 64 69 76 20 69 64 3d 27 54 42 5f 77 69 6e 64 6f 77 27 3e 3c 2f 64 69 76 3e 22 29 3b 0a 09 09 09 09 09 74 62 5f 73 68 6f 77 28 54 42 5f 4e 65 78 74 43 61 70 74 69 6f 6e 2c 20 54 42 5f 4e 65 78 74 55 52 4c 2c 20 69 6d 61 67 65 47 72 6f 75 70 29 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 7d 0a 09 09 09 09 6a 51 75 65 72 79 28 22 23 54 42 5f 6e 65 78 74 22 29 2e 6f 6e 28 20 27 63 6c 69 63 6b 27 2c 20 67 6f 4e 65 78 74 20 29 3b 0a 0a 09 09 09 7d 0a 0a 09 Data Ascii: )) {function goNext(){jQuery("#TB_window").remove();jQuery("body").append("<div id='TB_window'></div>");tb_show(TB_NextCaption, TB_NextURL, imageGroup);return false;}jQuery("#TB_next").on( 'click', goNext );}
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 69 74 68 65 72 20 69 66 72 61 6d 65 20 6f 72 20 61 6a 61 78 20 77 69 6e 64 6f 77 0a 09 09 09 09 09 75 72 6c 4e 6f 51 75 65 72 79 20 3d 20 75 72 6c 2e 73 70 6c 69 74 28 27 54 42 5f 27 29 3b 0a 09 09 09 09 09 6a 51 75 65 72 79 28 22 23 54 42 5f 69 66 72 61 6d 65 43 6f 6e 74 65 6e 74 22 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 09 09 09 09 69 66 28 70 61 72 61 6d 73 5b 27 6d 6f 64 61 6c 27 5d 20 21 3d 20 22 74 72 75 65 22 29 7b 2f 2f 69 66 72 61 6d 65 20 6e 6f 20 6d 6f 64 61 6c 0a 09 09 09 09 09 09 6a 51 75 65 72 79 28 22 23 54 42 5f 77 69 6e 64 6f 77 22 29 2e 61 70 70 65 6e 64 28 22 3c 64 69 76 20 69 64 3d 27 54 42 5f 74 69 74 6c 65 27 3e 3c 64 69 76 20 69 64 3d 27 54 42 5f 61 6a 61 78 57 69 6e 64 6f 77 54 69 74 6c 65 27 3e 22 2b 63 61 70 74 69 6f 6e 2b 22 3c Data Ascii: ither iframe or ajax windowurlNoQuery = url.split('TB_');jQuery("#TB_iframeContent").remove();if(params['modal'] != "true"){//iframe no modaljQuery("#TB_window").append("<div id='TB_title'><div id='TB_ajaxWindowTitle'>"+caption+"<
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 3d 27 54 42 5f 61 6a 61 78 57 69 6e 64 6f 77 54 69 74 6c 65 27 3e 22 2b 63 61 70 74 69 6f 6e 2b 22 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 27 54 42 5f 63 6c 6f 73 65 41 6a 61 78 57 69 6e 64 6f 77 27 3e 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 27 62 75 74 74 6f 6e 27 20 69 64 3d 27 54 42 5f 63 6c 6f 73 65 57 69 6e 64 6f 77 42 75 74 74 6f 6e 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 27 3e 22 2b 74 68 69 63 6b 62 6f 78 4c 31 30 6e 2e 63 6c 6f 73 65 2b 22 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 74 62 2d 63 6c 6f 73 65 2d 69 63 6f 6e 27 3e 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 27 54 42 5f 61 6a 61 78 43 6f 6e 74 65 Data Ascii: ='TB_ajaxWindowTitle'>"+caption+"</div><div id='TB_closeAjaxWindow'><button type='button' id='TB_closeWindowButton'><span class='screen-reader-text'>"+thickboxL10n.close+"</span><span class='tb-close-icon'></span></button></div></div><div id='TB_ajaxConte
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 73 69 62 6c 65 27 7d 29 3b 0a 09 09 09 09 7d 65 6c 73 65 20 69 66 28 75 72 6c 2e 69 6e 64 65 78 4f 66 28 27 54 42 5f 69 66 72 61 6d 65 27 29 20 21 3d 20 2d 31 29 7b 0a 09 09 09 09 09 74 62 5f 70 6f 73 69 74 69 6f 6e 28 29 3b 0a 09 09 09 09 09 6a 51 75 65 72 79 28 22 23 54 42 5f 6c 6f 61 64 22 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 09 09 09 09 6a 51 75 65 72 79 28 22 23 54 42 5f 77 69 6e 64 6f 77 22 29 2e 63 73 73 28 7b 27 76 69 73 69 62 69 6c 69 74 79 27 3a 27 76 69 73 69 62 6c 65 27 7d 29 3b 0a 09 09 09 09 7d 65 6c 73 65 7b 0a 09 09 09 09 09 76 61 72 20 6c 6f 61 64 5f 75 72 6c 20 3d 20 75 72 6c 3b 0a 09 09 09 09 09 6c 6f 61 64 5f 75 72 6c 20 2b 3d 20 2d 31 20 3d 3d 3d 20 75 72 6c 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 3f 20 27 3f 27 20 3a 20 27 26 27 Data Ascii: sible'});}else if(url.indexOf('TB_iframe') != -1){tb_position();jQuery("#TB_load").remove();jQuery("#TB_window").css({'visibility':'visible'});}else{var load_url = url;load_url += -1 === url.indexOf('?') ? '?' : '&'
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 51 75 65 72 79 28 22 23 54 42 5f 63 6c 6f 73 65 57 69 6e 64 6f 77 42 75 74 74 6f 6e 22 29 2e 6f 66 66 28 22 63 6c 69 63 6b 22 29 3b 0a 09 6a 51 75 65 72 79 28 20 27 23 54 42 5f 77 69 6e 64 6f 77 27 20 29 2e 66 61 64 65 4f 75 74 28 20 27 66 61 73 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 6a 51 75 65 72 79 28 20 27 23 54 42 5f 77 69 6e 64 6f 77 2c 20 23 54 42 5f 6f 76 65 72 6c 61 79 2c 20 23 54 42 5f 48 69 64 65 53 65 6c 65 63 74 27 20 29 2e 74 72 69 67 67 65 72 28 20 27 74 62 5f 75 6e 6c 6f 61 64 27 20 29 2e 6f 66 66 28 29 2e 72 65 6d 6f 76 65 28 29 3b 0a 09 09 6a 51 75 65 72 79 28 20 27 62 6f 64 79 27 20 29 2e 74 72 69 67 67 65 72 28 20 27 74 68 69 63 6b 62 6f 78 3a 72 65 6d 6f 76 65 64 27 20 29 3b 0a 09 7d 29 3b 0a 09 6a 51 75 65 72 79 28 Data Ascii: Query("#TB_closeWindowButton").off("click");jQuery( '#TB_window' ).fadeOut( 'fast', function() {jQuery( '#TB_window, #TB_overlay, #TB_HideSelect' ).trigger( 'tb_unload' ).off().remove();jQuery( 'body' ).trigger( 'thickbox:removed' );});jQuery(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49804	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	808	OUT	GET /wp-includes/js/underscore.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:26 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b80d9e846782-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-3ead" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q5n4wNr%2Bi%2FM5rnTTx7R7OSpveYElAqNH8HcLqdQr%2B9lNIXLZ%2BF7Zl5NVeevwzNIKHTgcQ5gEdkkUBAzHXQvcxrDY4saeND0BqJIF7BsoSc7GK3cRR1CaHK2C54eHZ9Eleu4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	427	IN	Data Raw: 33 65 61 64 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 6e 2e 5f 2c 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 75 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 69 3d 65 2e 70 75 73 68 2c 63 3d 65 2e 73 6c 69 63 65 2c 6c 3d 6f 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 66 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 70 3d 75 2e 62 69 6e 64 2c 68 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 76 3d 66 75 6e 63 74 Data Ascii: 3ead/! This file is auto-generated /!function(){function t(){}var n=this,r=n._,e=Array.prototype,o=Object.prototype,u=Function.prototype,i=e.push,c=e.slice,l=o.toString,a=o.hasOwnProperty,f=Array.isArray,s=Object.keys,p=u.bind,h=Object.create,v=funct
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 72 74 73 3d 76 3a 65 78 70 6f 72 74 73 29 2e 5f 3d 76 3a 6e 2e 5f 3d 76 2c 76 2e 56 45 52 53 49 4f 4e 3d 22 31 2e 38 2e 33 22 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 69 2c 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 6e 75 6c 6c 3d 3d 6e 3f 33 3a 6e 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 69 2c 6e 29 7d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 69 2c 6e 2c 74 29 7d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 75 2e 63 61 6c 6c 28 69 2c 6e 2c 74 2c 72 Data Ascii: rts=v:exports)._=v:n._=v,v.VERSION="1.8.3";var y=function(u,i,n){if(void 0===i)return u;switch(null==n?3:n){case 1:return function(n){return u.call(i,n)};case 2:return function(n,t){return u.call(i,n,t)};case 3:return function(n,t,r){return u.call(i,n,t,r
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 5b 75 5d 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 76 2e 6d 61 70 3d 76 2e 63 6f 6c 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 64 28 74 2c 72 29 3b 66 6f 72 28 76 61 72 20 65 3d 21 6a 28 6e 29 26 26 76 2e 6b 65 79 73 28 6e 29 2c 75 3d 28 65 7c 7c 6e 29 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 75 29 2c 6f 3d 30 3b 6f 3c 75 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 65 3f 65 5b 6f 5d 3a 6f 3b 69 5b 6f 5d 3d 74 28 6e 5b 61 5d 2c 61 2c 6e 29 7d 72 65 74 75 72 6e 20 69 7d 2c 76 2e 72 65 64 75 63 65 3d 76 2e 66 6f 6c 64 6c 3d 76 2e 69 6e 6a 65 63 74 3d 77 28 31 29 2c 76 2e 72 65 64 75 63 65 52 69 67 68 74 3d 76 2e 66 6f 6c 64 72 3d 77 28 2d 31 29 2c 76 2e 66 69 6e 64 3d 76 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c Data Ascii: [u],n);return n},v.map=v.collect=function(n,t,r){t=d(t,r);for(var e=!j(n)&&v.keys(n),u=(e\|\|n).length,i=Array(u),o=0;o<u;o++){var a=e?e[o]:o;i[o]=t(n[a],a,n)}return i},v.reduce=v.foldl=v.inject=w(1),v.reduceRight=v.foldr=w(-1),v.find=v.detect=function(n,t,
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 64 28 65 2c 74 29 2c 76 2e 65 61 63 68 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 75 3d 65 28 6e 2c 74 2c 72 29 2c 28 6f 3c 75 7c 7c 75 3d 3d 3d 2d 31 2f 30 26 26 69 3d 3d 3d 2d 31 2f 30 29 26 26 28 69 3d 6e 2c 6f 3d 75 29 7d 29 3b 72 65 74 75 72 6e 20 69 7d 2c 76 2e 6d 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 72 2c 75 2c 69 3d 31 2f 30 2c 6f 3d 31 2f 30 3b 69 66 28 6e 75 6c 6c 3d 3d 65 26 26 6e 75 6c 6c 21 3d 6e 29 66 6f 72 28 76 61 72 20 61 3d 30 2c 63 3d 28 6e 3d 6a 28 6e 29 3f 6e 3a 76 2e 76 61 6c 75 65 73 28 6e 29 29 2e 6c 65 6e 67 74 68 3b 61 3c 63 3b 61 2b 2b 29 28 72 3d 6e 5b 61 5d 29 3c 69 26 26 28 69 3d 72 29 3b 65 6c 73 65 20 65 3d 64 28 65 2c 74 29 2c 76 2e 65 61 63 68 28 6e 2c 66 75 6e 63 74 69 6f 6e Data Ascii: d(e,t),v.each(n,function(n,t,r){u=e(n,t,r),(o<u\|\|u===-1/0&&i===-1/0)&&(i=n,o=u)});return i},v.min=function(n,e,t){var r,u,i=1/0,o=1/0;if(null==e&&null!=n)for(var a=0,c=(n=j(n)?n:v.values(n)).length;a<c;a++)(r=n[a])<i&&(i=r);else e=d(e,t),v.each(n,function
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 2c 72 29 3f 75 3a 69 29 2e 70 75 73 68 28 6e 29 7d 29 2c 5b 75 2c 69 5d 7d 2c 76 2e 66 69 72 73 74 3d 76 2e 68 65 61 64 3d 76 2e 74 61 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 6e 75 6c 6c 21 3d 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 72 3f 6e 5b 30 5d 3a 76 2e 69 6e 69 74 69 61 6c 28 6e 2c 6e 2e 6c 65 6e 67 74 68 2d 74 29 7d 2c 76 2e 69 6e 69 74 69 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 6e 2c 30 2c 4d 61 74 68 2e 6d 61 78 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 28 6e 75 6c 6c 3d 3d 74 7c 7c 72 3f 31 3a 74 29 29 29 7d 2c 76 2e 6c 61 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 69 66 28 6e 75 6c 6c 21 3d 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 Data Ascii: ,r)?u:i).push(n)}),[u,i]},v.first=v.head=v.take=function(n,t,r){if(null!=n)return null==t\|\|r?n[0]:v.initial(n,n.length-t)},v.initial=function(n,t,r){return c.call(n,0,Math.max(0,n.length-(null==t\|\|r?1:t)))},v.last=function(n,t,r){if(null!=n)return null==t
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 28 69 2e 70 75 73 68 28 66 29 2c 75 2e 70 75 73 68 28 63 29 29 3a 76 2e 63 6f 6e 74 61 69 6e 73 28 75 2c 63 29 7c 7c 75 2e 70 75 73 68 28 63 29 7d 72 65 74 75 72 6e 20 75 7d 2c 76 2e 75 6e 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 75 6e 69 71 28 41 28 61 72 67 75 6d 65 6e 74 73 2c 21 30 2c 21 30 29 29 7d 2c 76 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 30 2c 75 3d 5f 28 6e 29 3b 65 3c 75 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 6e 5b 65 5d 3b 69 66 28 21 76 2e 63 6f 6e 74 61 69 6e 73 28 74 2c 69 29 29 7b 66 6f 72 28 76 61 72 20 6f 3d 31 3b 6f 3c 72 26 26 76 2e 63 6f 6e 74 61 69 6e 73 28 61 72 67 Data Ascii: (i.push(f),u.push(c)):v.contains(u,c)\|\|u.push(c)}return u},v.union=function(){return v.uniq(A(arguments,!0,!0))},v.intersection=function(n){for(var t=[],r=arguments.length,e=0,u=_(n);e<u;e++){var i=n[e];if(!v.contains(t,i)){for(var o=1;o<r&&v.contains(arg
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 63 61 74 28 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 76 2e 70 61 72 74 69 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 69 3d 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 74 3d 69 2e 6c 65 6e 67 74 68 2c 72 3d 41 72 72 61 79 28 74 29 2c 65 3d 30 3b 65 3c 74 3b 65 2b 2b 29 72 5b 65 5d 3d 69 5b 65 5d 3d 3d 3d 76 3f 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 2b 5d 3a 69 5b 65 5d 3b 66 6f 72 28 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 29 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 6e 2b 2b 5d 29 3b 72 65 74 75 72 6e 20 46 28 75 2c 6f 2c 74 68 69 73 2c 74 68 69 73 2c 72 29 7d 3b 72 65 74 75 Data Ascii: cat(c.call(arguments)))};return e},v.partial=function(u){var i=c.call(arguments,1),o=function(){for(var n=0,t=i.length,r=Array(t),e=0;e<t;e++)r[e]=i[e]===v?arguments[n++]:i[e];for(;n<arguments.length;)r.push(arguments[n++]);return F(u,o,this,this,r)};retu
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 76 2e 70 61 72 74 69 61 6c 28 74 2c 6e 29 7d 2c 76 2e 6e 65 67 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 76 2e 63 6f 6d 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2c 65 3d 72 2e 6c 65 6e 67 74 68 2d 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2c 74 3d 72 5b 65 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 6e 2d 2d 3b 29 74 3d 72 5b 6e 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 76 2e 61 66 74 65 72 3d 66 75 6e 63 74 69 6f Data Ascii: return v.partial(t,n)},v.negate=function(n){return function(){return!n.apply(this,arguments)}},v.compose=function(){var r=arguments,e=r.length-1;return function(){for(var n=e,t=r[e].apply(this,arguments);n--;)t=r[n].call(this,t);return t}},v.after=functio
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 7b 7d 2c 72 3d 76 2e 6b 65 79 73 28 6e 29 2c 65 3d 30 2c 75 3d 72 2e 6c 65 6e 67 74 68 3b 65 3c 75 3b 65 2b 2b 29 74 5b 6e 5b 72 5b 65 5d 5d 5d 3d 72 5b 65 5d 3b 72 65 74 75 72 6e 20 74 7d 2c 76 2e 66 75 6e 63 74 69 6f 6e 73 3d 76 2e 6d 65 74 68 6f 64 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 2c 72 3d 5b 5d 3b 66 6f 72 28 74 20 69 6e 20 6e 29 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6e 5b 74 5d 29 26 26 72 2e 70 75 73 68 28 74 29 3b 72 65 74 75 72 6e 20 72 2e 73 6f 72 74 28 29 7d 2c 76 2e 65 78 74 65 6e 64 3d 6d 28 76 2e 61 6c 6c 4b 65 79 73 29 2c 76 2e 65 78 74 65 6e 64 4f 77 6e 3d 76 2e 61 73 73 69 67 6e 3d 6d 28 76 2e 6b 65 79 73 29 2c 76 2e 66 69 6e 64 4b 65 79 3d Data Ascii: rt=function(n){for(var t={},r=v.keys(n),e=0,u=r.length;e<u;e++)t[n[r[e]]]=r[e];return t},v.functions=v.methods=function(n){var t,r=[];for(t in n)v.isFunction(n[t])&&r.push(t);return r.sort()},v.extend=m(v.allKeys),v.extendOwn=v.assign=m(v.keys),v.findKey=
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 69 6e 67 5d 22 3a 72 65 74 75 72 6e 22 22 2b 6e 3d 3d 22 22 2b 74 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3a 72 65 74 75 72 6e 2b 6e 21 3d 2b 6e 3f 2b 74 21 3d 2b 74 3a 30 3d 3d 2b 6e 3f 31 2f 2b 6e 3d 3d 31 2f 74 3a 2b 6e 3d 3d 2b 74 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3a 72 65 74 75 72 6e 2b 6e 3d 3d 2b 74 7d 76 61 72 20 69 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 75 3b 69 66 28 21 69 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6f 3d 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 75 3d 74 2e 63 6f Data Ascii: ing]":return""+n==""+t;case"[object Number]":return+n!=+n?+t!=+t:0==+n?1/+n==1/t:+n==+t;case"[object Date]":case"[object Boolean]":return+n==+t}var i="[object Array]"===u;if(!i){if("object"!=typeof n\|\|"object"!=typeof t)return!1;var o=n.constructor,u=t.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49806	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	807	OUT	GET /wp-includes/js/shortcode.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:26 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b80dab2c8bbc-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5ff61da4-a5a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 06 Jan 2021 20:29:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P1X3mICv8EuJw0baivJDGgK729U4TP8xOlmIAZeIiwUHlPbQSX4HVWNoeqXjbHzP4HIWCgFYPPE0zuAicr1XaEoEDNEnrTSMsK5yGcVtSYt5%2FZStwDESAj4v0%2FwSPqJDtGQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	432	IN	Data Raw: 61 35 61 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 77 70 3d 77 69 6e 64 6f 77 2e 77 70 7c 7c 7b 7d 2c 77 70 2e 73 68 6f 72 74 63 6f 64 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 73 3d 77 70 2e 73 68 6f 72 74 63 6f 64 65 2e 72 65 67 65 78 70 28 74 29 3b 69 66 28 73 2e 6c 61 73 74 49 6e 64 65 78 3d 6e 7c 7c 30 2c 6e 3d 73 2e 65 78 65 63 28 65 29 29 72 65 74 75 72 6e 22 5b 22 3d 3d 3d 6e 5b 31 5d 26 26 22 5d 22 3d 3d 3d 6e 5b 37 5d 3f 77 70 2e 73 68 6f 72 74 63 6f 64 65 2e 6e 65 78 74 28 74 2c 65 2c 73 2e 6c 61 73 74 49 6e 64 65 78 29 3a 28 73 3d 7b 69 6e 64 65 78 3a 6e 2e 69 6e 64 65 78 2c 63 6f 6e 74 65 6e 74 3a 6e 5b 30 5d 2c Data Ascii: a5a/! This file is auto-generated /window.wp=window.wp\|\|{},wp.shortcode={next:function(t,e,n){var s=wp.shortcode.regexp(t);if(s.lastIndex=n\|\|0,n=s.exec(e))return"["===n[1]&&"]"===n[7]?wp.shortcode.next(t,e,s.lastIndex):(s={index:n.index,content:n[0],
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 63 6f 64 65 2e 72 65 67 65 78 70 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 73 2c 72 2c 6f 2c 69 2c 63 29 7b 69 66 28 22 5b 22 3d 3d 3d 65 26 26 22 5d 22 3d 3d 3d 63 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 61 3d 68 28 77 70 2e 73 68 6f 72 74 63 6f 64 65 2e 66 72 6f 6d 4d 61 74 63 68 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 72 65 74 75 72 6e 20 61 3f 65 2b 61 2b 63 3a 74 7d 29 7d 2c 73 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 77 70 2e 73 68 6f 72 74 63 6f 64 65 28 74 29 2e 73 74 72 69 6e 67 28 29 7d 2c 72 65 67 65 78 70 3a 5f 2e 6d 65 6d 6f 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5b 28 5c 5c 5b 3f 29 28 22 2b 74 2b 22 29 28 3f Data Ascii: code.regexp(t),function(t,e,n,s,r,o,i,c){if("["===e&&"]"===c)return t;var a=h(wp.shortcode.fromMatch(arguments));return a?e+a+c:t})},string:function(t){return new wp.shortcode(t).string()},regexp:_.memoize(function(t){return new RegExp("\\[(\\[?)("+t+")(?
2024-04-25 19:25:26 UTC	856	IN	Data Raw: 73 2e 61 74 74 72 73 5b 5f 2e 69 73 4e 75 6d 62 65 72 28 74 29 3f 22 6e 75 6d 65 72 69 63 22 3a 22 6e 61 6d 65 64 22 5d 5b 74 5d 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 74 74 72 73 5b 5f 2e 69 73 4e 75 6d 62 65 72 28 74 29 3f 22 6e 75 6d 65 72 69 63 22 3a 22 6e 61 6d 65 64 22 5d 5b 74 5d 3d 65 2c 74 68 69 73 7d 2c 73 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 5b 22 2b 74 68 69 73 2e 74 61 67 3b 72 65 74 75 72 6e 20 5f 2e 65 61 63 68 28 74 68 69 73 2e 61 74 74 72 73 2e 6e 75 6d 65 72 69 63 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 2f 5c 73 2f 2e 74 65 73 74 28 74 29 3f 6e 2b 3d 27 20 22 27 2b 74 2b 27 22 27 3a 6e 2b 3d 22 20 22 2b 74 7d 29 2c 5f 2e 65 61 63 68 28 74 68 69 Data Ascii: s.attrs[_.isNumber(t)?"numeric":"named"][t]},set:function(t,e){return this.attrs[_.isNumber(t)?"numeric":"named"][t]=e,this},string:function(){var n="["+this.tag;return _.each(this.attrs.numeric,function(t){/\s/.test(t)?n+=' "'+t+'"':n+=" "+t}),_.each(thi
2024-04-25 19:25:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49805	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:25 UTC	807	OUT	GET /wp-admin/js/media-upload.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}
2024-04-25 19:25:26 UTC	937	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b80da8b30803-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"600b0c12-480" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 22 Jan 2021 17:32:02 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r6qOq0nIoOojwBj0gbV5IEwyaBXclJD90QfS7HMHiB1LxCiAtN3z3nxo7%2B7RNI%2F51dXTci08MjTCII3PzWARzcPg6S2kfMNXHKwMe6Jh3ONtR3AL6rAk0d05uw3sDZ82Px8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	432	IN	Data Raw: 34 38 30 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 73 65 6e 64 5f 74 6f 5f 65 64 69 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 69 6e 79 6d 63 65 2c 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 51 54 61 67 73 3b 69 66 28 77 70 41 63 74 69 76 65 45 64 69 74 6f 72 29 69 26 26 28 65 3d 74 69 6e 79 6d 63 65 2e 67 65 74 28 77 70 41 63 74 69 76 65 45 64 69 74 6f 72 29 29 3b 65 6c 73 65 20 69 66 28 69 26 26 74 69 6e 79 6d 63 65 2e 61 63 74 69 76 65 45 64 69 74 6f 72 29 65 3d 74 69 6e 79 6d 63 65 2e 61 63 74 69 76 65 45 64 69 74 6f 72 2c 77 69 6e 64 6f 77 2e 77 70 Data Ascii: 480/! This file is auto-generated /window.send_to_editor=function(t){var e,i="undefined"!=typeof tinymce,n="undefined"!=typeof QTags;if(wpActiveEditor)i&&(e=tinymce.get(wpActiveEditor));else if(i&&tinymce.activeEditor)e=tinymce.activeEditor,window.wp
2024-04-25 19:25:26 UTC	727	IN	Data Raw: 2e 74 62 5f 72 65 6d 6f 76 65 29 74 72 79 7b 77 69 6e 64 6f 77 2e 74 62 5f 72 65 6d 6f 76 65 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 77 69 6e 64 6f 77 2e 74 62 5f 70 6f 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 28 22 23 54 42 5f 77 69 6e 64 6f 77 22 29 2c 65 3d 64 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2c 69 3d 64 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2c 6e 3d 38 33 33 3c 65 3f 38 33 33 3a 65 2c 6f 3d 30 3b 72 65 74 75 72 6e 20 64 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 2e 6c 65 6e 67 74 68 26 26 28 6f 3d 70 61 72 73 65 49 6e 74 28 64 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 2e 63 73 73 28 22 68 65 69 67 68 74 22 29 2c 31 30 29 29 2c 74 2e 6c 65 6e 67 Data Ascii: .tb_remove)try{window.tb_remove()}catch(t){}},function(d){window.tb_position=function(){var t=d("#TB_window"),e=d(window).width(),i=d(window).height(),n=833<e?833:e,o=0;return d("#wpadminbar").length&&(o=parseInt(d("#wpadminbar").css("height"),10)),t.leng
2024-04-25 19:25:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49809	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:26 UTC	900	OUT	GET /wp-includes/js/jquery/ui/mouse.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125
2024-04-25 19:25:26 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b810dc3dade3-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5ff61da4-d34" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 06 Jan 2021 20:29:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8C%2F0BDXiQiGVfg3Vuvcl8xQhas0LkWegMX8BNX7joLtM%2FVNS2rtB9qrJ2%2Fm3Snwjw5sHuxQ258Nu%2Fds1rbo0uOsVs5T%2FZU9pXNvU1uY9BmChnP6pvrQVu4qinD0iew6T6wM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	426	IN	Data Raw: 64 33 34 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 4d 6f 75 73 65 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c 22 2e 2f 63 Data Ascii: d34/! jQuery UI Mouse 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"function"==typeof define&&define.amd?define(["jquery","./c
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 73 65 6c 65 63 74 2c 20 6f 70 74 69 6f 6e 22 2c 64 69 73 74 61 6e 63 65 3a 31 2c 64 65 6c 61 79 3a 30 7d 2c 5f 6d 6f 75 73 65 49 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 6d 6f 75 73 65 44 6f 77 6e 28 65 29 7d 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 30 3d 3d 3d 6f 2e 64 61 74 61 28 65 2e 74 61 72 67 65 74 2c 74 2e 77 69 64 67 65 74 4e 61 6d 65 2b 22 2e 70 72 65 76 65 6e 74 43 6c 69 63 6b 45 76 65 6e 74 22 29 29 72 65 74 75 72 Data Ascii: select, option",distance:1,delay:0},_mouseInit:function(){var t=this;this.element.on("mousedown."+this.widgetName,function(e){return t._mouseDown(e)}).on("click."+this.widgetName,function(e){if(!0===o.data(e.target,t.widgetName+".preventClickEvent"))retur
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 6e 20 74 2e 5f 6d 6f 75 73 65 55 70 28 65 29 7d 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 6f 6e 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 4d 6f 76 65 44 65 6c 65 67 61 74 65 29 2e 6f 6e 28 22 6d 6f 75 73 65 75 70 2e 22 2b 74 68 69 73 2e 77 69 64 67 65 74 4e 61 6d 65 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 44 65 6c 65 67 61 74 65 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6e 3d 21 30 29 29 3a 21 30 7d 7d 2c 5f 6d 6f 75 73 65 4d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 6d 6f 75 73 65 4d 6f 76 65 64 29 7b 69 66 28 6f 2e 75 69 2e 69 65 26 26 28 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 7c 7c 64 6f Data Ascii: n t._mouseUp(e)},this.document.on("mousemove."+this.widgetName,this._mouseMoveDelegate).on("mouseup."+this.widgetName,this._mouseUpDelegate),e.preventDefault(),n=!0)):!0}},_mouseMove:function(e){if(this._mouseMoved){if(o.ui.ie&&(!document.documentMode\|\|do
2024-04-25 19:25:26 UTC	223	IN	Data Raw: 5f 6d 6f 75 73 65 44 6f 77 6e 45 76 65 6e 74 2e 70 61 67 65 59 2d 65 2e 70 61 67 65 59 29 29 3e 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 74 61 6e 63 65 7d 2c 5f 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 7d 2c 5f 6d 6f 75 73 65 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 44 72 61 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 53 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 5f 6d 6f 75 73 65 43 61 70 74 75 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 7d 29 7d 29 3b 0d 0a Data Ascii: _mouseDownEvent.pageY-e.pageY))>=this.options.distance},_mouseDelayMet:function(){return this.mouseDelayMet},_mouseStart:function(){},_mouseDrag:function(){},_mouseStop:function(){},_mouseCapture:function(){return!0}})});
2024-04-25 19:25:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49811	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:26 UTC	903	OUT	GET /wp-includes/js/jquery/ui/sortable.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125
2024-04-25 19:25:26 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b810df8e06ec-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-60ce" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ttZ26XmJNqrKKoXYHukw39auhho1iyWaobkCLlHO42rt7TvTUOecMX7lSJZc17uQ1%2Bn0ykcfIt305PflCXY8JE%2FcFaNZ6Ac8IXzHKlJ0tCbxVzdXGj9VdYaOsKw6cc9umZ0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	431	IN	Data Raw: 36 30 63 65 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 53 6f 72 74 61 62 6c 65 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 2c Data Ascii: 60ce/! jQuery UI Sortable 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(t){"function"==typeof define&&define.amd?define(["jquery",
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 6e 6e 65 63 74 57 69 74 68 3a 21 31 2c 63 6f 6e 74 61 69 6e 6d 65 6e 74 3a 21 31 2c 63 75 72 73 6f 72 3a 22 61 75 74 6f 22 2c 63 75 72 73 6f 72 41 74 3a 21 31 2c 64 72 6f 70 4f 6e 45 6d 70 74 79 3a 21 30 2c 66 6f 72 63 65 50 6c 61 63 65 68 6f 6c 64 65 72 53 69 7a 65 3a 21 31 2c 66 6f 72 63 65 48 65 6c 70 65 72 53 69 7a 65 3a 21 31 2c 67 72 69 64 3a 21 31 2c 68 61 6e 64 6c 65 3a 21 31 2c 68 65 6c 70 65 72 3a 22 6f 72 69 67 69 6e 61 6c 22 2c 69 74 65 6d 73 3a 22 3e 20 2a 22 2c 6f 70 61 63 69 74 79 3a 21 31 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 21 31 2c 72 65 76 65 72 74 3a 21 31 2c 73 63 72 6f 6c 6c 3a 21 30 2c 73 63 72 6f 6c 6c 53 65 6e 73 69 74 69 76 69 74 79 3a 32 30 2c 73 63 72 6f 6c 6c 53 70 65 65 64 3a 32 30 2c 73 63 6f 70 65 3a 22 64 65 66 61 75 6c Data Ascii: nnectWith:!1,containment:!1,cursor:"auto",cursorAt:!1,dropOnEmpty:!0,forcePlaceholderSize:!1,forceHelperSize:!1,grid:!1,handle:!1,helper:"original",items:"> *",opacity:!1,placeholder:!1,revert:!1,scroll:!0,scrollSensitivity:20,scrollSpeed:20,scope:"defaul
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 64 69 73 61 62 6c 65 64 26 26 22 73 74 61 74 69 63 22 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 79 70 65 26 26 28 74 68 69 73 2e 5f 72 65 66 72 65 73 68 49 74 65 6d 73 28 74 29 2c 75 28 74 2e 74 61 72 67 65 74 29 2e 70 61 72 65 6e 74 73 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 2e 64 61 74 61 28 74 68 69 73 2c 6f 2e 77 69 64 67 65 74 4e 61 6d 65 2b 22 2d 69 74 65 6d 22 29 3d 3d 3d 6f 29 72 65 74 75 72 6e 20 69 3d 75 28 74 68 69 73 29 2c 21 31 7d 29 2c 21 21 28 69 3d 75 2e 64 61 74 61 28 74 2e 74 61 72 67 65 74 2c 6f 2e 77 69 64 67 65 74 4e 61 6d 65 2b 22 2d 69 74 65 6d 22 29 3d 3d 3d 6f 3f 75 28 74 2e 74 61 72 67 65 74 29 3a 69 29 26 26 28 21 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 26 26 21 65 26 26 Data Ascii: disabled&&"static"!==this.options.type&&(this._refreshItems(t),u(t.target).parents().each(function(){if(u.data(this,o.widgetName+"-item")===o)return i=u(this),!1}),!!(i=u.data(t.target,o.widgetName+"-item")===o?u(t.target):i)&&(!(this.options.handle&&!e&&
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 61 69 6e 6d 65 6e 74 28 29 2c 72 2e 63 75 72 73 6f 72 26 26 22 61 75 74 6f 22 21 3d 3d 72 2e 63 75 72 73 6f 72 26 26 28 6f 3d 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 2e 66 69 6e 64 28 22 62 6f 64 79 22 29 2c 74 68 69 73 2e 73 74 6f 72 65 64 43 75 72 73 6f 72 3d 6f 2e 63 73 73 28 22 63 75 72 73 6f 72 22 29 2c 6f 2e 63 73 73 28 22 63 75 72 73 6f 72 22 2c 72 2e 63 75 72 73 6f 72 29 2c 74 68 69 73 2e 73 74 6f 72 65 64 53 74 79 6c 65 73 68 65 65 74 3d 75 28 22 3c 73 74 79 6c 65 3e 2a 7b 20 63 75 72 73 6f 72 3a 20 22 2b 72 2e 63 75 72 73 6f 72 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 3c 2f 73 74 79 6c 65 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 6f 29 29 2c 72 2e 6f 70 61 63 69 74 79 26 26 28 74 68 69 73 2e 68 65 6c 70 65 72 2e 63 73 73 28 22 6f 70 61 63 69 Data Ascii: ainment(),r.cursor&&"auto"!==r.cursor&&(o=this.document.find("body"),this.storedCursor=o.css("cursor"),o.css("cursor",r.cursor),this.storedStylesheet=u("<style>*{ cursor: "+r.cursor+" !important; }</style>").appendTo(o)),r.opacity&&(this.helper.css("opaci
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 74 2e 70 61 67 65 59 3c 72 2e 73 63 72 6f 6c 6c 53 65 6e 73 69 74 69 76 69 74 79 3f 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 54 6f 70 3d 6e 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 54 6f 70 2b 72 2e 73 63 72 6f 6c 6c 53 70 65 65 64 3a 74 2e 70 61 67 65 59 2d 74 68 69 73 2e 6f 76 65 72 66 6c 6f 77 4f 66 66 73 65 74 2e 74 6f 70 3c 72 2e 73 63 72 6f 6c 6c 53 65 6e 73 69 74 69 76 69 74 79 26 26 28 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 54 6f 70 3d 6e 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 5b 30 5d 2e 73 63 72 6f 6c 6c 54 6f 70 2d 72 2e 73 63 72 6f Data Ascii: llParent[0].offsetHeight-t.pageY<r.scrollSensitivity?this.scrollParent[0].scrollTop=n=this.scrollParent[0].scrollTop+r.scrollSpeed:t.pageY-this.overflowOffset.top<r.scrollSensitivity&&(this.scrollParent[0].scrollTop=n=this.scrollParent[0].scrollTop-r.scro
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 2e 6f 70 74 69 6f 6e 73 2e 61 78 69 73 7c 7c 28 74 68 69 73 2e 68 65 6c 70 65 72 5b 30 5d 2e 73 74 79 6c 65 2e 74 6f 70 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 2e 74 6f 70 2b 22 70 78 22 29 2c 65 3d 74 68 69 73 2e 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 65 3b 65 2d 2d 29 69 66 28 69 3d 74 68 69 73 2e 69 74 65 6d 73 5b 65 5d 2c 73 3d 69 2e 69 74 65 6d 5b 30 5d 2c 6f 3d 74 68 69 73 2e 5f 69 6e 74 65 72 73 65 63 74 73 57 69 74 68 50 6f 69 6e 74 65 72 28 69 29 2c 6f 26 26 69 2e 69 6e 73 74 61 6e 63 65 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 43 6f 6e 74 61 69 6e 65 72 26 26 21 28 73 3d 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 5b 30 5d 7c 7c 74 68 69 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 5b 31 3d 3d 3d 6f 3f 22 6e 65 78 74 22 Data Ascii: .options.axis\|\|(this.helper[0].style.top=this.position.top+"px"),e=this.items.length-1;0<=e;e--)if(i=this.items[e],s=i.item[0],o=this._intersectsWithPointer(i),o&&i.instance===this.currentContainer&&!(s===this.currentItem[0]\|\|this.placeholder[1===o?"next"
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 6e 67 29 7b 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 28 6e 65 77 20 75 2e 45 76 65 6e 74 28 22 6d 6f 75 73 65 75 70 22 2c 7b 74 61 72 67 65 74 3a 6e 75 6c 6c 7d 29 29 2c 22 6f 72 69 67 69 6e 61 6c 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 65 6c 70 65 72 3f 28 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 63 73 73 28 74 68 69 73 2e 5f 73 74 6f 72 65 64 43 53 53 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2c 22 75 69 2d 73 6f 72 74 61 62 6c 65 2d 68 65 6c 70 65 72 22 29 29 3a 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 2e 73 68 6f 77 28 29 3b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 74 3b 74 2d 2d 29 74 Data Ascii: ng){this._mouseUp(new u.Event("mouseup",{target:null})),"original"===this.options.helper?(this.currentItem.css(this._storedCSS),this._removeClass(this.currentItem,"ui-sortable-helper")):this.currentItem.show();for(var t=this.containers.length-1;0<=t;t--)t
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 2e 6c 65 66 74 2c 69 3d 65 2b 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 77 69 64 74 68 2c 73 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 2e 74 6f 70 2c 6f 3d 73 2b 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 67 68 74 2c 72 3d 74 2e 6c 65 66 74 2c 6e 3d 72 2b 74 2e 77 69 64 74 68 2c 68 3d 74 2e 74 6f 70 2c 61 3d 68 2b 74 2e 68 65 69 67 68 74 2c 6c 3d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 2c 63 3d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 2c 6c 3d 22 78 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 78 69 73 7c 7c 68 3c 73 Data Ascii: ith:function(t){var e=this.positionAbs.left,i=e+this.helperProportions.width,s=this.positionAbs.top,o=s+this.helperProportions.height,r=t.left,n=r+t.width,h=t.top,a=h+t.height,l=this.offset.click.top,c=this.offset.click.left,l="x"===this.options.axis\|\|h<s
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 69 6e 67 26 26 74 3f 22 72 69 67 68 74 22 3d 3d 3d 74 26 26 69 7c 7c 22 6c 65 66 74 22 3d 3d 3d 74 26 26 21 69 3a 73 26 26 28 22 64 6f 77 6e 22 3d 3d 3d 73 26 26 65 7c 7c 22 75 70 22 3d 3d 3d 73 26 26 21 65 29 7d 2c 5f 67 65 74 44 72 61 67 56 65 72 74 69 63 61 6c 44 69 72 65 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 2e 74 6f 70 2d 74 68 69 73 2e 6c 61 73 74 50 6f 73 69 74 69 6f 6e 41 62 73 2e 74 6f 70 3b 72 65 74 75 72 6e 20 30 21 3d 74 26 26 28 30 3c 74 3f 22 64 6f 77 6e 22 3a 22 75 70 22 29 7d 2c 5f 67 65 74 44 72 61 67 48 6f 72 69 7a 6f 6e 74 61 6c 44 69 72 65 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 41 62 73 2e Data Ascii: ing&&t?"right"===t&&i\|\|"left"===t&&!i:s&&("down"===s&&e\|\|"up"===s&&!e)},_getDragVerticalDirection:function(){var t=this.positionAbs.top-this.lastPositionAbs.top;return 0!=t&&(0<t?"down":"up")},_getDragHorizontalDirection:function(){var t=this.positionAbs.
2024-04-25 19:25:26 UTC	1369	IN	Data Raw: 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 69 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 69 5b 65 5d 3d 3d 3d 74 2e 69 74 65 6d 5b 30 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 29 7d 2c 5f 72 65 66 72 65 73 68 49 74 65 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 69 74 65 6d 73 3d 5b 5d 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 3d 5b 74 68 69 73 5d 3b 76 61 72 20 65 2c 69 2c 73 2c 6f 2c 72 2c 6e 2c 68 2c 61 2c 6c 3d 74 68 69 73 2e 69 74 65 6d 73 2c 63 3d 5b 5b 75 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 74 65 6d 73 29 3f 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 74 65 6d 73 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 5b Data Ascii: tems,function(t){for(var e=0;e<i.length;e++)if(i[e]===t.item[0])return!1;return!0})},_refreshItems:function(t){this.items=[],this.containers=[this];var e,i,s,o,r,n,h,a,l=this.items,c=[[u.isFunction(this.options.items)?this.options.items.call(this.element[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49810	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:26 UTC	909	OUT	GET /wp-includes/js/jquery/jquery.ui.touch-punch.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125
2024-04-25 19:25:26 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b810dbfe8bb7-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"4f852b8e-49b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 11 Apr 2012 06:58:22 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NFCsPEZArdIIxhlhRRtYjwpLl%2BTu6aVwqJ1Tj4nwdyBJQ0T0Dfp1x4nVWN1NwzU7noIrPKwkxd%2BltD7P%2F7sK4QuBQg%2BA146kItEzmNKm621wU8iCIcTSa%2FBpaKKfVkXk3aw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:26 UTC	426	IN	Data Raw: 34 39 62 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 54 6f 75 63 68 20 50 75 6e 63 68 20 30 2e 32 2e 32 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 44 61 76 65 20 46 75 72 66 65 72 6f 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 0a 20 2a 20 44 65 70 65 6e 64 73 3a 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 77 69 64 67 65 74 2e 6a 73 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 6d 6f 75 73 65 2e 6a 73 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 73 75 70 70 6f 72 74 2e 74 6f 75 63 68 3d 22 6f 6e 74 6f 75 63 68 65 6e 64 22 20 69 6e 20 64 6f 63 75 6d 65 6e 74 3b 69 66 Data Ascii: 49b/! jQuery UI Touch Punch 0.2.2 * * Copyright 2011, Dave Furfero * Dual licensed under the MIT or GPL Version 2 licenses. * * Depends: * jquery.ui.widget.js * jquery.ui.mouse.js */(function(b){b.support.touch="ontouchend" in document;if
2024-04-25 19:25:26 UTC	760	IN	Data Raw: 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 5b 30 5d 2c 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 4d 6f 75 73 65 45 76 65 6e 74 73 22 29 3b 66 2e 69 6e 69 74 4d 6f 75 73 65 45 76 65 6e 74 28 68 2c 74 72 75 65 2c 74 72 75 65 2c 77 69 6e 64 6f 77 2c 31 2c 69 2e 73 63 72 65 65 6e 58 2c 69 2e 73 63 72 65 65 6e 59 2c 69 2e 63 6c 69 65 6e 74 58 2c 69 2e 63 6c 69 65 6e 74 59 2c 66 61 6c 73 65 2c 66 61 6c 73 65 2c 66 61 6c 73 65 2c 66 61 6c 73 65 2c 30 2c 6e 75 6c 6c 29 3b 67 2e 74 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 66 29 7d 63 2e 5f 74 6f 75 63 68 53 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 66 3d 74 68 69 73 3b 69 66 28 61 7c 7c 21 66 2e 5f 6d 6f 75 73 65 43 61 70 74 75 72 65 28 67 2e 6f Data Ascii: changedTouches[0],f=document.createEvent("MouseEvents");f.initMouseEvent(h,true,true,window,1,i.screenX,i.screenY,i.clientX,i.clientY,false,false,false,false,0,null);g.target.dispatchEvent(f)}c._touchStart=function(g){var f=this;if(a\|\|!f._mouseCapture(g.o
2024-04-25 19:25:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49813	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:26 UTC	916	OUT	GET /wp-content/plugins/tutor/assets/js/tutor-front.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125
2024-04-25 19:25:27 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:27 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81238ec6759-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fad6-175a5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:35:50 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g0fxQKUhX6%2BYqSZAZnnw4JAm46d948Xv8RviO5zYpPqHdE1RGZBLro7EhVoIJiFky3g3WP0E7d4gmXBSYZ4ycEeQFgItDUcieA4q%2BdrWKiPKXfO2IGwldNc0JgHyVUlLf30%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:27 UTC	430	IN	Data Raw: 37 63 30 34 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 6e 3d 7b 33 36 37 36 3a 28 29 3d 3e 7b 77 69 6e 64 6f 77 2e 72 65 61 64 79 53 74 61 74 65 5f 63 6f 6d 70 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 61 72 67 65 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 65 29 7d 29 3a 22 Data Ascii: 7c04(()=>{var n={3676:()=>{window.readyState_complete=function(e){var r=function t(e){return e()};document.addEventListener("readystatechange",function(t){return t.target.readyState==="complete"?typeof e=="function"?setTimeout(function(){return r(e)}):"
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 72 2b 6e 29 7d 3b 77 69 6e 64 6f 77 2e 73 65 6c 65 63 74 6f 72 42 79 49 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 7d 3b 77 69 6e 64 6f 77 2e 73 65 6c 65 63 74 6f 72 42 79 43 6c 61 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 74 29 7d 3b 77 69 6e 64 6f 77 2e 6a 73 6f 6e 5f 64 6f 77 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 42 6c 6f 62 28 5b 74 5d 2c 7b 74 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 7d 29 3b 76 61 72 Data Ascii: .body.classList.add(r+n)};window.selectorById=function(t){return document.getElementById(t)};window.selectorByClass=function(t){return document.getElementsByClassName(t)};window.json_download=function(t,e){var r=new Blob([t],{type:"application/json"});var
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 74 2e 76 61 6c 75 65 3d 3d 3d 6e 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 6b 65 79 29 7b 69 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 61 63 74 69 76 65 22 29 3b 6c 2e 69 6e 6e 65 72 54 65 78 74 3d 6e 2e 74 61 72 67 65 74 2e 69 6e 6e 65 72 54 65 78 74 3b 6c 2e 64 61 74 61 73 65 74 2e 76 61 6c 75 65 3d 74 2e 76 61 6c 75 65 3b 6f 2e 76 61 6c 75 65 3d 74 2e 76 61 6c 75 65 3b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 61 76 65 5f 74 75 74 6f 72 5f 6f 70 74 69 6f 6e 22 29 3b 69 66 28 72 29 7b 72 2e 64 69 73 61 62 6c 65 64 3d 66 61 6c 73 65 7d 7d 7d 29 3b 76 61 72 20 65 3d 6e 65 77 20 45 76 65 6e 74 28 22 63 Data Ascii: orEach(function(t,e){if(t.value===n.target.dataset.key){i.classList.remove("is-active");l.innerText=n.target.innerText;l.dataset.value=t.value;o.value=t.value;var r=document.getElementById("save_tutor_option");if(r){r.disabled=false}}});var e=new Event("c
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 74 75 74 6f 72 2d 6a 73 2d 66 6f 72 6d 2d 73 65 6c 65 63 74 22 29 3b 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 28 65 29 7d 7d 29 28 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 74 29 7b 74 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 69 73 2d 61 63 74 69 76 65 22 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 76 61 72 20 65 3d 22 22 3b 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2b 3d 27 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: var e=document.querySelectorAll(".tutor-js-form-select");document.onclick=function(t){f(e)}})();function f(t){if(t){t.forEach(function(t){t.classList.remove("is-active")})}}function h(t){var e="";Array.from(t).forEach(function(t){e+='\n <div cl
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 61 74 61 2d 6d 63 65 2d 73 74 79 6c 65 5d 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 74 68 69 73 29 2e 61 74 74 72 28 22 73 74 79 6c 65 22 2c 69 28 74 68 69 73 29 2e 61 74 74 72 28 22 64 61 74 61 2d 6d 63 65 2d 73 74 79 6c 65 22 29 29 3b 69 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 64 61 74 61 2d 6d 63 65 2d 73 74 79 6c 65 22 29 7d 29 3b 69 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 27 2e 74 75 74 6f 72 2d 73 69 6e 67 6c 65 2d 63 6f 75 72 73 65 2d 6c 65 73 73 6f 6e 2d 63 6f 6d 6d 65 6e 74 73 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 77 70 2e 69 31 38 6e 2e 5f Data Ascii: ata-mce-style]").each(function(){i(this).attr("style",i(this).attr("data-mce-style"));i(this).removeAttr("data-mce-style")});i(document).on("click",'.tutor-single-course-lesson-comments button[type="submit"]',function(t){t.preventDefault();var e=wp.i18n._
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 65 6e 67 74 68 29 7b 66 28 22 2e 74 75 74 6f 72 2d 63 6f 75 72 73 65 2d 74 6f 70 69 63 2d 73 69 6e 67 6c 65 2d 66 6f 6f 74 65 72 22 29 2e 72 65 6d 6f 76 65 28 29 7d 7d 76 61 72 20 70 3d 66 28 22 23 74 75 74 6f 72 2d 71 75 69 7a 2d 74 69 6d 65 2d 75 70 64 61 74 65 22 29 3b 69 66 28 70 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 70 2e 61 74 74 72 28 22 64 61 74 61 2d 61 74 74 65 6d 70 74 2d 73 65 74 74 69 6e 67 73 22 29 29 3b 76 61 72 20 76 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 70 2e 61 74 74 72 28 22 64 61 74 61 2d 61 74 74 65 6d 70 74 2d 6d 65 74 61 22 29 29 3b 69 66 28 76 2e 74 69 6d 65 5f 6c 69 6d 69 74 2e 74 69 6d 65 5f 6c 69 6d 69 74 5f 73 65 63 6f 6e 64 73 3e 30 29 7b 76 61 72 20 65 2c 72 3b 76 61 72 20 6d 3d 6e 65 77 Data Ascii: ength){f(".tutor-course-topic-single-footer").remove()}}var p=f("#tutor-quiz-time-update");if(p.length){var t=JSON.parse(p.attr("data-attempt-settings"));var v=JSON.parse(p.attr("data-attempt-meta"));if(v.time_limit.time_limit_seconds>0){var e,r;var m=new
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 22 23 74 75 74 6f 72 2d 71 75 69 7a 2d 74 69 6d 65 2d 65 78 70 69 72 65 2d 77 72 61 70 70 65 72 22 3b 66 28 6f 29 2e 61 64 64 43 6c 61 73 73 28 22 74 75 74 6f 72 2d 61 6c 65 72 74 2d 73 68 6f 77 22 29 3b 69 66 28 6e 3e 30 29 7b 66 28 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 20 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 61 6c 65 72 74 2d 74 65 78 74 22 29 29 2e 68 74 6d 6c 28 68 28 22 59 6f 75 72 20 74 69 6d 65 20 6c 69 6d 69 74 20 66 6f 72 20 74 68 69 73 20 71 75 69 7a 20 68 61 73 20 65 78 70 69 72 65 64 2c 20 70 6c 65 61 73 65 20 72 65 61 74 74 65 6d 70 74 20 74 68 65 20 71 75 69 7a 2e 20 41 74 74 65 6d 70 74 73 20 72 65 6d 61 69 6e 69 6e 67 3a 22 2c 22 74 75 74 6f 72 22 29 2b 22 20 22 2b 6e 2b 22 2f 22 2b 72 29 7d 65 6c 73 65 7b 69 66 28 66 28 6f 29 2e 68 61 73 Data Ascii: "#tutor-quiz-time-expire-wrapper";f(o).addClass("tutor-alert-show");if(n>0){f("".concat(o," .tutor-quiz-alert-text")).html(h("Your time limit for this quiz has expired, please reattempt the quiz. Attempts remaining:","tutor")+" "+n+"/"+r)}else{if(f(o).has
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 69 7a 2d 74 69 6d 65 2d 72 65 6d 61 69 6e 69 6e 67 2d 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 22 29 7d 6c 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 22 2e 63 6f 6e 63 61 74 28 64 2c 22 3b 22 29 29 7d 7d 7d 2c 31 65 33 29 7d 65 6c 73 65 7b 70 2e 68 74 6d 6c 28 68 28 22 4e 6f 20 4c 69 6d 69 74 22 2c 22 74 75 74 6f 72 22 29 29 7d 7d 76 61 72 20 6e 3d 66 28 22 66 6f 72 6d 23 74 75 74 6f 72 2d 73 74 61 72 74 2d 71 75 69 7a 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 29 7b 69 66 28 5f 74 75 74 6f 72 6f 62 6a 65 63 74 2e 71 75 69 7a 5f 6f 70 74 69 6f 6e 73 2e 71 75 69 7a 5f 61 75 74 6f 5f 73 74 61 72 74 3d 3d 31 29 7b 6e 2e 73 75 62 6d 69 74 28 29 7d 7d 7d 29 7d 2c 33 34 31 39 3a Data Ascii: iz-time-remaining-expired-circle")}l.setAttribute("style","stroke-dashoffset: ".concat(d,";"))}}},1e3)}else{p.html(h("No Limit","tutor"))}}var n=f("form#tutor-start-quiz");if(n.length){if(_tutorobject.quiz_options.quiz_auto_start==1){n.submit()}}})},3419:
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 76 61 72 20 72 3d 69 2e 69 6e 64 65 78 4f 66 28 74 2e 76 61 6c 28 29 29 3e 2d 31 3b 76 61 72 20 6e 3d 74 2e 69 73 28 22 3a 63 68 65 63 6b 65 64 22 29 3b 69 66 28 72 29 7b 74 2e 63 6c 6f 73 65 73 74 28 22 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 61 6e 73 77 65 72 2d 73 69 6e 67 6c 65 22 29 2e 61 64 64 43 6c 61 73 73 28 22 74 75 74 6f 72 2d 71 75 69 7a 2d 61 6e 73 77 65 72 2d 73 69 6e 67 6c 65 2d 63 6f 72 72 65 63 74 22 29 2e 61 70 70 65 6e 64 28 73 28 75 28 22 43 6f 72 72 65 63 74 20 41 6e 73 77 65 72 22 2c 22 74 75 74 6f 72 22 29 29 29 2e 66 69 6e 64 28 22 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 61 6e 73 77 65 72 2d 73 69 6e 67 6c 65 2d 69 6e 66 6f 3a 65 71 28 31 29 22 29 2e 72 65 6d 6f 76 65 28 29 7d 65 6c 73 65 7b 69 66 28 74 2e 70 72 6f 70 28 22 63 68 65 63 6b Data Ascii: var r=i.indexOf(t.val())>-1;var n=t.is(":checked");if(r){t.closest(".tutor-quiz-answer-single").addClass("tutor-quiz-answer-single-correct").append(s(u("Correct Answer","tutor"))).find(".tutor-quiz-answer-single-info:eq(1)").remove()}else{if(t.prop("check
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 68 69 73 20 71 75 65 73 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 22 2c 22 74 75 74 6f 72 22 29 2c 22 3c 2f 70 3e 22 29 29 3b 6e 3d 66 61 6c 73 65 7d 7d 7d 72 65 74 75 72 6e 20 6e 7d 6c 28 22 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 6e 65 78 74 2d 62 74 6e 2d 61 6c 6c 22 29 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 66 61 6c 73 65 29 3b 6c 28 22 2e 71 75 69 7a 2d 61 74 74 65 6d 70 74 2d 73 69 6e 67 6c 65 2d 71 75 65 73 74 69 6f 6e 20 69 6e 70 75 74 22 29 2e 66 69 6c 74 65 72 28 27 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 27 29 2e 63 68 61 6e 67 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 22 2e 74 75 74 6f 72 2d 71 75 69 7a 2d 6e 65 78 74 2d 62 74 6e 2d 61 6c 6c 22 29 2e 70 72 6f 70 28 22 Data Ascii: his question is required","tutor"),"</p>"));n=false}}}return n}l(".tutor-quiz-next-btn-all").prop("disabled",false);l(".quiz-attempt-single-question input").filter('[type="radio"], [type="checkbox"]').change(function(){l(".tutor-quiz-next-btn-all").prop("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49814	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:26 UTC	905	OUT	GET /wp-includes/js/jquery/ui/datepicker.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125
2024-04-25 19:25:27 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8123b580711-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"605d329a-8d34" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 26 Mar 2021 01:02:18 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UsP8iUD1V8OPlQcXrRKfblfZaHhdNZEiieVsUrXMNerDwHrH4ziCZQ3aozDPkF5gHbx1%2FEG6sy2WOwnIyG4X22D757Trw6U712IUC5VeVUnzWm2QkaUgWiU7h7dpgXLmMx8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:27 UTC	433	IN	Data Raw: 37 63 30 38 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 44 61 74 65 70 69 63 6b 65 72 20 31 2e 31 32 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 Data Ascii: 7c08/! jQuery UI Datepicker 1.12.1 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(e){"function"==typeof define&&define.amd?define(["jquery
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 76 22 2c 74 68 69 73 2e 5f 69 6e 6c 69 6e 65 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 69 6e 6c 69 6e 65 22 2c 74 68 69 73 2e 5f 61 70 70 65 6e 64 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 61 70 70 65 6e 64 22 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 74 72 69 67 67 65 72 22 2c 74 68 69 73 2e 5f 64 69 61 6c 6f 67 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 61 6c 6f 67 22 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 69 73 61 62 6c 65 64 22 2c 74 68 69 73 2e 5f 75 6e 73 65 6c 65 63 74 61 62 6c 65 43 6c 61 73 73 3d Data Ascii: ="ui-datepicker-div",this._inlineClass="ui-datepicker-inline",this._appendClass="ui-datepicker-append",this._triggerClass="ui-datepicker-trigger",this._dialogClass="ui-datepicker-dialog",this._disableClass="ui-datepicker-disabled",this._unselectableClass=
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6c 6c 2c 64 75 72 61 74 69 6f 6e 3a 22 66 61 73 74 22 2c 62 65 66 6f 72 65 53 68 6f 77 44 61 79 3a 6e 75 6c 6c 2c 62 65 66 6f 72 65 53 68 6f 77 3a 6e 75 6c 6c 2c 6f 6e 53 65 6c 65 63 74 3a 6e 75 6c 6c 2c 6f 6e 43 68 61 6e 67 65 4d 6f 6e 74 68 59 65 61 72 3a 6e 75 6c 6c 2c 6f 6e 43 6c 6f 73 65 3a 6e 75 6c 6c 2c 6e 75 6d 62 65 72 4f 66 4d 6f 6e 74 68 73 3a 31 2c 73 68 6f 77 43 75 72 72 65 6e 74 41 74 50 6f 73 3a 30 2c 73 74 65 70 4d 6f 6e 74 68 73 3a 31 2c 73 74 65 70 42 69 67 4d 6f 6e 74 68 73 3a 31 32 2c 61 6c 74 46 69 65 6c 64 3a 22 22 2c 61 6c 74 46 6f 72 6d 61 74 3a 22 22 2c 63 6f 6e 73 74 72 61 69 6e 49 6e 70 75 74 3a 21 30 2c 73 68 6f 77 42 75 74 74 6f 6e 50 61 6e 65 6c 3a 21 31 2c 61 75 74 6f 53 69 7a 65 3a 21 31 2c 64 69 73 61 62 6c 65 64 3a 21 31 Data Ascii: ll,duration:"fast",beforeShowDay:null,beforeShow:null,onSelect:null,onChangeMonthYear:null,onClose:null,numberOfMonths:1,showCurrentAtPos:0,stepMonths:1,stepBigMonths:12,altField:"",altFormat:"",constrainInput:!0,showButtonPanel:!1,autoSize:!1,disabled:!1
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6e 20 4d 2e 65 78 74 65 6e 64 28 65 2c 74 29 2c 74 29 6e 75 6c 6c 3d 3d 74 5b 61 5d 26 26 28 65 5b 61 5d 3d 74 5b 61 5d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 4d 2e 65 78 74 65 6e 64 28 4d 2e 75 69 2c 7b 64 61 74 65 70 69 63 6b 65 72 3a 7b 76 65 72 73 69 6f 6e 3a 22 31 2e 31 32 2e 31 22 7d 7d 29 2c 4d 2e 65 78 74 65 6e 64 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 3a 22 68 61 73 44 61 74 65 70 69 63 6b 65 72 22 2c 6d 61 78 52 6f 77 73 3a 34 2c 5f 77 69 64 67 65 74 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 70 44 69 76 7d 2c 73 65 74 44 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2e Data Ascii: n M.extend(e,t),t)null==t[a]&&(e[a]=t[a]);return e}return M.extend(M.ui,{datepicker:{version:"1.12.1"}}),M.extend(e.prototype,{markerClassName:"hasDatepicker",maxRows:4,_widgetDatepicker:function(){return this.dpDiv},setDefaults:function(e){return o(this.
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 22 29 2c 65 5b 73 3f 22 62 65 66 6f 72 65 22 3a 22 61 66 74 65 72 22 5d 28 74 2e 61 70 70 65 6e 64 29 29 2c 65 2e 6f 66 66 28 22 66 6f 63 75 73 22 2c 74 68 69 73 2e 5f 73 68 6f 77 44 61 74 65 70 69 63 6b 65 72 29 2c 74 2e 74 72 69 67 67 65 72 26 26 74 2e 74 72 69 67 67 65 72 2e 72 65 6d 6f 76 65 28 29 2c 22 66 6f 63 75 73 22 21 3d 3d 28 61 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 73 68 6f 77 4f 6e 22 29 29 26 26 22 62 6f 74 68 22 21 3d 3d 61 7c 7c 65 2e 6f 6e 28 22 66 6f 63 75 73 22 2c 74 68 69 73 2e 5f 73 68 6f 77 44 61 74 65 70 69 63 6b 65 72 29 2c 22 62 75 74 74 6f 6e 22 21 3d 3d 61 26 26 22 62 6f 74 68 22 21 3d 3d 61 7c 7c 28 69 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c 22 62 75 74 74 6f 6e 54 65 78 74 22 29 2c 61 3d 74 68 69 73 2e 5f 67 65 74 28 74 2c Data Ascii: "),e[s?"before":"after"](t.append)),e.off("focus",this._showDatepicker),t.trigger&&t.trigger.remove(),"focus"!==(a=this._get(t,"showOn"))&&"both"!==a\|\|e.on("focus",this._showDatepicker),"button"!==a&&"both"!==a\|\|(i=this._get(t,"buttonText"),a=this._get(t,
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 29 2c 4d 2e 64 61 74 61 28 65 2c 22 64 61 74 65 70 69 63 6b 65 72 22 2c 74 29 2c 74 68 69 73 2e 5f 73 65 74 44 61 74 65 28 74 2c 74 68 69 73 2e 5f 67 65 74 44 65 66 61 75 6c 74 44 61 74 65 28 74 29 2c 21 30 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 74 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 74 29 2c 74 2e 73 65 74 74 69 6e 67 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 44 61 74 65 70 69 63 6b 65 72 28 65 29 2c 74 2e 64 70 44 69 76 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 29 7d 2c 5f 64 69 61 6c 6f 67 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 69 2c 73 29 7b 76 61 72 20 72 2c 6e 3d 74 68 69 73 2e 5f Data Ascii: ),M.data(e,"datepicker",t),this._setDate(t,this._getDefaultDate(t),!0),this._updateDatepicker(t),this._updateAlternate(t),t.settings.disabled&&this._disableDatepicker(e),t.dpDiv.css("display","block"))},_dialogDatepicker:function(e,t,a,i,s){var r,n=this._
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 26 26 28 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4d 2e 72 65 6d 6f 76 65 44 61 74 61 28 65 2c 22 64 61 74 65 70 69 63 6b 65 72 22 29 2c 22 69 6e 70 75 74 22 3d 3d 3d 74 3f 28 69 2e 61 70 70 65 6e 64 2e 72 65 6d 6f 76 65 28 29 2c 69 2e 74 72 69 67 67 65 72 2e 72 65 6d 6f 76 65 28 29 2c 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 6d 61 72 6b 65 72 43 6c 61 73 73 4e 61 6d 65 29 2e 6f 66 66 28 22 66 6f 63 75 73 22 2c 74 68 69 73 2e 5f 73 68 6f 77 44 61 74 65 70 69 63 6b 65 72 29 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 5f 64 6f 4b 65 79 44 6f 77 6e 29 2e 6f 66 66 28 22 6b 65 79 70 72 65 73 73 22 2c 74 68 69 73 2e 5f 64 6f 4b Data Ascii: this.markerClassName)&&(t=e.nodeName.toLowerCase(),M.removeData(e,"datepicker"),"input"===t?(i.append.remove(),i.trigger.remove(),a.removeClass(this.markerClassName).off("focus",this._showDatepicker).off("keydown",this._doKeyDown).off("keypress",this._doK
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 21 30 29 29 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 3d 4d 2e 6d 61 70 28 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 3f 6e 75 6c 6c 3a 65 7d 29 2c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 5b 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 2e 6c 65 6e 67 74 68 5d 3d 74 29 7d 2c 5f 69 73 44 69 73 61 62 6c 65 64 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 5f 64 69 73 61 62 6c 65 64 49 6e 70 75 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 Data Ascii: prop("disabled",!0)),this._disabledInputs=M.map(this._disabledInputs,function(e){return e===t?null:e}),this._disabledInputs[this._disabledInputs.length]=t)},_isDisabledDatepicker:function(e){if(!e)return!1;for(var t=0;t<this._disabledInputs.length;t++)if(
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 29 7d 2c 5f 73 65 74 44 61 74 65 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 74 68 69 73 2e 5f 67 65 74 49 6e 73 74 28 65 29 3b 65 26 26 28 74 68 69 73 2e 5f 73 65 74 44 61 74 65 28 65 2c 74 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 65 29 2c 74 68 69 73 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 65 29 29 7d 2c 5f 67 65 74 44 61 74 65 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 3d 74 68 69 73 2e 5f 67 65 74 49 6e 73 74 28 65 29 3b 72 65 74 75 72 6e 20 65 26 26 21 65 2e 69 6e 6c 69 6e 65 26 26 74 68 69 73 2e 5f 73 65 74 44 61 74 65 46 72 6f 6d 46 69 65 6c 64 28 65 2c 74 29 2c 65 3f 74 68 69 73 2e 5f 67 65 74 44 61 74 65 28 65 29 3a 6e 75 6c 6c Data Ascii: )},_setDateDatepicker:function(e,t){e=this._getInst(e);e&&(this._setDate(e,t),this._updateDatepicker(e),this._updateAlternate(e))},_getDateDatepicker:function(e,t){e=this._getInst(e);return e&&!e.inline&&this._setDateFromField(e,t),e?this._getDate(e):null
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 72 3f 31 3a 2d 31 2c 22 44 22 29 2c 73 3d 65 2e 63 74 72 6c 4b 65 79 7c 7c 65 2e 6d 65 74 61 4b 65 79 2c 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 61 6c 74 4b 65 79 26 26 4d 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 65 2e 74 61 72 67 65 74 2c 65 2e 63 74 72 6c 4b 65 79 3f 2d 4d 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 69 2c 22 73 74 65 70 42 69 67 4d 6f 6e 74 68 73 22 29 3a 2d 4d 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 69 2c 22 73 74 65 70 4d 6f 6e 74 68 73 22 29 2c 22 4d 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 38 3a 28 65 2e 63 74 72 6c 4b 65 79 7c 7c 65 2e 6d 65 74 61 4b 65 79 29 26 26 4d 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 61 64 6a 75 73 74 44 61 74 65 28 65 2e 74 61 72 67 65 74 2c 2d 37 Data Ascii: r?1:-1,"D"),s=e.ctrlKey\|\|e.metaKey,e.originalEvent.altKey&&M.datepicker._adjustDate(e.target,e.ctrlKey?-M.datepicker._get(i,"stepBigMonths"):-M.datepicker._get(i,"stepMonths"),"M");break;case 38:(e.ctrlKey\|\|e.metaKey)&&M.datepicker._adjustDate(e.target,-7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49815	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:26 UTC	914	OUT	GET /wp-content/themes/edumall/assets/js/headroom.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125
2024-04-25 19:25:27 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:27 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b812db804571-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1588" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EGW9LZ9Dl2hVcYYTXeUg0gKZPOEHpunYUee3ja2UW1kcPeVL%2F8shmrcoBA3YdjSslWD8DMv4jarJ1hgH1e2K2SGV2TF2395UDf5k51g3Ih9%2FHSi0ug3FiD8jcV3g%2FNe7iTI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:27 UTC	429	IN	Data Raw: 31 35 38 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 6f 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6f 28 29 3a 74 2e 48 65 61 64 72 6f 6f 6d 3d 6f 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 62 69 6e 64 3a 21 21 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 62 69 6e 64 2c 63 6c 61 73 73 4c 69 73 74 3a 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c Data Ascii: 1588!function(t,o){"use strict";"function"==typeof define&&define.amd?define([],o):"object"==typeof exports?module.exports=o():t.Headroom=o()}(this,function(){"use strict";var t={bind:!!function(){}.bind,classList:"classList"in document.documentElement,
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 61 72 67 75 6d 65 6e 74 73 20 69 6e 20 65 78 74 65 6e 64 20 66 75 6e 63 74 69 6f 6e 22 29 3b 66 6f 72 28 76 61 72 20 6f 2c 69 2c 6e 3d 74 7c 7c 7b 7d 2c 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 73 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 7c 7c 7b 7d 3b 66 6f 72 28 6f 20 69 6e 20 73 29 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 5b 6f 5d 7c 7c 28 69 3d 6e 5b 6f 5d 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 69 3d 3d 3d 77 69 6e 64 6f 77 7c 7c 69 2e 6e 6f 64 65 54 79 70 65 29 3f 6e 5b 6f 5d 3d 6e 5b 6f 5d 7c 7c 73 5b 6f 5d Data Ascii: ments.length<=0)throw new Error("Missing arguments in extend function");for(var o,i,n=t\|\|{},e=1;e<arguments.length;e++){var s=arguments[e]\|\|{};for(o in s)"object"!=typeof n[o]\|\|(i=n[o])&&"undefined"!=typeof window&&(i===window\|\|i.nodeType)?n[o]=n[o]\|\|s[o]
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 2e 74 6f 70 2c 74 2e 6e 6f 74 54 6f 70 2c 74 2e 69 6e 69 74 69 61 6c 29 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 74 68 69 73 2e 64 65 62 6f 75 6e 63 65 72 2c 21 31 29 7d 2c 61 74 74 61 63 68 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 73 65 64 7c 7c 28 74 68 69 73 2e 6c 61 73 74 4b 6e 6f 77 6e 53 63 72 6f 6c 6c 59 3d 74 68 69 73 2e 67 65 74 53 63 72 6f 6c 6c 59 28 29 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 73 65 64 3d 21 30 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 74 68 69 73 2e 64 65 62 6f 75 6e 63 65 72 2c 21 31 29 2c 74 68 69 73 2e 64 Data Ascii: .top,t.notTop,t.initial),this.scroller.removeEventListener("scroll",this.debouncer,!1)},attachEvent:function(){this.initialised\|\|(this.lastKnownScrollY=this.getScrollY(),this.initialised=!0,this.scroller.addEventListener("scroll",this.debouncer,!1),this.d
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 72 6f 6c 6c 54 6f 70 3f 74 68 69 73 2e 73 63 72 6f 6c 6c 65 72 3a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 73 63 72 6f 6c 6c 54 6f 70 7d 2c 67 65 74 56 69 65 77 70 6f 72 74 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 50 68 79 73 69 63 61 6c 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f Data Ascii: rollTop?this.scroller:document.documentElement\|\|document.body.parentNode\|\|document.body).scrollTop},getViewportHeight:function(){return window.innerHeight\|\|document.documentElement.clientHeight\|\|document.body.clientHeight},getElementPhysicalHeight:functio
2024-04-25 19:25:27 UTC	984	IN	Data Raw: 68 69 73 2e 74 6f 6c 65 72 61 6e 63 65 45 78 63 65 65 64 65 64 28 74 2c 6f 29 3b 74 68 69 73 2e 69 73 4f 75 74 4f 66 42 6f 75 6e 64 73 28 74 29 7c 7c 28 74 3c 3d 74 68 69 73 2e 6f 66 66 73 65 74 3f 74 68 69 73 2e 74 6f 70 28 29 3a 74 68 69 73 2e 6e 6f 74 54 6f 70 28 29 2c 74 2b 74 68 69 73 2e 67 65 74 56 69 65 77 70 6f 72 74 48 65 69 67 68 74 28 29 3e 3d 74 68 69 73 2e 67 65 74 53 63 72 6f 6c 6c 65 72 48 65 69 67 68 74 28 29 3f 74 68 69 73 2e 62 6f 74 74 6f 6d 28 29 3a 74 68 69 73 2e 6e 6f 74 42 6f 74 74 6f 6d 28 29 2c 74 68 69 73 2e 73 68 6f 75 6c 64 55 6e 70 69 6e 28 74 2c 6f 29 3f 74 68 69 73 2e 75 6e 70 69 6e 28 29 3a 74 68 69 73 2e 73 68 6f 75 6c 64 50 69 6e 28 74 2c 6f 29 26 26 74 68 69 73 2e 70 69 6e 28 29 2c 74 68 69 73 2e 6c 61 73 74 4b 6e 6f 77 Data Ascii: his.toleranceExceeded(t,o);this.isOutOfBounds(t)\|\|(t<=this.offset?this.top():this.notTop(),t+this.getViewportHeight()>=this.getScrollerHeight()?this.bottom():this.notBottom(),this.shouldUnpin(t,o)?this.unpin():this.shouldPin(t,o)&&this.pin(),this.lastKnow
2024-04-25 19:25:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49816	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	996	OUT	GET /wp-content/themes/edumall/assets/libs/smooth-scroll-for-web/SmoothScroll.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:27 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:27 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8162dd26751-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1d04" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fh4GR%2Bx%2FmjkiIIid0QCujmXpuOqtyRflsxoM3yvAZy00xGJcFgtV9wMJKFcvxtZZIilL4utQKL9k%2BRnUmS7pVs9j8dSV0anK6AUHs5UNg9aKVC%2F26MjJUbB990YgZsU%2B4E8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:27 UTC	425	IN	Data Raw: 31 64 30 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 2c 69 2c 63 2c 61 2c 6f 3d 7b 66 72 61 6d 65 52 61 74 65 3a 31 35 30 2c 61 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 3a 34 30 30 2c 73 74 65 70 53 69 7a 65 3a 31 30 30 2c 70 75 6c 73 65 41 6c 67 6f 72 69 74 68 6d 3a 21 30 2c 70 75 6c 73 65 53 63 61 6c 65 3a 34 2c 70 75 6c 73 65 4e 6f 72 6d 61 6c 69 7a 65 3a 31 2c 61 63 63 65 6c 65 72 61 74 69 6f 6e 44 65 6c 74 61 3a 35 30 2c 61 63 63 65 6c 65 72 61 74 69 6f 6e 4d 61 78 3a 33 2c 6b 65 79 62 6f 61 72 64 53 75 70 70 6f 72 74 3a 21 30 2c 61 72 72 6f 77 53 63 72 6f 6c 6c 3a 35 30 2c 66 69 78 65 64 42 61 63 6b 67 72 6f 75 6e 64 3a 21 30 2c 65 78 63 6c 75 64 65 64 3a 22 22 7d 2c 70 3d 6f 2c 75 3d 21 31 2c 64 3d 21 31 2c 6c 3d 7b 78 3a 30 2c 79 3a 30 Data Ascii: 1d04!function(){var s,i,c,a,o={frameRate:150,animationTime:400,stepSize:100,pulseAlgorithm:!0,pulseScale:4,pulseNormalize:1,accelerationDelta:50,accelerationMax:3,keyboardSupport:!0,arrowScroll:50,fixedBackground:!0,excluded:""},p=o,u=!1,d=!1,l={x:0,y:0
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 33 39 3a 31 2c 34 30 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 69 66 28 21 66 26 26 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 7b 66 3d 21 30 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 6e 3d 65 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3b 69 66 28 6d 3d 30 3c 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 2e 69 6e 64 65 78 4f 66 28 22 43 53 53 22 29 3f 74 3a 65 2c 73 3d 65 2c 70 2e 6b 65 79 62 6f 61 72 64 53 75 70 70 6f 72 74 26 26 59 28 22 6b 65 79 64 6f 77 6e 22 2c 44 29 2c 74 6f 70 21 3d 73 65 6c 66 29 64 3d 21 30 3b 65 6c 73 65 20 69 66 28 51 26 26 6f 3c 6e 26 26 28 65 2e Data Ascii: 39:1,40:1};function b(){if(!f&&document.body){f=!0;var e=document.body,t=document.documentElement,o=window.innerHeight,n=e.scrollHeight;if(m=0<=document.compatMode.indexOf("CSS")?t:e,s=e,p.keyboardSupport&&Y("keydown",D),top!=self)d=!0;else if(Q&&o<n&&(e.
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 2d 62 65 68 61 76 69 6f 72 22 5d 3b 42 5b 74 5d 3d 22 73 6d 6f 6f 74 68 22 3d 3d 6f 7d 72 65 74 75 72 6e 20 42 5b 74 5d 7d 28 64 29 26 26 28 64 2e 24 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 3d 64 2e 73 74 79 6c 65 2e 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 2c 64 2e 73 74 79 6c 65 2e 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 3d 22 61 75 74 6f 22 29 3b 76 61 72 20 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 6f 3d 30 2c 6e 3d 30 2c 72 3d 30 3b 72 3c 67 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 61 3d 67 5b 72 5d 2c 6c 3d 74 2d 61 2e 73 74 61 72 74 2c 69 3d 6c 3e 3d 70 2e 61 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 2c 63 3d 69 3f 31 3a 6c 2f 70 2e 61 6e 69 6d 61 74 69 6f 6e 54 69 6d 65 3b 70 Data Ascii: -behavior"];B[t]="smooth"==o}return B[t]}(d)&&(d.$scrollBehavior=d.style.scrollBehavior,d.style.scrollBehavior="auto");var w=function(e){for(var t=Date.now(),o=0,n=0,r=0;r<g.length;r++){var a=g[r],l=t-a.start,i=l>=p.animationTime,c=i?1:l/p.animationTime;p
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 61 62 73 28 6e 29 26 26 28 6e 2a 3d 70 2e 73 74 65 70 53 69 7a 65 2f 31 32 30 29 2c 6b 28 72 2c 6f 2c 6e 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 76 6f 69 64 20 43 28 29 29 3a 21 64 7c 7c 21 57 7c 7c 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 74 61 72 67 65 74 22 2c 7b 76 61 6c 75 65 3a 77 69 6e 64 6f 77 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 7d 29 2c 70 61 72 65 6e 74 2e 77 68 65 65 6c 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 61 72 67 65 74 2c 6f 3d 65 2e 63 74 72 6c 4b 65 79 7c 7c 65 2e 61 6c 74 4b 65 79 7c 7c 65 2e 6d 65 74 61 4b 65 79 7c 7c 65 2e 73 68 69 66 74 4b 65 79 26 26 65 2e 6b 65 79 43 6f 64 65 21 3d 3d 76 2e 73 70 61 63 65 62 61 72 3b 64 6f 63 Data Ascii: abs(n)&&(n*=p.stepSize/120),k(r,o,n),e.preventDefault(),void C()):!d\|\|!W\|\|(Object.defineProperty(e,"target",{value:window.frameElement}),parent.wheel(e))}function D(e){var t=e.target,o=e.ctrlKey\|\|e.altKey\|\|e.metaKey\|\|e.shiftKey&&e.keyCode!==v.spacebar;doc
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 73 65 20 76 2e 72 69 67 68 74 3a 72 3d 70 2e 61 72 72 6f 77 53 63 72 6f 6c 6c 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 30 7d 6b 28 6c 2c 72 2c 61 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 43 28 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 73 3d 65 2e 74 61 72 67 65 74 7d 76 61 72 20 6e 2c 72 2c 4d 3d 28 6e 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 75 6e 69 71 75 65 49 44 7c 7c 28 65 2e 75 6e 69 71 75 65 49 44 3d 6e 2b 2b 29 7d 29 2c 45 3d 7b 7d 2c 54 3d 7b 7d 2c 42 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 2c 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 45 3d 54 3d 42 3d 7b 7d 7d 2c 31 65 33 29 Data Ascii: se v.right:r=p.arrowScroll;break;default:return!0}k(l,r,a),e.preventDefault(),C()}function t(e){s=e.target}var n,r,M=(n=0,function(e){return e.uniqueID\|\|(e.uniqueID=n++)}),E={},T={},B={};function C(){clearTimeout(r),r=setInterval(function(){E=T=B={}},1e3)
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 77 69 6e 64 6f 77 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 77 69 6e 64 6f 77 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 71 3d 28 24 3d 64 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 24 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 68 65 69 67 68 74 3a 31 30 30 30 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 22 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 Data Ascii: w.MutationObserver\|\|window.WebKitMutationObserver\|\|window.MozMutationObserver,q=($=document.scrollingElement,function(){if(!$){var e=document.createElement("div");e.style.cssText="height:10000px;width:1px;",document.body.appendChild(e);var t=document.body
2024-04-25 19:25:27 UTC	166	IN	Data Raw: 69 6e 64 6f 77 2e 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 4f 70 74 69 6f 6e 73 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 65 3a 77 69 6e 64 6f 77 2e 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 3d 6e 65 7d 28 29 3b 0d 0a Data Ascii: indow.SmoothScrollOptions),"function"==typeof define&&define.amd?define(function(){return ne}):"object"==typeof exports?module.exports=ne:window.SmoothScroll=ne}();
2024-04-25 19:25:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49817	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	994	OUT	GET /wp-content/themes/edumall/assets/libs/lightGallery/js/lightgallery-all.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:27 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:27 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81628eaad5c-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-c287" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pd2uWgwwyd3hjfgV6SRYYh1TEQJPfDrBEgggDgDE%2BzGPSpcxGlo3fvHths%2FCQ1U12unLUK4na5cFxp6%2FwCp7bZW7gN40kn3GZvx1We5rlgFGoOgZVNPQ7BWeBcyPZRwMWQA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:27 UTC	429	IN	Data Raw: 33 31 33 63 0d 0a 2f 2a 21 20 6c 69 67 68 74 67 61 6c 6c 65 72 79 20 2d 20 76 31 2e 36 2e 31 32 20 2d 20 32 30 31 39 2d 30 32 2d 31 39 0a 2a 20 68 74 74 70 3a 2f 2f 73 61 63 68 69 6e 63 68 6f 6f 6c 75 72 2e 67 69 74 68 75 62 2e 69 6f 2f 6c 69 67 68 74 47 61 6c 6c 65 72 79 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 39 20 53 61 63 68 69 6e 20 4e 3b 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 28 61 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 313c/! lightgallery - v1.6.12 - 2019-02-19 http://sachinchoolur.github.io/lightGallery/* Copyright (c) 2019 Sachin N; Licensed GPLv3 */!function(a,b){"function"==typeof define&&define.amd?define(["jquery"],function(a){return b(a)}):"object"==typeof
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 7b 7d 2c 63 2c 64 29 2c 74 68 69 73 2e 73 2e 64 79 6e 61 6d 69 63 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 68 69 73 2e 73 2e 64 79 6e 61 6d 69 63 45 6c 26 26 74 68 69 73 2e 73 2e 64 79 6e 61 6d 69 63 45 6c 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 41 72 72 61 79 26 26 21 74 68 69 73 2e 73 2e 64 79 6e 61 6d 69 63 45 6c 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 22 57 68 65 6e 20 75 73 69 6e 67 20 64 79 6e 61 6d 69 63 20 6d 6f 64 65 2c 20 79 6f 75 20 6d 75 73 74 20 61 6c 73 6f 20 64 65 66 69 6e 65 20 64 79 6e 61 6d 69 63 45 6c 20 61 73 20 61 6e 20 41 72 72 61 79 2e 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 73 3d 7b 7d 2c 74 68 69 73 2e 6c 47 61 6c 6c 65 72 79 4f 6e 3d 21 31 2c 74 68 69 73 2e 6c 67 42 75 73 79 3d 21 31 2c 74 68 69 Data Ascii: {},c,d),this.s.dynamic&&"undefined"!==this.s.dynamicEl&&this.s.dynamicEl.constructor===Array&&!this.s.dynamicEl.length)throw"When using dynamic mode, you must also define dynamicEl as an Array.";return this.modules={},this.lGalleryOn=!1,this.lgBusy=!1,thi
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6f 61 64 3e 62 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 26 26 28 62 2e 73 2e 70 72 65 6c 6f 61 64 3d 62 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 63 2e 69 6e 64 65 78 4f 66 28 22 6c 67 3d 22 2b 74 68 69 73 2e 73 2e 67 61 6c 6c 65 72 79 49 64 29 3e 30 26 26 28 62 2e 69 6e 64 65 78 3d 70 61 72 73 65 49 6e 74 28 63 2e 73 70 6c 69 74 28 22 26 73 6c 69 64 65 3d 22 29 5b 31 5d 2c 31 30 29 2c 61 28 22 62 6f 64 79 22 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 66 72 6f 6d 2d 68 61 73 68 22 29 2c 61 28 22 62 6f 64 79 22 29 2e 68 61 73 43 6c 61 73 73 28 22 6c 67 2d 6f 6e 22 29 7c 7c 28 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 62 75 69 6c 64 28 62 Data Ascii: oad>b.$items.length&&(b.s.preload=b.$items.length);var c=window.location.hash;c.indexOf("lg="+this.s.galleryId)>0&&(b.index=parseInt(c.split("&slide=")[1],10),a("body").addClass("lg-from-hash"),a("body").hasClass("lg-on")\|\|(setTimeout(function(){b.build(b
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 74 65 6d 73 22 29 7d 2c 63 2e 73 2e 68 69 64 65 42 61 72 73 44 65 6c 61 79 29 7d 29 2c 63 2e 24 6f 75 74 65 72 2e 74 72 69 67 67 65 72 28 22 6d 6f 75 73 65 6d 6f 76 65 2e 6c 67 22 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 72 75 63 74 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 2c 63 3d 22 22 2c 64 3d 22 22 2c 65 3d 30 2c 66 3d 22 22 2c 67 3d 74 68 69 73 3b 66 6f 72 28 61 28 22 62 6f 64 79 22 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 67 2d 62 61 63 6b 64 72 6f 70 22 3e 3c 2f 64 69 76 3e 27 29 2c 61 28 22 2e 6c 67 2d 62 61 63 6b 64 72 6f 70 22 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 74 68 69 73 2e 73 2e 62 61 63 6b 64 72 6f 70 44 75 72 61 74 69 6f 6e 2b 22 6d 73 Data Ascii: tems")},c.s.hideBarsDelay)}),c.$outer.trigger("mousemove.lg")},b.prototype.structure=function(){var b,c="",d="",e=0,f="",g=this;for(a("body").append('<div class="lg-backdrop"></div>'),a(".lg-backdrop").css("transition-duration",this.s.backdropDuration+"ms
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 72 61 67 26 26 74 68 69 73 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 3e 31 26 26 74 68 69 73 2e 24 6f 75 74 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 67 72 61 62 22 29 2c 74 68 69 73 2e 73 2e 73 68 6f 77 41 66 74 65 72 4c 6f 61 64 26 26 74 68 69 73 2e 24 6f 75 74 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 73 68 6f 77 2d 61 66 74 65 72 2d 6c 6f 61 64 22 29 2c 74 68 69 73 2e 64 6f 43 73 73 28 29 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 24 6f 75 74 65 72 2e 66 69 6e 64 28 22 2e 6c 67 2d 69 6e 6e 65 72 22 29 3b 68 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 22 2c 74 68 69 73 2e 73 2e 63 73 73 45 61 73 69 6e 67 29 2c 68 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c Data Ascii: rag&&this.$items.length>1&&this.$outer.addClass("lg-grab"),this.s.showAfterLoad&&this.$outer.addClass("lg-show-after-load"),this.doCss()){var h=this.$outer.find(".lg-inner");h.css("transition-timing-function",this.s.cssEasing),h.css("transition-duration",
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 69 6f 2f 6c 69 67 68 74 47 61 6c 6c 65 72 79 2f 64 65 6d 6f 73 2f 68 74 6d 6c 2d 6d 61 72 6b 75 70 2e 68 74 6d 6c 22 29 2c 21 31 29 3b 76 61 72 20 64 3d 61 2e 6d 61 74 63 68 28 2f 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 79 6f 75 74 75 28 3f 3a 5c 2e 62 65 7c 62 65 5c 2e 63 6f 6d 7c 62 65 2d 6e 6f 63 6f 6f 6b 69 65 5c 2e 63 6f 6d 29 5c 2f 28 3f 3a 77 61 74 63 68 5c 3f 76 3d 7c 65 6d 62 65 64 5c 2f 29 3f 28 5b 61 2d 7a 30 2d 39 5c 2d 5c 5f 5c 25 5d 2b 29 2f 69 29 2c 65 3d 61 2e 6d 61 74 63 68 28 2f 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 76 69 6d 65 6f 2e 63 6f 6d 5c 2f 28 5b 30 2d 39 61 2d 7a 5c 2d 5f 5d 2b 29 2f 69 29 2c 66 3d 61 2e 6d 61 74 63 68 28 2f 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 64 61 69 2e 6c 79 5c 2f 28 5b 30 2d 39 61 2d 7a 5c 2d 5f Data Ascii: io/lightGallery/demos/html-markup.html"),!1);var d=a.match(/\/\/(?:www\.)?youtu(?:\.be\|be\.com\|be-nocookie\.com)\/(?:watch\?v=\|embed\/)?([a-z0-9\-\_\%]+)/i),e=a.match(/\/\/(?:www\.)?vimeo.com\/([0-9a-z\-_]+)/i),f=a.match(/\/\/(?:www\.)?dai.ly\/([0-9a-z\-_
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 3d 65 26 26 28 22 22 3d 3d 3d 65 3f 74 68 69 73 2e 24 6f 75 74 65 72 2e 66 69 6e 64 28 74 68 69 73 2e 73 2e 61 70 70 65 6e 64 53 75 62 48 74 6d 6c 54 6f 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 65 6d 70 74 79 2d 68 74 6d 6c 22 29 3a 74 68 69 73 2e 24 6f 75 74 65 72 2e 66 69 6e 64 28 74 68 69 73 2e 73 2e 61 70 70 65 6e 64 53 75 62 48 74 6d 6c 54 6f 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6c 67 2d 65 6d 70 74 79 2d 68 74 6d 6c 22 29 29 2c 74 68 69 73 2e 24 65 6c 2e 74 72 69 67 67 65 72 28 22 6f 6e 41 66 74 65 72 41 70 70 65 6e 64 53 75 62 48 74 6d 6c 2e 6c 67 22 2c 5b 62 5d 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 31 2c 63 3d 31 3b Data Ascii: !==e&&null!==e&&(""===e?this.$outer.find(this.s.appendSubHtmlTo).addClass("lg-empty-html"):this.$outer.find(this.s.appendSubHtmlTo).removeClass("lg-empty-html")),this.$el.trigger("onAfterAppendSubHtml.lg",[b])},b.prototype.preload=function(a){var b=1,c=1;
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 61 74 61 2d 69 66 72 61 6d 65 22 29 26 26 28 6e 3d 21 30 29 3b 76 61 72 20 6f 3d 6b 2e 69 73 56 69 64 65 6f 28 66 2c 62 29 3b 69 66 28 21 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 68 61 73 43 6c 61 73 73 28 22 6c 67 2d 6c 6f 61 64 65 64 22 29 29 7b 69 66 28 6e 29 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 70 72 65 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 67 2d 76 69 64 65 6f 2d 63 6f 6e 74 20 6c 67 2d 68 61 73 2d 69 66 72 61 6d 65 22 20 73 74 79 6c 65 3d 22 6d 61 78 2d 77 69 64 74 68 3a 27 2b 6b 2e 73 2e 69 66 72 61 6d 65 4d 61 78 57 69 64 74 68 2b 27 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 67 2d 76 69 64 65 6f 22 3e 3c 69 66 72 61 6d 65 20 63 6c 61 73 73 3d 22 6c 67 2d 6f 62 6a 65 63 74 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d Data Ascii: ata-iframe")&&(n=!0);var o=k.isVideo(f,b);if(!k.$slide.eq(b).hasClass("lg-loaded")){if(n)k.$slide.eq(b).prepend('<div class="lg-video-cont lg-has-iframe" style="max-width:'+k.s.iframeMaxWidth+'"><div class="lg-video"><iframe class="lg-object" frameborder=
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 63 6f 6d 70 6c 65 74 65 22 29 2c 6b 2e 24 65 6c 2e 74 72 69 67 67 65 72 28 22 6f 6e 53 6c 69 64 65 49 74 65 6d 4c 6f 61 64 2e 6c 67 22 2c 5b 62 2c 64 7c 7c 30 5d 29 7d 2c 63 29 7d 29 2c 6f 26 26 6f 2e 68 74 6d 6c 35 26 26 21 6c 26 26 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 63 6f 6d 70 6c 65 74 65 22 29 2c 21 30 3d 3d 3d 63 26 26 28 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 68 61 73 43 6c 61 73 73 28 22 6c 67 2d 63 6f 6d 70 6c 65 74 65 22 29 3f 6b 2e 70 72 65 6c 6f 61 64 28 62 29 3a 6b 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 66 69 6e 64 28 22 2e 6c 67 2d Data Ascii: ),setTimeout(function(){k.$slide.eq(b).addClass("lg-complete"),k.$el.trigger("onSlideItemLoad.lg",[b,d\|\|0])},c)}),o&&o.html5&&!l&&k.$slide.eq(b).addClass("lg-complete"),!0===c&&(k.$slide.eq(b).hasClass("lg-complete")?k.preload(b):k.$slide.eq(b).find(".lg-
2024-04-25 19:25:27 UTC	1231	IN	Data Raw: 76 2d 73 6c 69 64 65 22 29 2c 67 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 63 75 72 72 65 6e 74 22 29 7d 65 6c 73 65 20 67 2e 24 6f 75 74 65 72 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 6e 6f 2d 74 72 61 6e 73 22 29 2c 74 68 69 73 2e 24 73 6c 69 64 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6c 67 2d 70 72 65 76 2d 73 6c 69 64 65 20 6c 67 2d 6e 65 78 74 2d 73 6c 69 64 65 22 29 2c 22 70 72 65 76 22 3d 3d 3d 65 3f 28 74 68 69 73 2e 24 73 6c 69 64 65 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 70 72 65 76 2d 73 6c 69 64 65 22 29 2c 74 68 69 73 2e 24 73 6c 69 64 65 2e 65 71 28 66 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 67 2d 6e 65 78 74 2d 73 6c 69 64 65 22 29 29 3a 28 74 68 69 73 2e 24 73 6c 69 64 65 2e Data Ascii: v-slide"),g.$slide.eq(b).addClass("lg-current")}else g.$outer.addClass("lg-no-trans"),this.$slide.removeClass("lg-prev-slide lg-next-slide"),"prev"===e?(this.$slide.eq(b).addClass("lg-prev-slide"),this.$slide.eq(f).addClass("lg-next-slide")):(this.$slide.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49818	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	983	OUT	GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:27 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:27 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81628ec5080-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b837e7-2fa6" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 19 Jul 2023 19:22:15 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xS35BkIzybx50a2vxTDTlzNhAPKNJ%2BHrvb6CSKYhkurQRg33rL5FGRLs2SMN9w8L2wx%2BJX2wmcuEJLJnVUdbyVu5paDS0%2FjS%2FFjjHmJ5ewTuo1jRTUlL3SeDBE47m58DiUM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:27 UTC	427	IN	Data Raw: 32 66 61 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 57 61 79 70 6f 69 6e 74 28 6f 70 74 69 6f 6e 73 29 7b 69 66 28 21 6f 70 74 69 6f 6e 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 6f 70 74 69 6f 6e 73 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 6f 70 74 69 6f 6e 73 2e 65 6c 65 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 65 6c 65 6d 65 6e 74 20 6f 70 74 69 6f 6e 20 70 61 73 73 65 64 20 74 6f 20 57 61 79 70 6f 69 6e 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 21 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 72 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 Data Ascii: 2fa6!function(){"use strict";function Waypoint(options){if(!options)throw new Error("No options passed to Waypoint constructor");if(!options.element)throw new Error("No element option passed to Waypoint constructor");if(!options.handler)throw new Error(
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 69 6f 6e 73 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 61 64 61 70 74 65 72 3d 6e 65 77 20 57 61 79 70 6f 69 6e 74 2e 41 64 61 70 74 65 72 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 3d 6f 70 74 69 6f 6e 73 2e 68 61 6e 64 6c 65 72 2c 74 68 69 73 2e 61 78 69 73 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 68 6f 72 69 7a 6f 6e 74 61 6c 3f 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3a 22 76 65 72 74 69 63 61 6c 22 2c 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 6e 61 62 6c 65 64 2c 74 68 69 73 2e 74 72 69 67 67 65 72 50 6f 69 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 67 72 6f 75 70 3d 57 61 79 70 6f 69 6e 74 2e 47 72 6f 75 70 2e 66 69 6e 64 4f 72 43 72 65 61 74 65 28 7b 6e 61 6d 65 3a 74 68 69 73 Data Ascii: ions.element,this.adapter=new Waypoint.Adapter(this.element),this.callback=options.handler,this.axis=this.options.horizontal?"horizontal":"vertical",this.enabled=this.options.enabled,this.triggerPoint=null,this.group=Waypoint.Group.findOrCreate({name:this
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 70 6f 69 6e 74 73 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 3c 65 6e 64 3b 69 2b 2b 29 61 6c 6c 57 61 79 70 6f 69 6e 74 73 41 72 72 61 79 5b 69 5d 5b 6d 65 74 68 6f 64 5d 28 29 7d 2c 57 61 79 70 6f 69 6e 74 2e 64 65 73 74 72 6f 79 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 61 79 70 6f 69 6e 74 2e 69 6e 76 6f 6b 65 41 6c 6c 28 22 64 65 73 74 72 6f 79 22 29 7d 2c 57 61 79 70 6f 69 6e 74 2e 64 69 73 61 62 6c 65 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 61 79 70 6f 69 6e 74 2e 69 6e 76 6f 6b 65 41 6c 6c 28 22 64 69 73 61 62 6c 65 22 29 7d 2c 57 61 79 70 6f 69 6e 74 2e 65 6e 61 62 6c 65 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 61 79 70 6f 69 6e 74 2e 43 6f 6e 74 65 78 74 2e 72 65 66 72 65 73 68 41 6c 6c 28 29 3b 66 6f 72 28 76 61 72 20 77 61 Data Ascii: pointsArray.length;i<end;i++)allWaypointsArray[i][method]()},Waypoint.destroyAll=function(){Waypoint.invokeAll("destroy")},Waypoint.disableAll=function(){Waypoint.invokeAll("disable")},Waypoint.enableAll=function(){Waypoint.Context.refreshAll();for(var wa
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 2c 63 6f 6e 74 65 78 74 73 5b 65 6c 65 6d 65 6e 74 2e 77 61 79 70 6f 69 6e 74 43 6f 6e 74 65 78 74 4b 65 79 5d 3d 74 68 69 73 2c 6b 65 79 43 6f 75 6e 74 65 72 2b 3d 31 2c 57 61 79 70 6f 69 6e 74 2e 77 69 6e 64 6f 77 43 6f 6e 74 65 78 74 7c 7c 28 57 61 79 70 6f 69 6e 74 2e 77 69 6e 64 6f 77 43 6f 6e 74 65 78 74 3d 21 30 2c 57 61 79 70 6f 69 6e 74 2e 77 69 6e 64 6f 77 43 6f 6e 74 65 78 74 3d 6e 65 77 20 43 6f 6e 74 65 78 74 28 77 69 6e 64 6f 77 29 29 2c 74 68 69 73 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 53 63 72 6f 6c 6c 48 61 6e 64 6c 65 72 28 29 2c 74 68 69 73 2e 63 72 65 61 74 65 54 68 72 6f 74 74 6c 65 64 52 65 73 69 7a 65 48 61 6e 64 6c 65 72 28 29 7d 76 61 72 20 6b 65 79 43 6f 75 6e 74 65 72 3d 30 2c 63 6f 6e 74 65 78 74 73 3d 7b 7d 2c 57 61 Data Ascii: ,contexts[element.waypointContextKey]=this,keyCounter+=1,Waypoint.windowContext\|\|(Waypoint.windowContext=!0,Waypoint.windowContext=new Context(window)),this.createThrottledScrollHandler(),this.createThrottledResizeHandler()}var keyCounter=0,contexts={},Wa
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 52 65 73 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 61 79 70 6f 69 6e 74 2e 43 6f 6e 74 65 78 74 2e 72 65 66 72 65 73 68 41 6c 6c 28 29 7d 2c 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 72 69 67 67 65 72 65 64 47 72 6f 75 70 73 3d 7b 7d 2c 61 78 65 73 3d 7b 68 6f 72 69 7a 6f 6e 74 61 6c 3a 7b 6e 65 77 53 63 72 6f 6c 6c 3a 74 68 69 73 2e 61 64 61 70 74 65 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 6f 6c 64 53 63 72 6f 6c 6c 3a 74 68 69 73 2e 6f 6c 64 53 63 72 6f 6c 6c 2e 78 2c 66 6f 72 77 61 72 64 3a 22 72 69 67 68 74 22 2c 62 61 63 6b 77 61 72 64 3a 22 6c 65 66 74 22 7d 2c 76 65 72 74 69 63 61 6c 3a 7b 6e 65 77 53 63 72 6f 6c 6c 3a 74 68 69 73 2e 61 64 Data Ascii: Resize=function(){Waypoint.Context.refreshAll()},Context.prototype.handleScroll=function(){var triggeredGroups={},axes={horizontal:{newScroll:this.adapter.scrollLeft(),oldScroll:this.oldScroll.x,forward:"right",backward:"left"},vertical:{newScroll:this.ad
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 6e 65 72 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 77 69 6e 64 6f 77 3f 57 61 79 70 6f 69 6e 74 2e 76 69 65 77 70 6f 72 74 57 69 64 74 68 28 29 3a 74 68 69 73 2e 61 64 61 70 74 65 72 2e 69 6e 6e 65 72 57 69 64 74 68 28 29 7d 2c 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 6c 6c 57 61 79 70 6f 69 6e 74 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 78 69 73 20 69 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 66 6f 72 28 76 61 72 20 77 61 79 70 6f 69 6e 74 4b 65 79 20 69 6e 20 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 61 78 69 Data Ascii: .prototype.innerWidth=function(){return this.element==this.element.window?Waypoint.viewportWidth():this.adapter.innerWidth()},Context.prototype.destroy=function(){var allWaypoints=[];for(var axis in this.waypoints)for(var waypointKey in this.waypoints[axi
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 2e 77 69 6e 64 6f 77 26 26 28 65 6c 65 6d 65 6e 74 4f 66 66 73 65 74 3d 77 61 79 70 6f 69 6e 74 2e 61 64 61 70 74 65 72 2e 6f 66 66 73 65 74 28 29 5b 61 78 69 73 2e 6f 66 66 73 65 74 50 72 6f 70 5d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 64 6a 75 73 74 6d 65 6e 74 3f 61 64 6a 75 73 74 6d 65 6e 74 3d 61 64 6a 75 73 74 6d 65 6e 74 2e 61 70 70 6c 79 28 77 61 79 70 6f 69 6e 74 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 64 6a 75 73 74 6d 65 6e 74 26 26 28 61 64 6a 75 73 74 6d 65 6e 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 64 6a 75 73 74 6d 65 6e 74 29 2c 77 61 79 70 6f 69 6e 74 2e 6f 70 74 69 6f 6e 73 2e 6f 66 66 73 65 74 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 26 26 28 61 64 6a 75 73 74 6d Data Ascii: lement.window&&(elementOffset=waypoint.adapter.offset()[axis.offsetProp]),"function"==typeof adjustment?adjustment=adjustment.apply(waypoint):"string"==typeof adjustment&&(adjustment=parseFloat(adjustment),waypoint.options.offset.indexOf("%")>-1&&(adjustm
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 66 69 6e 64 42 79 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 63 6f 6e 74 65 78 74 73 5b 65 6c 65 6d 65 6e 74 2e 77 61 79 70 6f 69 6e 74 43 6f 6e 74 65 78 74 4b 65 79 5d 7d 2c 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 6c 64 57 69 6e 64 6f 77 4c 6f 61 64 26 26 6f 6c 64 57 69 6e 64 6f 77 4c 6f 61 64 28 29 2c 43 6f 6e 74 65 78 74 2e 72 65 66 72 65 73 68 41 6c 6c 28 29 7d 2c 57 61 79 70 6f 69 6e 74 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 63 61 6c 6c 62 61 63 6b 29 7b 76 61 72 20 72 65 71 75 65 73 74 46 6e 3d 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 77 69 6e 64 6f 77 Data Ascii: findByElement=function(element){return contexts[element.waypointContextKey]},window.onload=function(){oldWindowLoad&&oldWindowLoad(),Context.refreshAll()},Waypoint.requestAnimationFrame=function(callback){var requestFn=window.requestAnimationFrame\|\|window
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 7d 74 68 69 73 2e 63 6c 65 61 72 54 72 69 67 67 65 72 51 75 65 75 65 73 28 29 7d 2c 47 72 6f 75 70 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 77 61 79 70 6f 69 6e 74 29 7b 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 73 6f 72 74 28 62 79 54 72 69 67 67 65 72 50 6f 69 6e 74 29 3b 76 61 72 20 69 6e 64 65 78 3d 57 61 79 70 6f 69 6e 74 2e 41 64 61 70 74 65 72 2e 69 6e 41 72 72 61 79 28 77 61 79 70 6f 69 6e 74 2c 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 29 2c 69 73 4c 61 73 74 3d 69 6e 64 65 78 3d 3d 3d 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 3b 72 65 74 75 72 6e 20 69 73 4c 61 73 74 3f 6e 75 6c 6c 3a 74 68 69 73 2e 77 61 79 70 6f 69 6e 74 73 5b 69 6e 64 65 78 2b 31 5d 7d 2c 47 72 6f 75 70 2e 70 72 Data Ascii: }this.clearTriggerQueues()},Group.prototype.next=function(waypoint){this.waypoints.sort(byTriggerPoint);var index=Waypoint.Adapter.inArray(waypoint,this.waypoints),isLast=index===this.waypoints.length-1;return isLast?null:this.waypoints[index+1]},Group.pr
2024-04-25 19:25:27 UTC	827	IN	Data Raw: 22 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6d 65 74 68 6f 64 29 7b 4a 51 75 65 72 79 41 64 61 70 74 65 72 5b 6d 65 74 68 6f 64 5d 3d 24 5b 6d 65 74 68 6f 64 5d 7d 29 2c 57 61 79 70 6f 69 6e 74 2e 61 64 61 70 74 65 72 73 2e 70 75 73 68 28 7b 6e 61 6d 65 3a 22 6a 71 75 65 72 79 22 2c 41 64 61 70 74 65 72 3a 4a 51 75 65 72 79 41 64 61 70 74 65 72 7d 29 2c 57 61 79 70 6f 69 6e 74 2e 41 64 61 70 74 65 72 3d 4a 51 75 65 72 79 41 64 61 70 74 65 72 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 45 78 74 65 6e 73 69 6f 6e 28 66 72 61 6d 65 77 6f 72 6b 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 61 79 70 6f 69 6e Data Ascii: "isEmptyObject"],function(i,method){JQueryAdapter[method]=$[method]}),Waypoint.adapters.push({name:"jquery",Adapter:JQueryAdapter}),Waypoint.Adapter=JQueryAdapter}(),function(){"use strict";function createExtension(framework){return function(){var waypoin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49824	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	989	OUT	GET /wp-content/themes/edumall/assets/libs/powertip/js/jquery.powertip.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:27 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:27 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8189fafb0d5-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-2b96" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kaysun35NXJK8kgK3%2B56zjlrmhuthe8CprElPZdeFhdLAjgRiB3iBt03TmHq7m2txsdnKEnC%2BGmpTLlxGbNVC%2BRtqTxTEaPtrj4Qn%2FO201Fl8nWqa%2F4C8o%2BdwY54iqqETcM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:27 UTC	423	IN	Data Raw: 32 62 39 36 0d 0a 2f 2a 21 0a 20 50 6f 77 65 72 54 69 70 20 76 31 2e 33 2e 31 20 28 32 30 31 38 2d 30 34 2d 31 35 29 0a 20 68 74 74 70 73 3a 2f 2f 73 74 65 76 65 6e 62 65 6e 6e 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 6a 71 75 65 72 79 2d 70 6f 77 65 72 74 69 70 2f 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 53 74 65 76 65 6e 20 42 65 6e 6e 65 72 20 28 68 74 74 70 3a 2f 2f 73 74 65 76 65 6e 62 65 6e 6e 65 72 2e 63 6f 6d 2f 29 2e 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 73 74 65 76 65 6e 62 65 6e 6e 65 72 2f 6a 71 75 65 72 79 2d 70 6f 77 65 72 74 69 70 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 2a 2f 0a Data Ascii: 2b96/! PowerTip v1.3.1 (2018-04-15) https://stevenbenner.github.io/jquery-powertip/ Copyright (c) 2018 Steven Benner (http://stevenbenner.com/). Released under MIT license. https://raw.github.com/stevenbenner/jquery-powertip/master/LICENSE.txt/
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 76 3d 68 28 64 6f 63 75 6d 65 6e 74 29 2c 6e 3d 68 28 77 69 6e 64 6f 77 29 2c 65 3d 68 28 22 62 6f 64 79 22 29 2c 6d 3d 22 64 69 73 70 6c 61 79 43 6f 6e 74 72 6f 6c 6c 65 72 22 2c 54 3d 22 68 61 73 41 63 74 69 76 65 48 6f 76 65 72 22 2c 67 3d 22 66 6f 72 63 65 64 4f 70 65 6e 22 2c 69 3d 22 68 61 73 4d 6f 75 73 65 4d 6f 76 65 22 2c 79 3d 22 6d 6f 75 73 65 4f 6e 54 6f 50 6f 70 75 70 22 2c 61 3d 22 6f 72 69 67 69 6e 61 6c 54 69 74 6c 65 22 2c 62 3d 22 70 6f 77 65 72 74 69 70 22 2c 48 3d 22 70 6f 77 65 72 74 69 70 6a 71 22 2c 6b 3d 22 70 6f 77 65 72 74 69 70 74 61 72 67 65 74 22 2c 50 3d 22 2e 70 6f 77 65 72 74 69 70 22 2c 4f 3d 31 38 30 2f 4d 61 74 68 2e 50 49 2c 74 3d 5b 22 63 6c 69 63 6b 22 2c 22 64 62 6c 63 Data Ascii: function(h){var v=h(document),n=h(window),e=h("body"),m="displayController",T="hasActiveHover",g="forcedOpen",i="hasMouseMove",y="mouseOnToPopup",a="originalTitle",b="powertip",H="powertipjq",k="powertiptarget",P=".powertip",O=180/Math.PI,t=["click","dblc
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 49 2e 64 65 6c 61 79 49 6e 50 72 6f 67 72 65 73 73 26 26 49 2e 61 63 74 69 76 65 48 6f 76 65 72 26 26 21 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 69 73 28 6f 29 26 26 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 64 61 74 61 28 6d 29 2e 68 69 64 65 28 21 30 29 7d 74 68 69 73 2e 73 68 6f 77 3d 72 2c 74 68 69 73 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 26 26 28 74 3d 49 2e 63 6c 6f 73 65 44 65 6c 61 79 54 69 6d 65 6f 75 74 3d 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 2c 49 2e 64 65 6c 61 79 49 6e 50 72 6f 67 72 65 73 73 3d 21 31 29 2c 61 28 29 2c 49 2e 74 69 70 4f 70 65 6e 49 6d 6d 69 6e 65 6e 74 3d 21 31 2c 6f 2e 64 61 74 61 28 54 29 26 26 28 6f 2e 64 61 74 61 28 67 2c 21 31 29 2c 65 3f 69 2e Data Ascii: !1}function c(){I.delayInProgress&&I.activeHover&&!I.activeHover.is(o)&&I.activeHover.data(m).hide(!0)}this.show=r,this.hide=function(e){t&&(t=I.closeDelayTimeout=clearTimeout(t),I.delayInProgress=!1),a(),I.tipOpenImminent=!1,o.data(T)&&(o.data(g,!1),e?i.
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 32 2c 6e 3d 69 2e 74 6f 70 2b 72 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 22 3a 6f 3d 69 2e 6c 65 66 74 2c 6e 3d 69 2e 74 6f 70 2b 72 2f 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 77 22 3a 6f 3d 69 2e 6c 65 66 74 2c 6e 3d 69 2e 74 6f 70 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 65 22 3a 6f 3d 69 2e 6c 65 66 74 2b 73 2c 6e 3d 69 2e 74 6f 70 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 77 22 3a 6f 3d 69 2e 6c 65 66 74 2c 6e 3d 69 2e 74 6f 70 2b 72 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 22 3a 6f 3d 69 2e 6c 65 66 74 2b 73 2c 6e 3d 69 2e 74 6f 70 2b 72 7d 72 65 74 75 72 6e 7b 74 6f 70 3a 6e 2c 6c 65 66 74 3a 6f 7d 7d 28 65 2c 61 29 2c 74 29 7b 63 61 73 65 22 6e 22 3a 6c 2e 73 65 74 28 22 6c 65 66 74 22 2c 73 2e 6c 65 66 74 2d 6f 2f 32 29 2c 6c 2e 73 65 74 28 22 62 6f Data Ascii: 2,n=i.top+r;break;case"w":o=i.left,n=i.top+r/2;break;case"nw":o=i.left,n=i.top;break;case"ne":o=i.left+s,n=i.top;break;case"sw":o=i.left,n=i.top+r;break;case"se":o=i.left+s,n=i.top+r}return{top:n,left:o}}(e,a),t){case"n":l.set("left",s.left-o/2),l.set("bo
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6e 67 3d 21 31 2c 49 2e 69 73 46 69 78 65 64 54 69 70 4f 70 65 6e 3d 21 31 2c 75 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 29 2c 65 2e 73 65 74 28 22 74 6f 70 22 2c 49 2e 63 75 72 72 65 6e 74 59 2b 63 2e 6f 66 66 73 65 74 29 2c 65 2e 73 65 74 28 22 6c 65 66 74 22 2c 49 2e 63 75 72 72 65 6e 74 58 2b 63 2e 6f 66 66 73 65 74 29 2c 75 2e 63 73 73 28 65 29 2c 74 2e 74 72 69 67 67 65 72 28 22 70 6f 77 65 72 54 69 70 43 6c 6f 73 65 22 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 76 61 72 20 65 2c 74 2c 6f 2c 6e 3b 21 49 2e 69 73 46 69 78 65 64 54 69 70 4f 70 65 6e 26 26 28 49 2e 69 73 54 69 70 4f 70 65 6e 7c 7c 49 2e 74 69 70 4f 70 65 6e 49 6d 6d 69 6e 65 6e 74 26 26 75 2e 64 61 74 61 28 69 29 29 26 26 28 65 3d 75 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 74 Data Ascii: ng=!1,I.isFixedTipOpen=!1,u.removeClass(),e.set("top",I.currentY+c.offset),e.set("left",I.currentX+c.offset),u.css(e),t.trigger("powerTipClose")})}function f(){var e,t,o,n;!I.isFixedTipOpen&&(I.isTipOpen\|\|I.tipOpenImminent&&u.data(i))&&(e=u.outerWidth(),t
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 74 61 28 54 29 7c 7c 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 69 73 28 22 3a 64 69 73 61 62 6c 65 64 22 29 3f 65 3d 21 30 3a 58 28 49 2e 61 63 74 69 76 65 48 6f 76 65 72 29 7c 7c 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 69 73 28 22 3a 66 6f 63 75 73 22 29 7c 7c 49 2e 61 63 74 69 76 65 48 6f 76 65 72 2e 64 61 74 61 28 67 29 7c 7c 75 2e 64 61 74 61 28 79 29 26 26 58 28 75 29 7c 7c 28 65 3d 21 30 29 2c 65 26 26 70 28 49 2e 61 63 74 69 76 65 48 6f 76 65 72 29 29 7d 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 26 26 28 75 3d 68 28 22 3c 64 69 76 2f 3e 22 2c 7b 69 64 3a 63 2e 70 6f 70 75 70 49 64 7d 29 2c 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 65 3d 68 28 22 62 6f 64 79 22 29 29 2c 65 2e 61 70 70 65 6e 64 28 75 29 2c 49 2e 74 6f 6f 6c 74 69 70 73 3d 49 2e 74 6f Data Ascii: ta(T)\|\|I.activeHover.is(":disabled")?e=!0:X(I.activeHover)\|\|I.activeHover.is(":focus")\|\|I.activeHover.data(g)\|\|u.data(y)&&X(u)\|\|(e=!0),e&&p(I.activeHover))}0===u.length&&(u=h("<div/>",{id:c.popupId}),0===e.length&&(e=h("body")),e.append(u),I.tooltips=I.to
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 63 54 69 6d 65 6f 75 74 7c 7c 28 49 2e 64 65 73 79 6e 63 54 69 6d 65 6f 75 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 64 2c 35 30 30 29 29 2c 6f 2e 74 72 69 67 67 65 72 28 22 70 6f 77 65 72 54 69 70 4f 70 65 6e 22 29 7d 29 29 7d 7d 28 6f 29 2c 65 28 29 7d 29 7d 2c 74 68 69 73 2e 68 69 64 65 54 69 70 3d 70 2c 74 68 69 73 2e 72 65 73 65 74 50 6f 73 69 74 69 6f 6e 3d 77 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 2d 31 3c 68 2e 69 6e 41 72 72 61 79 28 65 2e 74 79 70 65 2c 74 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 70 61 67 65 58 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 49 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 6e 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 2c 49 2e 73 63 72 6f 6c 6c Data Ascii: cTimeout\|\|(I.desyncTimeout=setInterval(d,500)),o.trigger("powerTipOpen")}))}}(o),e()})},this.hideTip=p,this.resetPosition=w}function p(e){return Boolean(e&&-1<h.inArray(e.type,t)&&"number"==typeof e.pageX)}function f(){I.scrollLeft=n.scrollLeft(),I.scroll
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6d 6f 76 65 22 2b 50 2c 43 29 2c 6e 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2b 50 2c 77 29 2c 6e 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2b 50 2c 64 29 29 2c 6f 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 68 28 74 68 69 73 29 2c 74 3d 65 2e 64 61 74 61 28 62 29 2c 6f 3d 65 2e 64 61 74 61 28 48 29 2c 6e 3d 65 2e 64 61 74 61 28 6b 29 2c 69 3d 65 2e 61 74 74 72 28 22 74 69 74 6c 65 22 29 3b 74 7c 7c 6e 7c 7c 6f 7c 7c 21 69 7c 7c 28 65 2e 64 61 74 61 28 62 2c 69 29 2c 65 2e 64 61 74 61 28 61 2c 69 29 2c 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 74 69 74 6c 65 22 29 29 2c 65 2e 64 61 74 61 28 6d 2c 6e 65 77 20 63 28 65 2c 73 2c 72 29 29 7d 29 2c 73 2e 6d 61 6e 75 61 6c 7c 7c 28 68 2e 65 61 63 68 28 73 2e 6f 70 65 6e 45 76 65 6e 74 73 2c 66 75 Data Ascii: move"+P,C),n.on("resize"+P,w),n.on("scroll"+P,d)),o.each(function(){var e=h(this),t=e.data(b),o=e.data(H),n=e.data(k),i=e.attr("title");t\|\|n\|\|o\|\|!i\|\|(e.data(b,i),e.data(a,i),e.removeAttr("title")),e.data(m,new c(e,s,r))}),s.manual\|\|(h.each(s.openEvents,fu
2024-04-25 19:25:27 UTC	1160	IN	Data Raw: 22 2c 22 77 22 5d 2c 22 73 77 2d 61 6c 74 22 3a 5b 22 73 77 2d 61 6c 74 22 2c 22 73 22 2c 22 73 65 2d 61 6c 74 22 2c 22 6e 77 2d 61 6c 74 22 2c 22 6e 22 2c 22 6e 65 2d 61 6c 74 22 2c 22 77 22 2c 22 65 22 5d 2c 22 73 65 2d 61 6c 74 22 3a 5b 22 73 65 2d 61 6c 74 22 2c 22 73 22 2c 22 73 77 2d 61 6c 74 22 2c 22 6e 65 2d 61 6c 74 22 2c 22 6e 22 2c 22 6e 77 2d 61 6c 74 22 2c 22 65 22 2c 22 77 22 5d 7d 2c 68 2e 70 6f 77 65 72 54 69 70 3d 7b 73 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 70 28 74 29 3f 28 43 28 74 29 2c 49 2e 70 72 65 76 69 6f 75 73 58 3d 74 2e 70 61 67 65 58 2c 49 2e 70 72 65 76 69 6f 75 73 59 3d 74 2e 70 61 67 65 59 2c 68 28 65 29 2e 64 61 74 61 28 6d 29 2e 73 68 6f 77 28 29 29 3a 68 28 65 29 2e 66 69 72 73 74 28 Data Ascii: ","w"],"sw-alt":["sw-alt","s","se-alt","nw-alt","n","ne-alt","w","e"],"se-alt":["se-alt","s","sw-alt","ne-alt","n","nw-alt","e","w"]},h.powerTip={show:function(e,t){return p(t)?(C(t),I.previousX=t.pageX,I.previousY=t.pageY,h(e).data(m).show()):h(e).first(
2024-04-25 19:25:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49823	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	996	OUT	GET /wp-content/themes/edumall/assets/libs/smooth-scroll/jquery.smooth-scroll.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:28 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:28 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8189f9d674f-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-ee1" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mMSODw9wR3%2Biyq5NoekcH5sFu1KHQzgrVu%2BHpsODqdU%2B%2B5r5god5zlWwFz7mISVaWeb%2FAkbLV8jRBSE5Q1jQ6FqyhUS6pUubiz6iQU61L6eaiTBm%2FNahE4D8ggOqh5DG1nA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:28 UTC	424	IN	Data Raw: 65 65 31 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 53 6d 6f 6f 74 68 20 53 63 72 6f 6c 6c 20 2d 20 76 32 2e 32 2e 30 20 2d 20 32 30 31 37 2d 30 35 2d 30 35 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 73 77 65 64 62 65 72 67 2f 6a 71 75 65 72 79 2d 73 6d 6f 6f 74 68 2d 73 63 72 6f 6c 6c 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4b 61 72 6c 20 53 77 65 64 62 65 72 67 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 61 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: ee1/! jQuery Smooth Scroll - v2.2.0 - 2017-05-05 * https://github.com/kswedberg/jquery-smooth-scroll * Copyright (c) 2017 Karl Swedberg * Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 63 72 6f 6c 6c 54 61 72 67 65 74 3a 6e 75 6c 6c 2c 61 75 74 6f 46 6f 63 75 73 3a 21 31 2c 62 65 66 6f 72 65 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 66 74 65 72 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 61 73 69 6e 67 3a 22 73 77 69 6e 67 22 2c 73 70 65 65 64 3a 34 30 30 2c 61 75 74 6f 43 6f 65 66 66 69 63 69 65 6e 74 3a 32 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3a 21 30 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 31 2c 65 3d 62 2e 64 69 72 26 26 22 6c 65 66 74 22 3d 3d 3d 62 2e 64 69 72 3f 22 73 63 72 6f 6c 6c 4c 65 66 74 22 3a 22 73 63 72 6f 6c 6c 54 6f 70 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 Data Ascii: crollTarget:null,autoFocus:!1,beforeScroll:function(){},afterScroll:function(){},easing:"swing",speed:400,autoCoefficient:2,preventDefault:!0},d=function(b){var c=[],d=!1,e=b.dir&&"left"===b.dir?"scrollLeft":"scrollTop";return this.each(function(){var b=a
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 68 53 63 72 6f 6c 6c 2e 66 69 6c 74 65 72 50 61 74 68 28 65 2e 70 61 74 68 6e 61 6d 65 29 2c 70 3d 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3d 3d 3d 65 2e 68 6f 73 74 6e 61 6d 65 7c 7c 21 65 2e 68 6f 73 74 6e 61 6d 65 2c 71 3d 67 2e 73 63 72 6f 6c 6c 54 61 72 67 65 74 7c 7c 6f 3d 3d 3d 6e 2c 72 3d 63 28 65 2e 68 61 73 68 29 3b 69 66 28 72 26 26 21 61 28 72 29 2e 6c 65 6e 67 74 68 26 26 28 6c 3d 21 31 29 2c 67 2e 73 63 72 6f 6c 6c 54 61 72 67 65 74 7c 7c 70 26 26 71 26 26 72 29 7b 66 6f 72 28 3b 6c 26 26 6a 3c 68 2e 6c 65 6e 67 74 68 3b 29 66 2e 69 73 28 63 28 68 5b 6a 2b 2b 5d 29 29 26 26 28 6c 3d 21 31 29 3b 66 6f 72 28 3b 6c 26 26 6b 3c 69 2e 6c 65 6e 67 74 68 3b 29 66 2e 63 6c 6f 73 65 73 74 28 69 5b 6b 2b 2b 5d 29 2e 6c 65 6e 67 74 68 26 26 Data Ascii: hScroll.filterPath(e.pathname),p=location.hostname===e.hostname\|\|!e.hostname,q=g.scrollTarget\|\|o===n,r=c(e.hash);if(r&&!a(r).length&&(l=!1),g.scrollTarget\|\|p&&q&&r){for(;l&&j<h.length;)f.is(c(h[j++]))&&(l=!1);for(;l&&k<i.length;)f.closest(i[k++]).length&&
2024-04-25 19:25:28 UTC	654	IN	Data Raw: 6c 6c 45 6c 65 6d 65 6e 74 2c 6b 2e 70 78 7c 7c 2f 5e 28 3f 3a 48 54 4d 4c 7c 42 4f 44 59 29 24 2f 2e 74 65 73 74 28 68 5b 30 5d 2e 6e 6f 64 65 4e 61 6d 65 29 7c 7c 28 6d 3d 68 5b 6f 5d 28 29 29 29 3a 68 3d 61 28 22 68 74 6d 6c 2c 20 62 6f 64 79 22 29 2e 66 69 72 73 74 53 63 72 6f 6c 6c 61 62 6c 65 28 65 2e 64 69 72 65 63 74 69 6f 6e 29 2c 65 2e 62 65 66 6f 72 65 53 63 72 6f 6c 6c 2e 63 61 6c 6c 28 68 2c 65 29 2c 6c 3d 6b 2e 70 78 3f 6b 3a 7b 72 65 6c 61 74 69 76 65 3a 22 22 2c 70 78 3a 61 28 65 2e 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 5b 6e 5d 28 29 26 26 61 28 65 2e 73 63 72 6f 6c 6c 54 61 72 67 65 74 29 5b 6e 5d 28 29 5b 65 2e 64 69 72 65 63 74 69 6f 6e 5d 7c 7c 30 7d 2c 70 5b 6f 5d 3d 6c 2e 72 65 6c 61 74 69 76 65 2b 28 6c 2e 70 78 2b 6d 2b 65 2e 6f Data Ascii: llElement,k.px\|\|/^(?:HTML\|BODY)$/.test(h[0].nodeName)\|\|(m=h[o]())):h=a("html, body").firstScrollable(e.direction),e.beforeScroll.call(h,e),l=k.px?k:{relative:"",px:a(e.scrollTarget)[n]()&&a(e.scrollTarget)[n]()[e.direction]\|\|0},p[o]=l.relative+(l.px+m+e.o
2024-04-25 19:25:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49825	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	951	OUT	GET /wp-includes/js/imagesloaded.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:27 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:27 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8189b9553d0-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5ee558e6-15fd" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Sat, 13 Jun 2020 22:53:26 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zjBrIW%2Bhw9Kg6y4MoJgRX06AbajQI8meR2M2CUZwUtFTrDVNE9wwtn9J6o6Fs17I1rG5bPf5o4yv0CMASNlTzvONx%2BhxhxJodbf6UXCstZoqCyBQzQGAi9T3lBS2vz%2FU1PE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:27 UTC	429	IN	Data Raw: 31 35 66 64 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2a 21 0a 20 2a 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 50 41 43 4b 41 47 45 44 20 76 34 2e 31 2e 34 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 61 6c 6c 20 6c 69 6b 65 20 22 59 6f 75 20 69 6d 61 67 65 73 20 61 72 65 20 64 6f 6e 65 20 79 65 74 20 6f 72 20 77 68 61 74 3f 22 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 65 76 2d 65 6d 69 74 74 65 72 2f 65 76 2d 65 6d 69 74 74 65 72 22 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d Data Ascii: 15fd/! This file is auto-generated //! imagesLoaded PACKAGED v4.1.4 * JavaScript is all like "You images are done yet or what?" * MIT License */!function(e,t){"function"==typeof define&&define.amd?define("ev-emitter/ev-emitter",t):"object"==
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 69 66 28 65 26 26 74 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 7c 7c 7b 7d 2c 6e 3d 69 5b 65 5d 3d 69 5b 65 5d 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 64 65 78 4f 66 28 74 29 3d 3d 2d 31 26 26 6e 2e 70 75 73 68 28 74 29 2c 74 68 69 73 7d 7d 2c 74 2e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 74 29 7b 74 68 69 73 2e 6f 6e 28 65 2c 74 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 6f 6e 63 65 45 76 65 6e 74 73 3d 74 68 69 73 2e 5f 6f 6e 63 65 45 76 65 6e 74 73 7c 7c 7b 7d 2c 6e 3d 69 5b 65 5d 3d 69 5b 65 5d 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 6e 5b 74 5d 3d 21 30 2c 74 68 69 73 7d 7d 2c 74 2e 6f 66 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3d 74 Data Ascii: if(e&&t){var i=this._events=this._events\|\|{},n=i[e]=i[e]\|\|[];return n.indexOf(t)==-1&&n.push(t),this}},t.once=function(e,t){if(e&&t){this.on(e,t);var i=this._onceEvents=this._onceEvents\|\|{},n=i[e]=i[e]\|\|{};return n[t]=!0,this}},t.off=function(e,t){var i=t
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 6e 28 22 61 6c 77 61 79 73 22 2c 72 29 2c 74 68 69 73 2e 67 65 74 49 6d 61 67 65 73 28 29 2c 68 26 26 28 74 68 69 73 2e 6a 71 44 65 66 65 72 72 65 64 3d 6e 65 77 20 68 2e 44 65 66 65 72 72 65 64 29 2c 76 6f 69 64 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 63 68 65 63 6b 2e 62 69 6e 64 28 74 68 69 73 29 29 29 3a 76 6f 69 64 20 61 2e 65 72 72 6f 72 28 22 42 61 64 20 65 6c 65 6d 65 6e 74 20 66 6f 72 20 69 6d 61 67 65 73 4c 6f 61 64 65 64 20 22 2b 28 73 7c 7c 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 74 68 69 73 2e 69 6d 67 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 74 68 69 73 2e 75 72 6c 3d 65 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 69 6d 67 3d 6e 65 77 20 49 6d 61 67 65 7d 76 61 72 20 68 3d 65 2e 6a Data Ascii: n("always",r),this.getImages(),h&&(this.jqDeferred=new h.Deferred),void setTimeout(this.check.bind(this))):void a.error("Bad element for imagesLoaded "+(s\|\|e))}function r(e){this.img=e}function s(e,t){this.url=e,this.element=t,this.img=new Image}var h=e.j
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: 2c 69 2c 6e 29 7d 29 7d 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 67 72 65 73 73 65 64 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 68 61 73 41 6e 79 42 72 6f 6b 65 6e 3d 21 31 2c 74 68 69 73 2e 69 6d 61 67 65 73 2e 6c 65 6e 67 74 68 3f 76 6f 69 64 20 74 68 69 73 2e 69 6d 61 67 65 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 6f 6e 63 65 28 22 70 72 6f 67 72 65 73 73 22 2c 65 29 2c 74 2e 63 68 65 63 6b 28 29 7d 29 3a 76 6f 69 64 20 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 74 68 69 73 2e 70 72 6f 67 72 65 73 73 65 64 43 6f 75 6e 74 2b 2b 2c 74 68 69 73 2e 68 61 73 41 6e 79 42 72 6f Data Ascii: ,i,n)})}var t=this;return this.progressedCount=0,this.hasAnyBroken=!1,this.images.length?void this.images.forEach(function(t){t.once("progress",e),t.check()}):void this.complete()},o.prototype.progress=function(e,t,i){this.progressedCount++,this.hasAnyBro
2024-04-25 19:25:27 UTC	1101	IN	Data Raw: 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 6f 6e 22 2b 65 2e 74 79 70 65 3b 74 68 69 73 5b 74 5d 26 26 74 68 69 73 5b 74 5d 28 65 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 72 6d 28 21 30 2c 22 6f 6e 6c 6f 61 64 22 29 2c 74 68 69 73 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 72 6d 28 21 31 2c 22 6f 6e 65 72 72 6f 72 22 29 2c 74 68 69 73 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 28 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 62 69 6e 64 45 76 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 78 79 49 6d 61 67 65 2e 72 Data Ascii: ion(e){var t="on"+e.type;this[t]&&this[t](e)},r.prototype.onload=function(){this.confirm(!0,"onload"),this.unbindEvents()},r.prototype.onerror=function(){this.confirm(!1,"onerror"),this.unbindEvents()},r.prototype.unbindEvents=function(){this.proxyImage.r
2024-04-25 19:25:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49820	192.0.73.2	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	615	OUT	GET /avatar/00000000000000000000000000000000 HTTP/1.1 Host: www.gravatar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:27 UTC	522	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:27 GMT Content-Type: image/jpeg Content-Length: 2637 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://www.gravatar.com/avatar/00000000000000000000000000000000>; rel="canonical" Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000000000000000000000000000.jpg" Expires: Thu, 25 Apr 2024 19:30:27 GMT Cache-Control: max-age=300 X-nc: HIT atl 2 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2024-04-25 19:25:27 UTC	847	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 50 00 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCPP"
2024-04-25 19:25:27 UTC	1369	IN	Data Raw: f4 64 a4 bc 8f 1f 13 85 af 84 9f b3 af 07 17 e6 1d e8 f4 a2 8a e9 39 42 8a 2b da ff 00 64 5f 85 50 fc 54 f8 c3 63 15 f4 22 6d 1f 49 43 a8 de 23 0c ac 9b 48 11 c6 7d 43 39 5c 8e ea 1a b9 b1 35 e1 85 a3 2a d3 da 2a e7 56 17 0f 3c 5d 78 50 a7 bc 9d 8f 6b fd 9b 7f 62 6d 2b 5b f0 c5 bf 89 3e 21 db dc 4c f7 c8 25 b4 d1 d6 57 84 47 11 e4 3c a5 48 6d cd d4 28 23 03 ae 49 c0 f3 ef da cb f6 75 d0 3e 16 c1 06 bb e1 4f 3a df 4e 69 c5 b5 cd 84 d2 99 44 65 81 2a e8 cd 96 c7 18 20 93 d4 62 bf 41 f5 fd 51 74 9b 07 90 9c 1c 71 5f 9d 1f b5 9f c6 85 f1 96 b5 27 85 34 e2 1e d2 c6 e4 49 79 70 0f 0f 32 82 04 63 d9 72 72 7d 78 ed cf e6 f9 66 61 98 63 f3 15 25 27 cb d5 7d 94 bd 3f a6 7e a9 9b 65 99 6e 5b 95 b8 4a 0b 9b 64 fe d3 97 af e6 b6 b1 f5 7f ec 3a 31 fb 3a e8 7f f5 f3 77 Data Ascii: d9B+d_PTc"mIC#H}C9\5*V<]xPkbm+[>!L%WG<Hm(#Iu>O:NiDe bAQtq_'4Iyp2crr}xfac%'}?~en[Jd:1:w
2024-04-25 19:25:27 UTC	421	IN	Data Raw: 97 57 9e de d9 72 fa 6b f7 5f f5 3e 4f fd 91 ff 00 64 8d 47 4f d6 ac bc 71 e3 8b 26 b2 fb 2b 09 b4 dd 22 e1 71 2f 99 fc 33 4a bf c3 b7 aa a9 e7 38 27 18 e7 eb 7f 19 6b 89 a6 69 ce bb 86 f6 1d 33 52 6b 5e 2c b5 d3 61 6d ae 19 f1 eb 5f 0f 7e d3 bf b4 d2 ea 02 ef c3 5e 1a bb 13 dd 49 98 af 2f e1 6c ac 0b d0 a2 11 d5 cf 42 47 dd fa f4 f9 59 4b 17 9f e2 d6 9a fe 11 5f d7 de 7d 8c 63 82 e1 cc 13 d7 4f c6 4f fa fb 8f 16 fd a0 fc 7e 9f 10 be 26 5e dc 5b cb e6 e9 d6 03 ec 76 ee 0f 0f b4 92 ee 3e ac 4e 0f 70 05 79 c7 e3 48 aa 11 40 03 00 52 d7 eb f8 5c 3c 70 b4 63 46 1b 45 58 fc 43 17 89 9e 32 bc eb d4 de 4e e1 45 14 57 51 c8 21 19 1c d7 af fc 34 fd a9 bc 79 f0 ce de 2b 28 6f d7 5a d2 63 01 52 cb 53 06 4f 2d 7d 11 c1 0c a3 d0 64 81 e9 5e 43 45 73 57 c3 51 c5 47 92 Data Ascii: Wrk_>OdGOq&+"q/3J8'ki3Rk^,am_~^I/lBGYK_}cOO~&^[v>NpyH@R\<pcFEXC2NEWQ!4y+(oZcRSO-}d^CEsWQG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49827	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	978	OUT	GET /wp-content/themes/edumall/assets/libs/swiper/js/swiper.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:28 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:28 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81a0c807ba5-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-2265a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xHw%2Fv1MI3ikyEzLOFmghjEtkRLjPuH9d7lfNmfBxDM1Xi8wBLFROqGEe0fgNY8QiY8dg7dotBZQOC7OOTYbNvfChiDya1qy%2BDs11ajEjHHE51mkRj5PrD%2FM2D4wxBmiPTvQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:28 UTC	428	IN	Data Raw: 36 66 33 35 0d 0a 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 35 2e 34 2e 31 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 30 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4d 61 79 20 32 30 2c 20 32 30 32 30 0a 20 2a 2f Data Ascii: 6f35/** * Swiper 5.4.1 * Most modern mobile touch slider and framework with hardware accelerated transitions * http://swiperjs.com * * Copyright 2014-2020 Vladimir Kharlampidi * * Released under the MIT License * * Released on: May 20, 2020 */
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 69 6e 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 74 28 69 2c 73 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 7b 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 73 26 26 28 73 3d 7b 7d 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 5b 61 5d 3f 69 5b 61 5d 3d 73 5b 61 5d 3a 65 28 73 5b 61 5d 29 26 26 65 28 69 5b 61 5d 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 Data Ascii: on(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(i,s){void 0===i&&(i={}),void 0===s&&(s={}),Object.keys(s).forEach((function(a){void 0===i[a]?i[a]=s[a]:e(s[a])&&e(i[a])&&Object.keys(
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 22 7d 7d 7d 2c 49 6d 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 44 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 63 72 65 65 6e 3a 7b 7d 2c 73 65 74 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6d 61 74 63 68 4d 65 64 69 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 3d 31 29 74 68 69 73 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3d 65 2e 6c 65 6e 67 74 68 2c 74 68 69 73 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 76 61 72 20 73 3d 5b 5d 2c 6e Data Ascii: "}}},Image:function(){},Date:function(){},screen:{},setTimeout:function(){},clearTimeout:function(){},matchMedia:function(){return{}}});var r=function(e){for(var t=0;t<e.length;t+=1)this[t]=e[t];return this.length=e.length,this};function n(e,t){var s=[],n
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 3b 69 2b 3d 31 29 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 5b 73 5d 26 26 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 5b 73 5d 2e 63 6c 61 73 73 4c 69 73 74 26 26 74 68 69 73 5b 73 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 68 61 73 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 5b 30 5d 26 26 74 68 69 73 5b 30 5d 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 65 29 7d 2c 74 6f 67 67 6c 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 20 22 29 2c 69 3d 30 3b 69 3c Data Ascii: length;i+=1)for(var s=0;s<this.length;s+=1)void 0!==this[s]&&void 0!==this[s].classList&&this[s].classList.remove(t[i]);return this},hasClass:function(e){return!!this[0]&&this[0].classList.contains(e)},toggleClass:function(e){for(var t=e.split(" "),i=0;i<
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 74 69 6f 6e 3d 65 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 5b 5d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 74 5b 69 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 76 61 72 20 73 3d 74 5b 30 5d 2c 61 3d 74 5b 31 5d 2c 72 3d 74 5b 32 5d 2c 6f 3d 74 5b 33 5d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 61 72 67 65 74 3b 69 66 28 74 29 7b 76 61 72 20 69 3d 65 2e 74 61 72 67 65 74 2e 64 6f 6d 37 45 76 65 6e 74 44 61 74 61 7c 7c 5b 5d 3b 69 66 28 69 2e 69 6e 64 65 78 4f 66 28 65 29 3c 30 26 26 69 2e 75 6e 73 68 69 66 74 28 65 29 2c 6e 28 74 29 2e 69 73 28 61 29 29 72 2e 61 70 70 6c 79 28 74 2c 69 29 3b 65 6c 73 65 20 66 6f 72 Data Ascii: tion=e}return this},on:function(){for(var e,t=[],i=arguments.length;i--;)t[i]=arguments[i];var s=t[0],a=t[1],r=t[2],o=t[3];function l(e){var t=e.target;if(t){var i=e.target.dom7EventData\|\|[];if(i.indexOf(e)<0&&i.unshift(e),n(t).is(a))r.apply(t,i);else for
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 4c 69 73 74 65 6e 65 72 73 5b 64 5d 29 2c 63 26 26 63 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 75 3d 63 2e 6c 65 6e 67 74 68 2d 31 3b 75 3e 3d 30 3b 75 2d 3d 31 29 7b 76 61 72 20 76 3d 63 5b 75 5d 3b 72 26 26 76 2e 6c 69 73 74 65 6e 65 72 3d 3d 3d 72 7c 7c 72 26 26 76 2e 6c 69 73 74 65 6e 65 72 26 26 76 2e 6c 69 73 74 65 6e 65 72 2e 64 6f 6d 37 70 72 6f 78 79 26 26 76 2e 6c 69 73 74 65 6e 65 72 2e 64 6f 6d 37 70 72 6f 78 79 3d 3d 3d 72 3f 28 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 76 2e 70 72 6f 78 79 4c 69 73 74 65 6e 65 72 2c 6e 29 2c 63 2e 73 70 6c 69 63 65 28 75 2c 31 29 29 3a 72 7c 7c 28 70 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 76 2e 70 72 6f 78 79 4c 69 73 74 65 6e 65 72 2c 6e 29 Data Ascii: Listeners[d]),c&&c.length)for(var u=c.length-1;u>=0;u-=1){var v=c[u];r&&v.listener===r\|\|r&&v.listener&&v.listener.dom7proxy&&v.listener.dom7proxy===r?(p.removeEventListener(d,v.proxyListener,n),c.splice(u,1)):r\|\|(p.removeEventListener(d,v.proxyListener,n)
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 6f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 65 3d 74 68 69 73 5b 30 5d 2c 74 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 73 3d 69 2e 62 6f 64 79 2c 72 3d 65 2e 63 6c 69 65 6e 74 54 6f 70 7c 7c 73 2e 63 6c 69 65 6e 74 54 6f 70 7c 7c 30 2c 6e 3d 65 2e 63 6c 69 65 6e 74 4c 65 66 74 7c 7c 73 2e 63 6c 69 65 6e 74 4c 65 66 74 7c 7c 30 2c 6f 3d 65 3d 3d 3d 61 3f 61 2e 73 63 72 6f 6c 6c 59 3a 65 2e 73 63 72 6f 6c 6c 54 6f 70 2c 6c 3d 65 3d 3d 3d 61 3f 61 2e 73 63 72 6f 6c 6c 58 3a 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 72 65 74 75 Data Ascii: return this[0].offsetHeight}return null},offset:function(){if(this.length>0){var e=this[0],t=e.getBoundingClientRect(),s=i.body,r=e.clientTop\|\|s.clientTop\|\|0,n=e.clientLeft\|\|s.clientLeft\|\|0,o=e===a?a.scrollY:e.scrollTop,l=e===a?a.scrollX:e.scrollLeft;retu
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 20 6f 3d 3d 3d 61 3b 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 7b 66 6f 72 28 74 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 5b 65 5d 3a 65 2c 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 69 66 28 74 5b 73 5d 3d 3d 3d 6f 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 31 7d 2c 69 6e 64 65 78 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 74 68 69 73 5b 30 5d 3b 69 66 28 74 29 7b 66 6f 72 28 65 3d 30 3b 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 3b 29 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 28 65 2b 3d 31 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 Data Ascii: o===a;if(e.nodeType\|\|e instanceof r){for(t=e.nodeType?[e]:e,s=0;s<t.length;s+=1)if(t[s]===o)return!0;return!1}return!1},index:function(){var e,t=this[0];if(t){for(e=0;null!==(t=t.previousSibling);)1===t.nodeType&&(e+=1);return e}},eq:function(e){if(void
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 74 3d 5b 5d 2c 69 3d 74 68 69 73 5b 30 5d 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 6e 65 77 20 72 28 5b 5d 29 3b 66 6f 72 28 3b 69 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 29 7b 76 61 72 20 73 3d 69 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 65 3f 6e 28 73 29 2e 69 73 28 65 29 26 26 74 2e 70 75 73 68 28 73 29 3a 74 2e 70 75 73 68 28 73 29 2c 69 3d 73 7d 72 65 74 75 72 6e 20 6e 65 77 20 72 28 74 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 74 3d 74 68 69 73 5b 30 5d 3b 72 65 74 75 72 6e 20 65 3f 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 26 26 6e 28 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c Data Ascii: t=[],i=this[0];if(!i)return new r([]);for(;i.nextElementSibling;){var s=i.nextElementSibling;e?n(s).is(e)&&t.push(s):t.push(s),i=s}return new r(t)},prev:function(e){if(this.length>0){var t=this[0];return e?t.previousElementSibling&&n(t.previousElementSibl
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 69 3d 30 3b 69 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 2b 3d 31 29 65 2e 63 61 6c 6c 28 74 68 69 73 5b 69 5d 2c 69 2c 74 68 69 73 5b 69 5d 29 26 26 74 2e 70 75 73 68 28 74 68 69 73 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 72 28 74 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 74 68 69 73 5b 65 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 5b 65 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 5b 65 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c Data Ascii: ction(e){for(var t=[],i=0;i<this.length;i+=1)e.call(this[i],i,this[i])&&t.push(this[i]);return new r(t)},remove:function(){for(var e=0;e<this.length;e+=1)this[e].parentNode&&this[e].parentNode.removeChild(this[e]);return this},add:function(){for(var e=[],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49828	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:27 UTC	974	OUT	GET /wp-content/themes/edumall/assets/js/swiper-wrapper.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:28 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:28 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81a1dd1ad5c-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-126b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yxXKjFw9gzGLPVtqzPrtn9qFujHCq4a9Si9Ds5tRbFLm1dLjazuNAHOtWA1u2W9oMx%2BlzQfjAavMJc7wfY0xAD5Qvi8RRZuqDMJY0UkkyZsfpI2%2Bkd6nlog8BhzLRjLdUCw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:28 UTC	431	IN	Data Raw: 31 32 36 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 43 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 43 2e 66 6e 2e 45 64 75 6d 61 6c 6c 53 77 69 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 68 2c 78 3d 43 2e 65 78 74 65 6e 64 28 7b 7d 2c 7b 7d 2c 61 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 65 2c 69 2c 73 2c 6e 2c 74 2c 72 3d 43 28 74 68 69 73 29 2c 64 3d 72 2e 63 68 69 6c 64 72 65 6e 28 22 2e 73 77 69 70 65 72 2d 69 6e 6e 65 72 22 29 2e 66 69 72 73 74 28 29 2c 6c 3d 72 2e 64 61 74 61 28 29 2c 6f 3d 64 2e 63 68 69 6c 64 72 65 6e 28 22 2e 73 77 69 70 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 66 69 72 73 74 28 29 2c 70 3d 6c 2e 6c 67 49 74 65 6d 73 7c 7c 31 2c 63 3d 6c 2e 6d 64 Data Ascii: 126b!function(C){"use strict";C.fn.EdumallSwiper=function(a){var h,x=C.extend({},{},a);return this.each(function(){var a,e,i,s,n,t,r=C(this),d=r.children(".swiper-inner").first(),l=r.data(),o=d.children(".swiper-container").first(),p=l.lgItems\|\|1,c=l.md
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 2c 53 3d 22 61 75 74 6f 22 21 3d 3d 28 75 3d 22 61 75 74 6f 2d 66 69 78 65 64 22 3d 3d 3d 75 3f 22 61 75 74 6f 22 3a 75 29 3f 75 3a 31 2c 6d 3d 43 2e 65 78 74 65 6e 64 28 7b 7d 2c 7b 69 6e 69 74 3a 21 31 2c 77 61 74 63 68 53 6c 69 64 65 73 56 69 73 69 62 69 6c 69 74 79 3a 21 30 2c 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 75 2c 73 70 61 63 65 42 65 74 77 65 65 6e 3a 66 2c 73 6c 69 64 65 73 50 65 72 47 72 6f 75 70 3a 53 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 37 36 37 3a 7b 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 63 2c 73 70 61 63 65 42 65 74 77 65 65 6e 3a 77 2c 73 6c 69 64 65 73 50 65 72 47 72 6f 75 70 3a 62 7d 2c 31 30 32 34 3a 7b 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 70 2c 73 70 61 63 65 42 65 74 77 65 65 6e 3a 76 2c 73 6c 69 64 65 73 50 65 72 Data Ascii: ,S="auto"!==(u="auto-fixed"===u?"auto":u)?u:1,m=C.extend({},{init:!1,watchSlidesVisibility:!0,slidesPerView:u,spaceBetween:f,slidesPerGroup:S,breakpoints:{767:{slidesPerView:c,spaceBetween:w,slidesPerGroup:b},1024:{slidesPerView:p,spaceBetween:v,slidesPer
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 73 6c 69 64 65 72 2d 6e 65 78 74 2d 62 74 6e 22 29 29 3a 28 28 65 3d 43 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 69 70 65 72 2d 6e 61 76 2d 62 75 74 74 6f 6e 73 22 3e 3c 2f 64 69 76 3e 27 29 29 2e 61 70 70 65 6e 64 28 6e 29 2e 61 70 70 65 6e 64 28 73 29 2c 69 3d 43 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 77 69 70 65 72 2d 6e 61 76 2d 62 75 74 74 6f 6e 73 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 2c 22 67 72 69 64 22 3d 3d 6c 2e 6e 61 76 41 6c 69 67 6e 65 64 42 79 3f 28 69 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 73 6d 2d 31 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 Data Ascii: slider-next-btn")):((e=C('<div class="swiper-nav-buttons"></div>')).append(n).append(s),i=C('<div class="swiper-nav-buttons-wrap"></div>'),"grid"==l.navAlignedBy?(i.append('<div class="container"><div class="row"><div class="col-sm-12"></div></div></div>'
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 30 33 22 29 3f 6d 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 72 65 6e 64 65 72 43 75 73 74 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 69 29 7b 65 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 69 3d 69 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 72 61 63 74 69 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 75 72 72 65 6e 74 22 3e 27 2b 28 65 3d 65 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 29 2b 27 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 70 61 72 61 74 6f 72 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 6f 74 61 6c 22 3e 27 2b 28 69 3d 69 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 29 2b 22 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 22 7d 3a 72 2e 68 Data Ascii: 03")?m.pagination.renderCustom=function(a,e,i){e=e.toString(),i=i.toString();return'<div class="fraction"><span class="current">'+(e=e.padStart(2,"0"))+'</span><span class="separator"></span><span class="total">'+(i=i.padStart(2,"0"))+"</span></div>"}:r.h
2024-04-25 19:25:28 UTC	185	IN	Data Raw: 2d 61 6c 74 2d 61 72 72 6f 77 2d 62 75 74 74 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 77 69 74 63 68 28 43 28 74 68 69 73 29 2e 64 61 74 61 28 22 61 63 74 69 6f 6e 22 29 29 7b 63 61 73 65 22 70 72 65 76 22 3a 68 2e 73 6c 69 64 65 50 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6e 65 78 74 22 3a 68 2e 73 6c 69 64 65 4e 65 78 74 28 29 7d 7d 29 2c 43 28 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 22 45 64 75 6d 61 6c 6c 53 77 69 70 65 72 49 6e 69 74 22 2c 5b 68 2c 72 2c 6d 5d 29 7d 29 2c 68 7d 7d 28 6a 51 75 65 72 79 29 3b 0d 0a Data Ascii: -alt-arrow-button",function(){switch(C(this).data("action")){case"prev":h.slidePrev();break;case"next":h.slideNext()}}),C(document).trigger("EdumallSwiperInit",[h,r,m])}),h}}(jQuery);
2024-04-25 19:25:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49831	192.0.73.2	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	379	OUT	GET /avatar/00000000000000000000000000000000 HTTP/1.1 Host: www.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:28 UTC	522	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:28 GMT Content-Type: image/jpeg Content-Length: 2637 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://www.gravatar.com/avatar/00000000000000000000000000000000>; rel="canonical" Access-Control-Allow-Origin: * Content-Disposition: inline; filename="00000000000000000000000000000000.jpg" Expires: Thu, 25 Apr 2024 19:30:28 GMT Cache-Control: max-age=300 X-nc: HIT atl 1 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2024-04-25 19:25:28 UTC	847	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 50 00 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CCPP"
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: f4 64 a4 bc 8f 1f 13 85 af 84 9f b3 af 07 17 e6 1d e8 f4 a2 8a e9 39 42 8a 2b da ff 00 64 5f 85 50 fc 54 f8 c3 63 15 f4 22 6d 1f 49 43 a8 de 23 0c ac 9b 48 11 c6 7d 43 39 5c 8e ea 1a b9 b1 35 e1 85 a3 2a d3 da 2a e7 56 17 0f 3c 5d 78 50 a7 bc 9d 8f 6b fd 9b 7f 62 6d 2b 5b f0 c5 bf 89 3e 21 db dc 4c f7 c8 25 b4 d1 d6 57 84 47 11 e4 3c a5 48 6d cd d4 28 23 03 ae 49 c0 f3 ef da cb f6 75 d0 3e 16 c1 06 bb e1 4f 3a df 4e 69 c5 b5 cd 84 d2 99 44 65 81 2a e8 cd 96 c7 18 20 93 d4 62 bf 41 f5 fd 51 74 9b 07 90 9c 1c 71 5f 9d 1f b5 9f c6 85 f1 96 b5 27 85 34 e2 1e d2 c6 e4 49 79 70 0f 0f 32 82 04 63 d9 72 72 7d 78 ed cf e6 f9 66 61 98 63 f3 15 25 27 cb d5 7d 94 bd 3f a6 7e a9 9b 65 99 6e 5b 95 b8 4a 0b 9b 64 fe d3 97 af e6 b6 b1 f5 7f ec 3a 31 fb 3a e8 7f f5 f3 77 Data Ascii: d9B+d_PTc"mIC#H}C9\5*V<]xPkbm+[>!L%WG<Hm(#Iu>O:NiDe bAQtq_'4Iyp2crr}xfac%'}?~en[Jd:1:w
2024-04-25 19:25:28 UTC	421	IN	Data Raw: 97 57 9e de d9 72 fa 6b f7 5f f5 3e 4f fd 91 ff 00 64 8d 47 4f d6 ac bc 71 e3 8b 26 b2 fb 2b 09 b4 dd 22 e1 71 2f 99 fc 33 4a bf c3 b7 aa a9 e7 38 27 18 e7 eb 7f 19 6b 89 a6 69 ce bb 86 f6 1d 33 52 6b 5e 2c b5 d3 61 6d ae 19 f1 eb 5f 0f 7e d3 bf b4 d2 ea 02 ef c3 5e 1a bb 13 dd 49 98 af 2f e1 6c ac 0b d0 a2 11 d5 cf 42 47 dd fa f4 f9 59 4b 17 9f e2 d6 9a fe 11 5f d7 de 7d 8c 63 82 e1 cc 13 d7 4f c6 4f fa fb 8f 16 fd a0 fc 7e 9f 10 be 26 5e dc 5b cb e6 e9 d6 03 ec 76 ee 0f 0f b4 92 ee 3e ac 4e 0f 70 05 79 c7 e3 48 aa 11 40 03 00 52 d7 eb f8 5c 3c 70 b4 63 46 1b 45 58 fc 43 17 89 9e 32 bc eb d4 de 4e e1 45 14 57 51 c8 21 19 1c d7 af fc 34 fd a9 bc 79 f0 ce de 2b 28 6f d7 5a d2 63 01 52 cb 53 06 4f 2d 7d 11 c1 0c a3 d0 64 81 e9 5e 43 45 73 57 c3 51 c5 47 92 Data Ascii: Wrk_>OdGOq&+"q/3J8'ki3Rk^,am_~^I/lBGYK_}cOO~&^[v>NpyH@R\<pcFEXC2NEWQ!4y+(oZcRSO-}d^CEsWQG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49832	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	992	OUT	GET /wp-content/themes/edumall/assets/libs/matchHeight/jquery.matchHeight-min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:28 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:28 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81bfb6c6750-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-d1b" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bpwL3BfQkHOQ17HH%2BFgn%2F%2BBl1bp4hdimiPTaXFsvT9pMWF9Uz3WO6Vep6yfBcJK2tanItGvhs2RTdBny2UpcKXIFfSv3CPTwMhffX5W5zmFyb9MPEt8t7LVQzz3NEYmlpq8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:28 UTC	430	IN	Data Raw: 64 31 62 0d 0a 2f 2a 0a 2a 20 6a 71 75 65 72 79 2d 6d 61 74 63 68 2d 68 65 69 67 68 74 20 30 2e 37 2e 30 20 62 79 20 40 6c 69 61 62 72 75 0a 2a 20 68 74 74 70 3a 2f 2f 62 72 6d 2e 69 6f 2f 6a 71 75 65 72 79 2d 6d 61 74 63 68 2d 68 65 69 67 68 74 2f 0a 2a 20 4c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 72 65 71 75 69 72 65 28 22 Data Ascii: d1b/** jquery-match-height 0.7.0 by @liabru* http://brm.io/jquery-match-height/* License MIT*/!function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],t):"undefined"!=typeof module&&module.exports?module.exports=t(require("
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 74 28 29 2e 74 6f 70 2d 69 28 65 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 2c 73 3d 72 2e 6c 65 6e 67 74 68 3e 30 3f 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 3a 6e 75 6c 6c 3b 6e 75 6c 6c 3d 3d 3d 73 3f 72 2e 70 75 73 68 28 65 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 6e 2d 61 29 29 3c 3d 6f 3f 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 3d 73 2e 61 64 64 28 65 29 3a 72 2e 70 75 73 68 28 65 29 2c 6e 3d 61 7d 29 2c 72 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 7b 0a 62 79 52 6f 77 3a 21 30 2c 70 72 6f 70 65 72 74 79 3a 22 68 65 69 67 68 74 22 2c 74 61 72 67 65 74 3a 6e 75 6c 6c 2c 72 65 6d 6f 76 65 3a 21 31 7d 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 74 2e 65 78 74 Data Ascii: t().top-i(e.css("margin-top")),s=r.length>0?r[r.length-1]:null;null===s?r.push(e):Math.floor(Math.abs(n-a))<=o?r[r.length-1]=s.add(e):r.push(e),n=a}),r},n=function(e){var o={byRow:!0,property:"height",target:null,remove:!1};return"object"==typeof e?t.ext
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 29 3b 65 2e 61 74 74 72 28 22 73 74 79 6c 65 22 2c 65 2e 64 61 74 61 28 22 73 74 79 6c 65 2d 63 61 63 68 65 22 29 7c 7c 22 22 29 7d 29 29 2c 74 2e 65 61 63 68 28 6c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 61 3d 74 28 6f 29 2c 6e 3d 30 3b 69 66 28 73 2e 74 61 72 67 65 74 29 6e 3d 73 2e 74 61 72 67 65 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 21 31 29 3b 65 6c 73 65 7b 69 66 28 73 2e 62 79 52 6f 77 26 26 61 2e 6c 65 6e 67 74 68 3c 3d 31 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 2e 63 73 73 28 73 2e 70 72 6f 70 65 72 74 79 2c 22 22 29 3b 61 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 2c 6f 3d 65 2e 61 74 74 72 28 22 73 74 79 6c 65 22 29 2c 69 3d 65 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b Data Ascii: );e.attr("style",e.data("style-cache")\|\|"")})),t.each(l,function(e,o){var a=t(o),n=0;if(s.target)n=s.target.outerHeight(!1);else{if(s.byRow&&a.length<=1)return void a.css(s.property,"");a.each(function(){var e=t(this),o=e.attr("style"),i=e.css("display");
2024-04-25 19:25:28 UTC	194	IN	Data Raw: 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 61 29 2c 6f 3d 2d 31 7d 2c 72 2e 5f 74 68 72 6f 74 74 6c 65 29 29 3a 73 28 61 29 7d 2c 74 28 72 2e 5f 61 70 70 6c 79 44 61 74 61 41 70 69 29 2c 74 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 5f 75 70 64 61 74 65 28 21 31 2c 74 29 7d 29 2c 74 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 20 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 2e 5f 75 70 64 61 74 65 28 21 30 2c 74 29 7d 29 7d 29 3b 0a 0d 0a Data Ascii: Timeout(function(){s(a),o=-1},r._throttle)):s(a)},t(r._applyDataApi),t(window).on("load",function(t){r._update(!1,t)}),t(window).on("resize orientationchange",function(t){r._update(!0,t)})});
2024-04-25 19:25:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49834	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	981	OUT	GET /wp-content/themes/edumall/assets/libs/isotope/js/isotope.pkgd.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:28 UTC	943	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:28 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81cafdd78c6-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-15ecb" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=10V0Uum5cF62sIl5GpD1Mlt6JJXEvm820k%2Bc5jTSZcjC5ePXSbvewnk5%2BanVLq4n8REy2OXJbBNTM21fvH9e%2FVm30JH05VEkjLc9nAf7fRNy988CZSf24PqcWZ%2FussdnKX8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:28 UTC	426	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 2a 20 49 73 6f 74 6f 70 65 20 50 41 43 4b 41 47 45 44 20 76 33 2e 30 2e 36 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 66 6f 72 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 75 73 65 0a 20 2a 20 6f 72 20 49 73 6f 74 6f 70 65 20 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 69 73 6f 74 6f 70 65 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2d 32 30 31 38 20 4d 65 74 61 66 69 7a 7a 79 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 42 72 69 64 67 65 74 20 6d 61 6b 65 73 20 6a 51 75 65 72 79 20 77 69 64 67 65 74 73 0a 20 2a 20 76 32 2e 30 2e 31 0a 20 2a 20 4d 49 54 Data Ascii: 7c00/! Isotope PACKAGED v3.0.6 * * Licensed GPLv3 for open source use * or Isotope Commercial License for commercial use * * https://isotope.metafizzy.co * Copyright 2010-2018 Metafizzy //* * Bridget makes jQuery widgets * v2.0.1 * MIT
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 2a 2f 20 2f 2a 20 67 6c 6f 62 61 6c 73 20 64 65 66 69 6e 65 2c 20 6d 6f 64 75 6c 65 2c 20 72 65 71 75 69 72 65 20 2a 2f 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 20 29 20 7b 0a 09 09 2f 2f 20 41 4d 44 0a 09 09 64 65 66 69 6e 65 28 20 27 6a 71 75 65 72 79 2d 62 72 69 64 67 65 74 2f 6a 71 75 65 72 79 2d 62 72 69 64 67 65 74 27 2c 5b 20 27 6a 71 75 65 72 79 27 20 5d 2c 20 66 75 6e 63 74 69 6f 6e 28 20 6a 51 75 65 72 79 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 63 74 6f 72 79 28 20 77 69 6e 64 6f 77 2c 20 6a 51 75 65 72 79 20 29 3b 0a 09 09 7d 29 3b 0a 09 7d 20 65 6c 73 65 20 69 66 20 28 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 3d 3d 20 27 6f 62 Data Ascii: / / globals define, module, require */if ( typeof define == 'function' && define.amd ) {// AMDdefine( 'jquery-bridget/jquery-bridget',[ 'jquery' ], function( jQuery ) {return factory( window, jQuery );});} else if ( typeof module == 'ob
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 2a 2f 20 29 20 7b 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 61 72 67 30 20 3d 3d 20 27 73 74 72 69 6e 67 27 20 29 20 7b 0a 09 09 09 09 2f 2f 20 6d 65 74 68 6f 64 20 63 61 6c 6c 20 24 28 29 2e 70 6c 75 67 69 6e 28 20 27 6d 65 74 68 6f 64 4e 61 6d 65 27 2c 20 7b 20 6f 70 74 69 6f 6e 73 20 7d 20 29 0a 09 09 09 09 2f 2f 20 73 68 69 66 74 20 61 72 67 75 6d 65 6e 74 73 20 62 79 20 31 0a 09 09 09 09 76 61 72 20 61 72 67 73 20 3d 20 61 72 72 61 79 53 6c 69 63 65 2e 63 61 6c 6c 28 20 61 72 67 75 6d 65 6e 74 73 2c 20 31 20 29 3b 0a 09 09 09 09 72 65 74 75 72 6e 20 6d 65 74 68 6f 64 43 61 6c 6c 28 20 74 68 69 73 2c 20 61 72 67 30 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 09 2f 2f 20 6a 75 73 74 20 24 28 29 2e 70 6c 75 67 69 6e 28 7b 20 6f 70 74 69 6f Data Ascii: */ ) {if ( typeof arg0 == 'string' ) {// method call $().plugin( 'methodName', { options } )// shift arguments by 1var args = arraySlice.call( arguments, 1 );return methodCall( this, arg0, args );}// just $().plugin({ optio
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 20 6f 70 74 69 6f 6e 73 20 26 20 69 6e 69 74 0a 09 09 09 09 09 69 6e 73 74 61 6e 63 65 2e 6f 70 74 69 6f 6e 28 20 6f 70 74 69 6f 6e 73 20 29 3b 0a 09 09 09 09 09 69 6e 73 74 61 6e 63 65 2e 5f 69 6e 69 74 28 29 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 2f 2f 20 69 6e 69 74 69 61 6c 69 7a 65 20 6e 65 77 20 69 6e 73 74 61 6e 63 65 0a 09 09 09 09 09 69 6e 73 74 61 6e 63 65 20 3d 20 6e 65 77 20 50 6c 75 67 69 6e 43 6c 61 73 73 28 20 65 6c 65 6d 2c 20 6f 70 74 69 6f 6e 73 20 29 3b 0a 09 09 09 09 09 24 2e 64 61 74 61 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 73 70 61 63 65 2c 20 69 6e 73 74 61 6e 63 65 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 29 3b 0a 09 09 7d 0a 0a 09 09 75 70 64 61 74 65 4a 51 75 65 72 79 28 20 24 20 29 3b 0a 0a 09 7d 0a 0a 2f 2f Data Ascii: options & initinstance.option( options );instance._init();} else {// initialize new instanceinstance = new PluginClass( elem, options );$.data( elem, namespace, instance );}});}updateJQuery( $ );}//
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 74 73 20 3d 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 20 7c 7c 20 7b 7d 3b 0a 09 09 2f 2f 20 73 65 74 20 6c 69 73 74 65 6e 65 72 73 20 61 72 72 61 79 0a 09 09 76 61 72 20 6c 69 73 74 65 6e 65 72 73 20 3d 20 65 76 65 6e 74 73 5b 20 65 76 65 6e 74 4e 61 6d 65 20 5d 20 3d 20 65 76 65 6e 74 73 5b 20 65 76 65 6e 74 4e 61 6d 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 2f 2f 20 6f 6e 6c 79 20 61 64 64 20 6f 6e 63 65 0a 09 09 69 66 20 28 20 6c 69 73 74 65 6e 65 72 73 2e 69 6e 64 65 78 4f 66 28 20 6c 69 73 74 65 6e 65 72 20 29 20 3d 3d 20 2d 31 20 29 20 7b 0a 09 09 09 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 20 6c 69 73 74 65 6e 65 72 20 29 3b 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 7d 3b 0a 0a 09 70 72 6f 74 6f 2e 6f 6e 63 65 20 3d 20 66 75 Data Ascii: ts = this._events \|\| {};// set listeners arrayvar listeners = events[ eventName ] = events[ eventName ] \|\| [];// only add onceif ( listeners.indexOf( listener ) == -1 ) {listeners.push( listener );}return this;};proto.once = fu
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 76 61 72 20 6c 69 73 74 65 6e 65 72 20 3d 20 6c 69 73 74 65 6e 65 72 73 5b 69 5d 0a 09 09 09 76 61 72 20 69 73 4f 6e 63 65 20 3d 20 6f 6e 63 65 4c 69 73 74 65 6e 65 72 73 20 26 26 20 6f 6e 63 65 4c 69 73 74 65 6e 65 72 73 5b 20 6c 69 73 74 65 6e 65 72 20 5d 3b 0a 09 09 09 69 66 20 28 20 69 73 4f 6e 63 65 20 29 20 7b 0a 09 09 09 09 2f 2f 20 72 65 6d 6f 76 65 20 6c 69 73 74 65 6e 65 72 0a 09 09 09 09 2f 2f 20 72 65 6d 6f 76 65 20 62 65 66 6f 72 65 20 74 72 69 67 67 65 72 20 74 6f 20 70 72 65 76 65 6e 74 20 72 65 63 75 72 73 69 6f 6e 0a 09 09 09 09 74 68 69 73 2e 6f 66 66 28 20 65 76 65 6e 74 4e 61 6d 65 2c 20 6c 69 73 74 65 6e 65 72 20 29 3b 0a 09 09 09 09 2f 2f 20 75 6e 73 65 74 20 6f 6e 63 65 20 66 6c 61 Data Ascii: ngth; i++ ) {var listener = listeners[i]var isOnce = onceListeners && onceListeners[ listener ];if ( isOnce ) {// remove listener// remove before trigger to prevent recursionthis.off( eventName, listener );// unset once fla
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 6c 69 64 20 26 26 20 6e 75 6d 3b 0a 09 7d 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 6e 6f 6f 70 28 29 20 7b 7d 0a 0a 09 76 61 72 20 6c 6f 67 45 72 72 6f 72 20 3d 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3f 20 6e 6f 6f 70 20 3a 0a 09 09 66 75 6e 63 74 69 6f 6e 28 20 6d 65 73 73 61 67 65 20 29 20 7b 0a 09 09 09 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 20 6d 65 73 73 61 67 65 20 29 3b 0a 09 09 7d 3b 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 6d 65 61 73 75 72 65 6d 65 6e 74 73 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2f 2f 0a 0a 09 76 61 72 20 6d 65 61 73 75 72 65 6d 65 6e 74 73 20 3d 20 5b 0a 09 09 27 70 61 64 64 69 Data Ascii: lid && num;}function noop() {}var logError = typeof console == 'undefined' ? noop :function( message ) {console.error( message );};// -------------------------- measurements -------------------------- //var measurements = ['paddi
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 61 72 20 69 73 42 6f 78 53 69 7a 65 4f 75 74 65 72 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 73 65 74 75 70 0a 09 20 2a 20 63 68 65 63 6b 20 69 73 42 6f 78 53 69 7a 65 72 4f 75 74 65 72 0a 09 20 2a 20 64 6f 20 6f 6e 20 66 69 72 73 74 20 67 65 74 53 69 7a 65 28 29 20 72 61 74 68 65 72 20 74 68 61 6e 20 6f 6e 20 70 61 67 65 20 6c 6f 61 64 20 66 6f 72 20 46 69 72 65 66 6f 78 20 62 75 67 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 73 65 74 75 70 28 29 20 7b 0a 09 09 2f 2f 20 73 65 74 75 70 20 6f 6e 63 65 0a 09 09 69 66 20 28 20 69 73 53 65 74 75 70 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 09 09 69 73 53 65 74 75 70 20 3d 20 74 72 75 65 3b 0a 0a 09 09 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 62 Data Ascii: ar isBoxSizeOuter;/** * setup * check isBoxSizerOuter * do on first getSize() rather than on page load for Firefox bug */function setup() {// setup onceif ( isSetup ) {return;}isSetup = true;// -------------------------- b
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 64 64 65 6e 2c 20 65 76 65 72 79 74 68 69 6e 67 20 69 73 20 30 0a 09 09 69 66 20 28 20 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 20 27 6e 6f 6e 65 27 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 67 65 74 5a 65 72 6f 53 69 7a 65 28 29 3b 0a 09 09 7d 0a 0a 09 09 76 61 72 20 73 69 7a 65 20 3d 20 7b 7d 3b 0a 09 09 73 69 7a 65 2e 77 69 64 74 68 20 3d 20 65 6c 65 6d 2e 6f 66 66 73 65 74 57 69 64 74 68 3b 0a 09 09 73 69 7a 65 2e 68 65 69 67 68 74 20 3d 20 65 6c 65 6d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 0a 0a 09 09 76 61 72 20 69 73 42 6f 72 64 65 72 42 6f 78 20 3d 20 73 69 7a 65 2e 69 73 42 6f 72 64 65 72 42 6f 78 20 3d 20 73 74 79 6c 65 2e 62 6f 78 53 69 7a 69 6e 67 20 3d 3d 20 27 62 6f 72 64 65 72 2d 62 6f 78 27 3b 0a 0a 09 09 2f 2f 20 67 65 74 20 Data Ascii: dden, everything is 0if ( style.display == 'none' ) {return getZeroSize();}var size = {};size.width = elem.offsetWidth;size.height = elem.offsetHeight;var isBorderBox = size.isBorderBox = style.boxSizing == 'border-box';// get
2024-04-25 19:25:28 UTC	1369	IN	Data Raw: 2e 68 65 69 67 68 74 20 3d 20 73 74 79 6c 65 48 65 69 67 68 74 20 2b 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 61 64 64 20 70 61 64 64 69 6e 67 20 61 6e 64 20 62 6f 72 64 65 72 20 75 6e 6c 65 73 73 20 69 74 27 73 20 61 6c 72 65 61 64 79 20 69 6e 63 6c 75 64 69 6e 67 20 69 74 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 20 69 73 42 6f 72 64 65 72 42 6f 78 53 69 7a 65 4f 75 74 65 72 20 3f 20 30 20 3a 20 70 61 64 64 69 6e 67 48 65 69 67 68 74 20 2b 20 62 6f 72 64 65 72 48 65 69 67 68 74 20 29 3b 0a 09 09 7d 0a 0a 09 09 73 69 7a 65 2e 69 6e 6e 65 72 57 69 64 74 68 20 3d 20 73 69 7a 65 2e 77 69 64 74 68 20 2d 20 28 20 70 61 64 64 69 6e 67 57 69 64 74 68 20 2b 20 62 6f 72 64 65 72 57 69 64 74 68 20 29 3b 0a 09 09 73 69 7a 65 2e Data Ascii: .height = styleHeight + // add padding and border unless it's already including it ( isBorderBoxSizeOuter ? 0 : paddingHeight + borderHeight );}size.innerWidth = size.width - ( paddingWidth + borderWidth );size.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49835	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	988	OUT	GET /wp-content/themes/edumall/assets/libs/packery-mode/packery-mode.pkgd.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:29 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:29 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81e4883182f-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-7ad0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K7FQVxMUeeyMIwGq%2BaocMwQuKEF8uYqZIQobRGjwB%2FHTeTRRUdNxsiy%2BNcOaNv8mQSHD8gYKYcexvhfQvN5aZgEhAPCFvveQimAZxztB5SxHQXMI1hxwF7By%2B7FaB39H2N0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:29 UTC	427	IN	Data Raw: 37 61 64 30 0d 0a 2f 2a 21 0a 20 2a 20 50 61 63 6b 65 72 79 20 6c 61 79 6f 75 74 20 6d 6f 64 65 20 50 41 43 4b 41 47 45 44 20 76 32 2e 30 2e 31 0a 20 2a 20 73 75 62 2d 63 6c 61 73 73 65 73 20 50 61 63 6b 65 72 79 0a 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 63 74 0a 20 2a 20 6c 6f 77 2d 6c 65 76 65 6c 20 75 74 69 6c 69 74 79 20 63 6c 61 73 73 20 66 6f 72 20 62 61 73 69 63 20 67 65 6f 6d 65 74 72 79 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 20 20 2f 2f 20 75 6e 69 76 65 72 73 61 6c 20 6d 6f 64 75 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 0a 20 20 2f 2a 20 6a 73 68 69 6e 74 20 73 74 72 69 63 74 3a 20 66 61 6c 73 65 20 2a 2f 20 2f 2a 20 67 6c 6f 62 61 6c 73 20 64 65 66 69 6e 65 2c 20 6d 6f Data Ascii: 7ad0/! Packery layout mode PACKAGED v2.0.1 * sub-classes Packery //* * Rect * low-level utility class for basic geometry /( function( window, factory ) { // universal module definition / jshint strict: false / / globals define, mo
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 20 20 2f 2f 20 43 6f 6d 6d 6f 6e 4a 53 0a 20 20 20 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 2f 2f 20 62 72 6f 77 73 65 72 20 67 6c 6f 62 61 6c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 20 7c 7c 20 7b 7d 3b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 2e 52 65 63 74 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 20 20 7d 0a 0a 7d 28 20 77 69 6e 64 6f 77 2c 20 66 75 6e 63 74 69 6f 6e 20 66 61 63 74 6f 72 79 28 29 20 7b 0a 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 52 65 63 74 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: { // CommonJS module.exports = factory(); } else { // browser global window.Packery = window.Packery \|\| {}; window.Packery.Rect = factory(); }}( window, function factory() {// -------------------------- Rect -----------------
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 2f 33 30 36 33 33 32 0a 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 78 20 3c 20 72 65 63 74 52 69 67 68 74 20 26 26 0a 20 20 20 20 74 68 69 73 52 69 67 68 74 20 3e 20 72 65 63 74 2e 78 20 26 26 0a 20 20 20 20 74 68 69 73 2e 79 20 3c 20 72 65 63 74 42 6f 74 74 6f 6d 20 26 26 0a 20 20 20 20 74 68 69 73 42 6f 74 74 6f 6d 20 3e 20 72 65 63 74 2e 79 3b 0a 7d 3b 0a 0a 2f 2a 2a 0a 20 2a 20 40 70 61 72 61 6d 20 7b 52 65 63 74 7d 20 72 65 63 74 20 2d 20 74 68 65 20 6f 76 65 72 6c 61 70 70 69 6e 67 20 72 65 63 74 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 41 72 72 61 79 7d 20 66 72 65 65 52 65 63 74 73 20 2d 20 72 65 63 74 73 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 74 68 65 20 61 72 65 61 20 61 72 6f 75 6e 64 20 74 68 65 20 72 65 63 74 0a 2a 2a 2f 0a 70 72 6f 74 6f Data Ascii: /306332 return this.x < rectRight && thisRight > rect.x && this.y < rectBottom && thisBottom > rect.y;};/** * @param {Rect} rect - the overlapping rect * @returns {Array} freeRects - rects representing the area around the rect**/proto
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 65 69 67 68 74 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 66 72 65 65 52 65 63 74 73 2e 70 75 73 68 28 20 66 72 65 65 52 65 63 74 20 29 3b 0a 20 20 7d 0a 0a 20 20 72 65 74 75 72 6e 20 66 72 65 65 52 65 63 74 73 3b 0a 7d 3b 0a 0a 70 72 6f 74 6f 2e 63 61 6e 46 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 72 65 63 74 20 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 77 69 64 74 68 20 3e 3d 20 72 65 63 74 2e 77 69 64 74 68 20 26 26 20 74 68 69 73 2e 68 65 69 67 68 74 20 3e 3d 20 72 65 63 74 2e 68 65 69 67 68 74 3b 0a 7d 3b 0a 0a 72 65 74 75 72 6e 20 52 65 63 74 3b 0a 0a 7d 29 29 3b 0a 0a 2f 2a 2a 0a 20 2a 20 50 61 63 6b 65 72 0a 20 2a 20 62 69 6e 2d 70 61 63 6b 69 6e 67 20 61 6c 67 6f 72 69 74 68 6d 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 Data Ascii: eight }); freeRects.push( freeRect ); } return freeRects;};proto.canFit = function( rect ) { return this.width >= rect.width && this.height >= rect.height;};return Rect;}));/** * Packer * bin-packing algorithm */( function( w
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 20 20 20 68 65 69 67 68 74 3a 20 74 68 69 73 2e 68 65 69 67 68 74 0a 20 20 7d 29 3b 0a 0a 20 20 74 68 69 73 2e 73 70 61 63 65 73 2e 70 75 73 68 28 20 69 6e 69 74 69 61 6c 53 70 61 63 65 20 29 3b 0a 20 20 2f 2f 20 73 65 74 20 73 6f 72 74 65 72 0a 20 20 74 68 69 73 2e 73 6f 72 74 65 72 20 3d 20 73 6f 72 74 65 72 73 5b 20 74 68 69 73 2e 73 6f 72 74 44 69 72 65 63 74 69 6f 6e 20 5d 20 7c 7c 20 73 6f 72 74 65 72 73 2e 64 6f 77 6e 77 61 72 64 4c 65 66 74 54 6f 52 69 67 68 74 3b 0a 7d 3b 0a 0a 2f 2f 20 63 68 61 6e 67 65 20 78 20 61 6e 64 20 79 20 6f 66 20 72 65 63 74 20 74 6f 20 66 69 74 20 77 69 74 68 20 69 6e 20 50 61 63 6b 65 72 27 73 20 61 76 61 69 6c 61 62 6c 65 20 73 70 61 63 65 73 0a 70 72 6f 74 6f 2e 70 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 72 Data Ascii: height: this.height }); this.spaces.push( initialSpace ); // set sorter this.sorter = sorters[ this.sortDirection ] \|\| sorters.downwardLeftToRight;};// change x and y of rect to fit with in Packer's available spacesproto.pack = function( r
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 79 3b 0a 0a 20 20 74 68 69 73 2e 70 6c 61 63 65 64 28 20 72 65 63 74 20 29 3b 0a 7d 3b 0a 0a 2f 2f 20 75 70 64 61 74 65 20 73 70 61 63 65 73 20 77 69 74 68 20 70 6c 61 63 65 64 20 72 65 63 74 0a 70 72 6f 74 6f 2e 70 6c 61 63 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 72 65 63 74 20 29 20 7b 0a 20 20 2f 2f 20 75 70 64 61 74 65 20 73 70 61 63 65 73 0a 20 20 76 61 72 20 72 65 76 69 73 65 64 53 70 61 63 65 73 20 3d 20 5b 5d 3b 0a 20 20 66 6f 72 20 28 20 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 74 68 69 73 2e 73 70 61 63 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 20 20 20 20 76 61 72 20 73 70 61 63 65 20 3d 20 74 68 69 73 2e 73 70 61 63 65 73 5b 69 5d 3b 0a 20 20 20 20 76 61 72 20 6e 65 77 53 70 61 63 65 73 20 3d 20 73 70 61 63 65 2e 67 65 74 4d Data Ascii: y; this.placed( rect );};// update spaces with placed rectproto.placed = function( rect ) { // update spaces var revisedSpaces = []; for ( var i=0; i < this.spaces.length; i++ ) { var space = this.spaces[i]; var newSpaces = space.getM
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 72 65 63 74 73 2e 73 70 6c 69 63 65 28 20 69 2c 20 31 20 29 3b 0a 20 20 20 20 20 20 20 20 72 65 63 74 20 3d 20 72 65 63 74 73 5b 69 5d 3b 20 2f 2f 20 73 65 74 20 6e 65 78 74 20 72 65 63 74 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 69 6e 75 65 20 72 65 63 74 4c 6f 6f 70 3b 20 2f 2f 20 62 61 69 6c 20 6f 6e 20 63 6f 6d 70 61 72 65 4c 6f 6f 70 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 20 72 65 63 74 2e 63 6f 6e 74 61 69 6e 73 28 20 63 6f 6d 70 61 72 65 52 65 63 74 20 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 72 65 6d 6f 76 65 20 63 6f 6d 70 61 72 65 52 65 63 74 0a 20 20 20 20 20 20 20 20 72 65 63 74 73 2e 73 70 6c 69 63 65 28 20 69 20 2b 20 6a 2c 20 31 20 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 Data Ascii: rects.splice( i, 1 ); rect = rects[i]; // set next rect continue rectLoop; // bail on compareLoop } else if ( rect.contains( compareRect ) ) { // remove compareRect rects.splice( i + j, 1 ); } else {
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 6c 0a 20 20 20 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 2e 49 74 65 6d 20 3d 20 66 61 63 74 6f 72 79 28 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 4f 75 74 6c 61 79 65 72 2c 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 50 61 63 6b 65 72 79 2e 52 65 63 74 0a 20 20 20 20 29 3b 0a 20 20 7d 0a 0a 7d 28 20 77 69 6e 64 6f 77 2c 20 66 75 6e 63 74 69 6f 6e 20 66 61 63 74 6f 72 79 28 20 4f 75 74 6c 61 79 65 72 2c 20 52 65 63 74 20 29 20 7b 0a 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 49 74 65 6d 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2f 2f 0a 0a 76 61 72 20 64 6f 63 45 6c 65 6d 53 74 79 6c 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 Data Ascii: l window.Packery.Item = factory( window.Outlayer, window.Packery.Rect ); }}( window, function factory( Outlayer, Rect ) {// -------------------------- Item -------------------------- //var docElemStyle = document.documentEleme
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 79 20 5d 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 7d 0a 20 20 74 68 69 73 2e 69 73 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 20 20 74 68 69 73 2e 67 65 74 53 69 7a 65 28 29 3b 0a 20 20 74 68 69 73 2e 6c 61 79 6f 75 74 2e 5f 73 65 74 52 65 63 74 53 69 7a 65 28 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 20 74 68 69 73 2e 72 65 63 74 20 29 3b 0a 20 20 74 68 69 73 2e 69 73 50 6c 61 63 69 6e 67 20 3d 20 74 72 75 65 3b 0a 7d 3b 0a 0a 70 72 6f 74 6f 2e 64 69 73 61 62 6c 65 50 6c 61 63 69 6e 67 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 74 68 69 73 2e 69 73 50 6c 61 63 69 6e 67 20 3d 20 66 61 6c 73 65 3b 0a 7d 3b 0a 0a 2f 2f 20 2d 2d 2d 2d 2d 20 20 2d 2d 2d 2d 2d 20 2f 2f 0a 0a 2f 2f 20 72 65 6d 6f 76 65 20 65 6c 65 6d 65 6e 74 Data Ascii: y ] = 'none'; } this.isTransitioning = false; this.getSize(); this.layout._setRectSize( this.element, this.rect ); this.isPlacing = true;};proto.disablePlacing = function() { this.isPlacing = false;};// ----- ----- //// remove element
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 76 32 2e 30 2e 30 0a 20 2a 20 47 61 70 6c 65 73 73 2c 20 64 72 61 67 67 61 62 6c 65 20 67 72 69 64 20 6c 61 79 6f 75 74 73 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 47 50 4c 76 33 20 66 6f 72 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 75 73 65 0a 20 2a 20 6f 72 20 50 61 63 6b 65 72 79 20 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 63 6f 6d 6d 65 72 63 69 61 6c 20 75 73 65 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 70 61 63 6b 65 72 79 2e 6d 65 74 61 66 69 7a 7a 79 2e 63 6f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 36 20 4d 65 74 61 66 69 7a 7a 79 0a 20 2a 2f 0a 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 20 20 2f 2f 20 75 6e 69 76 65 72 73 61 6c 20 6d 6f 64 75 6c 65 Data Ascii: v2.0.0 * Gapless, draggable grid layouts * * Licensed GPLv3 for open source use * or Packery Commercial License for commercial use * * http://packery.metafizzy.co * Copyright 2016 Metafizzy */( function( window, factory ) { // universal module

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49836	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	971	OUT	GET /wp-content/themes/edumall/assets/js/grid-layout.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:29 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:29 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b81e4dae8bb8-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-10a4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pNKrXlQ8XWSGe3FNhBG4fvKIRIM7eGpua5stccvMAzVl77z9cpBRIpFQX2DoML%2BR07Cf4h2eDfhP%2BqK9SXsa3Z4hKG2cgaPh8C4cbBc4WStrNPC6n1Sp%2Fn6TS4rihHQApMo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:29 UTC	429	IN	Data Raw: 31 30 61 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 45 2c 74 29 7b 74 68 69 73 2e 5f 69 73 6f 74 6f 70 65 4f 70 74 69 6f 6e 73 3d 7b 69 74 65 6d 53 65 6c 65 63 74 6f 72 3a 22 2e 67 72 69 64 2d 69 74 65 6d 22 2c 70 65 72 63 65 6e 74 50 6f 73 69 74 69 6f 6e 3a 21 30 2c 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 30 2c 70 61 63 6b 65 72 79 3a 7b 63 6f 6c 75 6d 6e 57 69 64 74 68 3a 22 2e 67 72 69 64 2d 73 69 7a 65 72 22 7d 2c 66 69 74 52 6f 77 73 3a 7b 67 75 74 74 65 72 3a 31 30 7d 7d 2c 74 68 69 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 6f 3d 74 68 69 73 2c 69 3d 45 2e 66 69 6e 64 28 22 2e 65 64 75 6d 61 6c 6c 2d 67 72 69 64 22 29 2c 65 3d Data Ascii: 10a4!function(L){"use strict";function s(E,t){this._isotopeOptions={itemSelector:".grid-item",percentPosition:!0,transitionDuration:0,packery:{columnWidth:".grid-sizer"},fitRows:{gutter:10}},this.init=function(){var t,o=this,i=E.find(".edumall-grid"),e=
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 2e 5f 69 73 6f 74 6f 70 65 4f 70 74 69 6f 6e 73 2e 6c 61 79 6f 75 74 4d 6f 64 65 3d 22 66 69 74 52 6f 77 73 22 2c 69 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 63 75 6c 61 74 65 4d 61 73 6f 6e 72 79 53 69 7a 65 28 29 2c 22 67 72 69 64 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 69 2e 63 68 69 6c 64 72 65 6e 28 22 2e 67 72 69 64 2d 69 74 65 6d 22 29 2e 6d 61 74 63 68 48 65 69 67 68 74 28 29 2c 69 2e 69 73 6f 74 6f 70 65 28 22 6c 61 79 6f 75 74 22 29 29 2c 69 2e 61 64 64 43 6c 61 73 73 28 22 6c 6f 61 64 65 64 22 29 7d 29 2e 6f 6e 65 28 22 61 72 72 61 6e 67 65 43 6f 6d 70 6c 65 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 68 61 6e 64 6c 65 72 45 6e 74 72 61 6e 63 65 41 6e 69 6d 61 74 69 6f 6e 28 29 2c 6f 2e 68 Data Ascii: ._isotopeOptions.layoutMode="fitRows",i.imagesLoaded(function(){o.calculateMasonrySize(),"grid"===e.type&&(i.children(".grid-item").matchHeight(),i.isotope("layout")),i.addClass("loaded")}).one("arrangeComplete",function(){o.handlerEntranceAnimation(),o.h
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 7a 61 67 48 65 69 67 68 74 3a 30 2c 6d 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 7a 69 67 7a 61 67 48 65 69 67 68 74 54 61 62 6c 65 74 3f 72 2e 7a 69 67 7a 61 67 48 65 69 67 68 74 54 61 62 6c 65 74 3a 68 2c 66 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 7a 69 67 7a 61 67 48 65 69 67 68 74 4d 6f 62 69 6c 65 3f 72 2e 7a 69 67 7a 61 67 48 65 69 67 68 74 4d 6f 62 69 6c 65 3a 6d 2c 79 3d 76 6f 69 64 20 30 21 3d 3d 72 2e 7a 69 67 7a 61 67 52 65 76 65 72 73 65 64 26 26 31 3d 3d 3d 72 2e 7a 69 67 7a 61 67 52 65 76 65 72 73 65 64 2c 76 3d 31 30 32 35 2c 7a 3d 37 36 38 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 43 6f 6e 66 69 67 26 26 28 76 3d 65 6c 65 6d 65 6e 74 6f 72 46 72 6f 6e 74 65 6e 64 43 6f 6e 66 69 Data Ascii: zagHeight:0,m=void 0!==r.zigzagHeightTablet?r.zigzagHeightTablet:h,f=void 0!==r.zigzagHeightMobile?r.zigzagHeightMobile:m,y=void 0!==r.zigzagReversed&&1===r.zigzagReversed,v=1025,z=768;"undefined"!=typeof elementorFrontendConfig&&(v=elementorFrontendConfi
2024-04-25 19:25:29 UTC	1101	IN	Data Raw: 6e 28 22 2e 65 64 75 6d 61 6c 6c 2d 67 72 69 64 22 29 2e 66 69 6e 64 28 22 2e 67 72 69 64 2d 69 74 65 6d 22 29 2e 65 6c 65 6d 65 6e 74 6f 72 57 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 7c 7c 74 68 69 73 3b 4c 28 74 29 2e 61 64 64 43 6c 61 73 73 28 22 61 6e 69 6d 61 74 65 22 29 7d 2c 7b 6f 66 66 73 65 74 3a 22 39 30 25 22 2c 74 72 69 67 67 65 72 4f 6e 63 65 3a 21 30 7d 29 7d 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 54 6f 6f 6c 74 69 70 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 45 2e 64 61 74 61 28 22 70 6f 77 65 72 2d 74 69 70 22 29 3b 6f 26 26 4c 2e 70 6f 77 65 72 54 69 70 26 26 45 2e 66 69 6e 64 28 22 2e 65 64 75 6d 61 6c 6c 2d 74 6f 6f 6c 74 69 70 22 29 2e 65 61 63 68 28 Data Ascii: n(".edumall-grid").find(".grid-item").elementorWaypoint(function(){var t=this.element\|\|this;L(t).addClass("animate")},{offset:"90%",triggerOnce:!0})},this.handlerTooltips=function(){var o=E.data("power-tip");o&&L.powerTip&&E.find(".edumall-tooltip").each(
2024-04-25 19:25:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49826	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714073095021&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-25 19:25:28 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-25 19:25:28 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-25 19:25:29 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: BD136564677443FEA74C87CE7E4CCB69 Ref B: LAX311000109031 Ref C: 2024-04-25T19:25:29Z Date: Thu, 25 Apr 2024 19:25:29 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714073128.c9edddc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49839	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	996	OUT	GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:29 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:29 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8215fbd44eb-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32ba-6272" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:37:30 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JhzG39BGO9bCt5vp6WbAkJMPaQZzaFgvRdHEpzvk8pFKU9B5ygD4T1QCXX61KEp9EQytCm%2BMJyjy%2B7C4i4SsRTkFfpFIj1IW%2B0RI4cDRuCCUho0SbFc6Gms12W5W4oNQN10%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:29 UTC	429	IN	Data Raw: 36 32 37 32 0d 0a 2f 2a 21 20 53 6d 61 72 74 4d 65 6e 75 73 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 30 2e 31 20 2d 20 4e 6f 76 65 6d 62 65 72 20 31 2c 20 32 30 31 36 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6d 61 72 74 6d 65 6e 75 73 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 56 61 73 69 6c 20 44 69 6e 6b 6f 76 2c 20 56 61 64 69 6b 6f 6d 20 57 65 62 20 4c 74 64 2e 20 68 74 74 70 3a 2f 2f 76 61 64 69 6b 6f 6d 2e 63 6f 6d 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: 6272/! SmartMenus jQuery Plugin - v1.0.1 - November 1, 2016 http://www.smartmenus.org/ * Copyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com; Licensed MIT */(function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==t
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 7c 7c 74 29 6d 6f 75 73 65 44 65 74 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 26 26 74 26 26 28 24 28 64 6f 63 75 6d 65 6e 74 29 2e 75 6e 62 69 6e 64 28 65 29 2c 6d 6f 75 73 65 44 65 74 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 3d 21 31 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 21 30 2c 73 3d 6e 75 6c 6c 3b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 62 69 6e 64 28 67 65 74 45 76 65 6e 74 73 4e 53 28 5b 5b 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 78 3a 74 2e 70 61 67 65 58 2c 79 3a 74 2e 70 61 67 65 59 2c 74 69 6d 65 53 74 61 6d 70 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 3b 69 66 28 73 29 7b 76 61 72 20 6f 3d 4d 61 74 68 2e 61 62 73 28 73 2e 78 2d 65 2e 78 Data Ascii: ectionEnabled\|\|t)mouseDetectionEnabled&&t&&($(document).unbind(e),mouseDetectionEnabled=!1);else{var i=!0,s=null;$(document).bind(getEventsNS([["mousemove",function(t){var e={x:t.pageX,y:t.pageY,timeStamp:(new Date).getTime()};if(s){var o=Math.abs(s.x-e.x
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 64 65 54 69 6d 65 6f 75 74 3d 30 2c 74 68 69 73 2e 73 63 72 6f 6c 6c 54 69 6d 65 6f 75 74 3d 30 2c 74 68 69 73 2e 63 6c 69 63 6b 41 63 74 69 76 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 66 6f 63 75 73 41 63 74 69 76 61 74 65 64 3d 21 31 2c 74 68 69 73 2e 7a 49 6e 64 65 78 49 6e 63 3d 30 2c 74 68 69 73 2e 69 64 49 6e 63 3d 30 2c 74 68 69 73 2e 24 66 69 72 73 74 4c 69 6e 6b 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 66 69 72 73 74 53 75 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 2e 24 64 69 73 61 62 6c 65 4f 76 65 72 6c 61 79 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 74 6f 75 63 68 53 63 72 6f 6c 6c 69 6e 67 53 75 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 73 73 54 72 61 6e 73 66 6f 72 6d 73 33 64 3d 22 70 65 72 73 70 65 63 74 69 76 65 Data Ascii: deTimeout=0,this.scrollTimeout=0,this.clickActivated=!1,this.focusActivated=!1,this.zIndexInc=0,this.idInc=0,this.$firstLink=null,this.$firstSub=null,this.disabled=!1,this.$disableOverlay=null,this.$touchScrollingSub=null,this.cssTransforms3d="perspective
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 65 74 45 76 65 6e 74 73 4e 53 28 5b 5b 22 74 6f 75 63 68 73 74 61 72 74 22 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 64 6f 63 54 6f 75 63 68 53 74 61 72 74 2c 74 68 69 73 29 5d 2c 5b 22 74 6f 75 63 68 6d 6f 76 65 22 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 64 6f 63 54 6f 75 63 68 4d 6f 76 65 2c 74 68 69 73 29 5d 2c 5b 22 74 6f 75 63 68 65 6e 64 22 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 64 6f 63 54 6f 75 63 68 45 6e 64 2c 74 68 69 73 29 5d 2c 5b 22 63 6c 69 63 6b 22 2c 24 2e 70 72 6f 78 79 28 74 68 69 73 2e 64 6f 63 43 6c 69 63 6b 2c 74 68 69 73 29 5d 5d 2c 69 29 29 2c 24 28 77 69 6e 64 6f 77 29 2e 62 69 6e 64 28 67 65 74 45 76 65 6e 74 73 4e 53 28 5b 5b 22 72 65 73 69 7a 65 20 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 24 2e 70 72 6f 78 Data Ascii: etEventsNS([["touchstart",$.proxy(this.docTouchStart,this)],["touchmove",$.proxy(this.docTouchMove,this)],["touchend",$.proxy(this.docTouchEnd,this)],["click",$.proxy(this.docClick,this)]],i)),$(window).bind(getEventsNS([["resize orientationchange",$.prox
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 2d 61 72 72 6f 77 73 22 29 26 26 74 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 2e 72 65 6d 6f 76 65 28 29 2c 74 2e 64 61 74 61 53 4d 28 22 73 68 6f 77 6e 2d 62 65 66 6f 72 65 22 29 26 26 28 28 69 2e 6f 70 74 73 2e 73 75 62 4d 65 6e 75 73 4d 69 6e 57 69 64 74 68 7c 7c 69 2e 6f 70 74 73 2e 73 75 62 4d 65 6e 75 73 4d 61 78 57 69 64 74 68 29 26 26 74 2e 63 73 73 28 7b 77 69 64 74 68 3a 22 22 2c 6d 69 6e 57 69 64 74 68 3a 22 22 2c 6d 61 78 57 69 64 74 68 3a 22 22 7d 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 6d 2d 6e 6f 77 72 61 70 22 29 2c 74 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 26 26 74 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 2e 72 65 6d 6f 76 65 28 29 2c 74 Data Ascii: -arrows")&&t.dataSM("scroll-arrows").remove(),t.dataSM("shown-before")&&((i.opts.subMenusMinWidth\|\|i.opts.subMenusMaxWidth)&&t.css({width:"",minWidth:"",maxWidth:""}).removeClass("sm-nowrap"),t.dataSM("scroll-arrows")&&t.dataSM("scroll-arrows").remove(),t
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 75 48 69 64 65 41 6c 6c 28 29 2c 21 74 26 26 21 74 68 69 73 2e 6f 70 74 73 2e 69 73 50 6f 70 75 70 26 26 74 68 69 73 2e 24 72 6f 6f 74 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 24 72 6f 6f 74 2e 6f 66 66 73 65 74 28 29 3b 74 68 69 73 2e 24 64 69 73 61 62 6c 65 4f 76 65 72 6c 61 79 3d 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6d 2d 6a 71 75 65 72 79 2d 64 69 73 61 62 6c 65 2d 6f 76 65 72 6c 61 79 22 2f 3e 27 29 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 74 6f 70 3a 65 2e 74 6f 70 2c 6c 65 66 74 3a 65 2e 6c 65 66 74 2c 77 69 64 74 68 3a 74 68 69 73 2e 24 72 6f 6f 74 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 74 68 69 73 2e 24 72 6f 6f 74 2e 6f 75 74 65 72 Data Ascii: uHideAll(),!t&&!this.opts.isPopup&&this.$root.is(":visible")){var e=this.$root.offset();this.$disableOverlay=$('<div class="sm-jquery-disable-overlay"/>').css({position:"absolute",top:e.top,left:e.left,width:this.$root.outerWidth(),height:this.$root.outer
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 64 69 73 61 62 6c 65 64 3d 21 31 29 7d 2c 67 65 74 43 6c 6f 73 65 73 74 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 24 28 74 29 2e 63 6c 6f 73 65 73 74 28 22 75 6c 22 29 3b 65 2e 64 61 74 61 53 4d 28 22 69 6e 2d 6d 65 67 61 22 29 3b 29 65 3d 65 2e 70 61 72 65 6e 74 28 29 2e 63 6c 6f 73 65 73 74 28 22 75 6c 22 29 3b 72 65 74 75 72 6e 20 65 5b 30 5d 7c 7c 6e 75 6c 6c 7d 2c 67 65 74 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 4f 66 66 73 65 74 28 74 2c 21 30 29 7d 2c 67 65 74 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 22 6e 6f 6e 65 22 3d 3d 74 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 26 26 28 69 3d 7b 70 6f 73 69 74 69 6f Data Ascii: disabled=!1)},getClosestMenu:function(t){for(var e=$(t).closest("ul");e.dataSM("in-mega");)e=e.parent().closest("ul");return e[0]\|\|null},getHeight:function(t){return this.getOffset(t,!0)},getOffset:function(t,e){var i;"none"==t.css("display")&&(i={positio
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 75 72 6e 22 62 6c 6f 63 6b 22 3d 3d 74 68 69 73 2e 24 66 69 72 73 74 4c 69 6e 6b 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 7d 2c 69 73 46 69 78 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 66 69 78 65 64 22 3d 3d 74 68 69 73 2e 24 72 6f 6f 74 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 74 7c 7c 74 68 69 73 2e 24 72 6f 6f 74 2e 70 61 72 65 6e 74 73 55 6e 74 69 6c 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 69 78 65 64 22 3d 3d 24 28 74 68 69 73 29 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3f 28 74 3d 21 30 2c 21 31 29 3a 76 6f 69 64 20 30 7d 29 2c 74 7d 2c 69 73 4c 69 6e 6b 49 6e 4d 65 67 61 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 Data Ascii: urn"block"==this.$firstLink.css("display")},isFixed:function(){var t="fixed"==this.$root.css("position");return t\|\|this.$root.parentsUntil("body").each(function(){return"fixed"==$(this).css("position")?(t=!0,!1):void 0}),t},isLinkInMegaMenu:function(t){re
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 69 63 6b 2e 73 6d 61 70 69 22 2c 65 5b 30 5d 29 3d 3d 3d 21 31 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 69 3d 24 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 22 73 70 61 6e 2e 73 75 62 2d 61 72 72 6f 77 22 29 2c 73 3d 65 2e 64 61 74 61 53 4d 28 22 73 75 62 22 29 2c 6f 3d 73 3f 32 3d 3d 73 2e 64 61 74 61 53 4d 28 22 6c 65 76 65 6c 22 29 3a 21 31 3b 69 66 28 73 26 26 21 73 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 7b 69 66 28 74 68 69 73 2e 6f 70 74 73 2e 73 68 6f 77 4f 6e 43 6c 69 63 6b 26 26 6f 26 26 28 74 68 69 73 2e 63 6c 69 63 6b 41 63 74 69 76 61 74 65 64 3d 21 30 29 2c 74 68 69 73 2e 69 74 65 6d 41 63 74 69 76 61 74 65 28 65 29 2c 73 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6f 63 75 73 41 63 74 69 76 Data Ascii: ick.smapi",e[0])===!1)return!1;var i=$(t.target).is("span.sub-arrow"),s=e.dataSM("sub"),o=s?2==s.dataSM("level"):!1;if(s&&!s.is(":visible")){if(this.opts.showOnClick&&o&&(this.clickActivated=!0),this.itemActivate(e),s.is(":visible"))return this.focusActiv
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 73 68 6f 77 54 69 6d 65 6f 75 74 29 2c 74 68 69 73 2e 73 68 6f 77 54 69 6d 65 6f 75 74 3d 30 29 29 2c 65 2e 72 65 6d 6f 76 65 44 61 74 61 53 4d 28 22 6d 6f 75 73 65 64 6f 77 6e 22 29 2c 74 68 69 73 2e 24 72 6f 6f 74 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 6d 6f 75 73 65 6c 65 61 76 65 2e 73 6d 61 70 69 22 2c 65 5b 30 5d 29 29 7d 2c 6d 65 6e 75 48 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 24 72 6f 6f 74 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 62 65 66 6f 72 65 68 69 64 65 2e 73 6d 61 70 69 22 2c 74 5b 30 5d 29 21 3d 3d 21 31 26 26 28 74 2e 73 74 6f 70 28 21 30 2c 21 30 29 2c 22 6e 6f 6e 65 22 21 3d 74 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 29 29 7b 76 61 72 Data Ascii: rTimeout(this.showTimeout),this.showTimeout=0)),e.removeDataSM("mousedown"),this.$root.triggerHandler("mouseleave.smapi",e[0]))},menuHide:function(t){if(this.$root.triggerHandler("beforehide.smapi",t[0])!==!1&&(t.stop(!0,!0),"none"!=t.css("display"))){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49838	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	1007	OUT	GET /wp-content/themes/edumall/assets/libs/perfect-scrollbar/js/perfect-scrollbar.jquery.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:29 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:29 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8215b004571-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-62f5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vhHvcvsACfAORq0zm2LGTrO2VlQbA2ShAhn8fh5I6GpUA2k52KKYmU4GNSEb3Es5Tp1%2Bmj7tUsgsqoPKjPZRIz3nzU1I3rpuZBsp1PyvizSRA9FEtwBhh4vcZZdTUzd4rqA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:29 UTC	433	IN	Data Raw: 36 32 66 35 0d 0a 2f 2a 20 70 65 72 66 65 63 74 2d 73 63 72 6f 6c 6c 62 61 72 20 76 30 2e 36 2e 31 34 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 69 2c 73 29 7b 69 66 28 21 6e 5b 69 5d 29 7b 69 66 28 21 65 5b 69 5d 29 7b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 73 26 26 61 29 72 65 74 75 72 6e 20 61 28 69 2c 21 30 29 3b 69 66 28 6c 29 72 65 74 75 72 6e 20 6c 28 69 2c 21 30 29 3b 76 61 72 20 63 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 69 2b 22 27 22 29 3b 74 68 72 6f 77 20 63 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e Data Ascii: 62f5/* perfect-scrollbar v0.6.14 */!function t(e,n,r){function o(i,s){if(!n[i]){if(!e[i]){var a="function"==typeof require&&require;if(!s&&a)return a(i,!0);if(l)return l(i,!0);var c=new Error("Cannot find module '"+i+"'");throw c.code="MODULE_NOT_FOUN
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 65 71 75 69 72 65 2c 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6f 28 72 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 28 7b 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 74 2e 66 6e 2e 70 65 72 66 65 63 74 53 63 72 6f 6c 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 76 61 72 20 65 3d 74 3b 6c 2e 67 65 74 28 74 68 69 73 29 7c 7c 6f 2e 69 6e 69 74 69 61 6c 69 7a 65 28 74 68 69 73 2c 65 29 7d 65 6c 73 65 7b 76 61 72 20 6e 3d 74 3b 22 Data Ascii: equire,i=0;i<r.length;i++)o(r[i]);return o}({1:[function(t,e,n){"use strict";function r(t){t.fn.perfectScrollbar=function(t){return this.each(function(){if("object"==typeof t\|\|"undefined"==typeof t){var e=t;l.get(this)\|\|o.initialize(this,e)}else{var n=t;"
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 2c 6e 7d 2c 69 2e 61 70 70 65 6e 64 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 74 7d 2c 69 2e 63 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 3f 6c 28 74 2c 65 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 72 28 74 2c 65 29 3a 6f 28 74 2c 65 2c 6e 29 7d 2c 69 2e 6d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 6d 61 74 63 68 65 73 3f 74 2e 6d 61 74 63 68 65 73 28 65 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 6d 61 74 63 68 65 73 53 65 6c 65 Data Ascii: ,n},i.appendTo=function(t,e){return e.appendChild(t),t},i.css=function(t,e,n){return"object"==typeof e?l(t,e):"undefined"==typeof n?r(t,e):o(t,e,n)},i.matches=function(t,e){return"undefined"!=typeof t.matches?t.matches(e):"undefined"!=typeof t.matchesSele
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 6e 65 77 20 72 28 74 29 2c 74 68 69 73 2e 65 76 65 6e 74 45 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 65 29 29 2c 65 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 68 69 73 2e 65 76 65 6e 74 45 6c 65 6d 65 6e 74 28 74 29 2e 62 69 6e 64 28 65 2c 6e 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 68 69 73 2e 65 76 65 6e 74 45 6c 65 6d 65 6e 74 28 74 29 2e 75 6e 62 69 6e 64 28 65 2c 6e 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 62 69 6e 64 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 65 76 65 6e 74 45 6c Data Ascii: efined"==typeof e&&(e=new r(t),this.eventElements.push(e)),e},o.prototype.bind=function(t,e,n){this.eventElement(t).bind(e,n)},o.prototype.unbind=function(t,e,n){this.eventElement(t).unbind(e,n)},o.prototype.unbindAll=function(){for(var t=0;t<this.eventEl
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 74 2c 22 70 61 64 64 69 6e 67 4c 65 66 74 22 29 29 2b 6c 28 6f 2e 63 73 73 28 74 2c 22 70 61 64 64 69 6e 67 52 69 67 68 74 22 29 29 2b 6c 28 6f 2e 63 73 73 28 74 2c 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 29 29 2b 6c 28 6f 2e 63 73 73 28 74 2c 22 62 6f 72 64 65 72 52 69 67 68 74 57 69 64 74 68 22 29 29 7d 2c 6e 2e 73 74 61 72 74 53 63 72 6f 6c 6c 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 2e 61 64 64 28 74 2c 22 70 73 2d 69 6e 2d 73 63 72 6f 6c 6c 69 6e 67 22 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 3f 72 2e 61 64 64 28 74 2c 22 70 73 2d 22 2b 65 29 3a 28 72 2e 61 64 64 28 74 2c 22 70 73 2d 78 22 29 2c 72 2e 61 64 64 28 74 2c 22 70 73 2d 79 22 29 29 7d 2c 6e 2e 73 74 6f 70 53 63 72 6f 6c 6c 69 6e 67 3d Data Ascii: t,"paddingLeft"))+l(o.css(t,"paddingRight"))+l(o.css(t,"borderLeftWidth"))+l(o.css(t,"borderRightWidth"))},n.startScrolling=function(t,e){r.add(t,"ps-in-scrolling"),"undefined"!=typeof e?r.add(t,"ps-"+e):(r.add(t,"ps-x"),r.add(t,"ps-y"))},n.stopScrolling=
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 6c 6c 62 61 72 58 29 2c 6f 2e 72 65 6d 6f 76 65 28 65 2e 73 63 72 6f 6c 6c 62 61 72 59 29 2c 6f 2e 72 65 6d 6f 76 65 28 65 2e 73 63 72 6f 6c 6c 62 61 72 58 52 61 69 6c 29 2c 6f 2e 72 65 6d 6f 76 65 28 65 2e 73 63 72 6f 6c 6c 62 61 72 59 52 61 69 6c 29 2c 72 2e 72 65 6d 6f 76 65 50 73 43 6c 61 73 73 65 73 28 74 29 2c 6c 2e 72 65 6d 6f 76 65 28 74 29 29 7d 7d 2c 7b 22 2e 2e 2f 6c 69 62 2f 64 6f 6d 22 3a 33 2c 22 2e 2e 2f 6c 69 62 2f 68 65 6c 70 65 72 22 3a 36 2c 22 2e 2f 69 6e 73 74 61 6e 63 65 73 22 3a 31 38 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 42 6f 75 6e 64 69 Data Ascii: llbarX),o.remove(e.scrollbarY),o.remove(e.scrollbarXRail),o.remove(e.scrollbarYRail),r.removePsClasses(t),l.remove(t))}},{"../lib/dom":3,"../lib/helper":6,"./instances":18}],10:[function(t,e,n){"use strict";function r(t,e){function n(t){return t.getBoundi
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 75 73 74 6d 65 6e 74 3b 63 28 74 2c 22 6c 65 66 74 22 2c 73 29 7d 76 61 72 20 72 3d 6e 75 6c 6c 2c 6f 3d 6e 75 6c 6c 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 65 2e 70 61 67 65 58 2d 6f 29 2c 61 28 74 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 73 74 6f 70 53 63 72 6f 6c 6c 69 6e 67 28 74 2c 22 78 22 29 2c 65 2e 65 76 65 6e 74 2e 75 6e 62 69 6e 64 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 73 29 7d 3b 65 2e 65 76 65 6e 74 2e 62 69 6e 64 28 65 2e 73 63 72 6f 6c 6c 62 61 72 58 2c 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 2e 70 61 67 65 58 2c Data Ascii: ustment;c(t,"left",s)}var r=null,o=null,s=function(e){n(e.pageX-o),a(t),e.stopPropagation(),e.preventDefault()},u=function(){l.stopScrolling(t,"x"),e.event.unbind(e.ownerDocument,"mousemove",s)};e.event.bind(e.scrollbarX,"mousedown",function(n){o=n.pageX,
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 73 2e 67 65 74 28 74 29 3b 72 28 74 2c 65 29 2c 6f 28 74 2c 65 29 7d 7d 2c 7b 22 2e 2e 2f 2e 2e 2f 6c 69 62 2f 64 6f 6d 22 3a 33 2c 22 2e 2e 2f 2e 2e 2f 6c 69 62 2f 68 65 6c 70 65 72 22 3a 36 2c 22 2e 2e 2f 69 6e 73 74 61 6e 63 65 73 22 3a 31 38 2c 22 2e 2e 2f 75 70 64 61 74 65 2d 67 65 6f 6d 65 74 72 79 22 3a 31 39 2c 22 2e 2e 2f 75 70 64 61 74 65 2d 73 63 72 6f 6c 6c 22 3a 32 30 7d 5d 2c 31 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 72 29 7b 76 61 72 20 6f 3d 74 2e 73 63 72 6f 6c 6c 54 6f 70 3b 69 66 28 30 3d 3d 3d 6e 29 7b 69 66 28 21 65 2e 73 63 Data Ascii: orts=function(t){var e=s.get(t);r(t,e),o(t,e)}},{"../../lib/dom":3,"../../lib/helper":6,"../instances":18,"../update-geometry":19,"../update-scroll":20}],12:[function(t,e,n){"use strict";function r(t,e){function n(n,r){var o=t.scrollTop;if(0===n){if(!e.sc
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 6e 65 72 48 65 69 67 68 74 3a 2d 33 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 33 3a 66 3d 39 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 32 3a 66 3d 63 2e 73 68 69 66 74 4b 65 79 3f 39 30 3a 2d 39 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 34 3a 66 3d 2d 39 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 35 3a 66 3d 63 2e 63 74 72 6c 4b 65 79 3f 2d 65 2e 63 6f 6e 74 65 6e 74 48 65 69 67 68 74 3a 2d 65 2e 63 6f 6e 74 61 69 6e 65 72 48 65 69 67 68 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 36 3a 66 3d 63 2e 63 74 72 6c 4b 65 79 3f 74 2e 73 63 72 6f 6c 6c 54 6f 70 3a 65 2e 63 6f 6e 74 61 69 6e 65 72 48 65 69 67 68 74 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 61 28 74 2c 22 74 6f 70 22 2c 74 2e 73 63 72 6f 6c 6c 54 6f 70 2d 66 29 2c 61 28 74 2c Data Ascii: nerHeight:-30;break;case 33:f=90;break;case 32:f=c.shiftKey?90:-90;break;case 34:f=-90;break;case 35:f=c.ctrlKey?-e.contentHeight:-e.containerHeight;break;case 36:f=c.ctrlKey?t.scrollTop:e.containerHeight;break;default:return}a(t,"top",t.scrollTop-f),a(t,
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 2f 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6f 3d 72 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2d 72 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 69 66 28 6f 3e 30 26 26 21 28 30 3d 3d 3d 72 2e 73 63 72 6f 6c 6c 54 6f 70 26 26 6e 3e 30 7c 7c 72 2e 73 63 72 6f 6c 6c 54 6f 70 3d 3d 3d 6f 26 26 6e 3c 30 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6c 3d 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 2d 72 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 69 66 28 6c 3e 30 26 26 21 28 30 3d 3d 3d 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 26 26 65 3c 30 7c 7c 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 3d 3d 6c 26 26 65 3e 30 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 28 73 29 7b 76 61 72 20 63 3d 72 28 73 29 2c 75 3d 63 5b 30 5d 2c 64 3d 63 5b 31 Data Ascii: /))return!1;var o=r.scrollHeight-r.clientHeight;if(o>0&&!(0===r.scrollTop&&n>0\|\|r.scrollTop===o&&n<0))return!0;var l=r.scrollLeft-r.clientWidth;if(l>0&&!(0===r.scrollLeft&&e<0\|\|r.scrollLeft===l&&e>0))return!0}return!1}function s(s){var c=r(s),u=c[0],d=c[1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49837	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:28 UTC	983	OUT	GET /wp-content/themes/edumall/assets/libs/growl/js/jquery.growl.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:29 UTC	939	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:29 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b821494fb03c-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-ffe" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ylKEStYwHnybt67BYFKV8wAlvUdyvpnJHZ5HUEGJWRFLBgPvgcZGqjhLPMq1r8dPQrf9SCBv4rMSC3PTsjHbfaEktH6riwvpoeF4PGn9b%2BQcVQLAbmAjSPTph%2F%2BPSPmDTi4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:29 UTC	430	IN	Data Raw: 66 66 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 62 2c 63 3b 61 3d 6a 51 75 65 72 79 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6c 61 73 73 20 64 7b 73 74 61 74 69 63 20 74 72 61 6e 73 69 74 69 6f 6e 28 65 29 7b 76 61 72 20 66 2c 67 2c 68 2c 69 3b 66 6f 72 28 69 20 69 6e 20 66 3d 65 5b 30 5d 2c 67 3d 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 73 2c 67 29 69 66 28 68 3d 67 5b 69 5d 2c 6e 75 6c 6c 21 3d 66 2e 73 74 79 6c 65 5b 69 5d 29 72 65 74 75 72 6e 20 68 7d 7d 72 65 74 75 72 6e 20 64 2e 74 72 61 6e 73 69 74 69 6f 6e 73 3d 7b 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 6d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6d 6f Data Ascii: ffe(function(){"use strict";var a,b,c;a=jQuery,b=function(){class d{static transition(e){var f,g,h,i;for(i in f=e[0],g=this.transitions,g)if(h=g[i],null!=f.style[i])return h}}return d.transitions={webkitTransition:"webkitTransitionEnd",mozTransition:"mo
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 62 69 6e 64 3d 74 68 69 73 2e 62 69 6e 64 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 75 6e 62 69 6e 64 3d 74 68 69 73 2e 75 6e 62 69 6e 64 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 6d 6f 75 73 65 45 6e 74 65 72 3d 74 68 69 73 2e 6d 6f 75 73 65 45 6e 74 65 72 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 6d 6f 75 73 65 4c 65 61 76 65 3d 74 68 69 73 2e 6d 6f 75 73 65 4c 65 61 76 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 63 6c 69 63 6b 3d 74 68 69 73 2e 63 6c 69 63 6b 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 63 6c 6f 73 65 3d 74 68 69 73 2e 63 6c 6f 73 65 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 63 79 63 6c 65 3d 74 68 69 73 2e 63 79 63 6c 65 2e 62 69 6e Data Ascii: .bind(this),this.bind=this.bind.bind(this),this.unbind=this.unbind.bind(this),this.mouseEnter=this.mouseEnter.bind(this),this.mouseLeave=this.mouseLeave.bind(this),this.click=this.click.bind(this),this.close=this.close.bind(this),this.cycle=this.cycle.bin
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 2c 65 2e 6f 66 66 28 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 2c 74 68 69 73 2e 63 6c 6f 73 65 29 2e 66 69 6e 64 28 60 2e 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 61 6d 65 73 70 61 63 65 7d 2d 63 6c 6f 73 65 60 29 2e 6f 66 66 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 63 6c 6f 73 65 29 7d 6d 6f 75 73 65 45 6e 74 65 72 28 29 7b 76 61 72 20 66 3b 72 65 74 75 72 6e 20 66 3d 74 68 69 73 2e 24 67 72 6f 77 6c 28 29 2c 66 2e 73 74 6f 70 28 21 30 2c 21 30 29 7d 6d 6f 75 73 65 4c 65 61 76 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 69 74 41 6e 64 44 69 73 6d 69 73 73 28 29 7d 63 6c 69 63 6b 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 75 72 6c 29 72 65 74 75 72 6e 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c Data Ascii: ,e.off("contextmenu",this.close).find(`.${this.settings.namespace}-close`).off("click",this.close)}mouseEnter(){var f;return f=this.$growl(),f.stop(!0,!0)}mouseLeave(){return this.waitAndDismiss()}click(e){if(null!=this.settings.url)return e.preventDefaul
2024-04-25 19:25:29 UTC	933	IN	Data Raw: 29 7b 72 65 74 75 72 6e 60 3c 64 69 76 20 63 6c 61 73 73 3d 27 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 61 6d 65 73 70 61 63 65 7d 2d 63 6c 6f 73 65 27 3e 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 63 6c 6f 73 65 7d 3c 2f 64 69 76 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 27 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 61 6d 65 73 70 61 63 65 7d 2d 74 69 74 6c 65 27 3e 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 74 69 74 6c 65 7d 3c 2f 64 69 76 3e 5c 6e 3c 64 69 76 20 63 6c 61 73 73 3d 27 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 61 6d 65 73 70 61 63 65 7d 2d 6d 65 73 73 61 67 65 27 3e 24 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 65 73 73 61 67 65 7d 3c 2f 64 69 76 3e 60 7d 63 6f 6e 74 61 69 6e 65 72 28 65 29 7b 72 Data Ascii: ){return`<div class='${this.settings.namespace}-close'>${this.settings.close}</div>\n<div class='${this.settings.namespace}-title'>${this.settings.title}</div>\n<div class='${this.settings.namespace}-message'>${this.settings.message}</div>`}container(e){r
2024-04-25 19:25:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49840	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:29 UTC	971	OUT	GET /wp-content/themes/edumall/assets/js/nice-select.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:29 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:29 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b821d9be137d-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-409" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6BZ%2FR4WJBmu8Vfd7iPjl47mxwilhpk%2BF67JpbVZyVswiSHl%2F8U7rTyaelGIdTHOGyITiskFjE59qIinxitQBCXn2jBFKeryENv3J0z6Wp91gHGvaPfjEgyufTvM4vA%2Fv7Io%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:29 UTC	428	IN	Data Raw: 34 30 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 66 6e 2e 45 64 75 6d 61 6c 6c 4e 69 63 65 53 65 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 22 66 6f 63 75 73 65 64 22 2c 63 3d 22 73 65 6c 65 63 74 65 64 22 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 3d 6e 28 74 68 69 73 29 2c 65 3d 6e 28 74 68 69 73 29 2e 64 61 74 61 28 22 73 65 6c 65 63 74 22 29 2c 74 3d 22 22 2c 65 3d 65 2e 66 69 65 6c 64 4c 61 62 65 6c 3f 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 61 62 65 6c 22 3e 27 2b 65 2e 66 69 65 6c 64 4c 61 62 65 6c 2b 22 3c 2f 73 70 61 6e 3e 22 3a 22 22 2c 61 3d 6e 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 64 75 6d 61 6c 6c Data Ascii: 409!function(n){"use strict";n.fn.EdumallNiceSelect=function(e){var i="focused",c="selected";return this.each(function(){var s=n(this),e=n(this).data("select"),t="",e=e.fieldLabel?'<span class="label">'+e.fieldLabel+"</span>":"",a=n('<div class="edumall
2024-04-25 19:25:29 UTC	612	IN	Data Raw: 28 29 29 2c 65 2b 3d 22 20 22 2b 63 29 2c 74 2b 3d 27 3c 6c 69 20 63 6c 61 73 73 3d 22 27 2b 65 2b 27 22 20 64 61 74 61 2d 76 61 6c 75 65 3d 22 27 2b 6e 28 74 68 69 73 29 2e 76 61 6c 28 29 2b 27 22 3e 27 2b 6e 28 74 68 69 73 29 2e 74 65 78 74 28 29 2b 22 3c 2f 6c 69 3e 22 7d 29 2c 74 3d 27 3c 75 6c 20 63 6c 61 73 73 3d 22 65 64 75 6d 61 6c 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 22 3e 27 2b 74 2b 22 3c 2f 75 6c 3e 22 3b 76 61 72 20 6c 3d 6e 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 64 75 6d 61 6c 6c 2d 6e 69 63 65 2d 73 65 6c 65 63 74 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 6c 2e 61 70 70 65 6e 64 28 61 29 2e 61 70 70 65 6e 64 28 74 29 2c 61 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 61 64 64 43 6c 61 73 73 28 69 Data Ascii: ()),e+=" "+c),t+='<li class="'+e+'" data-value="'+n(this).val()+'">'+n(this).text()+"</li>"}),t='<ul class="edumall-nice-select">'+t+"</ul>";var l=n('<div class="edumall-nice-select-wrap"></div>');l.append(a).append(t),a.on("click",function(){l.addClass(i
2024-04-25 19:25:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49842	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:29 UTC	964	OUT	GET /wp-content/themes/edumall/assets/js/main.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:29 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:29 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8237f4f676a-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-2632" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OQZRb2AgNmpdrxpGPyPJnIibtFgp1bvo7T%2B1zQCBzRu1xWlCkdWAoZSsKg2vPQGnaV4OY0552yTXJhiLFC5S5TsgFeydQ8zicFmWXizkwxX3a9HXZZ%2BsyqhwhiI5k3OEd78%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:29 UTC	431	IN	Data Raw: 32 36 33 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 72 3d 73 28 77 69 6e 64 6f 77 29 2c 64 3d 73 28 22 68 74 6d 6c 22 29 2c 75 3d 73 28 22 62 6f 64 79 22 29 2c 63 3d 73 28 22 23 70 61 67 65 2d 68 65 61 64 65 72 22 29 2c 69 3d 73 28 22 23 70 61 67 65 2d 68 65 61 64 65 72 2d 69 6e 6e 65 72 22 29 2c 6f 3d 28 73 28 22 23 70 61 67 65 2d 63 6f 6e 74 65 6e 74 22 29 2c 70 61 72 73 65 49 6e 74 28 24 65 64 75 6d 61 6c 6c 2e 68 65 61 64 65 72 5f 73 74 69 63 6b 79 5f 68 65 69 67 68 74 29 2c 32 30 30 29 2c 74 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 74 74 72 28 22 68 72 65 66 22 29 7c 7c 65 2e 64 61 74 61 28 22 68 72 65 Data Ascii: 2632!function(s){"use strict";var a,r=s(window),d=s("html"),u=s("body"),c=s("#page-header"),i=s("#page-header-inner"),o=(s("#page-content"),parseInt($edumall.header_sticky_height),200),t=window.innerWidth;function m(e){return e.attr("href")\|\|e.data("hre
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 26 22 31 22 3d 3d 69 2e 64 61 74 61 28 22 73 74 69 63 6b 79 22 29 26 26 28 65 3d 69 2e 68 65 69 67 68 74 28 29 2c 28 22 31 22 21 3d 69 2e 64 61 74 61 28 22 68 65 61 64 65 72 2d 76 65 72 74 69 63 61 6c 22 29 7c 7c 6e 3c 24 65 64 75 6d 61 6c 6c 2e 6d 6f 62 69 6c 65 5f 6d 65 6e 75 5f 62 72 65 61 6b 70 6f 69 6e 74 29 26 26 28 61 2b 3d 65 29 29 2c 36 30 30 3c 6e 26 26 28 6e 3d 73 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 2e 68 65 69 67 68 74 28 29 2c 61 2b 3d 6e 29 2c 30 3c 61 26 26 28 61 3d 2d 61 29 2c 61 7d 28 29 3b 73 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 28 7b 6f 66 66 73 65 74 3a 6e 2c 73 63 72 6f 6c 6c 54 61 72 67 65 74 3a 73 28 65 29 2c 73 70 65 65 64 3a 36 30 30 2c 65 61 73 69 6e 67 3a 22 6c 69 6e 65 61 72 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: &"1"==i.data("sticky")&&(e=i.height(),("1"!=i.data("header-vertical")\|\|n<$edumall.mobile_menu_breakpoint)&&(a+=e)),600<n&&(n=s("#wpadminbar").height(),a+=n),0<a&&(a=-a),a}();s.smoothScroll({offset:n,scrollTarget:s(e),speed:600,easing:"linear"})}function f
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 61 72 67 69 6e 4c 65 66 74 3a 30 7d 29 3a 28 65 3d 69 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 64 2e 63 73 73 28 7b 6d 61 72 67 69 6e 4c 65 66 74 3a 65 2b 22 70 78 22 7d 29 29 29 7d 73 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 2c 6f 2c 69 2c 74 2c 6c 2c 65 3b 67 28 29 2c 31 3d 3d 24 65 64 75 6d 61 6c 6c 2e 73 63 72 6f 6c 6c 5f 74 6f 70 5f 65 6e 61 62 6c 65 26 26 28 6e 3d 73 28 22 23 70 61 67 65 2d 73 63 72 6f 6c 6c 2d 75 70 22 29 2c 61 3d 30 2c 72 2e 73 63 72 6f 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 73 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 21 28 61 3c 65 29 26 26 32 30 30 3c 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3f 6e 2e 61 64 64 43 6c 61 73 73 28 22 Data Ascii: arginLeft:0}):(e=i.outerWidth(),d.css({marginLeft:e+"px"})))}s(document).ready(function(){var n,a,o,i,t,l,e;g(),1==$edumall.scroll_top_enable&&(n=s("#page-scroll-up"),a=0,r.scroll(function(){var e=s(this).scrollTop();!(a<e)&&200<r.scrollTop()?n.addClass("
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 47 61 6c 6c 65 72 79 28 7b 73 65 6c 65 63 74 6f 72 3a 22 61 22 2c 66 75 6c 6c 53 63 72 65 65 6e 3a 21 31 2c 7a 6f 6f 6d 3a 21 31 2c 67 65 74 43 61 70 74 69 6f 6e 46 72 6f 6d 54 69 74 6c 65 4f 72 41 6c 74 3a 21 31 2c 63 6f 75 6e 74 65 72 3a 21 31 7d 29 7d 29 2c 6f 3d 73 28 22 23 70 6f 70 75 70 2d 73 65 61 72 63 68 22 29 2c 73 28 22 23 70 61 67 65 2d 6f 70 65 6e 2d 70 6f 70 75 70 2d 73 65 61 72 63 68 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 75 2e 61 64 64 43 6c 61 73 73 28 22 70 61 67 65 2d 73 65 61 72 63 68 2d 70 6f 70 75 70 2d 6f 70 65 6e 65 64 22 29 2c 6f 2e 61 64 64 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f Data Ascii: Gallery({selector:"a",fullScreen:!1,zoom:!1,getCaptionFromTitleOrAlt:!1,counter:!1})}),o=s("#popup-search"),s("#page-open-popup-search").on("click",function(e){e.preventDefault(),u.addClass("page-search-popup-opened"),o.addClass("open"),setTimeout(functio
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 6f 6c 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 75 72 73 65 2d 74 68 75 6d 62 6e 61 69 6c 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 75 72 73 65 2d 63 61 70 74 69 6f 6e 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 75 72 73 65 2d 74 69 74 6c 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 75 72 73 65 2d 70 72 69 63 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 6c 69 3e 27 3b 6f 3d 27 3c 75 6c 20 63 6c 61 73 73 3d 22 63 68 69 6c 64 72 65 6e 20 63 6f 75 72 73 65 2d 6c 69 73 74 20 63 6f 75 72 73 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 Data Ascii: older"><div class="course-thumbnail-placeholder"></div><div class="course-caption-placeholder"><div class="course-title-placeholder"></div><div class="course-price-placeholder"></div></div></div></li>';o='<ul class="children course-list course-placeholder
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 65 43 6c 61 73 73 28 22 6f 70 65 6e 65 64 22 29 2c 6e 2e 66 69 6e 64 28 22 2e 73 75 62 2d 6d 65 6e 75 2c 20 2e 63 68 69 6c 64 72 65 6e 22 29 2e 73 74 6f 70 28 29 2e 73 6c 69 64 65 55 70 28 29 29 3a 28 6e 2e 61 64 64 43 6c 61 73 73 28 22 6f 70 65 6e 65 64 22 29 2c 6e 2e 63 68 69 6c 64 72 65 6e 28 22 2e 73 75 62 2d 6d 65 6e 75 2c 20 2e 63 68 69 6c 64 72 65 6e 22 29 2e 73 74 6f 70 28 29 2e 73 6c 69 64 65 44 6f 77 6e 28 29 29 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 22 23 70 61 67 65 2d 6f 70 65 6e 2d 6d 6f 62 69 6c 65 2d 6d 65 6e 75 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 76 61 72 20 6e 3d 73 28 Data Ascii: eClass("opened"),n.find(".sub-menu, .children").stop().slideUp()):(n.addClass("opened"),n.children(".sub-menu, .children").stop().slideDown()))}),function(){s("#page-open-mobile-menu").on("click",function(e){e.preventDefault(),e.stopPropagation();var n=s(
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 68 69 6c 64 72 65 6e 28 22 2e 73 75 62 2d 6d 65 6e 75 22 29 2e 73 74 6f 70 28 29 2e 73 6c 69 64 65 44 6f 77 6e 28 29 29 7d 29 7d 28 29 2c 31 3d 3d 24 65 64 75 6d 61 6c 6c 2e 6e 6f 74 69 63 65 43 6f 6f 6b 69 65 45 6e 61 62 6c 65 26 26 22 79 65 73 22 21 3d 24 65 64 75 6d 61 6c 6c 2e 6e 6f 74 69 63 65 43 6f 6f 6b 69 65 43 6f 6e 66 69 72 6d 26 26 22 22 21 3d 24 65 64 75 6d 61 6c 6c 2e 6e 6f 74 69 63 65 43 6f 6f 6b 69 65 4d 65 73 73 61 67 65 73 26 26 28 73 2e 67 72 6f 77 6c 28 7b 6c 6f 63 61 74 69 6f 6e 3a 22 62 72 22 2c 66 69 78 65 64 3a 21 30 2c 64 75 72 61 74 69 6f 6e 3a 33 36 65 35 2c 73 69 7a 65 3a 22 6c 61 72 67 65 22 2c 74 69 74 6c 65 3a 22 22 2c 6d 65 73 73 61 67 65 3a 24 65 64 75 6d 61 6c 6c 2e 6e 6f 74 69 63 65 43 6f 6f 6b 69 65 4d 65 73 73 61 67 65 Data Ascii: hildren(".sub-menu").stop().slideDown())})}(),1==$edumall.noticeCookieEnable&&"yes"!=$edumall.noticeCookieConfirm&&""!=$edumall.noticeCookieMessages&&(s.growl({location:"br",fixed:!0,duration:36e5,size:"large",title:"",message:$edumall.noticeCookieMessage
2024-04-25 19:25:29 UTC	1141	IN	Data Raw: 28 6e 29 29 2e 6c 65 6e 67 74 68 26 26 28 6e 2e 65 6c 65 6d 65 6e 74 6f 72 57 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 64 6f 77 6e 22 3d 3d 3d 65 26 26 28 61 2e 73 69 62 6c 69 6e 67 73 28 22 6c 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 22 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 29 7d 2c 7b 6f 66 66 73 65 74 3a 22 32 35 25 22 7d 29 2c 6e 2e 65 6c 65 6d 65 6e 74 6f 72 57 61 79 70 6f 69 6e 74 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 70 22 3d 3d 3d 65 26 26 28 61 2e 73 69 62 6c 69 6e 67 73 28 22 6c 69 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 22 29 2c 61 2e 61 Data Ascii: (n)).length&&(n.elementorWaypoint(function(e){"down"===e&&(a.siblings("li").removeClass("current-menu-item"),a.addClass("current-menu-item"))},{offset:"25%"}),n.elementorWaypoint(function(e){"up"===e&&(a.siblings("li").removeClass("current-menu-item"),a.a
2024-04-25 19:25:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49843	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:29 UTC	997	OUT	GET /wp-content/plugins/thrive-visual-editor/thrive-dashboard/js/dist/frontend.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:29 UTC	945	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:29 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b82438d212e7-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6571c6c3-82a" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 07 Dec 2023 13:21:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iQ7NQCVy1CAs%2BVjuVCBK5EytbcehhIk%2BNVRX2LlclS%2BxgW0fsIx%2BvDzNGFyYIX8NcLdYZHOcl4b288ARVr3oWabeD2Wv6WNkbVMy0FA6UYjD234dT%2BwkZ9Qd5P7vAj%2FMnnQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:29 UTC	424	IN	Data Raw: 38 32 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 54 56 45 5f 44 61 73 68 3d 77 69 6e 64 6f 77 2e 54 56 45 5f 44 61 73 68 7c 7c 7b 7d 2c 21 65 7c 7c 21 65 2e 24 6a 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 24 2c 65 3d 7b 24 6a 3a 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 7d 3b 61 26 26 28 77 69 6e 64 6f 77 2e 24 3d 61 29 7d 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 54 56 45 5f 44 61 73 68 2e 61 6a 61 78 5f 73 65 6e 74 3d 21 31 3b 76 61 72 20 74 3d 7b 7d 2c 73 3d 7b 7d 3b 54 56 45 5f 44 61 73 68 2e 61 64 64 5f 6c 6f 61 64 5f 69 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 76 61 72 20 72 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6f 26 26 28 6f 3d 61 2e 6e 6f 6f 70 29 2c Data Ascii: 82a!function(){if(window.TVE_Dash=window.TVE_Dash\|\|{},!e\|\|!e.$j){var a=window.$,e={$j:jQuery.noConflict()};a&&(window.$=a)}!function(a){TVE_Dash.ajax_sent=!1;var t={},s={};TVE_Dash.add_load_item=function(e,n,o){var r;if("function"!=typeof o&&(o=a.noop),
2024-04-25 19:25:29 UTC	1369	IN	Data Raw: 61 72 6e 28 65 2b 22 20 61 6a 61 78 20 61 63 74 69 6f 6e 20 61 6c 72 65 61 64 79 20 64 65 66 69 6e 65 64 22 29 2c 74 5b 65 5d 3d 6e 2c 73 5b 65 5d 3d 6f 2c 21 30 29 3a 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 6d 69 73 73 69 6e 67 20 61 6a 61 78 20 64 61 74 61 22 29 2c 21 31 29 7d 2c 54 56 45 5f 44 61 73 68 2e 61 6a 61 78 5f 6c 6f 61 64 5f 63 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 65 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 28 22 6c 69 6e 6b 23 22 2b 28 65 2b 3d 22 2d 63 73 73 22 29 29 2e 6c 65 6e 67 74 68 7c 7c 61 28 27 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 22 27 2b 65 2b 27 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 Data Ascii: arn(e+" ajax action already defined"),t[e]=n,s[e]=o,!0):(console.error&&console.error("missing ajax data"),!1)},TVE_Dash.ajax_load_css=function(e){a.each(e,(function(e,t){a("link#"+(e+="-css")).length\|\|a('<link rel="stylesheet" id="'+e+'" type="text/css"
2024-04-25 19:25:29 UTC	304	IN	Data Raw: 29 29 7d 2c 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 54 56 45 5f 44 61 73 68 3d 77 69 6e 64 6f 77 2e 54 56 45 5f 44 61 73 68 7c 7c 54 56 45 5f 44 61 73 68 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 61 2e 45 76 65 6e 74 28 22 74 76 65 2d 64 61 73 68 2e 6c 6f 61 64 22 29 3b 72 65 74 75 72 6e 20 61 28 64 6f 63 75 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 21 61 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 26 26 21 28 21 74 76 65 5f 64 61 73 68 5f 66 72 6f 6e 74 2e 66 6f 72 63 65 5f 61 6a 61 78 5f 73 65 6e 64 26 26 74 76 65 5f 64 61 73 68 5f 66 72 6f 6e 74 2e 69 73 5f 63 72 61 77 6c 65 72 29 26 26 28 54 56 45 5f 44 61 73 68 2e 73 65 6e 64 5f 61 6a 61 78 28 74 2c 73 Data Ascii: ))},a((function(){window.TVE_Dash=window.TVE_Dash\|\|TVE_Dash,setTimeout((function(){var e=new a.Event("tve-dash.load");return a(document).trigger(e),!a.isEmptyObject(t)&&!(!tve_dash_front.force_ajax_send&&tve_dash_front.is_crawler)&&(TVE_Dash.send_ajax(t,s
2024-04-25 19:25:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49844	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:29 UTC	972	OUT	GET /wp-content/plugins/q2w3-fixed-widget/js/frontend.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:30 UTC	948	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:30 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b825c87e44d3-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"63ecad61-5b89" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Wed, 15 Feb 2023 10:01:05 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9gRiqugW7%2BbnfTZu8TeCqMmOGNVJDAYM2jJtWDrxreVt%2B%2BQGAHn8LT9K5KDKBHxsO%2BRkddH8iQf8Z%2BBjY8mgxsKLdiDPwiinnEkPrHtpOxofojaQa5LdaOuiZqyWS%2F8%2BrBM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:30 UTC	421	IN	Data Raw: 35 62 38 39 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 72 65 74 75 72 6e 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 64 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 64 2c 62 29 7b 66 6f 72 28 76 61 72 20 70 20 69 6e 20 62 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 70 29 26 26 28 64 5b 70 5d 3d 62 5b 70 5d 29 7d 2c 65 78 74 65 6e 64 53 74 61 74 69 63 73 Data Ascii: 5b89"use strict";var extendStatics=function(d,b){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(d,b){d.__proto__=b}\|\|function(d,b){for(var p in b)Object.prototype.hasOwnProperty.call(b,p)&&(d[p]=b[p])},extendStatics
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 64 7d 65 78 74 65 6e 64 53 74 61 74 69 63 73 28 64 2c 62 29 2c 64 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 62 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 29 3a 28 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 5f 5f 29 7d 76 61 72 20 5f 5f 61 73 73 69 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 73 2c 69 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 3c 6e 3b 69 2b 2b 29 66 6f 72 28 76 61 72 20 70 20 69 6e 20 73 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: his.constructor=d}extendStatics(d,b),d.prototype=null===b?Object.create(b):(__.prototype=b.prototype,new __)}var __assign=function(){return __assign=Object.assign\|\|function(t){for(var s,i=1,n=arguments.length;i<n;i++)for(var p in s=arguments[i])Object.pro
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 75 73 65 72 5f 6d 61 72 67 69 6e 73 3d 7b 7d 2c 74 68 69 73 2e 72 6f 6f 74 3d 30 2c 74 68 69 73 2e 74 6f 70 3d 30 2c 74 68 69 73 2e 67 65 74 5f 74 6f 70 5f 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 67 65 74 5f 73 69 62 69 6c 69 6e 67 73 5f 6f 66 66 73 65 74 28 5f 74 68 69 73 2e 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 2c 5f 74 68 69 73 2e 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 28 5f 74 68 69 73 2e 65 6c 29 2c 5f 74 68 69 73 2e 75 73 65 72 5f 6d 61 72 67 69 6e 73 2e 6d 61 72 67 69 6e 5f 74 6f 70 29 7d 7d 72 65 74 75 72 6e 20 53 74 61 74 69 63 4f 66 66 73 65 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 75 73 65 72 5f 6d 61 72 67 69 6e 73 Data Ascii: ,this.user_margins={},this.root=0,this.top=0,this.get_top_offset=function(){return _this.get_sibilings_offset(_this.get_prev_sibling,_this.get_prev_sibling(_this.el),_this.user_margins.margin_top)}}return StaticOffsets.prototype.init=function(user_margins
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 26 26 28 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 26 26 28 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 3b 76 61 72 20 5f 74 68 69 73 3d 5f 73 75 70 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 6c 2c 67 65 74 5f 72 6f 6f 74 5f 6f 66 66 73 65 74 2c 6e 65 65 64 5f 74 6f 5f 63 61 6c 63 5f 6f 66 66 73 65 74 2c 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 5f 74 68 69 73 2e 67 65 74 5f 6e 65 78 74 5f 73 69 62 Data Ascii: void 0===get_prev_sibling&&(get_prev_sibling=function(){return null}),void 0===get_next_sibling&&(get_next_sibling=function(){return null});var _this=_super.call(this,el,get_root_offset,need_to_calc_offset,get_prev_sibling)\|\|this;return _this.get_next_sib
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 73 2e 62 6f 74 74 6f 6d 5f 6f 66 66 73 65 74 2e 63 6c 65 61 72 28 29 7d 2c 44 79 6e 61 6d 69 63 4f 66 66 73 65 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 3d 74 68 69 73 2e 67 65 74 5f 70 6f 73 69 74 69 6f 6e 28 29 7d 2c 44 79 6e 61 6d 69 63 4f 66 66 73 65 74 73 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 5f 6d 61 78 5f 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 29 7b 74 68 69 73 2e 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 3d 6d 61 78 5f 74 6f 70 5f 6f 66 66 73 65 74 2c 74 68 69 73 2e 72 65 6c 61 74 69 76 65 5f 74 6f 70 3d 74 68 69 73 2e 67 65 74 5f 72 65 6c 61 74 69 76 65 5f 74 6f 70 28 29 7d 2c 44 79 6e 61 6d 69 63 4f 66 Data Ascii: s.bottom_offset.clear()},DynamicOffsets.prototype.update=function(){this.position=this.get_position()},DynamicOffsets.prototype.set_max_offset=function(max_top_offset){this.max_top_offset=max_top_offset,this.relative_top=this.get_relative_top()},DynamicOf
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 72 65 6a 65 63 74 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 73 2e 75 70 64 61 74 65 28 29 7d 2c 42 61 73 65 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 73 2e 63 6c 65 61 72 28 29 7d 2c 42 61 73 65 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 7d 2c 42 61 73 65 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 61 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 3d 28 5f 61 3d 74 68 69 73 2e 65 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 5f 61 3f 76 6f 69 64 20 30 Data Ascii: reject){this.offsets.update()},BaseWidget.prototype.unmount=function(){this.offsets.clear()},BaseWidget.prototype.getElement=function(){return this.el},BaseWidget.prototype.toString=function(){var _a;return"".concat(null===(_a=this.el)\|\|void 0===_a?void 0
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 77 69 64 67 65 74 22 29 3f 67 65 74 57 69 64 67 65 74 43 6f 6e 74 61 69 6e 65 72 28 65 6c 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 3a 65 6c 7d 2c 63 6f 6d 70 61 74 61 62 69 6c 74 79 5f 46 57 5f 76 35 3d 66 75 6e 63 74 69 6f 6e 28 73 65 6c 65 63 74 6f 72 73 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 73 65 6c 65 63 74 6f 72 73 26 26 28 73 65 6c 65 63 74 6f 72 73 3d 5b 5d 29 2c 73 65 6c 65 63 74 6f 72 73 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 21 2f 5e 5b 61 2d 7a 5d 2f 69 2e 74 65 73 74 28 73 29 7d 29 29 3f 73 65 6c 65 63 74 6f 72 73 3a 73 65 6c 65 63 74 6f 72 73 2e 63 6f 6e 63 61 74 28 73 65 6c 65 63 74 6f 72 73 2e 6d 61 70 28 28 66 75 6e Data Ascii: nt.classList.contains("widget")?getWidgetContainer(el.parentElement):el},compatabilty_FW_v5=function(selectors){return void 0===selectors&&(selectors=[]),selectors.some((function(s){return!/^[a-z]/i.test(s)}))?selectors:selectors.concat(selectors.map((fun
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 73 2e 6f 66 66 73 65 74 73 3d 6e 65 77 20 44 79 6e 61 6d 69 63 4f 66 66 73 65 74 73 28 5f 74 68 69 73 2e 65 6c 2c 5f 74 68 69 73 2e 67 65 74 5f 72 6f 6f 74 5f 6f 66 66 73 65 74 2c 5f 74 68 69 73 2e 6e 65 65 64 5f 74 6f 5f 63 61 6c 63 5f 65 6c 5f 6f 66 66 73 65 74 2c 5f 74 68 69 73 2e 67 65 74 5f 70 72 65 76 5f 73 69 62 6c 69 6e 67 2c 5f 74 68 69 73 2e 67 65 74 5f 6e 65 78 74 5f 73 69 62 6c 69 6e 67 29 2c 5f 74 68 69 73 7d 72 65 74 75 72 6e 20 5f 5f 65 78 74 65 6e 64 73 28 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2c 5f 73 75 70 65 72 29 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 75 73 65 72 5f 6d 61 72 67 69 6e 73 29 7b 76 61 72 20 5f 74 68 69 73 3d 74 68 69 73 3b 5f 73 75 70 Data Ascii: s.offsets=new DynamicOffsets(_this.el,_this.get_root_offset,_this.need_to_calc_el_offset,_this.get_prev_sibling,_this.get_next_sibling),_this}return __extends(PositionWidget,_super),PositionWidget.prototype.mount=function(user_margins){var _this=this;_sup
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 65 6a 65 63 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 65 74 68 6f 64 20 69 73 20 6e 6f 74 20 6f 76 65 72 72 69 64 64 65 6e 21 22 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 74 68 69 73 2e 69 73 5f 70 69 6e 6e 65 64 26 26 74 68 69 73 2e 65 6c 26 26 28 74 68 69 73 2e 69 73 5f 70 69 6e 6e 65 64 3d 21 30 2c 74 68 69 73 2e 65 6c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 46 69 78 65 64 57 69 64 67 65 74 5f 5f 66 69 78 65 64 5f 77 69 64 67 65 74 5f 5f 70 69 6e 6e 65 64 22 29 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 70 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 5f 70 69 6e 6e 65 64 Data Ascii: eject){throw new Error("Method is not overridden!")},PositionWidget.prototype.pin=function(){!this.is_pinned&&this.el&&(this.is_pinned=!0,this.el.classList.add("FixedWidget__fixed_widget__pinned"))},PositionWidget.prototype.unpin=function(){this.is_pinned
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 79 6c 65 29 74 68 69 73 2e 65 6c 2e 73 74 79 6c 65 5b 70 72 6f 70 5d 3d 74 68 69 73 2e 69 6e 69 74 5f 73 74 79 6c 65 5b 70 72 6f 70 5d 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 74 6f 72 65 5f 72 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 65 6c 29 66 6f 72 28 76 61 72 20 70 72 6f 70 20 69 6e 20 74 68 69 73 2e 69 6e 69 74 5f 72 65 63 74 29 74 68 69 73 2e 65 6c 2e 73 74 79 6c 65 5b 70 72 6f 70 5d 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 69 6e 69 74 5f 72 65 63 74 5b 70 72 6f 70 5d 2c 22 70 78 22 29 7d 2c 50 6f 73 69 74 69 6f 6e 57 69 64 67 65 74 7d 28 42 61 73 65 57 69 64 67 65 74 29 2c 46 69 78 65 64 57 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 5f 73 75 70 65 72 29 7b 66 75 Data Ascii: yle)this.el.style[prop]=this.init_style[prop]},PositionWidget.prototype.restore_rect=function(){if(this.el)for(var prop in this.init_rect)this.el.style[prop]="".concat(this.init_rect[prop],"px")},PositionWidget}(BaseWidget),FixedWidget=function(_super){fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49845	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:30 UTC	979	OUT	GET /wp-content/plugins/wp-whatsapp-chat/build/frontend/js/index.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:30 UTC	944	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:30 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8274aab8bbb-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"64b0fa99-1d0d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 14 Jul 2023 07:34:49 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SxuLY2sxVSMZ3rg12cwcUUwXDeOrzJ0G5HheBUnSOnk2SCOhArOfvuI6bvHNFNk2b47lplzufi%2FrM54zpx9d8%2BGTHs4WBFEBl%2FSQWmoQBgeYLKNjz%2Fbm8iJwZgJun5bN%2BXw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:30 UTC	425	IN	Data Raw: 31 64 30 64 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 65 2e 69 6e 63 6c 75 64 65 73 28 70 61 72 73 65 49 6e 74 28 74 29 29 7c 7c 21 21 65 2e 69 6e 63 6c 75 64 65 73 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2b 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 6c 65 74 20 74 3d 22 22 2b 65 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 28 74 3d 22 30 22 2b 74 29 2c 65 2e 67 65 74 48 6f 75 72 73 28 29 2b 22 3a 22 2b 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 74 68 69 73 2e 71 6c 77 61 70 70 3d 65 2c 74 Data Ascii: 1d0d(()=>{"use strict";function e(e,t){return!!e.includes(parseInt(t))\|\|!!e.includes(t.toString())}function t(e,t){return parseInt(e+t)}function n(e){let t=""+e.getMinutes();return 1===t.length&&(t="0"+t),e.getHours()+":"+t}function s(e){this.qlwapp=e,t
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 61 74 61 73 65 74 2e 70 68 6f 6e 65 7c 7c 22 22 2c 69 3d 73 2e 64 61 74 61 73 65 74 2e 74 79 70 65 7c 7c 22 70 68 6f 6e 65 22 2c 6c 3d 73 2e 64 61 74 61 73 65 74 2e 67 72 6f 75 70 7c 7c 22 22 3b 22 67 72 6f 75 70 22 3d 3d 69 3f 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 6c 29 3a 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 6e 2b 22 3f 70 68 6f 6e 65 3d 22 2b 6f 2b 22 26 74 65 78 74 3d 22 2b 61 29 3b 63 6f 6e 73 74 20 70 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 71 6c 77 61 70 70 2e 63 6c 69 63 6b 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3b 74 68 69 73 2e 71 6c 77 61 70 70 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 70 29 7d 2c 74 6f 67 67 6c 65 28 65 29 Data Ascii: ataset.phone\|\|"",i=s.dataset.type\|\|"phone",l=s.dataset.group\|\|"";"group"==i?s.setAttribute("href",l):s.setAttribute("href",n+"?phone="+o+"&text="+a);const p=new CustomEvent("qlwapp.click",{bubbles:!0,cancelable:!0});this.qlwapp.dispatchEvent(p)},toggle(e)
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 28 22 63 6c 6f 73 69 6e 67 22 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 72 65 73 70 6f 6e 73 65 22 2c 22 63 6c 6f 73 69 6e 67 22 29 2c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 74 65 78 74 69 6e 67 22 29 7d 29 2c 33 30 30 29 7d 2c 69 6e 69 74 28 73 29 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 71 6c 77 61 70 70 2e 69 6e 69 74 22 29 2c 6f 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 71 6c 77 61 70 70 2e 72 65 73 69 7a 65 22 29 2c 69 3d 74 68 69 73 2e 71 6c 77 61 70 70 3b 69 66 28 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 71 6c 77 61 70 70 2d 6a 73 2d 72 65 61 64 79 22 29 2c 69 2e 63 6c 61 73 73 Data Ascii: ("closing"),setTimeout((function(){n.classList.remove("response","closing"),n.classList.remove("texting")}),300)},init(s){const a=new CustomEvent("qlwapp.init"),o=new CustomEvent("qlwapp.resize"),i=this.qlwapp;if(i.classList.add("qlwapp-js-ready"),i.class
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 6c 75 64 65 73 28 6c 29 26 26 28 70 26 26 28 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 29 2c 72 26 26 28 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 29 29 3b 63 6f 6e 73 74 20 63 3d 61 2e 64 61 74 61 73 65 74 2e 74 69 6d 65 66 72 6f 6d 7c 7c 21 31 2c 75 3d 61 2e 64 61 74 61 73 65 74 2e 74 69 6d 65 74 6f 7c 7c 21 31 3b 69 66 28 21 75 7c 7c 21 63 7c 7c 63 3d 3d 3d 75 29 72 65 74 75 72 6e 21 30 3b 63 6f 6e 73 74 20 64 3d 6e 65 77 20 44 61 74 65 2c 77 3d 2d 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2d 69 2c 71 3d 6e 65 77 20 44 61 74 65 2c 6d 3d 6e 65 77 20 44 61 74 65 3b 6c 65 74 20 67 2c 66 3b 67 3d 74 28 63 5b 30 5d 2c 63 5b 31 5d 29 2c 66 3d 74 28 63 5b 33 5d 2c 63 5b 34 5d 29 2c 6d 2e Data Ascii: ludes(l)&&(p&&(p.style.display="none"),r&&(r.style.display="block"));const c=a.dataset.timefrom\|\|!1,u=a.dataset.timeto\|\|!1;if(!u\|\|!c\|\|c===u)return!0;const d=new Date,w=-d.getTimezoneOffset()-i,q=new Date,m=new Date;let g,f;g=t(c[0],c[1]),f=t(c[3],c[4]),m.
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 6e 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 71 6c 77 61 70 70 2d 62 6f 64 79 22 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 71 6c 77 61 70 70 2d 63 61 72 6f 75 73 65 6c 22 29 2c 61 3d 74 3f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 71 6c 77 61 70 70 2d 68 65 61 64 65 72 22 29 3f 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 30 2c 6f 3d 74 3f 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 71 6c 77 61 70 70 2d 66 6f 6f 74 65 72 22 29 3f 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 30 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2d 61 2d 6f 3b 73 2e 6d 6f 62 Data Ascii: tion(e){const t=e.currentTarget,n=t.querySelector(".qlwapp-body").querySelector(".qlwapp-carousel"),a=t?.querySelector(".qlwapp-header")?.offsetHeight\|\|0,o=t?.querySelector(".qlwapp-footer")?.offsetHeight\|\|0;if(!n)return;let i=window.innerHeight-a-o;s.mob
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 73 65 45 76 65 6e 74 28 22 63 6c 69 63 6b 22 2c 21 30 2c 21 30 2c 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 31 2c 30 2c 30 2c 30 2c 30 2c 21 31 2c 21 31 2c 21 31 2c 21 31 2c 30 2c 6e 75 6c 6c 29 2c 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 29 7d 65 6c 73 65 20 65 2e 63 6c 69 63 6b 28 29 7d 28 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 71 6c 77 61 70 70 2d 72 65 70 6c 79 22 29 29 7d 29 2c 31 30 30 29 7d 29 29 2c 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 64 61 74 61 2d 61 63 74 69 6f 6e 3d 72 65 73 70 6f 6e 73 65 5d 22 29 3f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 75 70 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 74 61 72 67 65 74 2e 6d 61 74 63 68 65 73 28 22 74 65 78 74 61 72 65 61 Data Ascii: seEvent("click",!0,!0,t.defaultView,1,0,0,0,0,!1,!1,!1,!1,0,null),e.dispatchEvent(n)}else e.click()}(i.querySelector(".qlwapp-reply"))}),100)})),i.querySelector("[data-action=response]")?.addEventListener("keyup",(function(e){if(e.target.matches("textarea
2024-04-25 19:25:30 UTC	175	IN	Data Raw: 70 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 65 7d 7d 3b 63 6f 6e 73 74 20 65 3d 28 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 71 6c 77 61 70 70 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 71 6c 77 61 70 70 28 65 29 7d 29 29 7d 3b 65 28 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 28 29 3d 3e 7b 65 28 29 7d 29 29 7d 29 28 29 7d 29 28 29 3b 0d 0a Data Ascii: p=null),void 0!==n?n:e}};const e=()=>{document.querySelectorAll(".qlwapp").forEach((function(e){window.qlwapp(e)}))};e(),window.addEventListener("load",(()=>{e()}))})()})();
2024-04-25 19:25:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49846	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:30 UTC	986	OUT	GET /wp-content/themes/edumall/assets/libs/validate/jquery.validate.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:30 UTC	946	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:30 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b82749d3673b-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-5ae0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IPyNMHJuwvpIXEqlOaYX2qCLzjpS1DJs5YCtKMbP1Np3PbQS2w%2B%2FtX2HncmRArogXGIUZAL78YagS6WU1pNySBAD04N0LN%2BNhi127QMnn%2F2cBaSn19AJFM8%2B5q0CA8%2FsJ5E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:30 UTC	423	IN	Data Raw: 35 61 65 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 37 2e 30 20 2d 20 37 2f 32 39 2f 32 30 31 37 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 Data Ascii: 5ae0/! jQuery Validation Plugin - v1.17.0 - 7/29/2017 https://jqueryvalidation.org/ * Copyright (c) 2017 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exp
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 28 22 4e 6f 74 68 69 6e 67 20 73 65 6c 65 63 74 65 64 2c 20 63 61 6e 27 74 20 76 61 6c 69 64 61 74 65 2c 20 72 65 74 75 72 6e 69 6e 67 20 6e 6f 74 68 69 6e 67 2e 22 29 29 3b 76 61 72 20 63 3d 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 63 3f 63 3a 28 74 68 69 73 2e 61 74 74 72 28 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 29 2c 63 3d 6e 65 77 20 61 2e 76 61 6c 69 64 61 74 6f 72 28 62 2c 74 68 69 73 5b 30 5d 29 2c 61 2e 64 61 74 61 28 74 68 69 73 5b 30 5d 2c 22 76 61 6c 69 64 61 74 6f 72 22 2c 63 29 2c 63 2e 73 65 74 74 69 6e 67 73 2e 6f 6e 73 75 62 6d 69 74 26 26 28 74 68 69 73 2e 6f 6e 28 22 63 6c 69 63 6b 2e 76 61 6c 69 64 61 74 65 22 2c 22 3a 73 75 62 6d 69 74 Data Ascii: ("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 3d 64 2e 72 75 6c 65 73 2c 66 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 73 74 61 74 69 63 52 75 6c 65 73 28 6a 29 2c 62 29 7b 63 61 73 65 22 61 64 64 22 3a 61 2e 65 78 74 65 6e 64 28 66 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6e 6f 72 6d 61 6c 69 7a 65 52 75 6c 65 28 63 29 29 2c 64 65 6c 65 74 65 20 66 2e 6d 65 73 73 61 67 65 73 2c 65 5b 6a 2e 6e 61 6d 65 5d 3d 66 2c 63 2e 6d 65 73 73 61 67 65 73 26 26 28 64 2e 6d 65 73 73 61 67 65 73 5b 6a 2e 6e 61 6d 65 5d 3d 61 2e 65 78 74 65 6e 64 28 64 2e 6d 65 73 73 61 67 65 73 5b 6a 2e 6e 61 6d 65 5d 2c 63 2e 6d 65 73 73 61 67 65 73 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 6d 6f 76 65 22 3a 72 65 74 75 72 6e 20 63 3f 28 69 3d 7b 7d 2c 61 2e 65 61 63 68 28 63 2e 73 70 6c 69 74 28 2f 5c 73 2f 29 2c 66 75 6e 63 74 Data Ascii: =d.rules,f=a.validator.staticRules(j),b){case"add":a.extend(f,a.validator.normalizeRule(c)),delete f.messages,e[j.name]=f,c.messages&&(d.messages[j.name]=a.extend(d.messages[j.name],c.messages));break;case"remove":return c?(i={},a.each(c.split(/\s/),funct
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 72 72 6f 72 43 6c 61 73 73 3a 22 65 72 72 6f 72 22 2c 70 65 6e 64 69 6e 67 43 6c 61 73 73 3a 22 70 65 6e 64 69 6e 67 22 2c 76 61 6c 69 64 43 6c 61 73 73 3a 22 76 61 6c 69 64 22 2c 65 72 72 6f 72 45 6c 65 6d 65 6e 74 3a 22 6c 61 62 65 6c 22 2c 66 6f 63 75 73 43 6c 65 61 6e 75 70 3a 21 31 2c 66 6f 63 75 73 49 6e 76 61 6c 69 64 3a 21 30 2c 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 3a 61 28 5b 5d 29 2c 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 3a 61 28 5b 5d 29 2c 6f 6e 73 75 62 6d 69 74 3a 21 30 2c 69 67 6e 6f 72 65 3a 22 3a 68 69 64 64 65 6e 22 2c 69 67 6e 6f 72 65 54 69 74 6c 65 3a 21 31 2c 6f 6e 66 6f 63 75 73 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 61 73 74 41 63 74 69 76 65 3d 61 2c 74 68 69 73 2e 73 65 74 74 69 6e Data Ascii: rrorClass:"error",pendingClass:"pending",validClass:"valid",errorElement:"label",focusCleanup:!1,focusInvalid:!0,errorContainer:a([]),errorLabelContainer:a([]),onsubmit:!0,ignore:":hidden",ignoreTitle:!1,onfocusin:function(a){this.lastActive=a,this.settin
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 61 74 65 49 53 4f 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 64 61 74 65 20 28 49 53 4f 29 2e 22 2c 6e 75 6d 62 65 72 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 61 20 76 61 6c 69 64 20 6e 75 6d 62 65 72 2e 22 2c 64 69 67 69 74 73 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 6f 6e 6c 79 20 64 69 67 69 74 73 2e 22 2c 65 71 75 61 6c 54 6f 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 74 68 65 20 73 61 6d 65 20 76 61 6c 75 65 20 61 67 61 69 6e 2e 22 2c 6d 61 78 6c 65 6e 67 74 68 3a 61 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 28 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 6e 6f 20 6d 6f 72 65 20 74 68 61 6e 20 7b 30 7d 20 63 68 61 72 61 63 74 65 72 73 2e 22 29 2c 6d 69 6e 6c 65 6e 67 74 68 3a 61 2e 76 61 6c 69 64 61 74 6f 72 Data Ascii: ateISO:"Please enter a valid date (ISO).",number:"Please enter a valid number.",digits:"Please enter only digits.",equalTo:"Please enter the same value again.",maxlength:a.validator.format("Please enter no more than {0} characters."),minlength:a.validator
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 6e 67 73 2e 67 72 6f 75 70 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 2f 5c 73 2f 29 29 2c 61 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 64 5b 63 5d 3d 62 7d 29 7d 29 2c 63 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 72 75 6c 65 73 2c 61 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 64 29 7b 63 5b 62 5d 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6e 6f 72 6d 61 6c 69 7a 65 52 75 6c 65 28 64 29 7d 29 2c 61 28 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 2e 6f 6e 28 22 66 6f 63 75 73 69 6e 2e 76 61 6c 69 64 61 74 65 20 66 6f 63 75 73 6f 75 74 2e 76 61 6c 69 64 61 74 65 20 6b 65 79 75 70 2e 76 61 6c 69 64 61 74 65 22 2c 22 3a Data Ascii: ngs.groups,function(b,c){"string"==typeof c&&(c=c.split(/\s/)),a.each(c,function(a,c){d[c]=b})}),c=this.settings.rules,a.each(c,function(b,d){c[b]=a.validator.normalizeRule(d)}),a(this.currentForm).on("focusin.validate focusout.validate keyup.validate",":
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 70 73 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 3d 3d 64 26 26 61 21 3d 3d 66 2e 6e 61 6d 65 26 26 28 65 3d 67 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 67 2e 63 6c 65 61 6e 28 67 2e 66 69 6e 64 42 79 4e 61 6d 65 28 61 29 29 29 2c 65 26 26 65 2e 6e 61 6d 65 20 69 6e 20 67 2e 69 6e 76 61 6c 69 64 26 26 28 67 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 2e 70 75 73 68 28 65 29 2c 68 3d 67 2e 63 68 65 63 6b 28 65 29 26 26 68 29 29 7d 29 2c 63 3d 74 68 69 73 2e 63 68 65 63 6b 28 66 29 21 3d 3d 21 31 2c 68 3d 68 26 26 63 2c 63 3f 74 68 69 73 2e 69 6e 76 61 6c 69 64 5b 66 2e 6e 61 6d 65 5d 3d 21 31 3a 74 68 69 73 2e 69 6e 76 61 6c 69 64 5b 66 2e 6e 61 6d 65 5d 3d 21 30 2c 74 68 69 73 2e 6e 75 6d 62 65 72 4f 66 49 6e 76 61 6c 69 Data Ascii: ps,function(a,b){b===d&&a!==f.name&&(e=g.validationTargetFor(g.clean(g.findByName(a))),e&&e.name in g.invalid&&(g.currentElements.push(e),h=g.check(e)&&h))}),c=this.check(f)!==!1,h=h&&c,c?this.invalid[f.name]=!1:this.invalid[f.name]=!0,this.numberOfInvali
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 30 21 3d 3d 61 5b 62 5d 26 26 6e 75 6c 6c 21 3d 3d 61 5b 62 5d 26 26 61 5b 62 5d 21 3d 3d 21 31 26 26 63 2b 2b 3b 72 65 74 75 72 6e 20 63 7d 2c 68 69 64 65 45 72 72 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 69 64 65 54 68 65 73 65 28 74 68 69 73 2e 74 6f 48 69 64 65 29 7d 2c 68 69 64 65 54 68 65 73 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6e 6f 74 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 29 2e 74 65 78 74 28 22 22 29 2c 74 68 69 73 2e 61 64 64 57 72 61 70 70 65 72 28 61 29 2e 68 69 64 65 28 29 7d 2c 76 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 73 69 7a 65 28 29 7d 2c 73 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 4c Data Ascii: 0!==a[b]&&null!==a[b]&&a[b]!==!1&&c++;return c},hideErrors:function(){this.hideThese(this.toHide)},hideThese:function(a){a.not(this.containers).text(""),this.addWrapper(a).hide()},valid:function(){return 0===this.size()},size:function(){return this.errorL
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 73 65 74 49 6e 74 65 72 6e 61 6c 73 28 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 3d 61 28 5b 5d 29 7d 2c 70 72 65 70 61 72 65 46 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 73 65 74 28 29 2c 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 65 72 72 6f 72 73 28 29 2e 61 64 64 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 29 7d 2c 70 72 65 70 61 72 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 72 65 73 65 74 28 29 2c 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 65 72 72 6f 72 73 46 6f 72 28 61 29 7d 2c 65 6c 65 6d 65 6e 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 61 28 62 Data Ascii: :function(){this.resetInternals(),this.currentElements=a([])},prepareForm:function(){this.reset(),this.toHide=this.errors().add(this.containers)},prepareElement:function(a){this.reset(),this.toHide=this.errorsFor(a)},elementValue:function(b){var c,d,e=a(b
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 65 74 74 69 6e 67 73 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 45 78 63 65 70 74 69 6f 6e 20 6f 63 63 75 72 72 65 64 20 77 68 65 6e 20 63 68 65 63 6b 69 6e 67 20 65 6c 65 6d 65 6e 74 20 22 2b 62 2e 69 64 2b 22 2c 20 63 68 65 63 6b 20 74 68 65 20 27 22 2b 65 2e 6d 65 74 68 6f 64 2b 22 27 20 6d 65 74 68 6f 64 2e 22 2c 6b 29 2c 6b 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 79 70 65 45 72 72 6f 72 26 26 28 6b 2e 6d 65 73 73 61 67 65 2b 3d 22 2e 20 20 45 78 63 65 70 74 69 6f 6e 20 6f 63 63 75 72 72 65 64 20 77 68 65 6e 20 63 68 65 63 6b 69 6e 67 20 65 6c 65 6d 65 6e 74 20 22 2b 62 2e 69 64 2b 22 2c 20 63 68 65 63 6b 20 74 68 65 20 27 22 2b 65 2e 6d 65 74 68 6f 64 2b 22 27 20 6d 65 74 68 6f 64 2e Data Ascii: ettings.debug&&window.console&&console.log("Exception occurred when checking element "+b.id+", check the '"+e.method+"' method.",k),k instanceof TypeError&&(k.message+=". Exception occurred when checking element "+b.id+", check the '"+e.method+"' method.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49847	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:30 UTC	965	OUT	GET /wp-content/themes/edumall/assets/js/login.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:30 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:30 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8274a561351-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1d21" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FXpOddQmgE1o9sxrMepMh3yLtF46uXd2CnWUAkLxwQKHCWoL48PQkOYSuPp4p1LiIdXEcFKpkypjj8zlRw2NNJVUGza3LuY5cqpWSBk8kSUgqkU7G%2BvMlhFT1nWPV9AWzo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:30 UTC	431	IN	Data Raw: 31 64 32 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 61 29 7b 74 68 69 73 2e 41 43 54 49 56 45 5f 43 4c 41 53 53 3d 22 6f 70 65 6e 22 2c 74 68 69 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 70 6f 70 75 70 2d 6f 76 65 72 6c 61 79 2c 20 2e 62 75 74 74 6f 6e 2d 63 6c 6f 73 65 2d 70 6f 70 75 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 61 2e 63 6c 6f 73 65 28 29 7d 29 7d 2c 74 68 69 73 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 22 2e 65 64 75 6d 61 6c 6c 2d 70 6f Data Ascii: 1d21!function(l){"use strict";function r(e,a){this.ACTIVE_CLASS="open",this.init=function(){var a=this;e.on("click",".popup-overlay, .button-close-popup",function(e){e.preventDefault(),e.stopPropagation(),a.close()})},this.open=function(){l(".edumall-po
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 20 30 3b 69 66 28 61 29 7b 76 61 72 20 6f 3d 5b 5d 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 28 74 68 69 73 29 2e 64 61 74 61 28 22 45 64 75 6d 61 6c 6c 50 6f 70 75 70 22 29 3b 6f 2e 70 75 73 68 28 65 29 7d 29 3b 76 61 72 20 73 3d 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 3a 76 6f 69 64 20 30 2c 74 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 6f 5b 65 5d 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 24 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 20 6e 6f 74 20 69 6e 73 74 61 6e 74 69 61 74 Data Ascii: 0;if(a){var o=[];this.each(function(){var e=l(this).data("EdumallPopup");o.push(e)});var s=1<arguments.length?Array.prototype.slice.call(arguments,1):void 0,t=[];return this.each(function(e){e=o[e];if(!e)return console.warn("$.EdumallPopup not instantiat
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 2c 63 61 63 68 65 3a 21 31 2c 64 61 74 61 54 79 70 65 3a 22 68 74 6d 6c 22 2c 64 61 74 61 3a 7b 61 63 74 69 6f 6e 3a 22 65 64 75 6d 61 6c 6c 5f 6c 61 7a 79 5f 6c 6f 61 64 5f 74 65 6d 70 6c 61 74 65 22 2c 74 65 6d 70 6c 61 74 65 3a 61 2e 64 61 74 61 28 22 74 65 6d 70 6c 61 74 65 22 29 7d 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 69 6e 64 28 22 2e 70 6f 70 75 70 2d 63 6f 6e 74 65 6e 74 2d 69 6e 6e 65 72 22 29 2e 68 74 6d 6c 28 65 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 22 70 6f 70 75 70 2d 6c 6f 61 64 65 64 22 29 2c 61 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 28 22 6f 70 65 6e 22 29 2c 61 2e 66 69 6e 64 28 22 2e 6d 6f 2d 6f 70 65 6e 69 64 2d 61 70 70 2d 69 63 6f 6e 73 20 2e 62 74 6e 2d 73 6f 63 69 61 6c 22 29 2e 72 65 6d 6f 76 65 Data Ascii: ,cache:!1,dataType:"html",data:{action:"edumall_lazy_load_template",template:a.data("template")},success:function(e){a.find(".popup-content-inner").html(e),a.addClass("popup-loaded"),a.EdumallPopup("open"),a.find(".mo-openid-app-icons .btn-social").remove
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 73 43 6c 61 73 73 28 22 6c 6f 67 67 65 64 2d 69 6e 22 29 26 26 6e 28 29 2c 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 70 65 6e 2d 70 6f 70 75 70 2d 6c 6f 67 69 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 6e 28 29 7d 29 2c 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 70 65 6e 2d 70 6f 70 75 70 2d 72 65 67 69 73 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 73 2e 68 61 73 43 6c 61 73 73 28 22 70 6f 70 75 70 2d 6c 6f 61 64 65 64 22 29 3f 73 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 28 22 6f 70 65 6e 22 29 3a 6c 2e 61 Data Ascii: sClass("logged-in")&&n(),e.on("click",".open-popup-login",function(e){e.preventDefault(),e.stopPropagation(),n()}),e.on("click",".open-popup-register",function(e){e.preventDefault(),e.stopPropagation(),s.hasClass("popup-loaded")?s.EdumallPopup("open"):l.a
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 2c 61 2c 6f 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 6f 29 7d 2c 62 65 66 6f 72 65 53 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 22 2e 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 22 29 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 28 22 63 6c 6f 73 65 22 29 2c 6f 2e 61 64 64 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 7d 7d 29 7d 29 2c 65 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 6f 70 65 6e 2d 70 6f 70 75 70 2d 6c 6f 73 74 2d 70 61 73 73 77 6f 72 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 74 2e 68 61 73 Data Ascii: ion(e,a,o){console.log(o)},beforeSend:function(){l(".edumall-popup").EdumallPopup("close"),o.addClass("open")},complete:function(){o.removeClass("open")}})}),e.on("click",".open-popup-lost-password",function(e){e.preventDefault(),e.stopPropagation(),t.has
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 20 61 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 28 61 3d 6c 28 22 23 65 64 75 6d 61 6c 6c 2d 70 6f 70 75 70 2d 69 6e 73 74 72 75 63 74 6f 72 2d 72 65 67 69 73 74 65 72 22 29 29 2e 68 61 73 43 6c 61 73 73 28 22 70 6f 70 75 70 2d 6c 6f 61 64 65 64 22 29 3f 61 2e 45 64 75 6d 61 6c 6c 50 6f 70 75 70 28 22 6f 70 65 6e 22 29 3a 6c 2e 61 6a 61 78 28 7b 75 72 6c 3a 24 65 64 75 6d 61 6c 6c 2e 61 6a 61 78 75 72 6c 2c 74 79 70 65 3a 22 47 45 54 22 2c 63 61 63 68 65 3a 21 31 2c 64 61 74 61 54 79 70 65 3a 22 68 74 6d 6c 22 2c 64 61 74 61 3a 7b 61 63 74 69 6f 6e 3a 22 65 64 75 6d 61 6c 6c 5f 6c 61 7a 79 5f 6c 6f 61 64 5f 74 65 6d 70 6c 61 74 65 22 2c 74 65 6d 70 6c 61 74 65 3a 61 2e 64 61 74 Data Ascii: a;e.preventDefault(),e.stopPropagation(),(a=l("#edumall-popup-instructor-register")).hasClass("popup-loaded")?a.EdumallPopup("open"):l.ajax({url:$edumall.ajaxurl,type:"GET",cache:!1,dataType:"html",data:{action:"edumall_lazy_load_template",template:a.dat
2024-04-25 19:25:30 UTC	189	IN	Data Raw: 28 22 2e 66 6f 72 6d 2d 69 6e 70 75 74 2d 70 61 73 73 77 6f 72 64 22 29 2c 65 3d 61 2e 63 68 69 6c 64 72 65 6e 28 22 69 6e 70 75 74 22 29 3b 22 70 61 73 73 77 6f 72 64 22 3d 3d 3d 65 2e 61 74 74 72 28 22 74 79 70 65 22 29 3f 28 65 2e 61 74 74 72 28 22 74 79 70 65 22 2c 22 74 65 78 74 22 29 2c 61 2e 61 64 64 43 6c 61 73 73 28 22 73 68 6f 77 2d 70 77 22 29 29 3a 28 65 2e 61 74 74 72 28 22 74 79 70 65 22 2c 22 70 61 73 73 77 6f 72 64 22 29 2c 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 68 6f 77 2d 70 77 22 29 29 7d 29 7d 29 7d 28 6a 51 75 65 72 79 29 3b 0d 0a Data Ascii: (".form-input-password"),e=a.children("input");"password"===e.attr("type")?(e.attr("type","text"),a.addClass("show-pw")):(e.attr("type","password"),a.removeClass("show-pw"))})})}(jQuery);
2024-04-25 19:25:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49848	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:30 UTC	973	OUT	GET /wp-content/themes/edumall/assets/js/tutor/general.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:30 UTC	935	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:30 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8279e8bb0c7-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-a4d" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R9xjYnZKgrIVp2YDs771O46NY%2FQvZRKO6hqRtzF6CiOQVkT8kJVfuSHKCtE4heJKQX9kxIbyNTRriiDnUbDFfulreAMR8kVDGaTd8SbX4bBGPz8vR4JyUj4sI1tsYjahKfg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:30 UTC	434	IN	Data Raw: 61 34 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 6e 28 22 62 6f 64 79 22 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 31 32 30 30 3c 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3f 28 74 2e 61 64 64 43 6c 61 73 73 28 22 64 61 73 68 62 6f 61 72 64 2d 6e 61 76 2d 66 69 78 65 64 22 29 2c 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 64 61 73 68 62 6f 61 72 64 2d 6e 61 76 2d 6f 70 65 6e 65 64 22 29 29 3a 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 64 61 73 68 62 6f 61 72 64 2d 6e 61 76 2d 66 69 78 65 64 22 29 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2d 6e 28 22 2e 64 61 73 68 62 6f 61 72 64 2d 6e 61 76 2d 68 65 61 64 65 72 22 29 2e 6f 75 74 65 72 48 65 69 Data Ascii: a4d!function(n){"use strict";var t=n("body");function e(){1200<=window.innerWidth?(t.addClass("dashboard-nav-fixed"),t.removeClass("dashboard-nav-opened")):t.removeClass("dashboard-nav-fixed");var e=window.innerHeight-n(".dashboard-nav-header").outerHei
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6e 28 22 62 6f 64 79 22 29 2e 68 61 73 43 6c 61 73 73 28 22 6c 6f 67 67 65 64 2d 69 6e 22 29 26 26 28 65 3d 28 61 3d 6e 28 74 68 69 73 29 29 2e 61 74 74 72 28 22 64 61 74 61 2d 63 6f 75 72 73 65 2d 69 64 22 29 2c 6e 2e 61 6a 61 78 28 7b 75 72 6c 3a 24 65 64 75 6d 61 6c 6c 2e 61 6a 61 78 75 72 6c 2c 74 79 70 65 3a 22 50 4f 53 54 22 2c 64 61 74 61 3a 7b 63 6f 75 72 73 65 5f 69 64 3a 65 2c 61 63 74 69 6f 6e 3a 22 74 75 74 6f 72 5f 63 6f 75 72 73 65 5f 61 64 64 5f 74 6f 5f 77 69 73 68 6c 69 73 74 22 7d 2c 62 65 66 6f 72 65 53 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 68 69 6c 64 72 65 6e 28 22 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 Data Ascii: tion(e){var a;e.preventDefault(),n("body").hasClass("logged-in")&&(e=(a=n(this)).attr("data-course-id"),n.ajax({url:$edumall.ajaxurl,type:"POST",data:{course_id:e,action:"tutor_course_add_to_wishlist"},beforeSend:function(){a.children(".button-content-wra
2024-04-25 19:25:30 UTC	841	IN	Data Raw: 72 2d 72 65 76 69 65 77 2d 22 2b 74 2b 22 20 2e 72 65 76 69 65 77 2d 63 6f 6e 74 65 6e 74 22 29 2e 68 74 6d 6c 28 65 29 2c 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 7d 7d 29 7d 29 2c 6e 28 22 2e 62 74 6e 2d 74 6f 67 67 6c 65 2d 6c 65 73 73 6f 6e 2d 73 69 64 65 62 61 72 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 6c 65 73 73 6f 6e 2d 73 69 64 65 62 61 72 2d 6f 6e 22 29 7d 29 2c 6e 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 2e 74 75 74 6f 72 2d 73 69 6e 67 6c 65 2d 6c 65 73 73 6f 6e 2d 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6c 65 73 73 6f 6e 2d 73 69 64 65 62 61 72 2d 6f 6e 22 29 7d 29 2c 6e 28 64 6f Data Ascii: r-review-"+t+" .review-content").html(e),location.reload()}})}),n(".btn-toggle-lesson-sidebar").on("click",function(){t.toggleClass("lesson-sidebar-on")}),n(document).on("click",".tutor-single-lesson-a",function(){t.removeClass("lesson-sidebar-on")}),n(do
2024-04-25 19:25:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49849	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:30 UTC	954	OUT	GET /wp-includes/js/tinymce/tinymce.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0
2024-04-25 19:25:30 UTC	947	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:30 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b829c9ce1d70-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5faab548-59402" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 10 Nov 2020 15:44:08 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y5eXeU%2BkdWWcbvT%2BOMNB%2Ff1XzWEo0JyZASLOlVqTx7LTLVM4AO0tMYMbUTZK8GUtOQyszYR82awpq7Wr01L8qXNA46WxMIf14i84%2Bf3Eq%2BRjTByteC46c7%2BBfmfHeJFgPJQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:30 UTC	422	IN	Data Raw: 37 62 66 64 0d 0a 2f 2f 20 34 2e 39 2e 31 31 20 28 32 30 32 30 2d 30 37 2d 31 33 29 0a 21 66 75 6e 63 74 69 6f 6e 28 56 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 28 72 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 65 29 29 7d 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 7d 2c 24 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: 7bfd// 4.9.11 (2020-07-13)!function(V){"use strict";var o=function(){},H=function(n,r){return function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return n(r.apply(null,e))}},q=function(e){return function(){return e}},$=function(e){retu
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 63 61 74 28 65 29 3b 72 65 74 75 72 6e 20 72 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6e 29 7d 7d 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 61 2c 75 2c 73 2c 63 2c 6c 2c 66 2c 6d 2c 67 2c 70 2c 68 2c 76 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 72 65 74 75 72 6e 21 6e 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 65 29 7d 7d 2c 62 3d 71 28 21 31 29 2c 43 3d 71 28 21 30 29 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 2c 77 3d 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 73 4e 6f 6e 65 28 29 Data Ascii: cat(e);return r.apply(null,n)}}var e,t,n,r,i,a,u,s,c,l,f,m,g,p,h,v,y=function(n){return function(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];return!n.apply(null,e)}},b=q(!1),C=q(!0),x=function(){return w},w=(e=function(e){return e.isNone()
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 26 26 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 7c 7c 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 22 41 72 72 61 79 22 3d 3d 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3f 22 61 72 72 61 79 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 26 26 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 7c 7c 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 22 53 74 72 69 6e 67 22 3d 3d 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3f 22 73 74 72 69 6e 67 22 3a 74 7d 28 65 29 3d 3d 3d 74 7d 7d 2c 53 3d 45 28 22 73 74 72 69 6e 67 22 29 2c 54 3d 45 28 22 6f 62 6a 65 63 74 22 29 2c 6b 3d Data Ascii: return"object"===t&&(Array.prototype.isPrototypeOf(e)\|\|e.constructor&&"Array"===e.constructor.name)?"array":"object"===t&&(String.prototype.isPrototypeOf(e)\|\|e.constructor&&"String"===e.constructor.name)?"string":t}(e)===t}},S=E("string"),T=E("object"),k=
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 2b 2b 6e 29 69 66 28 21 30 21 3d 3d 74 28 65 5b 6e 5d 2c 6e 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 55 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 46 28 74 2c 65 29 7d 29 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 5f 2e 6e 6f 6e 65 28 29 3a 5f 2e 73 6f 6d 65 28 65 5b 30 5d 29 7d 2c 65 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 5f 2e 6e 6f 6e 65 28 29 3a 5f 2e 73 6f 6d 65 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 29 7d 2c 74 65 3d 44 28 41 72 72 61 79 2e 66 72 6f 6d 29 Data Ascii: =0,r=e.length;n<r;++n)if(!0!==t(e[n],n))return!1;return!0},Q=function(e,t){return U(e,function(e){return!F(t,e)})},Z=function(e){return 0===e.length?_.none():_.some(e[0])},ee=function(e){return 0===e.length?_.none():_.some(e[e.length-1])},te=D(Array.from)
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 22 29 26 26 28 6d 7c 7c 66 29 2c 68 3d 63 65 28 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 38 30 30 70 78 29 22 29 26 26 28 6d 7c 7c 66 29 2c 76 3d 2d 31 21 3d 3d 73 65 2e 69 6e 64 65 78 4f 66 28 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 29 2c 73 26 26 28 69 3d 21 31 29 3b 76 61 72 20 6c 65 2c 66 65 3d 7b 6f 70 65 72 61 3a 21 31 2c 77 65 62 6b 69 74 3a 69 2c 69 65 3a 61 2c 67 65 63 6b 6f 3a 63 2c 6d 61 63 3a 6c 2c 69 4f 53 3a 66 2c 61 6e 64 72 6f 69 64 3a 6d 2c 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 3a 21 66 7c 7c 67 7c 7c 35 33 34 3c 3d 70 61 72 73 65 49 6e 74 28 73 65 2e 6d 61 74 63 68 28 2f 41 70 Data Ascii: creen and (max-device-width: 480px)")&&(m\|\|f),h=ce("only screen and (min-width: 800px)")&&(m\|\|f),v=-1!==se.indexOf("Windows Phone"),s&&(i=!1);var le,fe={opera:!1,webkit:i,ie:a,gecko:c,mac:l,iOS:f,android:m,contentEditable:!f\|\|g\|\|534<=parseInt(se.match(/Ap
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 2e 5f 73 74 61 74 65 3f 72 2e 72 65 73 6f 6c 76 65 3a 72 2e 72 65 6a 65 63 74 29 28 6f 2e 5f 76 61 6c 75 65 29 7d 29 3a 74 68 69 73 2e 5f 64 65 66 65 72 72 65 64 73 2e 70 75 73 68 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 69 66 28 65 3d 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 73 6f 6c 76 65 64 20 77 69 74 68 20 69 74 73 65 6c 66 2e 22 29 3b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 74 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 76 6f Data Ascii: ._state?r.resolve:r.reject)(o._value)}):this._deferreds.push(r)}function o(e){try{if(e===this)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var t=e.then;if("function"==typeof t)return vo
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 69 3f 74 3a 6e 65 77 20 69 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 69 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 69 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6e 29 7d 29 7d 2c 69 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 69 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 6f 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 6f 5b 6e 5d 2e 74 68 65 6e 28 65 2c 74 29 7d 29 7d 2c 69 7d 28 29 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: ion(t){return t&&"object"==typeof t&&t.constructor===i?t:new i(function(e){e(t)})},i.reject=function(n){return new i(function(e,t){t(n)})},i.race=function(o){return new i(function(e,t){for(var n=0,r=o.length;n<r;n++)o[n].then(e,t)})},i}(),me=function(e,t)
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 72 7c 7c 21 31 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 7d 2c 77 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 72 7c 7c 21 31 29 3a 65 2e 64 65 74 61 63 68 45 76 65 6e 74 26 26 65 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 2c 6e 29 7d 2c 4e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 6f 3d 74 7c 7c 7b 7d 3b 66 6f 72 28 6e 20 69 6e 20 65 29 79 65 5b 6e 5d 7c Data Ascii: e.addEventListener?e.addEventListener(t,n,r\|\|!1):e.attachEvent&&e.attachEvent("on"+t,n)},we=function(e,t,n,r){e.removeEventListener?e.removeEventListener(t,n,r\|\|!1):e.detachEvent&&e.detachEvent("on"+t,n)},Ne=function(e,t){var n,r,o=t\|\|{};for(n in e)ye[n]\|
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 4c 6f 61 64 65 64 29 74 28 6f 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 72 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 69 6e 74 65 72 61 63 74 69 76 65 22 3d 3d 3d 72 2e 72 65 61 64 79 53 74 61 74 65 26 26 72 2e 62 6f 64 79 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 64 6f 6d 4c 6f 61 64 65 64 7c 7c 28 6e 2e 64 6f 6d 4c 6f 61 64 65 64 3d 21 30 2c 74 28 6f 29 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 29 26 26 28 77 65 28 72 2c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 75 29 2c 61 28 29 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c 65 66 74 Data Ascii: Loaded)t(o);else{var i=function(){return"complete"===r.readyState\|\|"interactive"===r.readyState&&r.body},a=function(){n.domLoaded\|\|(n.domLoaded=!0,t(o))},u=function(){i()&&(we(r,"readystatechange",u),a())},s=function(){try{r.documentElement.doScroll("left
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 74 4e 6f 64 65 3b 6e 7c 7c 28 28 65 3d 4e 65 28 65 7c 7c 66 2e 65 76 65 6e 74 29 29 2e 74 79 70 65 3d 22 6d 6f 75 73 65 6f 75 74 22 3d 3d 3d 65 2e 74 79 70 65 3f 22 6d 6f 75 73 65 6c 65 61 76 65 22 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 65 2e 74 61 72 67 65 74 3d 74 2c 43 28 65 2c 6f 29 29 7d 29 2c 70 7c 7c 22 66 6f 63 75 73 69 6e 22 21 3d 3d 75 26 26 22 66 6f 63 75 73 6f 75 74 22 21 3d 3d 75 7c 7c 28 6c 3d 21 30 2c 73 3d 22 66 6f 63 75 73 69 6e 22 3d 3d 3d 75 3f 22 66 6f 63 75 73 22 3a 22 62 6c 75 72 22 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 65 3d 4e 65 28 65 7c 7c 66 2e 65 76 65 6e 74 29 29 2e 74 79 70 65 3d 22 66 6f 63 75 73 22 3d 3d 3d 65 2e 74 79 70 65 3f 22 66 6f 63 75 73 69 6e 22 3a 22 66 6f 63 75 73 6f 75 74 22 2c 43 28 65 2c 6f 29 7d Data Ascii: tNode;n\|\|((e=Ne(e\|\|f.event)).type="mouseout"===e.type?"mouseleave":"mouseenter",e.target=t,C(e,o))}),p\|\|"focusin"!==u&&"focusout"!==u\|\|(l=!0,s="focusin"===u?"focus":"blur",c=function(e){(e=Ne(e\|\|f.event)).type="focus"===e.type?"focusin":"focusout",C(e,o)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49850	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:30 UTC	1005	OUT	GET /wp-includes/js/tinymce/plugins/compat3x/plugin.min.js HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:30 UTC	942	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:30 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b82a18c9b0a6-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"5ae13ae8-1021" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 26 Apr 2018 02:35:20 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IDofD8nXiZxWoCrTjdJiEtw3h3fbWz9kT%2B7yn0FIzEBiPuAEhBmDGpMCm6gV0qz3rIKB08%2BTFAp%2Fe5hlMXM3FYFzsD0A57cbBeyuGV5hgFp3hKk4xumLufy5qdbC8ru7G%2B8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:30 UTC	427	IN	Data Raw: 31 30 32 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 75 29 7b 76 61 72 20 74 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 21 74 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 28 74 3d 21 30 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 44 65 70 72 65 63 61 74 65 64 20 54 69 6e 79 4d 43 45 20 41 50 49 20 63 61 6c 6c 3a 20 22 2b 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 69 2c 61 2c 64 2c 73 29 7b 69 3d 69 7c 7c 74 68 69 73 3b 76 61 72 20 63 3d 5b 5d 3b 61 3f 28 74 68 69 73 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 74 3d 5b 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 26 26 28 64 3d 64 2e 73 70 Data Ascii: 1021!function(u){var t;function l(){}function f(e){!t&&window&&window.console&&(t=!0,console.log("Deprecated TinyMCE API call: "+e))}function i(i,a,d,s){i=i\|\|this;var c=[];a?(this.add=function(o,r,e){function t(e){var t=[];if("string"==typeof d&&(d=d.sp
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 7d 66 28 22 3c 74 61 72 67 65 74 3e 2e 6f 6e 22 2b 61 2b 22 2e 61 64 64 28 2e 2e 29 22 29 2c 69 2e 6f 6e 28 61 2c 74 2c 65 29 3b 76 61 72 20 6e 3d 7b 6f 72 69 67 69 6e 61 6c 3a 6f 2c 70 61 74 63 68 65 64 3a 74 7d 3b 72 65 74 75 72 6e 20 63 2e 70 75 73 68 28 6e 29 2c 74 7d 2c 74 68 69 73 2e 61 64 64 54 6f 54 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 61 64 64 28 65 2c 74 2c 21 30 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 63 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 6f 72 69 67 69 6e 61 6c 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 63 65 28 74 2c 31 Data Ascii: opImmediatePropagation())}f("<target>.on"+a+".add(..)"),i.on(a,t,e);var n={original:o,patched:t};return c.push(n),t},this.addToTop=function(e,t){this.add(e,t,!0)},this.remove=function(n){return c.forEach(function(e,t){if(e.original===n)return c.splice(t,1
2024-04-25 19:25:30 UTC	1369	IN	Data Raw: 65 50 72 6f 63 65 73 73 20 50 6f 73 74 50 72 6f 63 65 73 73 20 4c 6f 61 64 43 6f 6e 74 65 6e 74 20 53 61 76 65 43 6f 6e 74 65 6e 74 20 43 68 61 6e 67 65 22 29 2c 65 28 22 42 65 66 6f 72 65 53 65 74 43 6f 6e 74 65 6e 74 20 42 65 66 6f 72 65 47 65 74 43 6f 6e 74 65 6e 74 20 53 65 74 43 6f 6e 74 65 6e 74 20 47 65 74 43 6f 6e 74 65 6e 74 22 2c 6f 28 21 31 29 29 2c 65 28 22 53 65 74 50 72 6f 67 72 65 73 73 53 74 61 74 65 22 2c 22 73 74 61 74 65 20 74 69 6d 65 22 29 2c 65 28 22 56 69 73 75 61 6c 41 69 64 22 2c 22 65 6c 65 6d 65 6e 74 20 68 61 73 56 69 73 75 61 6c 22 29 2c 65 28 22 55 6e 64 6f 20 52 65 64 6f 22 2c 6e 29 2c 65 28 22 4e 6f 64 65 43 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 73 2e 63 6f 6e 74 72 6f 6c 4d 61 Data Ascii: eProcess PostProcess LoadContent SaveContent Change"),e("BeforeSetContent BeforeGetContent SetContent GetContent",o(!1)),e("SetProgressState","state time"),e("VisualAid","element hasVisual"),e("Undo Redo",n),e("NodeChange",function(e,t){return[s.controlMa
2024-04-25 19:25:30 UTC	972	IN	Data Raw: 61 6e 61 67 65 72 2e 2a 22 29 2c 75 2e 65 61 63 68 28 22 61 64 64 20 61 64 64 4d 65 6e 75 20 61 64 64 53 65 70 61 72 61 74 6f 72 20 63 6f 6c 6c 61 70 73 65 20 63 72 65 61 74 65 4d 65 6e 75 20 64 65 73 74 72 6f 79 20 64 69 73 70 6c 61 79 43 6f 6c 6f 72 20 65 78 70 61 6e 64 20 66 6f 63 75 73 20 67 65 74 4c 65 6e 67 74 68 20 68 61 73 4d 65 6e 75 73 20 68 69 64 65 4d 65 6e 75 20 69 73 41 63 74 69 76 65 20 69 73 43 6f 6c 6c 61 70 73 65 64 20 69 73 44 69 73 61 62 6c 65 64 20 69 73 52 65 6e 64 65 72 65 64 20 69 73 53 65 6c 65 63 74 65 64 20 6d 61 72 6b 20 70 6f 73 74 52 65 6e 64 65 72 20 72 65 6d 6f 76 65 20 72 65 6d 6f 76 65 41 6c 6c 20 72 65 6e 64 65 72 48 54 4d 4c 20 72 65 6e 64 65 72 4d 65 6e 75 20 72 65 6e 64 65 72 4e 6f 64 65 20 72 65 6e 64 65 72 54 6f 20 Data Ascii: anager.*"),u.each("add addMenu addSeparator collapse createMenu destroy displayColor expand focus getLength hasMenus hideMenu isActive isCollapsed isDisabled isRendered isSelected mark postRender remove removeAll renderHTML renderMenu renderNode renderTo
2024-04-25 19:25:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49851	3.161.188.46	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:30 UTC	541	OUT	GET /c/hotjar-2832943.js?sv=6 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:30 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 25 Apr 2024 19:25:30 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/5d93cf8a17c399b7aafa6ea0ab2c2cc7 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ff1c6c24541ff4372f0bfe095c34e33e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: Vo8kdnOz3Y-0aHZEgWMxtl9I4aCle8rXS1qfGQ5y0vlmvsD-ky5EGw==
2024-04-25 19:25:30 UTC	8952	IN	Data Raw: 32 32 66 30 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 32 38 33 32 39 34 33 2c 22 72 22 3a 30 2e 32 33 35 32 36 35 32 39 33 34 38 35 34 34 39 37 38 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 Data Ascii: 22f0window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":2832943,"r":0.23526529348544978,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_c
2024-04-25 19:25:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49852	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:30 UTC	1021	OUT	GET /wp-content/plugins/thrive-ultimatum/js/dist/no-campaign.min.js?v=3.25 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:31 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:31 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b82c2fe76775-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"6571c6d4-1c5" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 07 Dec 2023 13:21:24 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WQqIqDJIMwCnNT45BkUz8CT5X2jlmeX4ti0Ysrw15nlaSjmp%2FOXGcqBBVWfDUuUekFXjBvFsiRc74WanpqE0t%2F8J7J36Feru1vU7MW%2BvhdqkV6FrdCjP%2FiKiYGgdXjx94eU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:31 UTC	428	IN	Data Raw: 31 63 35 0d 0a 28 28 29 3d 3e 7b 69 66 28 21 77 69 6e 64 6f 77 2e 54 68 72 69 76 65 47 6c 6f 62 61 6c 7c 7c 21 77 69 6e 64 6f 77 2e 54 68 72 69 76 65 47 6c 6f 62 61 6c 2e 24 6a 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 24 3b 77 69 6e 64 6f 77 2e 54 68 72 69 76 65 47 6c 6f 62 61 6c 3d 7b 24 6a 3a 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 29 7d 2c 61 26 26 28 77 69 6e 64 6f 77 2e 24 3d 61 29 7d 76 61 72 20 6f 3b 28 6f 3d 54 68 72 69 76 65 47 6c 6f 62 61 6c 2e 24 6a 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 7b 61 63 74 69 6f 6e 3a 54 56 45 5f 55 6c 74 5f 44 61 74 61 2e 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 73 5f 61 63 74 69 6f 6e 2c 70 6f 73 74 5f 69 64 3a 54 56 45 5f 55 6c 74 5f 44 61 74 61 2e 70 6f 73 74 5f 69 64 Data Ascii: 1c5(()=>{if(!window.ThriveGlobal\|\|!window.ThriveGlobal.$j){var a=window.$;window.ThriveGlobal={$j:jQuery.noConflict()},a&&(window.$=a)}var o;(o=ThriveGlobal.$j)((function(){var a={action:TVE_Ult_Data.conversion_events_action,post_id:TVE_Ult_Data.post_id
2024-04-25 19:25:31 UTC	32	IN	Data Raw: 6c 2c 74 79 70 65 3a 22 70 6f 73 74 22 2c 64 61 74 61 3a 61 7d 29 7d 29 29 7d 29 28 29 3b 0d 0a Data Ascii: l,type:"post",data:a})}))})();
2024-04-25 19:25:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49853	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	1089	OUT	GET /wp-content/uploads/How-to-Change-All-Caps-to-Lowercase-in-Excel-1-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:31 UTC	910	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:31 GMT Content-Type: image/png Content-Length: 29790 Connection: close CF-Ray: 87a0b82efa3c4517-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660bcee0-745e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 02 Apr 2024 09:24:48 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y8fyqMAKNSU9hs%2BXsobcjNWjsnjlT9GR0JdrwCvLA9CgoXxkm8Oz9rlZaF83Y9OzWmCq3y%2FX%2FM%2Fa9Ewvcw2hlXK2qvAqe7W%2BQ6vDwq8AudtrCz8wgE1iS6VUhqRGmmUB%2BPg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:31 UTC	459	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 74 25 49 44 41 54 78 da ed bd 77 7c 26 57 79 f7 fd 3d 53 ee de d5 bb b4 bd 77 f7 5e 30 18 6c 8a c1 40 e8 01 92 07 48 02 24 d4 24 04 0c e4 09 35 40 08 81 10 42 20 d4 10 30 dd 60 dc fb ba ad b7 77 69 b5 ea 5d 77 6f d3 ce fb c7 ad d5 4a bb 92 56 75 d7 3c af cf e7 23 7b 76 ee 33 67 ce cc 9c df b9 fa 75 09 71 7d 50 32 b1 89 f1 ff 8c ff 6f f2 6f f3 e9 37 4d df e9 8e 11 b3 ec 07 08 b1 b0 7e 63 ff 5e df bc 9e 17 6d 7f 11 5f f9 f9 57 a6 7d 2e af db cb df bd e1 ef f8 da af be c6 40 62 60 d6 cf 2f 80 d7 5e fd 5a b2 c5 1c 77 3d 7d d7 b4 fd 2e 5f 7b 39 1b 9a 36 f0 1f 77 7f 6b e1 cf 7f d6 75 b3 ed 37 cd 37 58 70 bf b9 7c d7 c5 ff fe 62 3e eb 75 b1 9f 5f 88 59 be a7 Data Ascii: PNGIHDR}#t%IDATxw\|&Wy=Sw^0l@H$$5@B 0`wi]woJVu<#{v3guq}P2oo7M~c^m_W}.@b`/^Zw=}._{96wku77Xp\|b>u_Y
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 4d 8f 3c ef df d5 bc 17 9b 22 09 e9 92 2a 8f a4 c5 6f b3 26 64 b3 3a 68 d3 e8 b3 a9 f6 4a c2 ba 83 5f 95 b8 55 d0 c6 08 9b 98 61 da 52 96 b6 25 4b 42 d1 11 64 2d 48 9a 0a 03 45 85 ae bc c2 f1 ac c6 91 8c ca c9 9c 4a 5f 51 25 61 82 25 c5 ff bb 00 8e 06 a3 84 fc 21 3a 07 bb 90 63 54 a8 a5 a6 99 2f fe 9f 7f e4 1f be fb 8f 1c 38 79 68 bc 6f 26 9f a5 67 a4 f7 02 af 35 b9 f0 85 39 76 79 2a 97 42 15 2a 21 7f 88 42 62 68 da ee 3b 0f ed e4 b5 d7 dc 8e d7 e5 25 6f 14 66 31 bc e0 ea 0d 57 d1 35 d4 c5 70 72 78 06 22 ad 50 57 56 c7 c1 ae 43 e7 f7 1d 2e e1 7a 56 04 44 5c 25 b0 6e 8b d9 5c 56 66 b2 3a 64 53 eb 75 88 e8 12 97 32 0d 40 85 36 e1 4f 2f fd a1 4c f8 e6 0e 48 07 21 4d 84 34 70 49 0b 97 62 11 d4 a0 da 53 da 14 4a 00 2f 62 4a 48 59 82 be 82 c2 a1 b4 c6 53 09 9d Data Ascii: M<"o&d:hJ_UaR%KBd-HEJ_Q%a%!:cT/8yho&g59vyB*!Bbh;%of1W5prx"PWVC.zVD\%n\Vf:dSu2@6O/LH!M4pIbSJ/bJHYS
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 6e 39 37 6e bb 96 87 f7 3d 3e b6 c8 66 41 7d 97 82 2d 3e 0f 94 ba 60 14 c9 16 b2 bc f2 aa 57 b2 a7 75 0f 85 53 9a e6 05 70 16 62 9a f9 aa 8a ca ed 57 be 86 64 2e c5 bd bb ef 2b 51 86 39 cd 77 71 39 90 e9 28 b0 4f 93 dc 58 63 f1 7f b7 e4 f8 8b d5 45 56 06 1d 5c 2a a0 57 d2 95 de 44 9f f2 76 76 b6 ef a0 37 dd 8c e6 a9 a0 bc bc 72 4a 4a 38 38 34 cc ef 7e 7f 0f 2e 97 4e 73 53 13 8f ef 7c 92 42 d1 a0 ae b6 66 12 e8 3a bb ba d9 bc 69 03 b5 35 35 c4 e3 71 36 ac 5f 47 77 4f 2f 8d 0d f5 a8 aa 3a de af 50 28 f0 f4 33 bb f0 7a 3d d4 54 57 73 f4 d8 71 14 a1 10 8d 46 e6 c4 9e 0b a1 20 b4 30 c2 b7 11 a5 ec 56 94 f0 d5 a0 78 c0 1c 40 97 69 1a bd 36 37 95 17 b9 2c 62 92 b1 05 1d 05 75 82 39 6a 09 28 f0 1c be 97 ea 5f 17 bd c3 b4 cc 31 a3 1b 34 56 d4 91 ca a5 39 d2 75 6c Data Ascii: n97n=>fA}->`WuSpbWd.+Q9wq9(OXcEV\*WDvv7rJJ884~.NsS\|Bf:i55q6_GwO/:P(3z=TWsqF 0Vx@i67,bu9j(_14V9ul
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: bf ff 9e fc eb 6f fc 2d e9 7c ba 74 4e 51 68 a9 6e 62 34 1d 27 91 49 2c 1d 78 2f b4 fc bb 80 5d cf a5 b9 68 ac 6c 64 75 c3 6a 96 d7 2e 27 1a 88 a2 a9 1a 52 4a 34 b5 24 cf a5 f3 69 4e 0e 9c e4 60 e7 21 da fb db c9 14 32 cf 1b d9 fe 54 8b ba 25 ef 5b 57 e0 ff ac 2a 12 76 01 8a 17 a5 fc 35 68 f5 1f 01 4f cb 0b 54 77 d6 d4 b8 0f bb e7 cb d8 83 ff 0d 76 86 ac 2d f8 6e af 97 2f 9c 0c 30 34 91 a5 5e 0a 00 47 5e d9 20 93 b9 d4 b8 7a 7f 5a c7 83 73 81 71 31 a9 ef f3 88 7d 3e 97 82 4e 08 d0 54 0d 5d d3 11 8a 52 d2 d8 3b 36 a6 6d e2 48 67 5a 1b f0 82 01 3c a7 67 3b bb 5f 4b d0 e1 53 5b f3 dc da 60 e2 52 20 67 45 b1 ab de 4f a0 f1 9d 78 7c d1 59 2d de 5c 3a 45 ce 56 28 0b 07 ce e9 c2 6c 59 26 08 05 4d 9d ac 71 36 0a 59 8e 1d 3f 81 cb 17 a4 a5 b9 11 5d 9d 9d a3 84 e3 Data Ascii: o-\|tNQhnb4'I,x/]hlduj.'RJ4$iN`!2T%[W*v5hOTwv-n/04^G^ zZsq1}>NT]R;6mHgZ<g;_KS[`R gEOx\|Y-\:EV(lY&Mq6Y?]
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 78 3c 2e 0c 47 62 1b 05 5c 6e 0f 86 ed 60 66 d3 e4 0c 8b 58 2c 46 3e 9b 23 56 5e 86 36 c1 3b cb 36 8b 74 75 f7 a2 ba bc 54 55 96 93 8e 0f 93 ce 5b c4 ca a2 e4 73 59 5c 9a 42 32 9d 25 18 89 11 0b 07 cf 7a 75 99 4c 12 cd ed 07 23 cf e0 48 82 b2 8a 0a ec 42 96 44 b6 40 45 59 8c a2 69 60 e4 b2 58 e8 54 55 96 4f 62 df a5 74 18 ee eb 23 99 2b 10 08 47 70 6b 16 c1 e2 ef b1 bb 3f 83 2c 74 d1 9a 57 b9 e3 44 90 df 0c 7b b0 67 c4 cc ec 59 6d b1 f9 5d 57 48 db b1 38 d8 71 64 6e bb bb 98 72 b5 5e 38 56 fb 79 aa e8 12 b3 04 fa 52 29 b0 74 15 de be d2 e0 13 5b f3 44 5c 80 5e 8d d6 f2 39 94 f2 57 4d 19 31 f4 42 5b 6c 2d b5 8d 4c 3c 88 75 e2 6f 90 85 56 06 0c 85 0f 1f 0f f1 8b 21 ef e9 a4 7b 0b 00 b0 3a 58 96 ba 63 68 ba 5c 4d e7 04 af 98 3d 78 cf 2b f5 9d 03 57 70 21 01 Data Ascii: x<.Gb\n`fX,F>#V^6;6tuTU[sY\B2%zuL#HBD@EYi`XTUObt#+Gpk?,tWD{gYm]WH8qdnr^8VyR)t[D\^9WM1B[l-L<uoV!{:Xch\M=x+Wp!
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 65 15 1e d5 26 5f 34 a6 a9 4f a4 50 d3 dc 8c db 07 dd 6d 1d 0c 8d a6 a7 94 43 8b 85 22 0d f5 f5 e4 72 b9 69 58 dd 22 a9 54 9a f2 f2 72 2c cb 1a df 78 cc 31 b6 5e 00 91 58 05 7e 55 c1 17 8a 12 8b 86 88 55 94 53 59 5e 86 61 14 31 4c 8b c7 77 3e c9 f7 7e f8 63 fa fa fb 67 25 f3 d7 37 34 90 1d ea e1 b1 47 1f 67 f7 fe 03 14 a4 1b af ae 71 78 ff 7e 9e db bd 9f a3 ad ad 1c 39 7e 0c 0b 85 7c f0 2a ac ea f7 22 14 17 eb fc 16 1f 6a 4c e3 57 67 af 33 d0 16 66 12 5a 24 f0 8a 39 52 2f b1 50 c0 8b f9 81 69 a9 73 5b cf 73 9c 97 d4 9b bc 71 b9 81 2a 40 84 af 42 ad 7d 2f 42 f1 20 80 70 28 8c 74 24 97 5d 7a 31 95 15 e5 f8 7c fe 59 8d e9 f5 7a d1 34 0d c7 71 c6 33 41 5a 96 85 cb e5 42 d7 75 0a 85 c2 59 14 56 51 14 aa 2a 2b c7 93 b0 cf 44 a9 8c 62 9e 7c de c4 e5 d2 a6 d9 c3 Data Ascii: e&_4OPmC"riX"Tr,x1^X~UUSY^a1Lw>~cg%74Ggqx~9~\|"jLWg3fZ$9R/Pis[sq@B}/B p(t$]z1\|Yz4q3AZBuYVQ*+Db\|
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 26 06 1a 48 29 49 26 93 c4 e3 a5 fa 45 81 40 80 50 28 c4 be 7d fb 28 16 8b 44 22 11 c2 e1 30 c3 c3 c3 74 74 74 50 55 55 55 aa 61 24 25 9b 36 6d a2 bd bd 9d b5 0d 01 b4 6c 2b c2 5f 05 b6 09 8e 09 95 db e9 ec ec c4 b2 2c 2a cf 30 65 bd d0 a6 96 af 95 d8 4b 10 83 97 e2 4e 3e c4 db aa b2 fc 6e d4 c3 f0 14 b5 89 95 19 b5 55 42 cc d3 94 34 c7 f3 73 a1 da 8b 09 de 45 63 a5 c5 d2 05 47 88 c9 29 61 5f dd 6c d0 12 70 b0 a5 4a d6 77 1b e8 e5 33 2e 84 68 34 4a 28 1c 22 1e 8f e3 72 b9 ce 49 01 07 07 07 d9 b3 67 0f fd fd fd 14 0a 05 32 99 cc f8 38 ad ad ad 3c f4 d0 43 0c 0d 0d 91 cf e7 09 87 c3 a4 52 29 e2 f1 38 f1 78 1c 9f cf 87 4f b5 a0 30 8a cc f4 95 c0 6b e5 d1 a4 45 55 55 15 23 23 23 2f a0 73 b6 4d 8d 94 ca da 28 5e b6 04 4c 6e 8c 16 a7 ec a6 70 a6 1a 5a 88 05 6a Data Ascii: &H)I&E@P(}(D"0tttPUUUa$%6ml+_,*0eKN>nUB4sEcG)a_lpJw3.h4J("rIg28<CR)8xO0kEUU###/sM(^LnpZj
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 37 8c cf f7 70 df 71 fe f6 27 9f 26 67 94 d8 57 8f cb c3 3f dd fe f7 6c a8 5f 03 c0 c9 e1 2e 3e fc 93 4f f2 92 8d d7 f3 f6 ab df c0 23 47 77 f2 99 df fe 0b b6 74 78 cd 45 2f e7 ed 57 ff 09 df 7d ec 7f f8 d1 93 3f 9f 35 35 6e 09 3a d4 fb 1c 40 41 44 5e 0a 8a 1f e9 d8 8c 8e 8c 12 8a 95 cd ba 24 e7 52 b4 4c 62 84 a1 44 86 b2 8a 4a 82 7e ef 05 a1 e3 52 4a 8a b9 0c f1 64 9a 70 b4 0c af c7 7d 41 88 b9 94 92 c4 f0 00 a9 82 4d 55 65 e5 58 3a 9e 45 18 57 af 80 d0 f5 90 3f c4 06 bf c9 7a 9f c9 ce b4 7b 6a 00 37 94 d7 71 e3 e6 6b c8 17 f3 18 96 c9 8d 9b af 21 9e 89 73 e9 ea 1d 7c fe 6d 9f c2 e7 f6 92 2d 64 b9 78 d5 76 6c c7 66 20 31 c4 0d 9b ae a6 67 a4 17 89 e4 a6 2d d7 31 90 18 44 d7 5c dc b8 f9 5a 46 d2 71 1c c7 1e 57 98 ac ae 5b c9 f6 65 5b f0 b8 dc e4 8a 39 72 Data Ascii: 7pq'&gW?l_.>O#GwtxE/W}?55n:@AD^$RLbDJ~RJdp}AMUeX:EW?z{j7qk!s\|m-dxvlf 1g-1D\ZFqW[e[9r
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: e1 85 f3 68 13 6e 2f 81 bd 9d 07 39 d4 73 74 9c 02 3b d2 61 24 1d a7 32 ac e2 d6 4a 94 bb 3a 52 4a ae d6 1b ef a3 be ac 96 e5 95 1e c2 be d0 f8 48 39 23 4f 53 79 fd d9 9c 87 2f c8 eb 2f 7b 25 cb 2a 9b f9 e1 e3 3f e3 48 5f eb 18 c5 0e b3 a3 65 0b 89 6c 72 fc be 08 28 0b 44 d1 55 9d 91 4c 9c 54 3e 85 a6 6a 94 07 ca e6 07 d8 33 4e 28 02 2e ab b2 d0 14 b0 b5 26 8a 76 05 32 9b 5d 54 a5 8b 69 98 e4 b2 d9 0b 6b c2 91 12 c3 28 72 a1 43 1a 4b f6 70 87 ec 22 be e3 f9 ce c3 28 16 cf 9a 87 b0 ab 70 6b 0d a8 76 92 8b 02 06 3e 55 4e ef 4a b9 f3 e8 33 ec 69 df cf 47 6e 7b df 8c 8b 2e 53 c8 92 cc a5 a8 89 56 11 f0 fa e9 18 ea a2 2c 18 23 e4 0b 92 2b e6 19 cd 24 66 a4 30 b3 0a 7a 10 8c 4b 79 8a a2 f0 d1 57 be 8f 17 6d ba 96 1f 3f 76 27 20 c8 1b 79 3e f2 c3 3b f8 e0 ad 7f Data Ascii: hn/9st;a$2J:RJH9#OSy//{%*?H_elr(DULT>j3N(.&v2]Tik(rCKp"(pkv>UNJ3iGn{.SV,#+$f0zKyWm?v' y>;
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 9a aa 91 29 64 b1 c6 14 35 ba a6 8f 53 9c a2 55 44 57 f5 52 7c a8 63 53 34 8d b3 08 8c 5b 2b a5 f5 34 6d 6b 5c 6e 55 84 42 d0 1b c0 76 6c b2 c5 dc 04 e7 84 09 f9 7f 54 95 80 e7 54 9f 52 2a 17 b7 ee 46 51 14 8a 96 81 ae 6a 25 4d b8 5d f2 8b 16 40 c1 2c a2 28 ca f8 33 9d 1a c7 18 bb af 4b d5 31 c6 e6 a1 ab 1a 01 6f 80 bc 51 28 8d a1 a8 38 48 5c aa 3e 69 33 29 5a c5 92 8c 3e 66 af 56 84 82 61 19 48 4a f3 91 52 62 8f f9 91 9f 16 15 24 b6 b4 c7 ce 8d f9 67 4b 7b dc 4f fc 4c 00 97 79 24 77 dd 94 61 53 cc 41 89 dd 82 b6 fa 07 08 c5 f5 c2 02 fe ff 79 93 52 62 b7 7f 18 bb ef df b0 e5 14 c1 0c 96 63 61 19 a7 35 a8 a7 00 76 ea e2 4c 21 7b c6 62 13 63 40 b4 26 c8 ac c5 19 e5 ea a2 65 80 35 f9 37 47 3a 25 d6 7b ba 38 3d 01 96 63 93 c8 25 27 9d 2e 58 c5 09 f7 b5 c7 fb Data Ascii: )d5SUDWR\|cS4[+4mk\nUBvlTTR*FQj%M]@,(3K1oQ(8H\>i3)Z>fVaHJRb$gK{OLy$waSAyRbca5vL!{bc@&e57G:%{8=c%'.X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49855	172.64.154.248	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	548	OUT	GET /pduMCfIcykwhScUJcEDohxbyURefMehM HTTP/1.1 Host: nitroscripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:31 UTC	472	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:31 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=600, stale-while-revalidate=31536000 strict-transport-security: max-age=15724800; includeSubDomains CF-Cache-Status: HIT Age: 486 Last-Modified: Thu, 25 Apr 2024 19:17:25 GMT Access-Control-Expose-Headers: X-Request-Timestamp X-Request-Timestamp: 1714073131 Server: cloudflare CF-RAY: 87a0b82efce97b94-ATL
2024-04-25 19:25:31 UTC	897	IN	Data Raw: 37 64 63 36 0d 0a 28 61 73 79 6e 63 20 4e 69 74 72 6f 50 61 63 6b 3d 3e 7b 69 66 28 4e 69 74 72 6f 50 61 63 6b 2e 73 63 72 69 70 74 52 65 61 64 79 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 4e 69 74 72 6f 50 61 63 6b 3a 20 22 2b 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 2e 73 72 63 7c 7c 22 4e 69 74 72 6f 20 53 63 72 69 70 74 22 29 2b 22 20 69 73 20 61 6c 72 65 61 64 79 20 69 6e 69 74 69 61 6c 69 7a 65 64 2e 20 54 68 65 20 65 78 65 63 75 74 69 6f 6e 20 77 69 6c 6c 20 62 65 20 73 6b 69 70 70 65 64 2e 22 29 3b 72 65 74 75 72 6e 7d 69 66 28 4e 69 74 72 6f 50 61 63 6b 2e 73 63 72 69 70 74 52 65 61 64 79 3d 21 30 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6e 69 74 72 6f 44 65 62 75 67 53 63 72 69 70 Data Ascii: 7dc6(async NitroPack=>{if(NitroPack.scriptReady){console.warn("NitroPack: "+(document.currentScript?.src\|\|"Nitro Script")+" is already initialized. The execution will be skipped.");return}if(NitroPack.scriptReady=!0,localStorage.getItem("nitroDebugScrip
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 6e 22 3d 3d 74 79 70 65 6f 66 20 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 26 26 53 75 70 70 72 65 73 73 65 64 45 72 72 6f 72 3b 63 6f 6e 73 74 20 74 3d 22 6e 61 76 61 69 64 65 62 75 67 22 2c 6e 3d 28 29 3d 3e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 63 6c 75 64 65 73 28 74 29 2c 72 3d 28 65 2c 72 29 3d 3e 7b 76 61 72 20 69 3b 69 66 28 6e 28 29 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 69 3d 28 28 29 3d 3e 7b 69 66 28 6e 28 29 29 7b 6c 65 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 2e 66 69 6e 64 28 28 65 3d 3e 65 2e 73 74 61 72 74 73 57 69 74 68 28 74 2b 22 3d 22 29 29 29 2e 73 70 6c 69 74 28 22 3d 22 29 5b 31 5d 3b 69 66 28 22 22 21 3d 65 29 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 Data Ascii: n"==typeof SuppressedError&&SuppressedError;const t="navaidebug",n=()=>document.cookie.includes(t),r=(e,r)=>{var i;if(n()){return null!==(i=(()=>{if(n()){let e=document.cookie.split("; ").find((e=>e.startsWith(t+"="))).split("=")[1];if(""!=e)try{return JS
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 3f 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 65 28 54 28 29 29 7d 29 29 3a 65 28 54 28 29 29 7d 29 29 2c 4c 3d 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 7c 7c 54 28 29 3e 30 2c 50 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 69 66 28 4c 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 28 28 6e 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 72 20 6f 66 20 6e 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 72 65 74 75 72 6e 20 65 28 72 2e 6c 6f 61 64 54 69 6d 65 Data Ascii: =new Promise((e=>{document.prerendering?document.addEventListener("prerenderingchange",(()=>{e(T())})):e(T())})),L=document.prerendering\|\|T()>0,P=new Promise((e=>{if(L){const t=new PerformanceObserver((n=>{for(const r of n.getEntries())return e(r.loadTime
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 75 62 32 52 30 49 69 77 69 4c 69 6f 2f 58 46 77 75 64 48 68 30 49 69 77 69 4c 69 6f 2f 58 46 77 75 61 6e 42 6e 49 69 77 69 4c 69 6f 2f 58 46 77 75 61 6e 42 6c 5a 79 49 73 49 69 34 71 50 31 78 63 4c 6e 42 75 5a 79 49 73 49 69 34 71 50 31 78 63 4c 6e 64 6c 59 6e 41 69 4c 43 49 75 4b 6a 39 63 58 43 35 6e 61 57 59 69 4c 43 49 75 4b 6a 39 63 58 43 35 68 64 6d 6c 6d 49 69 77 69 4c 69 6f 2f 58 46 77 75 62 58 41 30 49 69 77 69 4c 69 6f 2f 58 46 77 75 62 57 39 32 49 69 77 69 4c 69 6f 2f 58 46 77 75 64 32 31 32 49 69 77 69 4c 69 6f 2f 58 46 77 75 64 32 56 69 62 53 49 73 49 69 34 71 50 31 78 63 4c 6d 46 32 61 53 49 73 49 69 34 71 50 31 78 63 4c 6d 5a 73 64 69 49 73 49 69 34 71 50 31 78 63 4c 6d 31 72 64 69 49 73 49 69 34 71 50 31 78 63 4c 6d 31 30 63 79 4a 64 22 29 Data Ascii: ub2R0IiwiLio/XFwudHh0IiwiLio/XFwuanBnIiwiLio/XFwuanBlZyIsIi4qP1xcLnBuZyIsIi4qP1xcLndlYnAiLCIuKj9cXC5naWYiLCIuKj9cXC5hdmlmIiwiLio/XFwubXA0IiwiLio/XFwubW92IiwiLio/XFwud212IiwiLio/XFwud2VibSIsIi4qP1xcLmF2aSIsIi4qP1xcLmZsdiIsIi4qP1xcLm1rdiIsIi4qP1xcLm10cyJd")
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 65 72 73 69 73 74 65 64 26 26 28 6c 3d 74 2e 74 69 6d 65 53 74 61 6d 70 2c 65 28 74 29 29 7d 29 2c 21 30 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 72 28 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 61 63 74 69 76 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 72 28 29 2c 69 3d 22 6e 61 76 69 67 61 74 65 22 3b 72 65 74 75 72 6e 20 73 28 29 3e 3d 30 3f 69 3d 22 62 61 63 6b 2d 66 6f 72 77 61 72 64 2d 63 61 63 68 65 22 3a 6e 26 26 28 64 6f 63 75 6d 65 6e 74 2e 70 72 65 72 65 6e 64 65 72 69 6e 67 7c 7c 75 28 29 3e 30 3f 69 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 69 3d 22 72 65 73 74 6f 72 65 Data Ascii: (t){t.persisted&&(l=t.timeStamp,e(t))}),!0)},u=function(){var e=r();return e&&e.activationStart\|\|0},d=function(e,t){var n=r(),i="navigate";return s()>=0?i="back-forward-cache":n&&(document.prerendering\|\|u()>0?i="prerender":document.wasDiscarded?i="restore
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 3f 65 2e 74 69 6d 65 53 74 61 6d 70 3a 30 2c 45 28 29 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 77 2c 21 30 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 77 2c 21 30 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 77 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 77 2c 21 30 29 7d 2c 54 3d 66 Data Ascii: isibilitychange"===e.type?e.timeStamp:0,E())},S=function(){addEventListener("visibilitychange",w,!0),addEventListener("prerenderingchange",w,!0)},E=function(){removeEventListener("visibilitychange",w,!0),removeEventListener("prerenderingchange",w,!0)},T=f
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 74 75 72 6e 20 74 28 65 29 7d 29 29 2c 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 7c 7c 22 66 69 72 73 74 2d 69 6e 70 75 74 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 29 7b 76 61 72 20 74 3d 52 5b 52 2e 6c 65 6e 67 74 68 2d 31 5d 2c 6e 3d 4d 2e 67 65 74 28 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 29 3b 69 66 28 6e 7c 7c 52 2e 6c 65 6e 67 74 68 3c 31 30 7c 7c 65 2e 64 75 72 61 74 69 6f 6e 3e 74 2e 6c 61 74 65 6e 63 79 29 7b 69 66 28 6e 29 65 2e 64 75 72 61 74 69 6f 6e 3e 6e 2e 6c 61 74 65 6e 63 79 3f 28 6e 2e 65 6e 74 72 69 65 73 3d 5b 65 5d 2c 6e 2e 6c 61 74 65 6e 63 79 3d 65 2e 64 75 72 61 74 69 6f 6e 29 3a 65 2e 64 75 72 61 74 69 6f 6e 3d 3d 3d 6e 2e 6c 61 74 65 6e 63 79 26 26 65 2e 73 74 61 72 74 54 69 6d 65 3d 3d 3d 6e 2e 65 6e 74 72 69 65 73 Data Ascii: turn t(e)})),e.interactionId\|\|"first-input"===e.entryType){var t=R[R.length-1],n=M.get(e.interactionId);if(n\|\|R.length<10\|\|e.duration>t.latency){if(n)e.duration>n.latency?(n.entries=[e],n.latency=e.duration):e.duration===n.latency&&e.startTime===n.entries
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 7b 73 74 61 72 74 54 69 6d 65 3a 65 2e 73 74 61 72 74 54 69 6d 65 2c 70 72 6f 63 65 73 73 69 6e 67 53 74 61 72 74 3a 65 2e 70 72 6f 63 65 73 73 69 6e 67 53 74 61 72 74 2c 70 72 6f 63 65 73 73 69 6e 67 45 6e 64 3a 65 2e 70 72 6f 63 65 73 73 69 6e 67 45 6e 64 2c 65 6e 74 72 69 65 73 3a 5b 65 5d 7d 29 29 2c 28 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 7c 7c 22 66 69 72 73 74 2d 69 6e 70 75 74 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 29 26 26 56 2e 73 65 74 28 65 2c 6e 29 2c 48 3c 30 26 26 28 48 3d 42 28 57 29 29 7d 29 29 3b 76 61 72 20 58 2c 47 2c 59 2c 7a 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 3b 6e 3d 4a 5b 69 5d 3b 69 2b 2b 29 69 66 28 21 28 6e 2e 73 74 61 72 74 54 69 6d 65 2b 6e 2e Data Ascii: {startTime:e.startTime,processingStart:e.processingStart,processingEnd:e.processingEnd,entries:[e]})),(e.interactionId\|\|"first-input"===e.entryType)&&V.set(e,n),H<0&&(H=B(W))}));var X,G,Y,z,Q=function(e,t){for(var n,r=[],i=0;n=J[i];i++)if(!(n.startTime+n.
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 6e 2c 69 65 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 63 61 6e 63 65 6c 22 2c 72 2c 69 65 29 7d 28 74 2c 65 29 3a 61 65 28 74 2c 65 29 7d 7d 2c 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5b 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 74 6f 75 63 68 73 74 61 72 74 22 2c 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 2c 73 65 2c 69 65 29 7d 29 29 7d 2c 75 65 3d 5b 31 30 30 2c 33 30 30 5d 3b 72 65 74 75 72 6e 20 65 2e 43 4c 53 54 68 72 65 73 68 6f 6c 64 73 3d 43 2c 65 2e 46 43 50 54 68 72 65 73 68 6f 6c 64 73 3d 4c 2c 65 2e 46 49 44 Data Ascii: entListener("pointerup",n,ie),addEventListener("pointercancel",r,ie)}(t,e):ae(t,e)}},ce=function(e){["mousedown","keydown","touchstart","pointerdown"].forEach((function(t){return e(t,se,ie)}))},ue=[100,300];return e.CLSThresholds=C,e.FCPThresholds=L,e.FID
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 2e 65 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 72 28 29 2c 6e 3d 65 2e 65 6e 74 72 69 65 73 5b 65 2e 65 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 74 29 7b 76 61 72 20 6f 3d 74 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3b 69 66 28 49 28 6f 29 29 72 65 74 75 72 6e 3b 76 61 72 20 61 3d 74 2e 61 63 74 69 76 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 6c 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 6f 2d 61 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 28 65 2e 61 74 74 72 69 62 75 74 69 6f 6e 3d 7b 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 3a 6c 2c 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 3a 65 2e 76 61 6c 75 65 2d 6c 2c 6c 6f 61 64 53 74 61 74 65 3a 69 28 65 2e 65 6e 74 72 69 65 73 5b 30 5d 2e 73 74 61 72 74 54 69 6d 65 29 2c 6e 61 Data Ascii: .entries.length){var t=r(),n=e.entries[e.entries.length-1];if(t){var o=t.responseStart;if(I(o))return;var a=t.activationStart\|\|0,l=Math.max(0,o-a);return void(e.attribution={timeToFirstByte:l,firstByteToFCP:e.value-l,loadState:i(e.entries[0].startTime),na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49854	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	1087	OUT	GET /wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:31 UTC	908	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:31 GMT Content-Type: image/png Content-Length: 30692 Connection: close CF-Ray: 87a0b82eff34b06f-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660a7c66-77e4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 01 Apr 2024 09:20:38 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KHQLiaKMTWuwiPfbfxbBn%2F9G4gX7hkgmd%2Bs8OvktE%2F3N5QkDPaTft%2BPHtaE2qNsCxRcXTlLPSgGzHTfh5kRVwJEeBWJnyWwUJ6VH15dcRffKjpZZrdEGoVyLwU%2BOnyPv4W4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:31 UTC	461	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 77 ab 49 44 41 54 78 da ec 9d 77 94 24 67 75 f6 7f 15 3b e7 ee c9 61 27 6c ce 41 ab 55 44 42 09 05 40 24 83 c9 b6 c1 18 6c b0 b1 c1 06 83 3f 67 1b 30 18 9c b1 31 c1 e4 24 04 88 20 09 a1 9c a5 cd 71 76 76 72 9e 9e e9 9c 2b 7d 7f 54 77 ef cc ee ec 6a 83 44 9c 7b ce 1c ad aa bb ab ab aa df e7 bd e9 b9 f7 0a c2 db 36 58 eb 9a 7b 88 78 03 3c 76 62 2f a6 65 01 d0 11 6e e6 4b bf f3 8f fc fe 57 fe 8e 43 93 27 a8 c9 a6 b6 55 48 82 c8 de b1 63 2c cb b2 2c cb cf 57 64 80 1b d6 5d c6 ba 96 1e 9e 1a 3a 48 45 d7 00 98 c9 cc f3 de 6f 7c 94 81 f8 d8 a2 0f 1c 18 3f be fc d4 96 65 59 7e 41 44 10 de b6 c1 f2 3b 3d a8 b2 ca 5c 2e b9 fc 44 96 65 59 7e 89 44 04 c8 94 f2 17 Data Ascii: PNGIHDR}#wIDATxw$gu;a'lAUDB@$l?g01$ qvvr+}TwjD{6X{x<vb/enKWC'UHc,,Wd]:HEo\|?eY~AD;=\.DeY~D
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: a0 4a ca f2 13 5c 96 65 f9 45 06 70 7b b8 89 de 86 8e 45 c7 5a 83 0d 7c ee ad 7f cb 8e 15 eb 97 9f e0 b2 2c cb 2f 02 80 1d b2 ca cb 36 5f cb 8a 48 cb a2 37 bc f5 f2 db f9 c3 eb de 88 2c 4a f5 63 f1 5c 92 7f b9 ef cb 1c 9f 19 59 7e 82 cb b2 2c 3f 47 91 6b ff f0 38 5c bc 7e d7 ad 94 1f ad 30 3c 3f 59 7f c3 67 1e fe 36 8a 24 a3 2f 48 0f 95 b4 32 f7 1e 79 7c f9 e9 2d cb b2 fc 9c a5 1e c4 12 80 80 db 47 be 5c 44 33 f4 e5 27 b3 2c 17 6e d6 09 22 a6 65 2e 3f 88 9f a5 06 b6 80 54 21 bb fc 44 96 e5 39 45 12 44 bc aa 9b b2 a1 51 d2 cb 8b 5e f3 2a 2e fc 0e 2f 79 ad 48 b6 92 af 57 b7 2d cb 0b 0c e0 b3 aa 69 04 c0 62 f9 a7 58 16 01 81 90 d3 8f 47 71 a1 9b 06 a9 72 96 b2 51 c1 b4 4c 44 41 c4 a3 ba 51 25 05 45 94 71 cb 4e 2a a6 0d f2 a2 56 c6 5c 5e 41 2f 2c 80 05 04 dc Data Ascii: J\eEp{EZ\|,/6_H7,Jc\Y~,?Gk8\~0<?Yg6$/H2y\|-G\D3',n"e.?T!D9EDQ^./yHW-ibXGqrQLDAQ%EqNV\^A/,
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 0b 8f c3 45 5b a8 91 1d 2b d6 63 5a 26 c5 4a 99 44 3e cd 44 6a 96 13 b3 63 1c 9f 19 66 68 6e 82 e9 f4 1c a9 42 b6 0e da a5 44 33 74 34 43 a7 a2 57 b8 ef c8 93 0c ce 8e 9d b7 b6 74 ab 4e db 8c 17 ec f3 2d ec 84 2a 08 02 01 a7 97 c6 60 84 c3 53 27 ce fb dc 36 eb ff 97 08 c0 1b db 56 d1 3f 33 42 69 d9 e7 fd 95 96 46 7f 84 98 37 04 40 b9 5c 46 14 45 7c 3e 1f d9 6c 96 8e 8e 0e 34 4d 63 7c 7c 9c 50 28 74 16 7f cb 8e 14 7b 9d 6e bc 4e 37 1d 91 66 76 75 6f c2 b0 4c 0a e5 22 73 b9 14 43 73 13 1c 9f 19 e6 f8 cc 08 a3 89 69 e2 d9 04 b9 52 e1 b4 dc 6e 59 d7 38 31 33 7a de f7 31 9e 98 61 57 cf 26 7a 1b 3b 58 d5 b4 82 89 c4 ec 69 e5 af 86 69 12 f3 84 e8 8d 75 30 10 1f c3 c2 ae a0 aa 01 7e a1 48 82 88 ab 5a 74 e1 96 9d a8 92 42 41 2f 91 af 14 5f f0 60 58 2d 95 77 51 00 Data Ascii: E[+cZ&JD>DjcfhnBD3t4CWtN-*`S'6V?3BiF7@\FE\|>l4Mc\|\|P(t{nN7fvuoL"sCsiRnY813z1aW&z;Xiiu0~HZtBA/_`X-wQ
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 87 19 8a 8f 63 5a e6 19 09 2f 17 05 e0 6a 0d b5 2a 2a 54 4c 6d 19 c0 bf ce b2 a9 75 25 0e 59 c5 b2 2c 32 99 0c 4e a7 13 8f c7 83 db ed 66 d5 aa 55 24 93 49 b2 d9 2c cd 4d 4d 34 55 fd bb e7 92 b9 64 06 c3 15 23 ad 55 28 64 e2 f8 d6 5d 46 e9 f1 bb 10 bd 7e c4 50 0c c1 32 51 3b 57 21 b8 3c 00 28 8a c2 6d b7 dd c6 f4 f4 34 5f fb da d7 d8 b5 6b 17 43 43 c3 ac 5f bf 1e cb b2 c8 e5 72 78 bd 5e 1c 0e c7 22 4d 26 08 02 b2 24 11 70 79 09 54 83 64 57 ad dc 86 6e 1a e4 ca 05 a6 d3 73 d5 c8 f7 08 27 aa 4c b2 f9 5c 8a 7c a5 78 56 60 19 a6 49 ae 5c 20 57 2e 30 93 99 67 60 66 0c 41 14 31 4d 83 1f 1d 78 18 a7 e2 20 ea 0d 12 70 7b 49 15 b2 6c 6c 5b c9 66 ef 6a c2 9e 00 b9 b2 3d 07 cc 76 03 2c 54 59 a1 58 29 93 2f 17 98 48 ce a2 9b fa f3 02 6a 59 90 88 b9 43 e4 b5 22 45 bd Data Ascii: cZ/j**TLmu%Y,2NfU$I,MM4Ud#U(d]F~P2Q;W!<(m4_kCC_rx^"M&$pyTdWns'L\\|xV`I\ W.0g`fA1Mx p{Ill[fj=v,TYX)/HjYC"E
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 8b 45 09 75 76 12 59 b5 8a d6 ae 2e 94 4a 05 43 d3 10 65 19 49 92 f0 fb fd f8 7c 3e 3a 3a 3a 28 97 cb 54 2a 15 12 89 44 dd 27 5f b7 ce f6 e3 9f cb 94 5e 28 13 13 13 b8 5c 6e ca e5 19 74 5d c7 e3 f1 e0 74 3a 71 b9 5c 38 1c 0e 64 59 ae 9f 5f 96 64 02 6e 1f 01 b7 8f 9e 86 76 5e b4 6a 07 9a a1 93 2b 17 88 67 93 8c 26 a6 e8 9f 19 a5 6f 66 98 a1 f8 04 f3 f9 14 85 72 f1 39 8b 30 6a 83 ef e3 d9 04 fd 33 c3 28 92 82 53 51 51 24 99 f9 5c 8a ae 58 1b a6 65 22 08 22 d3 e9 39 a2 be 10 93 c9 59 3a 23 2d 28 92 cc 75 eb 76 d1 1a 6a a0 a0 95 50 14 99 c9 13 f1 65 00 ff ba 88 cf e9 66 4d 93 ed ff 4e 4f 4f 93 4c 26 71 38 1c a8 aa 7a 46 a6 d5 99 c4 e1 70 d0 da da 4a 2e 97 23 9f cf 93 cb e5 ec 94 94 24 d5 35 e9 e2 0d 41 a0 94 c9 90 9a 4f 52 be f9 8d 68 7a 85 d9 e9 31 cc 7b 1e Data Ascii: EuvY.JCeI\|>:::(T*D'_^(\nt]t:q\8dY_dnv^j+g&ofr90j3(SQQ$\Xe""9Y:#-(uvjPefMNOOL&q8zFpJ.#$5AORhz1{
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: bd db 89 2c 49 04 dd 3e 82 6e 1f bd 0d 1d 5c b3 fa 92 7a 90 6c 36 9b 60 74 7e 8a fe 6a 5f 32 bb 8e 3a 49 be 7c b2 8e 5a 37 8d 25 03 66 f2 73 5c cd a9 db 4b b5 5d c1 12 c7 97 7a ff c9 37 2c 68 75 60 2d 3e 7e 5a 02 fd 5c 8f 9d 71 0b 5c fa 1a 4f bd 96 fa 3d 72 86 ef 3b d3 39 ce 74 2f e7 f0 da f9 16 6f 5f 04 39 de a9 38 d8 d8 ba 72 49 16 93 20 08 f5 14 d2 9a 35 6b 6c c2 83 65 a1 69 1a c5 62 71 d1 67 f2 f9 3c 85 42 81 63 c7 8e 21 49 12 0f 3f fc 30 e1 50 08 59 96 c9 e5 72 3c fd f4 d3 75 df f1 ea ab 5f 84 a2 c8 b8 dd 6e 4a a9 14 b9 4c 0e b9 6d 2d 89 e6 10 5e 21 8f 53 4f e1 2e c6 09 e7 b2 04 35 17 f9 5c 16 8f c7 43 a1 50 60 74 74 0c 4d ab 10 0c 06 a9 54 ec ff d6 22 de f5 f2 46 49 42 70 3a 71 b5 b4 e0 69 6b c3 da b1 03 cb 30 d0 73 39 72 43 43 0c fc f0 87 ac 7d f5 Data Ascii: ,I>n\zl6`t~j_2:I\|Z7%fs\K]z7,hu`->~Z\q\O=r;9t/o_98rI 5kleibqg<Bc!I?0PYr<u_nJLm-^!SO.5\CP`ttMT"FIBp:qik0s9rCC}
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: d0 c2 2e 1f ef 7b c9 5b 59 df b6 12 80 ff fe e9 37 f8 d1 de 07 11 44 91 37 5d f6 32 fe f2 95 7f 80 28 08 4c 24 66 f8 d6 93 3f ae 6f 6e 5d a1 56 3e f6 da f7 b1 be cd ee de 98 c8 a6 38 34 d1 6f 6b 4c d3 e4 fa 35 bb f8 cb db df c5 4f 0f 3e c1 e7 ef ff 36 11 a7 9f bf 7f e5 7b 78 c5 8e 1b f8 c2 83 77 30 3b 17 e7 c3 b7 bd 83 df bc e2 b6 d3 ee e5 d1 be dd 7c fe e1 ef 2c 50 e5 e7 8f e0 75 cd dd b8 d5 a5 a3 c4 b2 2c 33 33 33 53 d7 62 e7 a3 21 9c 4e 67 3d fa 1c 0a 85 ea 9a 47 d7 75 5a 5a 5a ea e9 a8 b9 e3 c7 09 ad 5e 4d 38 1c ae 17 52 54 2a 15 34 4d ab e6 68 0d 0c e3 a4 f6 af 5d 4b 34 1a c5 34 4d 2c cb a2 a1 a1 01 5d d7 11 04 81 b1 b1 31 a2 d1 28 ba ae 13 8e 44 90 aa f4 4f 59 96 ed ee 99 e3 e3 74 5d 7d b5 6d 9a aa 2a 73 73 73 64 32 69 2a 95 0a cd cd cd 44 82 3e 74 Data Ascii: .{[Y7D7]2(L$f?on]V>84okL5O>6{xw0;\|,Pu,333Sb!Ng=GuZZZ^M8RT4Mh]K44M,]1(DOYt]}msssd2i*D>t
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 64 4b cf 7a 02 4e 2f 2f df 79 3d 96 05 df 7e e2 6e 92 e5 2c a8 52 35 10 66 3f 50 bf cb cb 9a f6 5e 74 c3 60 cf c8 11 70 48 20 8b 84 dd 41 6e bf c4 fe ec a7 ef f9 1a 7d f1 11 70 8a 20 08 98 9a c9 d0 dc b8 6d 8e 2d 08 30 09 96 c0 f6 ae f5 48 a2 c4 81 c1 63 ac ed ec 45 91 64 9a 03 51 5e 7b d9 2d 3c 76 78 37 dd cd 1d 98 a6 c9 9e a1 c3 58 58 38 04 95 d7 ed ba 05 55 52 f8 b7 bb be c0 d1 b1 01 0a a5 22 2d a1 06 7c 0e 0f c5 7c 99 96 60 03 ad e1 46 ca 5a 99 d7 5e 75 1b 57 6e b8 84 87 0f 3d cd 07 bf f2 71 d2 5a 1e 24 91 35 6d 3d f8 dd 3e 2c cb e2 f3 ef fd b8 4d 52 17 e0 fe 23 4f f1 ae 2f fe 0d 15 8c 0b f6 7f 5b 82 0d b4 06 1b 5e 90 d4 94 24 49 e4 f3 f9 d3 88 0f 0b 17 73 66 6c 0c d9 ef 47 3a 4b 10 67 21 a0 74 5d a7 58 2c d6 35 6f 0d d0 2e 97 0b 49 92 30 4d b3 6e 7a Data Ascii: dKzN//y=~n,R5f?P^t`pH An}p m-0HcEdQ^{-<vx7XX8UR"-\|\|`FZ^uWn=qZ$5m=>,MR#O/[^$IsflG:Kg!t]X,5o.I0Mnz
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 26 93 33 8c cc 4e b0 ad 7b 3d 7f fe ca 77 82 28 30 9e 9a 61 7d 6b 2f ef be e9 4d ac 6f eb e5 c1 43 4f f1 f5 c7 7f 58 d7 ea dd b1 76 a2 be 30 a3 f1 09 86 e7 26 31 4d 93 6d 3d 1b b0 b0 f8 dd 7f fb 20 bd ad 2b 70 2a 0e 4e 4c 8f 90 cc a5 79 fd d5 2f e3 9a f5 97 72 78 e4 38 4f 1c db 6b bb 14 08 5c bb e9 32 56 34 b6 b1 22 da 8a 43 52 d8 dc b9 06 80 3d 83 87 b9 e3 c9 7b f8 ad 9b 7e 83 cd dd 6b 79 eb 8b 5e c9 9f 7e e3 e3 44 bd 41 ba 1b db d0 0c 1d 45 56 d8 da bb 1e 24 01 4b 12 38 36 3b cc 78 66 b6 6a 71 5c 18 81 63 43 cb e9 04 8e 74 3a cd f1 e3 c7 89 c5 62 4c 4e 4e 32 36 36 86 a2 28 34 36 36 22 08 02 b1 58 ac ee 87 5e 8c 54 72 39 0a f3 f3 44 aa 45 12 e7 aa 7d d3 73 d3 c4 93 19 44 7f 96 99 d9 71 8a 96 42 47 57 0f d1 90 f7 b4 7b a9 69 ea 5a 63 02 ef e6 cd ac 5a b7 Data Ascii: &3N{=w(0a}k/MoCOXv0&1Mm= +p*NLy/rx8Ok\2V4"CR={~ky^~DAEV$K86;xfjq\cCt:bLNN266(466"X^Tr9DE}sDqBGW{iZcZ
2024-04-25 19:25:31 UTC	1369	IN	Data Raw: 1d 50 37 11 75 f0 39 dc 38 64 85 42 b9 44 5e 2f 61 49 d8 c1 24 a9 da a5 5e b7 70 58 32 a2 69 61 09 50 b2 74 2c c1 42 11 64 14 4b c4 02 2a e8 18 92 65 7f 46 58 40 79 b4 40 a8 5e 97 b0 f0 ba 24 e1 24 1d d2 30 41 33 71 20 e3 73 7a c0 b2 c8 95 8b 94 cc 8a bd 09 29 d5 a0 98 60 e7 b9 15 4b 44 b1 24 2a a6 8e 6e 1a 38 24 05 11 81 8a a1 61 60 e1 94 55 04 04 ca d5 ee fb b2 28 a1 9b 86 1d 21 96 ab 36 ae 69 22 9b 22 aa 20 63 54 bb e9 3b 24 d5 6e a6 66 69 58 76 0d 1b 4e 41 41 14 44 34 cb c0 c2 42 45 02 7d 01 27 55 b0 4d e8 92 a0 db cf 6d c1 e6 74 3e f2 5b 97 be 9c bf ba e9 1d 8b cc 32 b9 da f5 42 92 6c eb a7 50 28 50 28 14 d0 75 9d 74 3a 4d 26 93 21 9f cf 53 2a 95 68 6e 6e 66 76 76 16 b7 db cd f8 f8 38 b7 df 7e fb 39 35 bc ab 99 b5 a9 44 82 80 aa 52 8a c7 99 3f 71 82 Data Ascii: P7u98dBD^/aI$^pX2iaPt,BdKeFX@y@^$$0A3q sz)`KD$n8$a`U(!6i"" cT;$nfiXvNAAD4BE}'UMmt>[2BlP(P(ut:M&!S*hnnfvv8~95DR?q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49857	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	1168	OUT	POST /wp-admin/admin-ajax.php HTTP/1.1 Host: earnandexcel.com Connection: keep-alive Content-Length: 200 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://earnandexcel.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:31 UTC	200	OUT	Data Raw: 5f 74 75 74 6f 72 5f 6e 6f 6e 63 65 3d 37 37 64 63 35 64 38 38 30 66 26 70 6f 73 74 5f 69 64 3d 33 39 30 38 35 26 61 63 74 69 6f 6e 3d 74 76 65 5f 64 61 73 68 5f 66 72 6f 6e 74 5f 61 6a 61 78 26 74 76 65 5f 64 61 73 68 5f 64 61 74 61 25 35 42 74 75 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 73 25 35 44 25 35 42 61 63 74 69 6f 6e 25 35 44 3d 74 76 65 5f 75 6c 74 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 26 74 76 65 5f 64 61 73 68 5f 64 61 74 61 25 35 42 74 75 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 73 25 35 44 25 35 42 70 6f 73 74 5f 69 64 25 35 44 3d 33 39 30 38 35 Data Ascii: _tutor_nonce=77dc5d880f&post_id=39085&action=tve_dash_front_ajax&tve_dash_data%5Btu_conversion_events%5D%5Baction%5D=tve_ult_conversion_event&tve_dash_data%5Btu_conversion_events%5D%5Bpost_id%5D=39085
2024-04-25 19:25:32 UTC	1102	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:32 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8311e427be1-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache, must-revalidate, max-age=0, no-store Expires: Wed, 11 Jan 1984 05:00:00 GMT Vary: Accept-Encoding accept-ch: Sec-CH-UA-Mobile access-control-allow-credentials: true ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p pragma: no-cache referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Edge-Location-Klb: 1 x-frame-options: SAMEORIGIN x-robots-tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XO4Uycz81cgaf9v20htD73%2FX1SgBSNmg1ohX5oFV42JxVcUG%2FPRfCeUZUvhk9h8lQqEzb1X7F3HOjmhvSGcYSq5mapWE8vkJiAUVwG7Sjp9KHFjfpN9GXtYrd9VG8okqhzU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:32 UTC	51	IN	Data Raw: 32 64 0d 0a 7b 22 74 75 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 65 76 65 6e 74 73 22 3a 22 63 6f 6e 76 65 72 73 69 6f 6e 20 63 68 65 63 6b 65 64 22 7d 0d 0a Data Ascii: 2d{"tu_conversion_events":"conversion checked"}
2024-04-25 19:25:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49856	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	1062	OUT	GET /wp-content/uploads/Is-Excel-a-Database-370x120.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:32 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:32 GMT Content-Type: image/png Content-Length: 28547 Connection: close CF-Ray: 87a0b83209826758-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "648aa786-6f83" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 15 Jun 2023 05:54:14 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A8DXN5m3Y2UL9PCu0cAyjaZtJKeYJJc9AepYiDfT7Ta9mputbgcqfY%2Fv9CM4NHoIFxulY%2FmCcV5uAkMF%2BbKg68QvPcqYkGSkQtKniWjqxHlu36xa6kvt3YqrUntjQdEnZTs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:32 UTC	465	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 72 00 00 00 78 08 06 00 00 00 ef c8 79 db 00 00 6f 4a 49 44 41 54 78 da ed bd 77 7c 5c e7 75 e7 fd bd 6d 7a c5 60 d0 2b c1 0e f6 2e 51 12 45 15 aa 58 d5 96 8b 2c cb b1 d7 4e 9c b8 c4 bb d9 24 ef 66 37 d9 f8 93 77 37 79 77 b3 29 6b 3b eb c4 71 6c a7 b8 c8 92 65 cb 96 2c 59 5d 14 29 89 14 7b 05 08 12 20 7a 1d 60 7a bd e5 fd 63 66 2e 01 12 60 11 01 90 d2 ce cf 1f 5a 83 3b 77 ee 7d 9e e7 de fb bb e7 39 cf 39 bf 23 f0 da e7 0c 4a 28 e1 3a 43 b5 ec e1 8f b2 9b f1 f4 a6 c9 64 32 34 36 36 e2 69 5c ce c1 51 9d d6 a0 95 55 95 36 4e 9d 6a 27 1c 9e 40 14 25 56 af 5e 8d c5 62 99 f6 58 aa aa a2 69 1a 56 ab f5 82 ef 52 a9 14 fb f6 ed a3 ad ad 8d ad 5b b7 b2 7c f9 f2 cb 6a 5f 3c 1e e7 c0 81 03 2c 58 b0 80 ce ce 4e Data Ascii: PNGIHDRrxyoJIDATxw\|\umz`+.QEX,N$f7w7yw)k;qle,Y]){ z`zcf.`Z;w}99#J(:Cd2466i\QU6Nj'@%V^bXiVR[\|j_<,XN
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 3d 4e a7 73 5e ee 2b 4d d3 d0 34 6d ca bd 32 32 32 c2 5b 6f bf 43 9b 50 cf 80 11 40 d3 0d 16 28 61 d6 bb c3 ac 5d b3 06 8f c7 c3 cf 7e f6 33 02 81 00 65 65 65 1c 3b 76 8c 60 30 c8 c8 c8 08 4e a7 93 a1 a1 21 64 59 66 d1 a2 45 0c 0f 0f a3 69 1a fd fd fd 3c fa e8 a3 d4 d4 d4 30 3c 3c cc d9 b3 67 c9 e5 72 ac 5a b5 0a 8f c7 33 a5 3d b9 5c 0e 9b cd 76 55 fd 92 4b 94 51 c2 f5 88 41 35 ca bf c9 27 78 54 ae 63 79 4d 33 fe c6 a5 f4 26 04 ee 5a e8 c2 a5 88 08 02 04 02 01 0e 1d 3a 44 6b 6b eb 05 24 78 b9 b0 5a ad 2c 58 d0 8c cd 66 a5 a5 a5 e5 b2 7f 27 8a 02 cb 96 2d c3 ef f7 93 cb e5 d0 34 8d ba ba ba 0b f6 13 04 81 9a 9a 1a 9a 9a 9a 50 14 e5 b2 8f 6f 18 06 9a a6 11 0c 06 91 24 09 b7 db 4d 32 99 c4 eb f5 9e 6b 83 20 10 b4 cb 78 14 9d db 9a 1c f8 15 95 98 a5 11 e0 b2 Data Ascii: =Ns^+M4m222[oCP@(a]~3eee;v`0N!dYfEi<0<<grZ3=\vUKQA5'xTcyM3&Z:Dkk$xZ,Xf'-4Po$M2k x
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 30 f2 d6 9d f8 c1 f7 b6 1a ba 0e 82 f0 be 7e 81 4e 9e 65 94 88 bc 84 0f 0c 32 86 ca f7 46 df e2 c1 e0 5a ea 2c 7e 44 5d 9f 55 fd 71 5d d7 49 e5 32 28 92 8c 22 c9 b3 72 5c a3 20 17 7b 35 85 15 0c c3 20 97 cb 87 60 5a 14 65 b2 af e8 8a 8f a3 17 c6 6c 3e c9 28 9b cd e6 cb dc 49 d2 7b 6e fb 15 5f cb c2 79 e6 44 9e d6 30 d0 74 dd 74 7b cc d5 78 16 25 77 8b 7d 28 a5 e8 97 f0 81 41 48 4d 50 26 3b b9 c1 bd 00 5d d3 4d ff e1 6c 60 3c 11 e1 a5 53 ef e0 b2 3a f0 d9 dd b3 6a cd 5d cd c3 9e c9 64 38 72 e4 08 ba ae e3 b9 44 25 a1 4b 91 ea 6c 8e d7 e5 60 78 78 98 33 67 ce a0 eb 3a ee 49 75 2c e7 9c c8 0b 24 38 17 7d d5 75 9d b3 67 cf 92 4e a7 89 c7 e3 b8 dd ee 92 45 5e 42 09 57 02 d5 d0 f9 a7 a1 5d dc e9 5d 46 ab a5 6a 76 2d 7e 35 4b 2c 93 c4 69 b1 cf fa 03 79 35 71 f0 Data Ascii: 0~Ne2FZ,~D]Uq]I2("r\ {5 `Zel>(I{n_yD0tt{x%w}(AHMP&;]Ml`<S:j]d8rD%Kl`xx3g:Iu,$8}ugNE^BW]]Fjv-~5K,iy5q
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 9d 4b 19 d6 0d 83 98 96 c1 60 e6 53 d9 44 05 8f 64 c3 29 59 b1 89 0a 09 2d 43 54 4b 13 55 53 e8 5c 79 13 45 04 5c 92 f5 8a c2 ce 54 43 27 a1 65 b0 08 32 f6 49 ed 37 80 b4 96 23 63 4c af 6f ed 14 ad 28 93 92 0b 34 c3 20 ae a5 2f da ea 62 fb 5c 92 15 a7 64 45 44 24 a1 67 48 68 19 62 5a 1a d5 b8 30 8a 42 42 c4 25 59 af 48 ed 33 57 e8 53 fe 62 83 4b b2 21 4d 3a 40 ea 22 fd 9a 0d d8 44 05 9b 98 27 31 c3 80 b8 96 41 43 bf 26 37 fb 9d d9 06 6e dc 63 60 53 ac e8 ba 4e 63 63 23 f7 dc 7d 37 ff fc 2f ff 62 16 78 98 98 98 c0 e9 74 90 4c a6 f8 ec 67 3f cb be 7d fb e8 38 dd 41 3c 16 a7 a5 a5 85 db 6f bb 8d 1f fc f0 87 66 66 9d c7 e3 61 c3 86 0d fc fa d7 bf 46 10 04 9c 4e 27 0f 3f f4 10 6f ec dc 49 67 67 27 36 9b 8d bb ef ba 8b d5 6b d6 bc af 13 50 4a b8 be 90 4c e6 b3 Data Ascii: K`SDd)Y-CTKUS\yE\TC'e2I7#cLo(4 /b\dED$gHhbZ0BB%YH3WSbK!M:@"D'1AC&7nc`SNcc#}7/bxtLg?}8A<offaFN'?oIgg'6kPJL
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: c7 20 a0 38 f9 af 8d 0f f0 85 9a 6d 08 05 0b ef 06 4f 0b 4e d1 4a 42 bf 72 71 ff 98 96 e6 0b ed ff c2 91 44 df 8c fb 64 0d 8d 88 9a b7 7c 0d 0c fe 79 68 37 77 95 ad e0 16 ef 22 04 41 c0 22 ca fc 46 d5 8d fc 32 74 98 a5 8e 6a ee f0 2f 33 dd 23 e3 6a 82 bf ec 7d 81 de cc c4 54 eb 1a 81 47 2b 36 71 97 bf d5 24 71 c3 30 18 ce 45 f9 f6 c0 4e 9e 1c dd c7 50 36 82 61 18 94 29 2e 1e 2e 5f cb 57 ea 6e a7 d6 e2 23 aa a5 f9 e1 f0 1e de 0c 9f 9a b6 bd 71 2d c3 17 4f fd e0 a2 d6 6d 46 57 e7 74 31 73 26 6c f3 2d 66 51 61 dd 60 8a a5 2e 08 dc 5d b6 82 bf eb 7f 95 b3 e9 d0 fc 3f 00 86 c6 cf 46 0f f0 a9 ca 2d 04 14 d7 75 f3 50 7e ef 7b df 63 ef de bd 04 83 41 3e f5 a9 4f b1 a0 b9 19 03 f0 78 3c a4 53 29 46 46 47 89 84 c3 34 35 37 a3 69 1a 5e af 17 5d d7 09 8d 8d 71 b6 bb Data Ascii: 8mONJBrqDd\|yh7w"A"F2tj/3#j}TG+6q$q0ENP6a).._Wn#q-OmFWt1s&l-fQa`.]?F-uP~{cA>Ox<S)FFG457i^]q
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 61 16 2d 5a 44 65 65 25 a9 64 92 13 27 4f 92 cb 65 59 b6 6c 39 5e af 77 ce c9 fc 9a 10 b9 6a e8 3c 3d 7a 80 87 cb d7 11 54 5c f9 da 73 82 c8 06 77 13 6b 5d 0d 24 b4 0c fd 99 30 6f 46 3a 78 7e fc 28 6f 86 4f 31 ae 26 ae ca 36 75 4a 56 fe e7 82 47 66 4c 45 49 69 59 1e 6f fb 0e cf 86 8e 5c f0 5d 77 3a c4 ff ec 7d 81 7f 58 fc 69 3c b2 6d 92 6b 43 e7 87 c3 7b 79 72 74 df b4 6d b3 88 12 35 96 a9 17 f1 6c 7a 8c b1 6c 6c 56 c6 d1 29 5a f8 8b 05 1f 99 f1 a5 10 d7 d2 dc 77 f4 eb bc 13 ed 9c b7 6b bb d6 dd c0 8e b2 e5 e6 da c1 48 36 c6 6b 13 6d f4 66 c6 79 66 ec 10 4b 1d d5 88 82 40 99 ec e2 f1 ca 1b 78 27 7a 66 da e4 a7 b9 c6 a9 e4 30 ff 7a e2 15 3e 59 b6 81 c1 c1 21 52 a9 14 cb 96 2d 63 7c 7c 9c e1 e1 61 ea ea ea a8 ae ae e6 e8 d1 a3 d8 ed 76 9a 9b 9b 69 6f 6f 67 Data Ascii: a-ZDee%d'OeYl9^wj<=zT\swk]$0oF:x~(oO1&6uJVGfLEIiYo\]w:}Xi<mkC{yrtm5lzllV)ZwkH6kmfyfK@x'zf0z>Y!R-c\|\|avioog
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 53 53 c3 fd f7 dd c7 c0 c0 00 9a a6 f1 a1 0f dd 47 32 99 60 e7 ce 9d 6c de bc 99 aa aa 2a 4e 9f 39 43 6d 6d 2d 5f fe d2 97 58 bd 7a 35 2b 56 ac 30 53 ee d3 e9 34 13 13 13 1c 3b 76 8c b2 b2 32 dc 6e 37 cb 96 2d e3 ad b7 de e2 d8 f1 e3 a4 52 29 52 a9 14 15 15 15 4c 4c 84 67 f4 1b 4f f7 cf e3 f1 70 ef bd f7 f2 e8 a3 8f b2 7c f9 72 d3 e0 91 65 99 8d 9b 36 f1 d8 63 8f 71 eb ad b7 62 b3 d9 2e f8 ed f9 3e fc 8b fd bb 12 5f 6e 36 93 21 1a 8d 32 d0 df 8f db ed 26 93 c9 90 48 24 a8 a9 a9 21 95 4a 61 b5 5a 59 b2 64 09 cb 96 2d 33 2b c9 8b a2 48 32 95 62 68 68 88 87 1f 7e 98 d1 d1 51 42 a1 10 d1 68 94 b1 b1 31 7a 7a 7a a8 a9 a9 e1 a1 87 1f c6 e9 74 b2 62 c5 0a ee bd f7 5e c6 c6 c6 10 45 91 07 1e 78 80 64 32 c9 de bd 7b b9 e5 96 5b a8 aa aa e2 cc 99 33 64 32 19 74 5d Data Ascii: SSG2`l*N9Cmm-_Xz5+V0S4;v2n7-R)RLLgOp\|re6cqb.>_n6!2&H$!JaZYd-3+H2bhh~QBh1zzztb^Exd2{[3d2t]
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 17 04 81 db 6e bb cd 4c 20 5a bd 6a 15 36 bb 1d c3 30 90 65 99 d6 d6 56 fe e8 8f fe 88 f1 f1 71 6a 6b 6b f1 7a bd dc 72 cb 2d b4 b4 b4 90 4c 26 a9 af af 27 9d 4e 33 3e 3e 4e 7d 7d 3d f1 78 9c 50 28 44 7d 7d bd 59 3d ca 6a b1 50 57 5b 8b 20 8a d4 d5 d5 bd 3f 16 3b dd 92 8d ff de fc 30 9b 3d 0b f0 ca 76 24 41 e4 4b a7 fe 8d 17 27 4e 98 96 f1 99 f4 28 5d 83 63 b8 24 1b ff ab e5 a3 e6 d3 9f 57 d2 53 e6 ad ad 02 70 77 d9 0a 3e 5f 7d 33 72 21 52 25 63 a8 7c 67 e0 4d ee 2b 5f 65 66 75 36 d9 ca f9 a3 86 7b f9 ad f6 7f 21 a2 9d f3 33 6a e8 bc 16 6e e3 23 c1 75 58 85 7c bb 17 d8 82 fc 4e cd 76 be 76 f6 99 69 23 72 04 f2 c9 34 7f da f4 00 df ec 7f 95 9f 8f 1d bc 26 a1 97 57 8a 5b 7d 4b d8 e2 59 30 e5 e1 11 84 4b 47 69 bb 25 1b bf 51 75 23 6f 84 db af 49 e2 52 ba dc Data Ascii: nL Zj60eVqjkkzr-L&'N3>>N}}=xP(D}}Y=jPW[ ?;0=v$AK'N(]c$WSpw>_}3r!R%c\|gM+_efu6{!3jn#uX\|Nvvi#r4&W[}KY0KGi%Qu#oIR
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: af cf df c3 8a 2c 93 cd e5 10 45 11 ab d5 ca bd f7 de 9b 9f 61 49 12 5f f9 ca 57 50 55 15 9b cd 86 a6 69 48 92 34 45 92 77 3a 14 db 71 a5 ee 9e f7 23 8a 7d bc d4 98 5c cf 28 aa 1f 16 fb 70 4d 16 3b 4f 26 07 f9 4f 9d 4f f1 bf 5a 3e 46 8b bd c2 0c 57 13 04 01 e9 3c e7 84 6e e8 74 a5 c7 f8 c3 33 4f 71 28 de 33 a7 ed 4a e9 39 d2 7a 8e 2a 8b 87 ff d4 70 2f 15 85 a2 14 86 61 70 30 d6 cd b7 07 df 98 a2 f5 f2 5c e8 08 cf 8d 1f e1 e3 c1 8d e6 d4 e8 e3 15 9b 78 61 fc d8 94 c4 a2 71 35 c1 1f 9e 79 8a e1 6c 8c cf 56 6d a5 bc 90 04 75 31 5f 68 4c 4b f3 cf 43 6f f1 17 3d bf 62 5c 4d bc e7 3e c5 0b 15 87 de 93 b5 6a 18 0c 65 a3 a6 22 e4 b4 56 a2 ad 8c ed fe a5 66 7f 72 ba c6 13 23 ef 5e 52 76 f7 f9 d0 51 be 54 b3 dd d4 2a 6f b1 07 b9 27 b0 92 bf 1f 78 7d de ef c7 88 9a Data Ascii: ,EaI_WPUiH4Ew:q#}\(pM;O&OOZ>FW<nt3Oq(3J9zp/ap0\xaq5ylVmu1_hLKCo=b\M>je"Vfr#^RvQTo'x}
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 37 d2 75 70 ff ca 94 50 42 09 e8 18 1c 88 9d e5 37 aa 6e 34 73 06 e6 13 0b 17 2e e4 e4 c9 13 f4 f6 f4 d0 d2 d2 c2 fe fd 07 68 6f 6f c3 e3 f1 b2 6b d7 2e 5a 5a 5a 08 04 02 a6 4f 74 ae 30 36 36 86 df ef 67 f5 9a 35 d4 d4 d4 f0 e3 27 9e 60 2c 14 a2 af b7 d7 d4 75 69 6f 6f 27 16 8b 71 f3 cd 37 b3 67 ef 5e 7c 3e 1f 5e af d7 b4 b6 27 26 26 e8 ea ec a4 ae ae 8e 03 07 0e d0 d2 d2 c2 be 7d fb 68 6e 6e e6 ed b7 df 26 55 48 d5 ef ec ec 34 e3 af e7 1f 02 92 ab 19 35 ba 07 35 fc 22 82 6c c3 d0 3c 58 ea ff 33 82 e2 41 ed fd 67 d4 f0 1b f9 ed 46 39 4a ed 1f 20 28 2e d4 9e 7f 44 8d fe 2c 1f 35 28 2d c4 52 fb bb 20 d9 ae f9 fd 2b 96 1e e1 12 4a c8 e3 ed 68 27 a3 d9 d8 35 39 77 20 10 20 9d ce 30 34 3c 6c 26 93 78 3c 5e 16 2d 5c 48 30 18 34 fd d6 73 8d 60 30 48 24 12 e1 e8 Data Ascii: 7upPB7n4s.hook.ZZZOt066g5'`,uioo'q7g^\|>^'&&}hnn&UH455"l<X3AgF9J (.D,5(-R +Jh'59w 04<l&x<^-\H04s`0H$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49858	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	1073	OUT	GET /wp-content/uploads/How-to-Copy-Same-Date-in-Excel-370x120.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:32 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:32 GMT Content-Type: image/png Content-Length: 34965 Connection: close CF-Ray: 87a0b8321b044554-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "648abbc0-8895" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 15 Jun 2023 07:20:32 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Kd0wRpiPRozzeTbWmVkBi%2ByUTfuv5e7FBZyJqxk%2BzM2f5D0WyBp%2BPZoOdvXYirHtTjyEiXzMOSlznnNJ4nHf53TonEd8hL%2FF4gOoeqjrAeJh6odSUFZsCqGvnfqPMe3iKA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:32 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 72 00 00 00 78 08 06 00 00 00 ef c8 79 db 00 00 80 00 49 44 41 54 78 da ec bd 75 9c 1d e7 7d ef ff 1e 3a 8c bb 67 99 19 25 ad 98 65 81 6d 59 32 63 6c c7 8e 03 4e 9a b6 69 d2 f4 b6 bd bd bf dc de 9b d2 6d d3 14 92 36 0d 35 e0 38 e0 d8 31 a3 6c c9 62 66 5a d4 6a 99 19 0e 9f 33 33 bf 3f ce ea 68 57 64 c9 91 f9 7c f2 ca 2b d1 ce cc 99 99 67 66 3e cf f7 f9 7c 49 18 18 f2 e9 bc 23 22 8c b6 ef e5 8d 9f fc 3b 67 2a ff 9c 3f bc 7d 09 a9 56 81 b1 f6 23 6c 7a e2 fb ec 1b 2b 63 c1 ba 34 c6 4e 9c 42 9a f5 18 f7 ad ab 22 c5 aa 20 08 e7 7f 41 d7 26 39 b3 e5 47 ec 38 dc 8e 94 5e 88 7f 78 08 c7 b2 2f 73 ff 22 0f 93 27 5e e1 e7 3b 7b 48 f2 98 19 1c 0e e3 a8 5e c7 a7 6f 70 70 76 c7 59 02 a2 95 d4 1c 2b c3 27 5e e0 57 Data Ascii: PNGIHDRrxyIDATxu}:g%emY2clNim6581lbfZj33?hWd\|+gf>\|I#";g*?}V#lz+c4NB" A&9G8^x/s"'^;{H^oppvY+'^W
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: ff 75 3b 0b 52 65 c6 4f ef e6 f9 e7 06 a8 fa 83 0d cc 49 75 60 b7 3a 49 f2 b8 b0 28 e2 8c 31 7e 3f 10 08 45 e8 1f 9a 24 2d d9 8e d9 a4 bc 77 27 d2 75 b4 f0 24 6d 7b 5f e2 47 c7 27 a8 9c 57 8d eb f8 13 fc b5 e0 a5 36 45 3e bf db 64 10 06 7d 24 90 c0 27 19 e2 bb 3e 52 10 b0 78 f2 99 bd 7c 25 85 86 7d bc fa bb 37 39 15 2e a2 a8 c8 83 51 8c e2 9f 18 a2 af af 87 de de 01 86 c7 fc 44 f4 a9 f9 42 90 49 c9 2a c4 e0 17 68 3c 50 4b af af 97 c6 63 fd 98 a2 69 54 15 a5 a2 08 00 02 a2 94 4c 61 75 31 79 45 29 58 ad 16 92 52 b3 49 ee f3 13 1e 0b 61 c8 2b 61 8e b5 8b 91 ae 5e 86 47 7c 0c 76 35 d3 5f 32 8b 8a 7c 0f 2e c3 3b 5d 37 20 9a f0 94 ac e0 8e cf de c7 6c d3 1e 9e fa 97 bf e3 5f fe f3 77 ec 6a 1e 23 2c 3b f0 a4 65 90 ec 49 c2 9d 91 4b 6e 66 2a 6e 4b 12 85 95 25 54 Data Ascii: u;ReOIu`:I(1~?E$-w'u$m{_G'W6E>d}$'>Rx\|%}79.QDBIh<PKciTLau1yE)XRIa+a^G\|v5_2\|.;]7 l_wj#,;eIKnfnK%T
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: d9 f6 cb 53 6c 89 6a 28 f6 14 4a d7 3f c6 d2 92 64 8c f2 05 8c 24 88 18 ed a9 24 a7 09 d8 8d 32 b2 33 9b d2 ca 0a 66 af 4e a6 70 4e 15 39 16 05 d1 e0 20 35 25 05 83 d3 8a 29 63 1e 6b 56 9c e6 a5 9d 4f f3 c4 09 33 a9 c5 85 14 15 a6 50 e4 32 23 09 12 8a 39 9d c2 8a 6c c4 83 bd 94 57 15 91 e6 b2 5d b5 e0 2f db 92 f1 78 92 f0 ff ee 17 fc db 6f fd 44 22 26 3c 05 0b b9 ed d1 db 99 9f 69 c1 16 c8 a6 2a 23 89 e3 af 3e cf 2f a2 23 6c dc 70 0b 6b 6e cc 66 62 d3 eb 3c f1 2f 3b f0 14 66 e3 2a 58 44 a5 c7 86 41 00 49 91 28 98 9f 83 dc 7e 90 a7 f7 3d c3 88 90 cf c2 fb 6f 67 71 55 06 56 d1 8f 3d 29 97 c2 b0 07 9b c9 88 25 b9 84 55 0f dc 03 af be c4 d3 df 7b 95 f1 b0 00 06 07 19 0b ef e6 0b 0f cc c3 6e 71 93 56 58 80 d9 61 88 49 bf c1 51 da 0f bf ca 7f 3c b3 87 49 7f 90 Data Ascii: Slj(J?d$$23fNpN9 5%)ckVO3P2#9lW]/xoD"&<i#>/#lpknfb</;fXDAI(~=ogqUV=)%U{nqVXaIQ<I
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 49 32 24 9c 66 1f 2a 68 2a 63 9d 47 39 dd dc 45 24 79 36 b3 4a f2 f1 58 25 4c 92 42 89 fd 7c a2 94 20 08 e8 89 92 b6 09 24 88 fc 42 a8 84 7d 83 74 1c 3b ce 89 d3 db 78 63 f7 69 52 37 fe 35 b9 a9 6e 4c b2 86 7f b0 85 63 af bc c8 f3 8d 03 48 5a 10 44 0b 19 73 34 1e b9 6f 29 b9 6e d3 4c b9 52 0f 31 50 fb 16 af fc f8 c7 9c 4e bd 8f bb 1e 4d e3 ae 79 a9 98 25 00 8d c9 f6 dd bc fd ec 53 3c d7 51 ca 43 5f f8 1c 8f a4 39 b0 a1 c7 fe a3 9f ff 50 2f 84 20 9c af 95 a4 c7 b2 ef af 0a fe c1 06 76 bd f8 2f fc b6 2e 95 34 87 0d 21 60 c0 9a 5c 45 bf 76 2b eb 97 14 e2 92 84 f3 2b 09 2e 7f fe 73 16 e3 a5 b6 4f 5f 99 c4 b6 7d 9c 6b 88 bf 27 b6 38 ba ae 13 19 6b 67 d7 96 df f0 eb 17 b6 a0 2f fa 33 be fe 58 06 c9 56 0b 82 ae 92 27 2b 88 40 bc 88 ad 72 7d 2d 72 8f d9 c1 4d 85 Data Ascii: I2$fhcG9E$y6JX%LB\| $B}t;xciR75nLcHZDs4o)nLR1PNMy%S<QC_9P/ v/.4!`\Ev++.sO_}k'8kg/3XV'+@r}-rM
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 3b 4f d3 34 d2 05 40 69 52 36 cb b3 ab c8 b4 27 63 94 0d 3c 58 b9 9a dd 1d a7 f9 d9 89 4d 09 22 bf f6 0f 2d 8a aa 46 31 59 73 29 2d eb a5 73 2c 4c 58 74 e1 1f e8 a1 7f 50 a1 af ef 34 c7 9b 07 09 47 1d 64 14 54 33 77 51 4a 4c 92 11 24 dc 39 e5 88 ad 1d 9c 3c 78 80 b6 aa 39 b4 d4 8f 22 9b 4a 99 9d af d1 d1 3e 0e 88 88 a2 8b f4 f4 1e 8e 9e da cb b1 e3 7e 82 03 2d 8c 36 2a 04 57 aa 18 e6 55 b1 ac 6c 2f 07 7b bb e8 e9 b3 10 3a 73 1a bd 7a 1d 65 79 c9 58 83 dd 57 7d 0f 81 91 3e 8e 6f f9 1d 4f b6 a6 a2 7a bb e9 1a 33 52 7a f3 02 f2 cd 23 9c 68 6c a3 fd 48 2f 21 c7 76 9e 6f 51 10 a2 03 b4 d7 77 21 07 7b 19 0e 94 21 88 12 45 8b 17 b3 70 f9 3c 8a d3 21 50 50 89 fd e4 00 13 fe 30 9a cd 43 61 b5 c2 9e da dd bc e1 ef a0 6c fe 62 96 cc 2a 26 91 78 78 0d 34 ae fa e8 3d Data Ascii: ;O4@iR6'c<XM"-F1Ys)-s,LXtP4GdT3wQJL$9<x9"J>~-6WUl/{:szeyXW}>oOz3Rz#hlH/!voQw!{!Ep<!PP0Calb&xx4=
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 3e 4b 86 4f f1 d6 7f fe 94 ba a6 4e 2a ca 12 44 7e d5 ca b4 68 c4 9d b7 88 fc 9e 7a 7a 07 ce 72 a6 77 82 ee fe 71 46 b4 01 7a 06 bd 24 a5 d5 90 e3 0d e0 eb 39 0b e6 30 24 9d e7 71 5d 79 ef 42 10 15 49 c6 32 3d 9b f4 82 6d ef 54 f2 a2 d0 95 ce 77 6e fe 23 6e 29 5a 18 b7 fa ce 45 37 65 28 46 d2 ad 6e e6 a6 17 93 e7 4c e3 3f 0e bd 48 30 1a 26 a4 86 f1 47 42 e4 4d 15 fe 9f 97 5e 1c 27 72 51 10 58 99 3b 8b 12 77 16 82 20 90 6a 75 31 3b b5 20 4e e4 56 c5 c4 9c b4 22 f2 5d e9 0c 07 26 68 1d eb bb e4 75 49 82 48 86 2d 89 1c 47 ea 45 d6 a3 cb 14 8b 16 09 46 c3 58 95 f3 2f 70 be 33 8d ef 6f f8 2a 37 16 cc bb e8 5e cc 8a 91 34 ab 9b d9 a9 85 54 78 72 f9 d6 de a7 df 91 ac 5c 46 1b 4b b2 ca e3 4e cd da c1 36 4e 0d b4 5e 76 ff 6d 6d c7 d9 df 55 cf 58 c8 7b 11 59 3e 3a Data Ascii: >KOND~hzzrwqFz$90$q]yBI2=mTwn#n)ZE7e(FnL?H0&GBM^'rQX;w ju1; NV"]&huIH-GEFX/p3o7^4Txr\FKN6N^vmmUX{Y>:
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 65 6b fc a6 76 2b ff f3 ed 9f 30 1c 98 40 14 04 6a d2 8a f8 d1 c6 3f 65 6e 7a 31 56 c5 c4 17 e7 6e e4 a5 a6 bd 57 0c 13 4c b3 b9 b1 4c 69 cc 3a d0 36 d6 7f cd da b1 49 36 f0 f8 dc 0d 64 d8 92 10 04 81 ae 89 21 fe f0 8d ef b2 b9 f5 28 11 35 82 d5 60 e6 4f 17 dd c3 ff b7 fc 21 4c b2 81 95 b9 b3 b8 b1 60 1e bf 3e bd f5 92 13 f3 58 c0 c7 d7 37 7f 9f e7 1a 76 13 8a 86 b1 1b 2d fc c5 92 07 f8 cb a5 0f a0 48 32 c5 ee 4c 6e 29 5a 48 c3 70 27 be 48 90 df d5 ef 64 63 d1 22 14 49 66 4d 7e 0d 79 ae 34 ce 8c 74 c7 57 0a 2b 72 aa e2 4e dc 93 03 ad 74 4d 0c be 1f 44 2e 63 76 97 b2 ec 91 42 16 4d 1f 50 41 44 92 14 24 11 92 36 7e 95 9a f5 53 2a 93 20 22 c9 0a b2 78 a9 c4 17 03 c9 c5 2b 70 17 e9 08 a2 8c 28 40 7a f9 6a ee 2e d5 11 45 09 51 14 20 a9 84 15 cb 8a 63 bf 23 0a Data Ascii: ekv+0@j?enz1VnWLLi:6I6d!(5`O!L`>X7v-H2Ln)ZHp'Hdc"IfM~y4tW+rNtMD.cvBMPAD$6~S* "x+p(@zj.EQ c#
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 62 c4 67 94 b1 9a 0d 8c 8d 07 e8 1f 9a 4c 10 f0 f5 92 16 54 8d 60 28 ca d0 a8 1f f9 43 52 a0 ca 3b 19 46 9a be 3e 12 84 58 5d cf 0f 51 28 b9 8e 4e 64 3a e1 48 ca 25 b3 44 ad 8a 09 45 94 e3 86 49 64 ca 42 d5 d1 39 3d d0 46 20 12 c2 6a 30 b1 3c bb 8a ba c1 76 72 1d a9 04 22 21 36 9d 3d 4c b7 77 88 d3 03 6d 14 b8 32 98 97 5e cc bc f4 62 8a a6 1c 9d 75 83 1d d7 8d 38 74 5d c7 3f 8d 20 15 49 be 24 11 1a 65 25 6e 55 6b ba 8e 2f 1c 78 07 22 1f a6 df 37 46 fa 94 be bd 2a 77 16 76 83 99 b1 d0 a5 5b 35 e6 38 52 f9 bb d5 9f 65 7b fb 09 5e 6a da cb 48 60 92 a8 ae a2 4e 19 18 a2 20 a0 5c 62 45 2d 22 60 37 58 ce bf d3 ba 7a 49 a3 44 14 44 2c 8a f1 92 ea 82 41 3c bf 5a 08 a9 91 78 d6 29 c0 de ce 5a 4e f4 b7 b0 32 b7 1a 8f c5 c1 fa c2 85 a8 9a c6 92 ac 4a 04 41 60 c0 37 Data Ascii: bgLT`(CR;F>X]Q(Nd:H%DEIdB9=F j0<vr"!6=Lwm2^bu8t]? I$e%nUk/x"7F*wv[58Re{^jH`N \bE-"`7XzIDD,A<Zx)ZN2JA`7
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 65 69 76 65 5c 16 e9 9e 1c a2 cf 7b f5 8e ce bd 9d b5 7c 79 de 6d d8 0c 66 5c 26 1b 7f 30 ef b6 98 c5 ac 46 39 d8 dd c0 a9 81 56 c6 42 5e fe df de a7 28 f7 e4 50 e8 ca c0 6d b6 f3 c5 b9 1b 2f aa cd 1f d5 54 5e 3f 7b 90 ff 3e fe c6 55 85 13 46 34 95 ef 1c 7c 9e 74 5b 12 0f 54 de 80 51 52 48 32 db b9 ad 64 09 b7 95 2c b9 68 ff 89 90 9f ef 1e 7a 9e 1d 1d 27 e3 b6 db 1b cd 07 f9 f9 89 37 f9 d2 dc 5b 31 c9 06 6a d2 8b 99 93 56 34 e3 ba 74 5d 67 38 30 c1 3f ee 79 8a b3 a3 bd 97 91 11 75 46 83 93 14 b9 33 f9 eb 15 9f be c8 78 09 46 c3 fc f4 f8 1b 9c 1e 68 bb a4 fc b4 ad ed 38 0f 54 ac 8a 93 b8 3e 15 62 da 79 9d 62 c7 67 a8 11 09 1a 48 e0 a3 0e 45 94 2e 4e 9b bf 4e ab 05 4d d7 f0 47 42 f8 22 41 7c 91 20 11 ed 4a 4d 22 74 42 6a 24 be 6f 30 1a b9 a8 ed e1 ce 8e 53 Data Ascii: eive\{\|ymf\&0F9VB^(Pm/T^?{>UF4\|t[TQRH2d,hz'7[1jV4t]g80?yuF3xFh8T>bybgHE.NNMGB"A\| JM"tBj$o0S
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 18 b5 de c8 f2 e2 54 a4 f1 41 da 6b b7 f0 cc d3 3a 8f 7e 76 15 b9 46 01 35 14 20 10 08 a3 02 b2 c1 84 c9 6c 46 11 75 d4 70 18 55 d7 d1 a2 51 c2 e1 08 aa 20 61 34 c7 a2 38 a6 52 11 88 04 fd 04 82 11 54 1d 04 d1 80 d9 6a c6 20 8b a0 47 09 fb c2 e8 a2 4e 28 a2 02 0a 66 9b 29 b6 8a 49 b0 f7 0c 6b 5c 0d f7 72 6a d3 41 3a ba 65 0a 66 cf c3 1d 6c a3 76 fb 1e 0e 38 53 71 2c b1 d2 fe ca 6b 9c 18 1d a1 ab 61 1f e1 a4 2c e2 05 df 13 f9 5f 09 7c 00 c8 b2 7b 28 4d ca 66 d0 3f 86 cd 60 e6 9e f2 15 ac ca 9d 05 7a cc b2 7f a9 69 ef 7b d6 5f f4 1d 88 5c 44 36 25 91 55 5d 83 e4 1f c0 30 70 9a ae 73 3e 25 35 c4 78 7f 3f dd 83 6e e6 7d 7a 03 cb 8a 45 da b6 bc c2 a6 17 fa 98 08 44 2e ab 3a b9 0b 8a 28 f4 9a 09 9d 3c 45 f7 92 02 5c 49 0a ba af 83 d3 c7 26 10 e5 02 4a 8a 62 c9 Data Ascii: TAk:~vF5 lFupUQ a48RTj GN(f)Ik\rjA:eflv8Sq,ka,_\|{(Mf?`zi{_\D6%U]0ps>%5x?n}zED.:(<E\I&Jb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49860	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	1062	OUT	GET /wp-content/uploads/Price-banner-Earn-and-Excel.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:32 UTC	912	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:32 GMT Content-Type: image/png Content-Length: 1162805 Connection: close CF-Ray: 87a0b832f8506788-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "64900bcc-11be35" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 19 Jun 2023 08:03:24 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3TrvyWRgq590jovtRaMKW3yyBVAvkJkXqpVjEyvt7uQoAK%2BpFtxl7PaH6%2BE%2FYgJKVEmReb%2BVJM91Df0sJpXjz8mONWN76vQhTKf76XI6jeMQLDZD5XIZdJtiYdx%2Fs3nlVbQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:32 UTC	457	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 02 d0 08 06 00 00 00 cf 7d dd 56 00 00 00 4e 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 d8 00 00 00 01 00 00 00 d8 00 00 00 01 aa a2 87 67 00 00 00 1c 69 44 4f 54 00 00 00 02 00 00 00 00 00 00 01 68 00 00 00 28 00 00 01 68 00 00 01 68 00 09 5e 7c 59 97 c8 8d 00 00 40 00 49 44 41 54 78 01 ec bd 47 8c a5 d7 95 e7 a9 c6 18 60 1a 2a f5 ec 7a 33 8b 02 06 98 c5 a0 d7 33 8b ea 5e 0e 30 9b 19 0c 30 98 c6 00 05 4c 35 aa 54 5d ad 52 49 25 d1 49 2c 7a 89 2e 69 92 4c 7a 32 69 93 56 a2 4d 26 d3 30 bd f7 36 d2 fb c8 f0 3e 5e 44 bc 17 e6 b9 33 Data Ascii: PNGIHDR}VNeXIfMM>F(giDOTh(hh^\|Y@IDATxG`z33^00L5T]RI%I,z.iLz2iVM&06>^D3
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 3f 55 c2 a9 8c fc a9 92 95 a6 e4 b7 b9 e9 12 65 73 5c ed e4 30 6d a4 76 96 d6 99 a6 ad 92 da f4 fe 08 97 54 2f ea 96 bc df 52 ab 9d af e8 bf 44 5d 77 33 94 cd 61 da 2c d2 d5 f6 0c 8e b4 c9 22 3f ea 68 8c 93 c8 ab 44 be ca 4f d2 a7 c6 e3 61 8d 8b 36 8b 76 28 5b 52 59 f9 cc 75 69 5b 93 a4 95 90 cb a4 3b b5 95 c3 2a ab f0 94 4d b4 a5 29 5c 2a 95 6c 42 fd 7a 3e 61 e6 a8 72 aa 3b e1 fd 4c b6 da a1 ac fa 9c 94 3f 35 b9 a8 2d ef 6b 7a f2 6b f7 ff 4d ce bf f4 07 96 ff cd f6 9f 9f cb cd c9 3f 3f 7f 64 fe 9b ca df eb 45 3b 13 84 27 26 e3 99 6a 2d 0d 0c 0e d8 b9 4b 17 ed 58 d7 09 5b b7 7e 9d 6d d9 b6 cd b6 ed d8 61 07 8f 1c b2 2f 37 6f b6 2b dd 97 ed 8b b5 6b ad eb 54 97 6d db be dd 76 ed dd 6d 7b f7 ed b3 4d 9b 37 d9 78 29 b5 e3 eb 56 6b e3 9f df fa d3 fa ff aa f7 Data Ascii: ?Ues\0mvT/RD]w3a,"?hDOa6v([RYui[;M)\lBz>ar;L?5-kzkM??dE;'&j-KX[~ma/7o+kTmvm{M7x)Vk
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: f3 bc d4 47 6b 7e 37 3b ff 5f d5 ff 57 ae 3f d6 7a fe 2e fc aa f7 ff 66 bf 3f 3e 56 e0 eb 14 cf df bf 57 b4 df 02 66 d1 97 ca 7c dd ef 4f 7b ff 01 00 05 f8 12 d0 73 d8 47 58 80 6f 86 74 80 df 94 d2 66 12 00 2c 80 60 d4 99 24 4f ff 74 c8 df 95 6f 72 fe de 26 73 ff a6 bf bf ed f3 0f 79 32 fe f4 ec 24 4f 0f f3 7e b4 ff fe 38 c8 e3 7b d1 02 76 01 f3 54 3f 60 dd 12 b8 47 59 41 3f 41 3c f9 05 d8 53 1b 05 18 04 18 a6 72 39 5f ed 79 98 ef b6 43 46 de 51 2f c3 6f a5 d2 7f 6d ff 8c bb 05 00 4b 56 e1 b7 51 f0 2f 83 bf 0a bf 15 82 7a 02 83 b3 b4 17 00 b0 54 c0 bf 0a ef 9c 03 41 ca cd ca 21 0f 95 99 03 2e 39 00 a4 3d f9 d9 a9 cc 3c 6d 09 c8 e5 b4 16 c8 13 e0 13 a0 6b 41 41 01 3f 41 bc 00 83 00 36 e2 ed f9 ea cb eb d3 9e 43 3e e4 e1 65 04 fd 54 d7 cb ab 4e 38 95 0f 58 Data Ascii: Gk~7;_W?z.f?>VWf\|O{sGXotf,`$Otor&sy2$O~8{vT?`GYA?A<Sr9_yCFQ/omKVQ/zTA!.9=<mkAA?A6C>eTN8X
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 61 ac a4 ab 3d 69 23 ba 9f e2 82 7d ae 89 08 d8 72 00 88 ef 71 ca b9 46 20 f9 0e 04 49 af a2 e5 36 0f e0 5a 20 cf a1 20 71 f7 bd 8c c2 65 5b 00 84 a9 5e 75 16 40 23 48 c6 98 16 04 44 55 16 98 d5 04 1a 0a b4 29 7d be 5c 41 7b 70 96 7a f4 41 f9 d0 fc 03 22 52 a6 86 1c ab fc 16 57 bd 5f f5 9d c1 20 d0 0d f9 ba e6 1f 73 08 8d 40 f2 28 9f b5 01 1d 04 32 c6 06 00 ae 4e bd 86 8f 05 48 88 16 63 93 70 83 f6 e5 9a c4 4d 69 29 3d fb 2a 17 a0 2f e5 79 9c 34 b5 97 eb 57 26 7d 2e aa a3 f6 3d 5d 79 73 84 c9 13 e0 13 f0 13 18 74 f0 97 e2 82 77 a1 15 88 af 30 ae 8e 5c ea 80 2f c1 32 41 32 85 eb 84 6b 00 be 7a 72 11 4e 69 b4 1b e9 2a 87 bc b2 43 4b ae 2e 47 3c 80 a1 a0 5f 06 77 00 b4 04 eb 9a 02 75 d2 0e 74 a0 87 9f c3 09 f6 35 a5 a9 47 bd c8 0f a8 e7 75 28 ef 69 85 26 e1 Data Ascii: a=i#}rqF I6Z qe[^u@#HDU)}\A{pzA"RW_ s@(2NHcpMi)=/y4W&}.=]ystw0\/2A2kzrNiCK.G<_wut5Gu(i&
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 9b ca 38 38 53 3e e9 aa 87 a6 5c 06 88 61 52 9b 80 9f 43 be 80 74 0e 00 1d de 05 c8 0b 68 27 78 07 84 23 3d c0 1d 61 60 2d 8b d2 61 9f a7 11 17 cc cd 69 0e f9 d4 6e 61 5e ac f6 67 71 01 0d c3 bc 58 f9 d4 11 b0 c3 b4 37 03 40 99 00 3b f4 2b 80 1f 63 11 e8 ab 57 00 7e 84 eb c0 3e fc 46 03 ad 4f 39 c2 75 f2 ab 00 c0 6a 0d 19 d1 9e 64 23 67 0b 13 0e fe e6 47 7b ac 31 d9 6b f5 f1 ab 36 07 4c 5b c0 cd 0f 9e b6 f9 01 b4 f6 a4 45 37 71 19 2d c0 8b 01 01 87 30 b1 25 af 31 70 12 73 5a 01 40 cc 80 af 01 00 bb f7 62 ea bb d3 6a 97 37 d9 fc d9 b5 36 77 7a 35 00 70 bd d5 2e 6c b3 c6 95 03 68 0a 1e 07 00 9e 01 1e 0a f8 a1 f5 07 e4 93 c6 5f 0b 04 d2 8f 43 40 41 3d ca 48 03 b0 80 7e 0a 03 f5 32 ec 13 f0 2b c2 2a 2f d0 27 e0 47 58 9a 80 d2 52 14 10 14 0c 1c 25 3e da 45 de Data Ascii: 88S>\aRCth'x#=a`-aina^gqX7@;+cW~>FO9ujd#gG{1k6L[E7q-0%1psZ@bj76wz5p.lh_C@A=H~2+*/'GXR%>E
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 02 a2 05 28 08 d8 74 c0 07 b4 93 56 a0 9c b4 f9 06 a5 01 48 9e c2 82 7a 0a 7b 39 ea e6 f2 82 7f 0a 27 33 61 3f 0f d0 c3 4a 3b 0d f8 3b 19 67 00 8e 74 59 6d 08 08 d9 b7 47 00 30 81 38 87 7c c9 cc d7 81 5d c0 39 d7 40 4b 9a 37 ad 70 02 78 79 93 4a 1b 02 83 a1 f5 47 9e 2e 08 a1 0d 01 42 af 93 7d ca 38 f0 f3 b2 e9 8c b7 4e ff 01 42 3b f2 4f 6b 23 ad c7 04 87 5b 6b 4e 70 30 d6 4f 01 96 3b eb 0f 99 48 23 ac f3 fe 75 be 3f 9d ef ef bf e4 df 9f 97 0f fd db 36 2d c0 74 c9 07 00 50 97 7d 64 cd bf 02 0e ea 82 10 80 5f 11 f7 72 71 11 88 c0 a0 d2 75 b6 54 86 7e da d4 e8 62 90 30 ef cc 1b a6 b4 41 23 2f c3 c0 42 b3 42 69 19 08 fa e6 2a 6f 8e b5 89 a3 1d 36 4d 0e fd f8 23 db e3 d9 57 1e 2e 80 5c db 46 54 1b 64 fe 08 57 ba 9b f9 7a 19 c1 a0 00 44 02 7a 3e c6 14 2f 60 1d Data Ascii: (tVHz{9'3a?J;;gtYmG08\|]9@K7pxyJG.B}8NB;Ok#[kNp0O;H#u?6-tP}d_rquT~b0A#/BBi*o6M#W.\FTdWzDz>/`
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 32 03 26 1c da 16 79 b3 14 1b 1e 6d aa a6 38 eb 68 0a 8d 87 d2 4c 85 4d 50 84 95 56 62 b3 15 9a 1b f8 40 89 a9 14 f7 4d 32 7f 48 fb 86 99 3f c8 b5 51 8d 8d 33 69 be 69 a5 6d fe c0 d7 46 d4 37 cd f4 e1 b0 27 81 b8 00 3f 82 37 01 70 7c d3 4a 7b ba 09 34 c0 9d da 24 8e 5b 5a 46 e9 5e 26 81 3f b5 af 1b 34 8b 7a ea 83 3c 8d a3 00 53 b4 fb 3b ed df 65 c8 b9 8b c8 47 d0 42 e7 bb 49 6e ea 3f 60 55 f6 01 37 c8 6b 92 0d 68 f8 29 3c 19 d0 50 e6 aa 01 a0 12 1c 41 86 d9 3c d2 41 8e c7 5b e0 c4 db 66 33 25 a0 90 01 4a d6 f0 13 30 71 38 a4 3a c5 38 da ca 91 bf b4 ed df a6 ff 78 a6 8c ff 57 c9 df e7 97 e4 84 7c 02 e6 02 bb 04 bc 1c 7a 91 e7 b2 09 3f c6 9f c6 cc 3c 8b 39 32 27 81 a3 3f a6 f9 17 63 d3 b3 d0 ba fe 35 f2 17 00 74 e0 c7 7c c7 d8 70 4f b0 06 c6 1c fe 29 0e fc Data Ascii: 2&ym8hLMPVb@M2H?Q3iimF7'?7p\|J{4$[ZF^&?4z<S;eGBIn?`U7kh)<PA<A[f3%J0q8:8xW\|z?<92'?c5t\|pO)
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: d2 0e 05 0b d0 92 d2 0b c8 a3 38 75 42 b3 2c ea b6 6b 85 2d 06 88 f4 45 79 cd 35 5f 3e a2 67 a5 34 b5 e7 e6 a4 68 3f a8 be 43 27 c1 a4 1b b8 7c f3 70 6e cb e7 20 19 b9 bc 90 07 cf 56 6b 43 d0 4a b2 89 f5 a2 f4 90 d1 24 fe a4 00 16 75 42 56 92 57 b8 90 4f 8c 25 9f 6d 57 8c cb e1 16 9b 5d 7c 69 bb e5 b1 4d b2 01 d6 99 7a 1e 67 ec ba 65 37 cf e9 66 e7 ef 73 91 6c 5c 3e e1 7f 53 f2 77 19 23 9b d0 ec 9c 41 fb 2f d6 86 de 3f 7f 87 90 d1 38 40 47 73 1f 1d 43 fe 0a 4b 9e c4 c7 01 81 92 af 34 05 95 af f7 35 43 42 ad 79 bd e7 93 3e f7 78 3f fc d9 21 83 3f a6 f9 b7 64 fb d5 eb 2f 97 91 cc f3 37 24 e0 9e c0 98 de 85 b6 f7 df c3 fa c6 84 73 2d 38 64 13 b0 4b df a3 f8 fe a8 8e 20 57 0b ee 21 3f a5 f9 fa 8c b0 e0 4f 01 b1 c8 5b 04 f9 54 f6 06 4e 65 bc ed 94 d7 ea 5f 9a Data Ascii: 8uB,k-Ey5_>g4h?C'\|pn VkCJ$uBVWO%mW]\|iMzge7fsl\>Sw#A/?8@GsCK45CBy>x?!?d/7$s-8dK W!?O[TNe_
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: da 8d 69 ed 10 1e a5 8e d2 25 47 e5 49 3e d2 84 53 be e4 37 26 ad 16 c9 16 98 27 53 d8 09 36 2c 5a 6b 7a c6 f2 dd cc d5 c7 99 e6 e1 e3 fd fd cd 3f fa ff 0d e4 cf 5c 1d 8e 22 2b 01 77 69 00 0a 8c 6a 2d 68 0d 38 00 e4 7d 0c 20 88 dc 90 df 08 50 70 0a f0 a7 b0 d6 90 ca eb 9d 55 5d 07 85 49 26 5a bf 7a 2e 5a 03 bf eb e7 ff 1b cf bf 18 db 8d d7 9f 5f de c3 7c fc 9f 05 c8 43 90 d3 e7 c5 f7 24 d6 7e 00 5e a5 8f a3 09 29 68 2e 48 27 08 ec 17 16 91 ae 78 89 b8 43 32 de cb d0 66 66 fd 91 2e e7 90 2f d5 53 99 16 cc 8b ba b9 9c d7 63 2c 1e cf be da f6 76 54 36 be 61 de 9e a7 d1 27 6b 33 9b 28 bb 86 1f 1b 53 c1 be 7c 0b b0 60 a0 43 42 d6 b3 6b 09 6a 2d 27 f8 e7 a0 d3 c3 d1 ae 83 74 be 5f f9 9f 39 de 6f 1a 87 6e ab 9d 14 f4 61 1e ae a9 c6 bc 4b c4 8b 1b d8 99 97 4c 5e Data Ascii: i%GI>S7&'S6,Zkz?\"+wij-h8} PpU]I&Zz.Z_\|C$~^)h.H'xC2ff./Sc,vT6a'k3(S\|`CBkj-'t_9onaKL^
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 38 9b 5b 4f a7 5c 01 ef 94 87 bc a3 3c 3e cf a3 30 ff 25 af 55 3f da ba ae cf dc b6 fc 1b f4 af f2 63 8c e7 6a 6f 9f ed 39 70 80 39 f7 38 c4 3b 7d e1 a2 ed 3f 7c 04 39 0d 38 20 3d 7f e9 b2 9d 38 75 06 59 8f 5b 37 a6 63 eb 37 6d b6 0d 9b b7 70 d3 6d 97 0d a0 b9 31 0a fc 3a c4 7a fb 72 eb 56 3b 7d fe 82 5d 45 76 07 0e 1f f2 f5 73 ad e7 9a 1d 38 74 d0 06 31 b9 d2 f3 d7 38 1c fc 6a fe 3c 53 ad 31 9f df 1f 60 fe 2d f9 49 ce 37 96 7f 36 cb d5 18 35 56 9d e3 27 00 28 e0 de 8f 99 9d 9e bf 4c 7a 07 b8 00 e4 cc b9 0b b6 81 75 b6 7d c7 2e bb d6 d3 e7 ef dd e6 2d db 6c 13 6b f1 cc 99 73 bc c3 dd bc c3 a7 78 6f bb bd de e5 2b d7 90 07 ef 01 6b 5c cf d5 01 29 72 f9 7d 3d ff 9b 99 ff d7 59 7f 2a ab 67 1b e7 98 4a 1b 72 9c f7 e1 14 df 2a 6e 44 e6 c6 e4 21 de bd 83 07 8f Data Ascii: 8[O\<>0%U?cjo9p98;}?\|98 =8uY[7c7mpm1:zrV;}]Evs8t18j<S1`-I765V'(Lzu}.-lksxo+k\)r}=YgJrnD!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49862	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	794	OUT	GET /wp-content/uploads/How-to-Make-Every-Other-Line-Shaded-in-Excel-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:32 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:32 GMT Content-Type: image/png Content-Length: 30692 Connection: close CF-Ray: 87a0b83399f153f3-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660a7c66-77e4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 01 Apr 2024 09:20:38 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KdoU21ckBFklnDSMVo%2Fvd5%2F43JfUw3XcJqeuvuZPe1g09SRyU46VyYWa%2F%2BacPWqYBGegCctzajudwc6Y9hxko53vj7q1R3gfhGp53Qngh7212h5eJo9k2Q6VEM33fJ39zA0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:32 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 77 ab 49 44 41 54 78 da ec 9d 77 94 24 67 75 f6 7f 15 3b e7 ee c9 61 27 6c ce 41 ab 55 44 42 09 05 40 24 83 c9 b6 c1 18 6c b0 b1 c1 06 83 3f 67 1b 30 18 9c b1 31 c1 e4 24 04 88 20 09 a1 9c a5 cd 71 76 76 72 9e 9e e9 9c 2b 7d 7f 54 77 ef cc ee ec 6a 83 44 9c 7b ce 1c ad aa bb ab ab aa df e7 bd e9 b9 f7 0a c2 db 36 58 eb 9a 7b 88 78 03 3c 76 62 2f a6 65 01 d0 11 6e e6 4b bf f3 8f fc fe 57 fe 8e 43 93 27 a8 c9 a6 b6 55 48 82 c8 de b1 63 2c cb b2 2c cb cf 57 64 80 1b d6 5d c6 ba 96 1e 9e 1a 3a 48 45 d7 00 98 c9 cc f3 de 6f 7c 94 81 f8 d8 a2 0f 1c 18 3f be fc d4 96 65 59 7e 41 44 10 de b6 c1 f2 3b 3d a8 b2 ca 5c 2e b9 fc 44 96 65 59 7e 89 44 04 c8 94 f2 17 Data Ascii: PNGIHDR}#wIDATxw$gu;a'lAUDB@$l?g01$ qvvr+}TwjD{6X{x<vb/enKWC'UHc,,Wd]:HEo\|?eY~AD;=\.DeY~D
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: ca f2 13 5c 96 65 f9 45 06 70 7b b8 89 de 86 8e 45 c7 5a 83 0d 7c ee ad 7f cb 8e 15 eb 97 9f e0 b2 2c cb 2f 02 80 1d b2 ca cb 36 5f cb 8a 48 cb a2 37 bc f5 f2 db f9 c3 eb de 88 2c 4a f5 63 f1 5c 92 7f b9 ef cb 1c 9f 19 59 7e 82 cb b2 2c 3f 47 91 6b ff f0 38 5c bc 7e d7 ad 94 1f ad 30 3c 3f 59 7f c3 67 1e fe 36 8a 24 a3 2f 48 0f 95 b4 32 f7 1e 79 7c f9 e9 2d cb b2 fc 9c a5 1e c4 12 80 80 db 47 be 5c 44 33 f4 e5 27 b3 2c 17 6e d6 09 22 a6 65 2e 3f 88 9f a5 06 b6 80 54 21 bb fc 44 96 e5 39 45 12 44 bc aa 9b b2 a1 51 d2 cb 8b 5e f3 2a 2e fc 0e 2f 79 ad 48 b6 92 af 57 b7 2d cb 0b 0c e0 b3 aa 69 04 c0 62 f9 a7 58 16 01 81 90 d3 8f 47 71 a1 9b 06 a9 72 96 b2 51 c1 b4 4c 44 41 c4 a3 ba 51 25 05 45 94 71 cb 4e 2a a6 0d f2 a2 56 c6 5c 5e 41 2f 2c 80 05 04 dc 0e 27 Data Ascii: \eEp{EZ\|,/6_H7,Jc\Y~,?Gk8\~0<?Yg6$/H2y\|-G\D3',n"e.?T!D9EDQ^./yHW-ibXGqrQLDAQ%EqNV\^A/,'
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: c3 45 5b a8 91 1d 2b d6 63 5a 26 c5 4a 99 44 3e cd 44 6a 96 13 b3 63 1c 9f 19 66 68 6e 82 e9 f4 1c a9 42 b6 0e da a5 44 33 74 34 43 a7 a2 57 b8 ef c8 93 0c ce 8e 9d b7 b6 74 ab 4e db 8c 17 ec f3 2d ec 84 2a 08 02 01 a7 97 c6 60 84 c3 53 27 ce fb dc 36 eb ff 97 08 c0 1b db 56 d1 3f 33 42 69 d9 e7 fd 95 96 46 7f 84 98 37 04 40 b9 5c 46 14 45 7c 3e 1f d9 6c 96 8e 8e 0e 34 4d 63 7c 7c 9c 50 28 74 16 7f cb 8e 14 7b 9d 6e bc 4e 37 1d 91 66 76 75 6f c2 b0 4c 0a e5 22 73 b9 14 43 73 13 1c 9f 19 e6 f8 cc 08 a3 89 69 e2 d9 04 b9 52 e1 b4 dc 6e 59 d7 38 31 33 7a de f7 31 9e 98 61 57 cf 26 7a 1b 3b 58 d5 b4 82 89 c4 ec 69 e5 af 86 69 12 f3 84 e8 8d 75 30 10 1f c3 c2 ae a0 aa 01 7e a1 48 82 88 ab 5a 74 e1 96 9d a8 92 42 41 2f 91 af 14 5f f0 60 58 2d 95 77 51 00 fe cd Data Ascii: E[+cZ&JD>DjcfhnBD3t4CWtN-*`S'6V?3BiF7@\FE\|>l4Mc\|\|P(t{nN7fvuoL"sCsiRnY813z1aW&z;Xiiu0~HZtBA/_`X-wQ
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 8a 8f 63 5a e6 19 09 2f 17 05 e0 6a 0d b5 2a 2a 54 4c 6d 19 c0 bf ce b2 a9 75 25 0e 59 c5 b2 2c 32 99 0c 4e a7 13 8f c7 83 db ed 66 d5 aa 55 24 93 49 b2 d9 2c cd 4d 4d 34 55 fd bb e7 92 b9 64 06 c3 15 23 ad 55 28 64 e2 f8 d6 5d 46 e9 f1 bb 10 bd 7e c4 50 0c c1 32 51 3b 57 21 b8 3c 00 28 8a c2 6d b7 dd c6 f4 f4 34 5f fb da d7 d8 b5 6b 17 43 43 c3 ac 5f bf 1e cb b2 c8 e5 72 78 bd 5e 1c 0e c7 22 4d 26 08 02 b2 24 11 70 79 09 54 83 64 57 ad dc 86 6e 1a e4 ca 05 a6 d3 73 d5 c8 f7 08 27 aa 4c b2 f9 5c 8a 7c a5 78 56 60 19 a6 49 ae 5c 20 57 2e 30 93 99 67 60 66 0c 41 14 31 4d 83 1f 1d 78 18 a7 e2 20 ea 0d 12 70 7b 49 15 b2 6c 6c 5b c9 66 ef 6a c2 9e 00 b9 b2 3d 07 cc 76 03 2c 54 59 a1 58 29 93 2f 17 98 48 ce a2 9b fa f3 02 6a 59 90 88 b9 43 e4 b5 22 45 bd 44 79 Data Ascii: cZ/j**TLmu%Y,2NfU$I,MM4Ud#U(d]F~P2Q;W!<(m4_kCC_rx^"M&$pyTdWns'L\\|xV`I\ W.0g`fA1Mx p{Ill[fj=v,TYX)/HjYC"EDy
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 09 75 76 12 59 b5 8a d6 ae 2e 94 4a 05 43 d3 10 65 19 49 92 f0 fb fd f8 7c 3e 3a 3a 3a 28 97 cb 54 2a 15 12 89 44 dd 27 5f b7 ce f6 e3 9f cb 94 5e 28 13 13 13 b8 5c 6e ca e5 19 74 5d c7 e3 f1 e0 74 3a 71 b9 5c 38 1c 0e 64 59 ae 9f 5f 96 64 02 6e 1f 01 b7 8f 9e 86 76 5e b4 6a 07 9a a1 93 2b 17 88 67 93 8c 26 a6 e8 9f 19 a5 6f 66 98 a1 f8 04 f3 f9 14 85 72 f1 39 8b 30 6a 83 ef e3 d9 04 fd 33 c3 28 92 82 53 51 51 24 99 f9 5c 8a ae 58 1b a6 65 22 08 22 d3 e9 39 a2 be 10 93 c9 59 3a 23 2d 28 92 cc 75 eb 76 d1 1a 6a a0 a0 95 50 14 99 c9 13 f1 65 00 ff ba 88 cf e9 66 4d 93 ed ff 4e 4f 4f 93 4c 26 71 38 1c a8 aa 7a 46 a6 d5 99 c4 e1 70 d0 da da 4a 2e 97 23 9f cf 93 cb e5 ec 94 94 24 d5 35 e9 e2 0d 41 a0 94 c9 90 9a 4f 52 be f9 8d 68 7a 85 d9 e9 31 cc 7b 1e 41 4a Data Ascii: uvY.JCeI\|>:::(T*D'_^(\nt]t:q\8dY_dnv^j+g&ofr90j3(SQQ$\Xe""9Y:#-(uvjPefMNOOL&q8zFpJ.#$5AORhz1{AJ
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 89 2c 49 04 dd 3e 82 6e 1f bd 0d 1d 5c b3 fa 92 7a 90 6c 36 9b 60 74 7e 8a fe 6a 5f 32 bb 8e 3a 49 be 7c b2 8e 5a 37 8d 25 03 66 f2 73 5c cd a9 db 4b b5 5d c1 12 c7 97 7a ff c9 37 2c 68 75 60 2d 3e 7e 5a 02 fd 5c 8f 9d 71 0b 5c fa 1a 4f bd 96 fa 3d 72 86 ef 3b d3 39 ce 74 2f e7 f0 da f9 16 6f 5f 04 39 de a9 38 d8 d8 ba 72 49 16 93 20 08 f5 14 d2 9a 35 6b 6c c2 83 65 a1 69 1a c5 62 71 d1 67 f2 f9 3c 85 42 81 63 c7 8e 21 49 12 0f 3f fc 30 e1 50 08 59 96 c9 e5 72 3c fd f4 d3 75 df f1 ea ab 5f 84 a2 c8 b8 dd 6e 4a a9 14 b9 4c 0e b9 6d 2d 89 e6 10 5e 21 8f 53 4f e1 2e c6 09 e7 b2 04 35 17 f9 5c 16 8f c7 43 a1 50 60 74 74 0c 4d ab 10 0c 06 a9 54 ec ff d6 22 de f5 f2 46 49 42 70 3a 71 b5 b4 e0 69 6b c3 da b1 03 cb 30 d0 73 39 72 43 43 0c fc f0 87 ac 7d f5 ab 11 Data Ascii: ,I>n\zl6`t~j_2:I\|Z7%fs\K]z7,hu`->~Z\q\O=r;9t/o_98rI 5kleibqg<Bc!I?0PYr<u_nJLm-^!SO.5\CP`ttMT"FIBp:qik0s9rCC}
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 2e 1f ef 7b c9 5b 59 df b6 12 80 ff fe e9 37 f8 d1 de 07 11 44 91 37 5d f6 32 fe f2 95 7f 80 28 08 4c 24 66 f8 d6 93 3f ae 6f 6e 5d a1 56 3e f6 da f7 b1 be cd ee de 98 c8 a6 38 34 d1 6f 6b 4c d3 e4 fa 35 bb f8 cb db df c5 4f 0f 3e c1 e7 ef ff 36 11 a7 9f bf 7f e5 7b 78 c5 8e 1b f8 c2 83 77 30 3b 17 e7 c3 b7 bd 83 df bc e2 b6 d3 ee e5 d1 be dd 7c fe e1 ef 2c 50 e5 e7 8f e0 75 cd dd b8 d5 a5 a3 c4 b2 2c 33 33 33 53 d7 62 e7 a3 21 9c 4e 67 3d fa 1c 0a 85 ea 9a 47 d7 75 5a 5a 5a ea e9 a8 b9 e3 c7 09 ad 5e 4d 38 1c ae 17 52 54 2a 15 34 4d ab e6 68 0d 0c e3 a4 f6 af 5d 4b 34 1a c5 34 4d 2c cb a2 a1 a1 01 5d d7 11 04 81 b1 b1 31 a2 d1 28 ba ae 13 8e 44 90 aa f4 4f 59 96 ed ee 99 e3 e3 74 5d 7d b5 6d 9a aa 2a 73 73 73 64 32 69 2a 95 0a cd cd cd 44 82 3e 74 c3 20 Data Ascii: .{[Y7D7]2(L$f?on]V>84okL5O>6{xw0;\|,Pu,333Sb!Ng=GuZZZ^M8RT4Mh]K44M,]1(DOYt]}msssd2i*D>t
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: cf 7a 02 4e 2f 2f df 79 3d 96 05 df 7e e2 6e 92 e5 2c a8 52 35 10 66 3f 50 bf cb cb 9a f6 5e 74 c3 60 cf c8 11 70 48 20 8b 84 dd 41 6e bf c4 fe ec a7 ef f9 1a 7d f1 11 70 8a 20 08 98 9a c9 d0 dc b8 6d 8e 2d 08 30 09 96 c0 f6 ae f5 48 a2 c4 81 c1 63 ac ed ec 45 91 64 9a 03 51 5e 7b d9 2d 3c 76 78 37 dd cd 1d 98 a6 c9 9e a1 c3 58 58 38 04 95 d7 ed ba 05 55 52 f8 b7 bb be c0 d1 b1 01 0a a5 22 2d a1 06 7c 0e 0f c5 7c 99 96 60 03 ad e1 46 ca 5a 99 d7 5e 75 1b 57 6e b8 84 87 0f 3d cd 07 bf f2 71 d2 5a 1e 24 91 35 6d 3d f8 dd 3e 2c cb e2 f3 ef fd b8 4d 52 17 e0 fe 23 4f f1 ae 2f fe 0d 15 8c 0b f6 7f 5b 82 0d b4 06 1b 5e 90 d4 94 24 49 e4 f3 f9 d3 88 0f 0b 17 73 66 6c 0c d9 ef 47 3a 4b 10 67 21 a0 74 5d a7 58 2c d6 35 6f 0d d0 2e 97 0b 49 92 30 4d b3 6e 7a d7 d2 Data Ascii: zN//y=~n,R5f?P^t`pH An}p m-0HcEdQ^{-<vx7XX8UR"-\|\|`FZ^uWn=qZ$5m=>,MR#O/[^$IsflG:Kg!t]X,5o.I0Mnz
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 33 8c cc 4e b0 ad 7b 3d 7f fe ca 77 82 28 30 9e 9a 61 7d 6b 2f ef be e9 4d ac 6f eb e5 c1 43 4f f1 f5 c7 7f 58 d7 ea dd b1 76 a2 be 30 a3 f1 09 86 e7 26 31 4d 93 6d 3d 1b b0 b0 f8 dd 7f fb 20 bd ad 2b 70 2a 0e 4e 4c 8f 90 cc a5 79 fd d5 2f e3 9a f5 97 72 78 e4 38 4f 1c db 6b bb 14 08 5c bb e9 32 56 34 b6 b1 22 da 8a 43 52 d8 dc b9 06 80 3d 83 87 b9 e3 c9 7b f8 ad 9b 7e 83 cd dd 6b 79 eb 8b 5e c9 9f 7e e3 e3 44 bd 41 ba 1b db d0 0c 1d 45 56 d8 da bb 1e 24 01 4b 12 38 36 3b cc 78 66 b6 6a 71 5c 18 81 63 43 cb e9 04 8e 74 3a cd f1 e3 c7 89 c5 62 4c 4e 4e 32 36 36 86 a2 28 34 36 36 22 08 02 b1 58 ac ee 87 5e 8c 54 72 39 0a f3 f3 44 aa 45 12 e7 aa 7d d3 73 d3 c4 93 19 44 7f 96 99 d9 71 8a 96 42 47 57 0f d1 90 f7 b4 7b a9 69 ea 5a 63 02 ef e6 cd ac 5a b7 0e 3d Data Ascii: 3N{=w(0a}k/MoCOXv0&1Mm= +p*NLy/rx8Ok\2V4"CR={~ky^~DAEV$K86;xfjq\cCt:bLNN266(466"X^Tr9DE}sDqBGW{iZcZ=
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 37 11 75 f0 39 dc 38 64 85 42 b9 44 5e 2f 61 49 d8 c1 24 a9 da a5 5e b7 70 58 32 a2 69 61 09 50 b2 74 2c c1 42 11 64 14 4b c4 02 2a e8 18 92 65 7f 46 58 40 79 b4 40 a8 5e 97 b0 f0 ba 24 e1 24 1d d2 30 41 33 71 20 e3 73 7a c0 b2 c8 95 8b 94 cc 8a bd 09 29 d5 a0 98 60 e7 b9 15 4b 44 b1 24 2a a6 8e 6e 1a 38 24 05 11 81 8a a1 61 60 e1 94 55 04 04 ca d5 ee fb b2 28 a1 9b 86 1d 21 96 ab 36 ae 69 22 9b 22 aa 20 63 54 bb e9 3b 24 d5 6e a6 66 69 58 76 0d 1b 4e 41 41 14 44 34 cb c0 c2 42 45 02 7d 01 27 55 b0 4d e8 92 a0 db cf 6d c1 e6 74 3e f2 5b 97 be 9c bf ba e9 1d 8b cc 32 b9 da f5 42 92 6c eb a7 50 28 50 28 14 d0 75 9d 74 3a 4d 26 93 21 9f cf 53 2a 95 68 6e 6e 66 76 76 16 b7 db cd f8 f8 38 b7 df 7e fb 39 35 bc ab 99 b5 a9 44 82 80 aa 52 8a c7 99 3f 71 82 f8 b1 Data Ascii: 7u98dBD^/aI$^pX2iaPt,BdKeFX@y@^$$0A3q sz)`KD$n8$a`U(!6i"" cT;$nfiXvNAAD4BE}'UMmt>[2BlP(P(ut:M&!S*hnnfvv8~95DR?q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49863	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:31 UTC	796	OUT	GET /wp-content/uploads/How-to-Change-All-Caps-to-Lowercase-in-Excel-1-240x142.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga=GA1.1.1040263935.1714073125; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129
2024-04-25 19:25:32 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:32 GMT Content-Type: image/png Content-Length: 29790 Connection: close CF-Ray: 87a0b833f8147bcc-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "660bcee0-745e" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 02 Apr 2024 09:24:48 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WORbIG3agX8k%2FOivcxC4oOwaRzwB%2B%2F8hae1bunTVGrCMYunrLHPRPqRGqWYiQfW2bULV1oLWUYUOuHLOwlDTSi4BAKnEyORe3Jid6X22CNbbpJmr%2BoFCqzjgDUFymOYkrMc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:32 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 8e 08 06 00 00 00 0f 7d 85 23 00 00 74 25 49 44 41 54 78 da ed bd 77 7c 26 57 79 f7 fd 3d 53 ee de d5 bb b4 bd 77 f7 5e 30 18 6c 8a c1 40 e8 01 92 07 48 02 24 d4 24 04 0c e4 09 35 40 08 81 10 42 20 d4 10 30 dd 60 dc fb ba ad b7 77 69 b5 ea 5d 77 6f d3 ce fb c7 ad d5 4a bb 92 56 75 d7 3c af cf e7 23 7b 76 ee 33 67 ce cc 9c df b9 fa 75 09 71 7d 50 32 b1 89 f1 ff 8c ff 6f f2 6f f3 e9 37 4d df e9 8e 11 b3 ec 07 08 b1 b0 7e 63 ff 5e df bc 9e 17 6d 7f 11 5f f9 f9 57 a6 7d 2e af db cb df bd e1 ef f8 da af be c6 40 62 60 d6 cf 2f 80 d7 5e fd 5a b2 c5 1c 77 3d 7d d7 b4 fd 2e 5f 7b 39 1b 9a 36 f0 1f 77 7f 6b e1 cf 7f d6 75 b3 ed 37 cd 37 58 70 bf b9 7c d7 c5 ff fe 62 3e eb 75 b1 9f 5f 88 59 be a7 Data Ascii: PNGIHDR}#t%IDATxw\|&Wy=Sw^0l@H$$5@B 0`wi]woJVu<#{v3guq}P2oo7M~c^m_W}.@b`/^Zw=}._{96wku77Xp\|b>u_Y
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: df d5 bc 17 9b 22 09 e9 92 2a 8f a4 c5 6f b3 26 64 b3 3a 68 d3 e8 b3 a9 f6 4a c2 ba 83 5f 95 b8 55 d0 c6 08 9b 98 61 da 52 96 b6 25 4b 42 d1 11 64 2d 48 9a 0a 03 45 85 ae bc c2 f1 ac c6 91 8c ca c9 9c 4a 5f 51 25 61 82 25 c5 ff bb 00 8e 06 a3 84 fc 21 3a 07 bb 90 63 54 a8 a5 a6 99 2f fe 9f 7f e4 1f be fb 8f 1c 38 79 68 bc 6f 26 9f a5 67 a4 f7 02 af 35 b9 f0 85 39 76 79 2a 97 42 15 2a 21 7f 88 42 62 68 da ee 3b 0f ed e4 b5 d7 dc 8e d7 e5 25 6f 14 66 31 bc e0 ea 0d 57 d1 35 d4 c5 70 72 78 06 22 ad 50 57 56 c7 c1 ae 43 e7 f7 1d 2e e1 7a 56 04 44 5c 25 b0 6e 8b d9 5c 56 66 b2 3a 64 53 eb 75 88 e8 12 97 32 0d 40 85 36 e1 4f 2f fd a1 4c f8 e6 0e 48 07 21 4d 84 34 70 49 0b 97 62 11 d4 a0 da 53 da 14 4a 00 2f 62 4a 48 59 82 be 82 c2 a1 b4 c6 53 09 9d dd 49 9d e3 Data Ascii: "o&d:hJ_UaR%KBd-HEJ_Q%a%!:cT/8yho&g59vyB*!Bbh;%of1W5prx"PWVC.zVD\%n\Vf:dSu2@6O/LH!M4pIbSJ/bJHYSI
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: bb 96 87 f7 3d 3e b6 c8 66 41 7d 97 82 2d 3e 0f 94 ba 60 14 c9 16 b2 bc f2 aa 57 b2 a7 75 0f 85 53 9a e6 05 70 16 62 9a f9 aa 8a ca ed 57 be 86 64 2e c5 bd bb ef 2b 51 86 39 cd 77 71 39 90 e9 28 b0 4f 93 dc 58 63 f1 7f b7 e4 f8 8b d5 45 56 06 1d 5c 2a a0 57 d2 95 de 44 9f f2 76 76 b6 ef a0 37 dd 8c e6 a9 a0 bc bc 72 4a 4a 38 38 34 cc ef 7e 7f 0f 2e 97 4e 73 53 13 8f ef 7c 92 42 d1 a0 ae b6 66 12 e8 3a bb ba d9 bc 69 03 b5 35 35 c4 e3 71 36 ac 5f 47 77 4f 2f 8d 0d f5 a8 aa 3a de af 50 28 f0 f4 33 bb f0 7a 3d d4 54 57 73 f4 d8 71 14 a1 10 8d 46 e6 c4 9e 0b a1 20 b4 30 c2 b7 11 a5 ec 56 94 f0 d5 a0 78 c0 1c 40 97 69 1a bd 36 37 95 17 b9 2c 62 92 b1 05 1d 05 75 82 39 6a 09 28 f0 1c be 97 ea 5f 17 bd c3 b4 cc 31 a3 1b 34 56 d4 91 ca a5 39 d2 75 6c bc 73 ef 48 Data Ascii: =>fA}->`WuSpbWd.+Q9wq9(OXcEV\*WDvv7rJJ884~.NsS\|Bf:i55q6_GwO/:P(3z=TWsqF 0Vx@i67,bu9j(_14V9ulsH
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: eb 6f fc 2d e9 7c ba 74 4e 51 68 a9 6e 62 34 1d 27 91 49 2c 1d 78 2f b4 fc bb 80 5d cf a5 b9 68 ac 6c 64 75 c3 6a 96 d7 2e 27 1a 88 a2 a9 1a 52 4a 34 b5 24 cf a5 f3 69 4e 0e 9c e4 60 e7 21 da fb db c9 14 32 cf 1b d9 fe 54 8b ba 25 ef 5b 57 e0 ff ac 2a 12 76 01 8a 17 a5 fc 35 68 f5 1f 01 4f cb 0b 54 77 d6 d4 b8 0f bb e7 cb d8 83 ff 0d 76 86 ac 2d f8 6e af 97 2f 9c 0c 30 34 91 a5 5e 0a 00 47 5e d9 20 93 b9 d4 b8 7a 7f 5a c7 83 73 81 71 31 a9 ef f3 88 7d 3e 97 82 4e 08 d0 54 0d 5d d3 11 8a 52 d2 d8 3b 36 a6 6d e2 48 67 5a 1b f0 82 01 3c a7 67 3b bb 5f 4b d0 e1 53 5b f3 dc da 60 e2 52 20 67 45 b1 ab de 4f a0 f1 9d 78 7c d1 59 2d de 5c 3a 45 ce 56 28 0b 07 ce e9 c2 6c 59 26 08 05 4d 9d ac 71 36 0a 59 8e 1d 3f 81 cb 17 a4 a5 b9 11 5d 9d 9d a3 84 e3 d8 58 b6 c4 Data Ascii: o-\|tNQhnb4'I,x/]hlduj.'RJ4$iN`!2T%[W*v5hOTwv-n/04^G^ zZsq1}>NT]R;6mHgZ<g;_KS[`R gEOx\|Y-\:EV(lY&Mq6Y?]X
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 47 62 1b 05 5c 6e 0f 86 ed 60 66 d3 e4 0c 8b 58 2c 46 3e 9b 23 56 5e 86 36 c1 3b cb 36 8b 74 75 f7 a2 ba bc 54 55 96 93 8e 0f 93 ce 5b c4 ca a2 e4 73 59 5c 9a 42 32 9d 25 18 89 11 0b 07 cf 7a 75 99 4c 12 cd ed 07 23 cf e0 48 82 b2 8a 0a ec 42 96 44 b6 40 45 59 8c a2 69 60 e4 b2 58 e8 54 55 96 4f 62 df a5 74 18 ee eb 23 99 2b 10 08 47 70 6b 16 c1 e2 ef b1 bb 3f 83 2c 74 d1 9a 57 b9 e3 44 90 df 0c 7b b0 67 c4 cc ec 59 6d b1 f9 5d 57 48 db b1 38 d8 71 64 6e bb bb 98 72 b5 5e 38 56 fb 79 aa e8 12 b3 04 fa 52 29 b0 74 15 de be d2 e0 13 5b f3 44 5c 80 5e 8d d6 f2 39 94 f2 57 4d 19 31 f4 42 5b 6c 2d b5 8d 4c 3c 88 75 e2 6f 90 85 56 06 0c 85 0f 1f 0f f1 8b 21 ef e9 a4 7b 0b 00 b0 3a 58 96 ba 63 68 ba 5c 4d e7 04 af 98 3d 78 cf 2b f5 9d 03 57 70 21 01 bc c4 f2 af Data Ascii: Gb\n`fX,F>#V^6;6tuTU[sY\B2%zuL#HBD@EYi`XTUObt#+Gpk?,tWD{gYm]WH8qdnr^8VyR)t[D\^9WM1B[l-L<uoV!{:Xch\M=x+Wp!
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 26 5f 34 a6 a9 4f a4 50 d3 dc 8c db 07 dd 6d 1d 0c 8d a6 a7 94 43 8b 85 22 0d f5 f5 e4 72 b9 69 58 dd 22 a9 54 9a f2 f2 72 2c cb 1a df 78 cc 31 b6 5e 00 91 58 05 7e 55 c1 17 8a 12 8b 86 88 55 94 53 59 5e 86 61 14 31 4c 8b c7 77 3e c9 f7 7e f8 63 fa fa fb 67 25 f3 d7 37 34 90 1d ea e1 b1 47 1f 67 f7 fe 03 14 a4 1b af ae 71 78 ff 7e 9e db bd 9f a3 ad ad 1c 39 7e 0c 0b 85 7c f0 2a ac ea f7 22 14 17 eb fc 16 1f 6a 4c e3 57 67 af 33 d0 16 66 12 5a 24 f0 8a 39 52 2f b1 50 c0 8b f9 81 69 a9 73 5b cf 73 9c 97 d4 9b bc 71 b9 81 2a 40 84 af 42 ad 7d 2f 42 f1 20 80 70 28 8c 74 24 97 5d 7a 31 95 15 e5 f8 7c fe 59 8d e9 f5 7a d1 34 0d c7 71 c6 33 41 5a 96 85 cb e5 42 d7 75 0a 85 c2 59 14 56 51 14 aa 2a 2b c7 93 b0 cf 44 a9 8c 62 9e 7c de c4 e5 d2 a6 d9 c3 05 de 40 98 Data Ascii: &_4OPmC"riX"Tr,x1^X~UUSY^a1Lw>~cg%74Ggqx~9~\|"jLWg3fZ$9R/Pis[sq@B}/B p(t$]z1\|Yz4q3AZBuYVQ*+Db\|@
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 29 49 26 93 c4 e3 a5 fa 45 81 40 80 50 28 c4 be 7d fb 28 16 8b 44 22 11 c2 e1 30 c3 c3 c3 74 74 74 50 55 55 55 aa 61 24 25 9b 36 6d a2 bd bd 9d b5 0d 01 b4 6c 2b c2 5f 05 b6 09 8e 09 95 db e9 ec ec c4 b2 2c 2a cf 30 65 bd d0 a6 96 af 95 d8 4b 10 83 97 e2 4e 3e c4 db aa b2 fc 6e d4 c3 f0 14 b5 89 95 19 b5 55 42 cc d3 94 34 c7 f3 73 a1 da 8b 09 de 45 63 a5 c5 d2 05 47 88 c9 29 61 5f dd 6c d0 12 70 b0 a5 4a d6 77 1b e8 e5 33 2e 84 68 34 4a 28 1c 22 1e 8f e3 72 b9 ce 49 01 07 07 07 d9 b3 67 0f fd fd fd 14 0a 05 32 99 cc f8 38 ad ad ad 3c f4 d0 43 0c 0d 0d 91 cf e7 09 87 c3 a4 52 29 e2 f1 38 f1 78 1c 9f cf 87 4f b5 a0 30 8a cc f4 95 c0 6b e5 d1 a4 45 55 55 15 23 23 23 2f a0 73 b6 4d 8d 94 ca da 28 5e b6 04 4c 6e 8c 16 a7 ec a6 70 a6 1a 5a 88 05 6a a4 67 62 99 Data Ascii: )I&E@P(}(D"0tttPUUUa$%6ml+_,*0eKN>nUB4sEcG)a_lpJw3.h4J("rIg28<CR)8xO0kEUU###/sM(^LnpZjgb
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 70 df 71 fe f6 27 9f 26 67 94 d8 57 8f cb c3 3f dd fe f7 6c a8 5f 03 c0 c9 e1 2e 3e fc 93 4f f2 92 8d d7 f3 f6 ab df c0 23 47 77 f2 99 df fe 0b b6 74 78 cd 45 2f e7 ed 57 ff 09 df 7d ec 7f f8 d1 93 3f 9f 35 35 6e 09 3a d4 fb 1c 40 41 44 5e 0a 8a 1f e9 d8 8c 8e 8c 12 8a 95 cd ba 24 e7 52 b4 4c 62 84 a1 44 86 b2 8a 4a 82 7e ef 05 a1 e3 52 4a 8a b9 0c f1 64 9a 70 b4 0c af c7 7d 41 88 b9 94 92 c4 f0 00 a9 82 4d 55 65 e5 58 3a 9e 45 18 57 af 80 d0 f5 90 3f c4 06 bf c9 7a 9f c9 ce b4 7b 6a 00 37 94 d7 71 e3 e6 6b c8 17 f3 18 96 c9 8d 9b af 21 9e 89 73 e9 ea 1d 7c fe 6d 9f c2 e7 f6 92 2d 64 b9 78 d5 76 6c c7 66 20 31 c4 0d 9b ae a6 67 a4 17 89 e4 a6 2d d7 31 90 18 44 d7 5c dc b8 f9 5a 46 d2 71 1c c7 1e 57 98 ac ae 5b c9 f6 65 5b f0 b8 dc e4 8a 39 72 c5 1c af bb Data Ascii: pq'&gW?l_.>O#GwtxE/W}?55n:@AD^$RLbDJ~RJdp}AMUeX:EW?z{j7qk!s\|m-dxvlf 1g-1D\ZFqW[e[9r
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 13 6e 2f 81 bd 9d 07 39 d4 73 74 9c 02 3b d2 61 24 1d a7 32 ac e2 d6 4a 94 bb 3a 52 4a ae d6 1b ef a3 be ac 96 e5 95 1e c2 be d0 f8 48 39 23 4f 53 79 fd d9 9c 87 2f c8 eb 2f 7b 25 cb 2a 9b f9 e1 e3 3f e3 48 5f eb 18 c5 0e b3 a3 65 0b 89 6c 72 fc be 08 28 0b 44 d1 55 9d 91 4c 9c 54 3e 85 a6 6a 94 07 ca e6 07 d8 33 4e 28 02 2e ab b2 d0 14 b0 b5 26 8a 76 05 32 9b 5d 54 a5 8b 69 98 e4 b2 d9 0b 6b c2 91 12 c3 28 72 a1 43 1a 4b f6 70 87 ec 22 be e3 f9 ce c3 28 16 cf 9a 87 b0 ab 70 6b 0d a8 76 92 8b 02 06 3e 55 4e ef 4a b9 f3 e8 33 ec 69 df cf 47 6e 7b df 8c 8b 2e 53 c8 92 cc a5 a8 89 56 11 f0 fa e9 18 ea a2 2c 18 23 e4 0b 92 2b e6 19 cd 24 66 a4 30 b3 0a 7a 10 8c 4b 79 8a a2 f0 d1 57 be 8f 17 6d ba 96 1f 3f 76 27 20 c8 1b 79 3e f2 c3 3b f8 e0 ad 7f c9 b6 96 4d Data Ascii: n/9st;a$2J:RJH9#OSy//{%*?H_elr(DULT>j3N(.&v2]Tik(rCKp"(pkv>UNJ3iGn{.SV,#+$f0zKyWm?v' y>;M
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 64 b1 c6 14 35 ba a6 8f 53 9c a2 55 44 57 f5 52 7c a8 63 53 34 8d b3 08 8c 5b 2b a5 f5 34 6d 6b 5c 6e 55 84 42 d0 1b c0 76 6c b2 c5 dc 04 e7 84 09 f9 7f 54 95 80 e7 54 9f 52 2a 17 b7 ee 46 51 14 8a 96 81 ae 6a 25 4d b8 5d f2 8b 16 40 c1 2c a2 28 ca f8 33 9d 1a c7 18 bb af 4b d5 31 c6 e6 a1 ab 1a 01 6f 80 bc 51 28 8d a1 a8 38 48 5c aa 3e 69 33 29 5a c5 92 8c 3e 66 af 56 84 82 61 19 48 4a f3 91 52 62 8f f9 91 9f 16 15 24 b6 b4 c7 ce 8d f9 67 4b 7b dc 4f fc 4c 00 97 79 24 77 dd 94 61 53 cc 41 89 dd 82 b6 fa 07 08 c5 f5 c2 02 fe ff 79 93 52 62 b7 7f 18 bb ef df b0 e5 14 c1 0c 96 63 61 19 a7 35 a8 a7 00 76 ea e2 4c 21 7b c6 62 13 63 40 b4 26 c8 ac c5 19 e5 ea a2 65 80 35 f9 37 47 3a 25 d6 7b ba 38 3d 01 96 63 93 c8 25 27 9d 2e 58 c5 09 f7 b5 c7 fb 96 e6 7d ca Data Ascii: d5SUDWR\|cS4[+4mk\nUBvlTTR*FQj%M]@,(3K1oQ(8H\>i3)Z>fVaHJRb$gK{OLy$waSAyRbca5vL!{bc@&e57G:%{8=c%'.X}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49864	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:32 UTC	814	OUT	GET /wp-content/uploads/How-to-Copy-Same-Date-in-Excel-370x120.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _ga=GA1.2.1040263935.1714073125; _gid=GA1.2.2146030412.1714073131
2024-04-25 19:25:32 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:32 GMT Content-Type: image/png Content-Length: 34965 Connection: close CF-Ray: 87a0b8374a4cada6-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "648abbc0-8895" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 15 Jun 2023 07:20:32 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aGAFyPkXjLFPTtcQwoZhb0jJI8VgJVDCOq5%2BZJHEHssctmOPZLwbsmuq3hOU9SDIUtCAJ7Cg5KrtcKvVykCiRDfO96la6SBCXS%2BlA0CGevSftDdHKNu0lTT9PnySerMG0u8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 72 00 00 00 78 08 06 00 00 00 ef c8 79 db 00 00 80 00 49 44 41 54 78 da ec bd 75 9c 1d e7 7d ef ff 1e 3a 8c bb 67 99 19 25 ad 98 65 81 6d 59 32 63 6c c7 8e 03 4e 9a b6 69 d2 f4 b6 bd bd bf dc de 9b d2 6d d3 14 92 36 0d 35 e0 38 e0 d8 31 a3 6c c9 62 66 5a d4 6a 99 19 0e 9f 33 33 bf 3f ce ea 68 57 64 c9 91 f9 7c f2 ca 2b d1 ce cc 99 99 67 66 3e cf f7 f9 7c 49 18 18 f2 e9 bc 23 22 8c b6 ef e5 8d 9f fc 3b 67 2a ff 9c 3f bc 7d 09 a9 56 81 b1 f6 23 6c 7a e2 fb ec 1b 2b 63 c1 ba 34 c6 4e 9c 42 9a f5 18 f7 ad ab 22 c5 aa 20 08 e7 7f 41 d7 26 39 b3 e5 47 ec 38 dc 8e 94 5e 88 7f 78 08 c7 b2 2f 73 ff 22 0f 93 27 5e e1 e7 3b 7b 48 f2 98 19 1c 0e e3 a8 5e c7 a7 6f 70 70 76 c7 59 02 a2 95 d4 1c 2b c3 27 5e e0 57 Data Ascii: PNGIHDRrxyIDATxu}:g%emY2clNim6581lbfZj33?hWd\|+gf>\|I#";g*?}V#lz+c4NB" A&9G8^x/s"'^;{H^oppvY+'^W
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 9f f4 13 56 8d 44 43 21 fc 92 07 9b c3 ce 4c f5 41 40 90 ad b8 53 aa 59 7d cb 2a 56 2c 2c c0 29 09 80 88 62 74 90 92 65 c3 5b 37 35 d7 9c 3b 42 52 b0 a6 95 b3 fc de 14 8a 97 b5 51 b7 77 13 47 5e f9 35 fb b3 be c1 fa 6a 27 26 f9 e3 f8 5a ea e8 5a 80 d1 6e 2f 6d c7 4f 73 e0 6c 2d 2f 0b 01 86 da 1b e8 11 d2 90 53 cb 20 37 be 30 44 37 ca 10 88 24 be e6 04 12 44 7e 69 68 a8 61 3f e3 03 fd 74 b5 77 33 38 e6 67 6c a0 9b 8e ce 0e 74 a7 80 51 b2 a3 4f 8c d1 d3 d3 42 b2 5f a5 b3 7b 00 5f c4 4e 99 cb 43 52 7a 3a 59 ca 79 46 d2 b5 c9 f3 fc 24 1a 70 e7 96 90 a7 ec 62 cb f6 6e aa ef 5f 4d 55 81 13 79 30 fe 1d a3 eb 2a 91 48 18 04 01 59 91 09 4c 76 32 11 0c 13 06 04 d1 80 39 35 9f 3c fb af f8 e5 6b 2d 04 67 7d 99 bb 53 5d 58 44 18 bb 8a 9b 8e 4e f6 d0 74 6c 07 27 83 c5 Data Ascii: VDC!LA@SY}V,,)bte[75;BRQwG^5j'&ZZn/mOsl-/S 70D7$D~iha?tw38gltQOB_{_NCRz:YyF$pbn_MUy0HYLv295<k-g}S]XDNtl'
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 06 1d 74 1b 39 8b 1f 22 45 37 62 b2 44 08 84 3e de 64 1e 0e 47 51 55 9d 50 38 ca 07 49 99 39 46 0f 49 06 3b 03 a1 f1 a9 55 94 08 b2 04 6a 34 f1 55 27 f0 c9 23 72 5f f0 a3 bb 1c 15 cc 76 24 20 14 0a 4d 59 6a e0 0b 84 b0 98 0c 18 14 19 b3 49 61 c2 1b 64 78 f4 bd ce fc 33 02 10 99 f0 7f ec 5f 18 55 d3 08 47 a2 8c 4d 06 90 c4 0f 2e 11 c7 a5 da 29 30 a7 9e 27 72 51 00 a3 0c a1 04 91 27 f0 09 24 72 bb d5 f4 b1 b9 19 51 14 98 b4 9a 98 f4 87 08 86 a2 f8 fc 61 dc 0e 33 e9 29 f6 c4 93 be 4e 08 85 a3 0c 8e 78 f1 b8 ac 18 8d 1f 9c 32 a7 e9 36 aa ba b2 39 30 76 26 36 89 33 15 4f 9e 40 02 9f 44 22 ff 20 ad aa f7 82 c8 45 49 40 d3 74 74 5d 47 d3 74 24 49 44 91 a5 c4 93 be 4e 88 aa 1a 82 20 7c 28 c6 75 79 6a 19 bf 6a df 45 58 8b c6 96 63 b2 38 c5 e8 89 e7 94 c0 27 0b 89 Data Ascii: t9"E7bD>dGQUP8I9FI;Uj4U'#r_v$ MYjIadx3_UGM.)0'rQ'$rQa3)Nx2690v&63O@D" EI@tt]Gt$IDN \|(uyjjEXc8'
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 32 c4 b1 57 5e e3 77 c7 cf 30 a9 29 b8 1d a5 08 99 85 64 a6 38 a6 56 20 09 bc 33 89 eb e8 ba 8a 7f a0 9e ad a7 5a 49 ce 2d 21 8f 61 1a a4 73 72 5f 98 91 ae e3 34 d6 0e 20 b8 44 30 4d 11 b7 24 c6 9c 9e da f5 f2 74 08 88 82 18 4f 7e 12 df 41 ec 13 11 ce ef 2b bc 77 d2 e0 7b 05 93 a4 f0 e7 4b 1f e0 ce d2 65 64 d8 92 f8 b7 03 cf f2 9d 83 cf a3 bd 8f 25 82 b3 1d 29 fc cb ba 2f 71 57 d9 32 14 51 8e 49 66 7a 2c 73 fb dc b8 5a 14 23 73 d2 0a f9 97 1b bf c4 fc cc 52 fe 7c f3 8f 18 09 4e 26 88 fc 72 2f b1 20 ca 28 26 23 06 45 9a 29 0b 48 56 92 8b ca a8 9e bd 93 cd 6f fe 82 ae d6 14 b4 d1 28 65 eb ef a6 30 c5 8c 2c 5c da 61 29 8a 4e b2 8b 93 18 69 6b e7 74 6d 27 35 59 99 8c d6 9f 65 58 31 93 5b 98 82 bf 7d 1c 01 1d 5d 0f e1 0b bb 99 75 cb 67 b8 31 db ca e8 89 e7 f9 Data Ascii: 2W^w0)d8V 3ZI-!asr_4 D0M$tO~A+w{Ked%)/qW2QIfz,sZ#sR\|N&r/ (&#E)HVo(e0,\a)Niktm'5YeX1[}]ug1
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: d2 ed 45 be b9 ea 51 6e 2f 59 82 a6 eb fc cd ae 5f f2 cb 53 5b 2e ba 26 87 d1 ca 4f 6f fb 1f 54 a7 e6 e1 31 9f 8f cd 7f 7c ee 06 ee af 5c 05 40 48 8d f0 67 9b 7f c8 eb cd 07 e3 db b3 ec 1e 1e af d9 c0 3d e5 2b c8 76 a4 60 91 8d 68 ba c6 78 c8 c7 99 91 6e 7e 78 f4 55 5e 6c dc 43 20 1a 7e 67 6d 5e 92 79 b8 6a 2d 29 96 d8 f9 87 fc e3 7c 63 db cf d8 d3 55 3b 63 bf b0 16 65 77 e7 69 fe 6e f7 af f9 ea c2 bb f8 ef 63 af f3 e6 d9 c3 33 48 53 16 25 56 e7 cd e1 6b 8b ee 66 76 6a 21 49 26 3b b2 28 11 52 23 f4 f9 46 d8 d2 72 94 ef 1f 79 85 fa a1 8e 19 13 4d 92 d9 ce 93 77 fc 25 45 ee 4c 34 5d e7 af 77 3c 41 44 8d f2 17 4b 1f a0 34 29 1b 93 6c 20 10 0d d1 3a d6 c7 7f 1d 7e 89 5f 9d de 4a 78 ea 39 3d 3a 6b 1d 5f 5b 74 0f 02 d0 3d 39 cc e7 5e f9 36 cd a3 3d 17 4d 7a 7f Data Ascii: EQn/Y_S[.&OoT1\|\@Hg=+v`hxn~xU^lC ~gm^yj-)\|cU;cewinc3HS%Vkfvj!I&;(R#FryMw%EL4]w<ADK4)l :~_Jx9=:k_[t=9^6=Mz
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 71 a4 b0 3c a7 0a 8b 62 c2 6d b2 f1 57 cb 1e e4 40 77 03 0d c3 9d 9c 1c 68 65 5f 77 3d 77 94 2c 45 16 25 d6 e4 d5 f0 bb ba 9d b1 5a 40 53 58 9c 59 4e a1 2b 96 fb d0 3e de cf 6b d3 56 37 ef ad 45 ae 86 09 4c 4e 12 d2 1d e4 cc bb 85 6c 41 22 1a 98 c4 af 5b a9 ae 5a c4 1d fe 2e 76 37 78 99 08 80 39 73 1e 73 97 6f 64 4e 8e 0d f9 c2 9a 17 82 01 77 ee 7c aa c5 09 92 dc 06 64 4b 1a 25 8b 6f e2 01 d7 04 a9 d5 c5 24 c9 32 ba 33 9f f9 35 36 e4 74 0f 96 14 27 ab d6 2f 44 dd 73 94 ce 71 1f ee b2 35 6c 48 72 53 50 ec c1 88 88 ac 38 c9 2e 2c c3 e5 8e 30 bb b2 80 64 87 e9 9a 22 04 8c ae 5c ca e6 dd 42 46 aa 1b c3 f4 90 40 01 c0 44 4a c9 52 56 85 55 d8 b6 9b da 81 00 aa 2e 20 0a 1e fc 21 15 44 1b 69 e5 ab 98 17 f0 90 69 17 40 94 50 3c 25 dc b0 24 1d 4f b6 13 39 da 85 77 Data Ascii: q<bmW@whe_w=w,E%Z@SXYN+>kV7ELNlA"[Z.v7x9ssodNw\|dK%o$2356t'/Dsq5lHrSP8.,0d"\BF@DJRVU. !Dii@P<%$O9w
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 42 8a 24 31 37 bd 18 71 8a 74 7b 26 47 38 7b 81 16 ac a3 53 3b d8 ce 64 c8 8f db 6c c7 6a 30 93 6d f7 5c 51 f3 0e 46 c3 f1 49 52 10 04 0c d2 b5 7f 43 d3 35 fd a8 ae b1 b7 ab ee a2 cc da e1 c0 24 a7 06 da 98 93 56 84 20 08 94 26 65 63 51 8c 17 91 aa ae eb 1c ea 6d 9a 11 21 14 bb df 61 9a 47 7a a8 4e c9 07 62 49 63 36 83 99 d1 a0 97 96 d1 5e de 6a 39 cc 17 e7 6e c4 20 c9 dc 59 ba 94 5f 9d 7e 1b 7f 24 c8 aa dc d9 f1 ac df e6 d1 1e b6 b5 9d b8 6e ef a5 ac eb 1f cd 12 51 a2 6c 26 bb f2 16 6e cf 9c 43 d6 94 39 ae eb 3a e8 d3 c2 88 85 98 51 a6 e9 89 32 58 d7 0d f1 b1 d4 3f 34 e3 6a 14 e5 98 b3 ed 9c 01 27 0a 53 2f c1 f5 bf be 86 a1 4e de 38 7b e8 d2 04 27 ca 7c 7e ce 2d 97 7e 5f 05 61 46 58 5f 20 12 42 d5 2f b6 38 47 83 5e 42 6a 78 86 63 2d 46 72 11 76 76 9c e4 Data Ascii: B$17qt{&G8{S;dlj0m\QFIRC5$V &ecQm!aGzNbIc6^j9n Y_~$nQl&nC9:Q2X?4j'S/N8{'\|~-~_aFX_ B/8G^Bjxc-Frvv
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 06 c9 77 a5 53 9d 92 4f 9e 33 0d 49 14 89 a8 51 9e a9 db 81 f7 1d 56 27 d7 4c e4 c2 c7 a8 2e 85 20 c4 a2 15 a6 c9 b8 e7 ff 9e c0 75 5b 09 cd 18 ef 0f 01 14 51 42 12 84 99 16 f9 87 90 c9 37 b7 1e 65 6f 57 1d 6b f3 6b 30 88 32 ff 7b c5 a7 a9 f2 e4 73 b8 af 09 8b 62 e4 f6 92 25 2c cb ae 8a 4d 98 d1 30 bf 3e bd 95 ae 89 a1 f8 f1 61 35 ca 91 be 33 dc 5a b2 18 59 94 e2 a1 7f fb ba eb e2 93 41 ed 60 1b 75 83 ed 2c cf a9 c2 3a 15 ca d7 ef 1b e3 70 6f d3 d5 4d d4 d1 30 2d 63 bd 71 6b fb 8e d2 a5 04 a2 21 06 fd e3 54 a5 e4 f3 cd 9d 4f 72 6a a0 95 bd 9d 75 ec 68 3f c9 86 e2 45 18 a4 58 7d 94 3c 67 1a 27 fa 5b 30 c9 06 36 14 2f 64 55 4e 2c be 3d a2 46 f9 6d ed b6 4b c6 6a 5f 88 fd dd f5 fc e2 c4 5b 7c 7d f1 bd 28 92 cc a2 cc 32 9e b9 e7 af d9 db 55 4b fd 50 27 82 00 Data Ascii: wSO3IQV'L. u[QB7eoWkk02{sb%,M0>a53ZYA`u,:poM0-cqk!TOrjuh?EX}<g'[06/dUN,=FmKj_[\|}(2UKP'
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: 15 27 f6 7e df 28 db da 8f 53 9d 92 8f 20 08 34 8d 74 b3 ab e3 d4 7b f2 a9 bc 73 8a be a6 12 9a 18 a6 e5 d8 1b bc 7e a4 9b b4 45 f7 73 e7 a2 22 1c 26 11 cd 3f c4 d9 43 9b 79 76 e7 69 bc be 10 26 4f 2e b3 56 dd c3 4d 73 b2 b0 19 2f a8 5f 4e 88 c1 fa 6d 6c df b4 89 be 94 95 ac ba e9 36 66 67 18 e3 da 66 a4 ff 14 9b de da cc 9e 3e 0f 37 6e 5c cf ca ea 4c de cb fa 52 fe c1 26 f6 be f1 73 5e 3d ea 47 d5 44 d0 53 c8 af 5a c9 6d 0f 2e a6 d8 6d 46 4a 90 f9 07 cd e2 e8 7a 94 60 e7 51 9e 79 79 33 07 9b fa 91 15 99 ac f9 b7 71 db ba a5 94 a5 1a 88 fa 26 e8 ad 7f 9b 27 de de 4f 6f e6 28 bc 07 b5 6c bc e1 00 fb bb eb af f6 8a a9 1b ea b8 aa 7d 27 42 7e 0e f6 34 70 b0 a7 e1 9a ae 27 a2 a9 1c ef 3f 7b e5 6b 8e 04 af fa 9a 2f 87 b0 16 e5 78 ff d9 77 3c 17 c0 64 d8 cf 81 Data Ascii: '~(S 4t{s~Es"&?Cyvi&O.VMs/_Nml6fgf>7n\LR&s^=GDSZm.mFJz`Qyy3q&'Oo(l}'B~4p'?{k/xw<d
2024-04-25 19:25:32 UTC	1369	IN	Data Raw: f2 25 cc 36 89 c9 24 1f 4d bf e8 67 7c c0 87 75 d6 1c e6 e8 cf d2 d7 da c5 60 b1 8d 50 7b 1d 6d 59 f3 78 a0 24 93 24 e5 ea bd e3 5a 34 8c 7f 7c 94 a1 c1 41 06 7b 8f 72 b4 ed 2c c1 8a 3b c9 4f b1 92 64 c9 a3 6a 59 06 a6 64 2b 5a bf 9d de a6 fd 8c d7 76 32 be ce 09 f8 b0 67 e5 52 7d cb 9d 6c 5c 90 06 03 99 f8 be f1 22 a3 75 2d 0c 14 8f 71 e0 b5 66 82 49 0b 59 b8 62 0d e5 6e 18 c8 88 d2 f6 bd 93 b4 54 97 91 55 a1 22 9a 22 64 cd 5b c5 3d 77 dd ce ec 2c 4b 22 06 f4 92 af 9e 80 68 4e a6 6c d5 1a 16 f4 3d c1 db bf fb 0e af 09 d9 2c bb e5 7e 8a 8b 93 30 49 20 4c 39 cb 35 51 40 17 2e 20 f1 04 8f 27 f0 2e 10 8c 86 79 f5 cc 7e 8e f6 9d 41 d3 75 ce 8e f5 5c a5 3d 28 70 b2 bf 95 ed ed 27 70 9b ec e8 ba 4e eb 78 1f cf d6 ef e4 ad 96 23 57 e5 58 7d 0f 89 fc 0a 12 a6 16 Data Ascii: %6$Mg\|u`P{mYx$$Z4\|A{r,;OdjYd+Zv2gR}l\"u-qfIYbnTU""d[=w,K"hNl=,~0I L95Q@. '.y~Au\=(p'pNx#WX}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49869	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:32 UTC	834	OUT	GET /wp-content/uploads/Is-Excel-a-Database-370x120.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _ga=GA1.2.1040263935.1714073125; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1
2024-04-25 19:25:33 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:33 GMT Content-Type: image/png Content-Length: 28547 Connection: close CF-Ray: 87a0b83878600d06-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "648aa786-6f83" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Thu, 15 Jun 2023 05:54:14 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d1%2FTuzqFrYKOwfrJ9DUZChcxbd7mO0N1H7M%2Fc3GgCoG1ux9dDov1gyaKL%2FnsMpMRZsLJAZ%2BYmRLFY0A1dua1h8FDmZBBBmVJdEQ7BZsVLaRbAnUiCZNf196AtjAG5Gaa6WM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:33 UTC	463	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 72 00 00 00 78 08 06 00 00 00 ef c8 79 db 00 00 6f 4a 49 44 41 54 78 da ed bd 77 7c 5c e7 75 e7 fd bd 6d 7a c5 60 d0 2b c1 0e f6 2e 51 12 45 15 aa 58 d5 96 8b 2c cb b1 d7 4e 9c b8 c4 bb d9 24 ef 66 37 d9 f8 93 77 37 79 77 b3 29 6b 3b eb c4 71 6c a7 b8 c8 92 65 cb 96 2c 59 5d 14 29 89 14 7b 05 08 12 20 7a 1d 60 7a bd e5 fd 63 66 2e 01 12 60 11 01 90 d2 ce cf 1f 5a 83 3b 77 ee 7d 9e e7 de fb bb e7 39 cf 39 bf 23 f0 da e7 0c 4a 28 e1 3a 43 b5 ec e1 8f b2 9b f1 f4 a6 c9 64 32 34 36 36 e2 69 5c ce c1 51 9d d6 a0 95 55 95 36 4e 9d 6a 27 1c 9e 40 14 25 56 af 5e 8d c5 62 99 f6 58 aa aa a2 69 1a 56 ab f5 82 ef 52 a9 14 fb f6 ed a3 ad ad 8d ad 5b b7 b2 7c f9 f2 cb 6a 5f 3c 1e e7 c0 81 03 2c 58 b0 80 ce ce 4e Data Ascii: PNGIHDRrxyoJIDATxw\|\umz`+.QEX,N$f7w7yw)k;qle,Y]){ z`zcf.`Z;w}99#J(:Cd2466i\QU6Nj'@%V^bXiVR[\|j_<,XN
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: bf 7e 3d 4e a7 73 5e ee 2b 4d d3 d0 34 6d ca bd 32 32 32 c2 5b 6f bf 43 9b 50 cf 80 11 40 d3 0d 16 28 61 d6 bb c3 ac 5d b3 06 8f c7 c3 cf 7e f6 33 02 81 00 65 65 65 1c 3b 76 8c 60 30 c8 c8 c8 08 4e a7 93 a1 a1 21 64 59 66 d1 a2 45 0c 0f 0f a3 69 1a fd fd fd 3c fa e8 a3 d4 d4 d4 30 3c 3c cc d9 b3 67 c9 e5 72 ac 5a b5 0a 8f c7 33 a5 3d b9 5c 0e 9b cd 76 55 fd 92 4b 94 51 c2 f5 88 41 35 ca bf c9 27 78 54 ae 63 79 4d 33 fe c6 a5 f4 26 04 ee 5a e8 c2 a5 88 08 02 04 02 01 0e 1d 3a 44 6b 6b eb 05 24 78 b9 b0 5a ad 2c 58 d0 8c cd 66 a5 a5 a5 e5 b2 7f 27 8a 02 cb 96 2d c3 ef f7 93 cb e5 d0 34 8d ba ba ba 0b f6 13 04 81 9a 9a 1a 9a 9a 9a 50 14 e5 b2 8f 6f 18 06 9a a6 11 0c 06 91 24 09 b7 db 4d 32 99 c4 eb f5 9e 6b 83 20 10 b4 cb 78 14 9d db 9a 1c f8 15 95 98 a5 11 Data Ascii: ~=Ns^+M4m222[oCP@(a]~3eee;v`0N!dYfEi<0<<grZ3=\vUKQA5'xTcyM3&Z:Dkk$xZ,Xf'-4Po$M2k x
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: ac c2 30 f2 d6 9d f8 c1 f7 b6 1a ba 0e 82 f0 be 7e 81 4e 9e 65 94 88 bc 84 0f 0c 32 86 ca f7 46 df e2 c1 e0 5a ea 2c 7e 44 5d 9f 55 fd 71 5d d7 49 e5 32 28 92 8c 22 c9 b3 72 5c a3 20 17 7b 35 85 15 0c c3 20 97 cb 87 60 5a 14 65 b2 af e8 8a 8f a3 17 c6 6c 3e c9 28 9b cd e6 cb dc 49 d2 7b 6e fb 15 5f cb c2 79 e6 44 9e d6 30 d0 74 dd 74 7b cc d5 78 16 25 77 8b 7d 28 a5 e8 97 f0 81 41 48 4d 50 26 3b b9 c1 bd 00 5d d3 4d ff e1 6c 60 3c 11 e1 a5 53 ef e0 b2 3a f0 d9 dd b3 6a cd 5d cd c3 9e c9 64 38 72 e4 08 ba ae e3 b9 44 25 a1 4b 91 ea 6c 8e d7 e5 60 78 78 98 33 67 ce a0 eb 3a ee 49 75 2c e7 9c c8 0b 24 38 17 7d d5 75 9d b3 67 cf 92 4e a7 89 c7 e3 b8 dd ee 92 45 5e 42 09 57 02 d5 d0 f9 a7 a1 5d dc e9 5d 46 ab a5 6a 76 2d 7e 35 4b 2c 93 c4 69 b1 cf fa 03 79 35 Data Ascii: 0~Ne2FZ,~D]Uq]I2("r\ {5 `Zel>(I{n_yD0tt{x%w}(AHMP&;]Ml`<S:j]d8rD%Kl`xx3g:Iu,$8}ugNE^BW]]Fjv-~5K,iy5
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: c6 21 9d 4b 19 d6 0d 83 98 96 c1 60 e6 53 d9 44 05 8f 64 c3 29 59 b1 89 0a 09 2d 43 54 4b 13 55 53 e8 5c 79 13 45 04 5c 92 f5 8a c2 ce 54 43 27 a1 65 b0 08 32 f6 49 ed 37 80 b4 96 23 63 4c af 6f ed 14 ad 28 93 92 0b 34 c3 20 ae a5 2f da ea 62 fb 5c 92 15 a7 64 45 44 24 a1 67 48 68 19 62 5a 1a d5 b8 30 8a 42 42 c4 25 59 af 48 ed 33 57 e8 53 fe 62 83 4b b2 21 4d 3a 40 ea 22 fd 9a 0d d8 44 05 9b 98 27 31 c3 80 b8 96 41 43 bf 26 37 fb 9d d9 06 6e dc 63 60 53 ac e8 ba 4e 63 63 23 f7 dc 7d 37 ff fc 2f ff 62 16 78 98 98 98 c0 e9 74 90 4c a6 f8 ec 67 3f cb be 7d fb e8 38 dd 41 3c 16 a7 a5 a5 85 db 6f bb 8d 1f fc f0 87 66 66 9d c7 e3 61 c3 86 0d fc fa d7 bf 46 10 04 9c 4e 27 0f 3f f4 10 6f ec dc 49 67 67 27 36 9b 8d bb ef ba 8b d5 6b d6 bc af 13 50 4a b8 be 90 4c Data Ascii: !K`SDd)Y-CTKUS\yE\TC'e2I7#cLo(4 /b\dED$gHhbZ0BB%YH3WSbK!M:@"D'1AC&7nc`SNcc#}7/bxtLg?}8A<offaFN'?oIgg'6kPJL
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 1c 44 c7 20 a0 38 f9 af 8d 0f f0 85 9a 6d 08 05 0b ef 06 4f 0b 4e d1 4a 42 bf 72 71 ff 98 96 e6 0b ed ff c2 91 44 df 8c fb 64 0d 8d 88 9a b7 7c 0d 0c fe 79 68 37 77 95 ad e0 16 ef 22 04 41 c0 22 ca fc 46 d5 8d fc 32 74 98 a5 8e 6a ee f0 2f 33 dd 23 e3 6a 82 bf ec 7d 81 de cc c4 54 eb 1a 81 47 2b 36 71 97 bf d5 24 71 c3 30 18 ce 45 f9 f6 c0 4e 9e 1c dd c7 50 36 82 61 18 94 29 2e 1e 2e 5f cb 57 ea 6e a7 d6 e2 23 aa a5 f9 e1 f0 1e de 0c 9f 9a b6 bd 71 2d c3 17 4f fd e0 a2 d6 6d 46 57 e7 74 31 73 26 6c f3 2d 66 51 61 dd 60 8a a5 2e 08 dc 5d b6 82 bf eb 7f 95 b3 e9 d0 fc 3f 00 86 c6 cf 46 0f f0 a9 ca 2d 04 14 d7 75 f3 50 7e ef 7b df 63 ef de bd 04 83 41 3e f5 a9 4f b1 a0 b9 19 03 f0 78 3c a4 53 29 46 46 47 89 84 c3 34 35 37 a3 69 1a 5e af 17 5d d7 09 8d 8d 71 Data Ascii: D 8mONJBrqDd\|yh7w"A"F2tj/3#j}TG+6q$q0ENP6a).._Wn#q-OmFWt1s&l-fQa`.]?F-uP~{cA>Ox<S)FFG457i^]q
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 84 c3 61 16 2d 5a 44 65 65 25 a9 64 92 13 27 4f 92 cb 65 59 b6 6c 39 5e af 77 ce c9 fc 9a 10 b9 6a e8 3c 3d 7a 80 87 cb d7 11 54 5c f9 da 73 82 c8 06 77 13 6b 5d 0d 24 b4 0c fd 99 30 6f 46 3a 78 7e fc 28 6f 86 4f 31 ae 26 ae ca 36 75 4a 56 fe e7 82 47 66 4c 45 49 69 59 1e 6f fb 0e cf 86 8e 5c f0 5d 77 3a c4 ff ec 7d 81 7f 58 fc 69 3c b2 6d 92 6b 43 e7 87 c3 7b 79 72 74 df b4 6d b3 88 12 35 96 a9 17 f1 6c 7a 8c b1 6c 6c 56 c6 d1 29 5a f8 8b 05 1f 99 f1 a5 10 d7 d2 dc 77 f4 eb bc 13 ed 9c b7 6b bb d6 dd c0 8e b2 e5 e6 da c1 48 36 c6 6b 13 6d f4 66 c6 79 66 ec 10 4b 1d d5 88 82 40 99 ec e2 f1 ca 1b 78 27 7a 66 da e4 a7 b9 c6 a9 e4 30 ff 7a e2 15 3e 59 b6 81 c1 c1 21 52 a9 14 cb 96 2d 63 7c 7c 9c e1 e1 61 ea ea ea a8 ae ae e6 e8 d1 a3 d8 ed 76 9a 9b 9b 69 6f Data Ascii: a-ZDee%d'OeYl9^wj<=zT\swk]$0oF:x~(oO1&6uJVGfLEIiYo\]w:}Xi<mkC{yrtm5lzllV)ZwkH6kmfyfK@x'zf0z>Y!R-c\|\|avio
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: ad 51 53 53 c3 fd f7 dd c7 c0 c0 00 9a a6 f1 a1 0f dd 47 32 99 60 e7 ce 9d 6c de bc 99 aa aa 2a 4e 9f 39 43 6d 6d 2d 5f fe d2 97 58 bd 7a 35 2b 56 ac 30 53 ee d3 e9 34 13 13 13 1c 3b 76 8c b2 b2 32 dc 6e 37 cb 96 2d e3 ad b7 de e2 d8 f1 e3 a4 52 29 52 a9 14 15 15 15 4c 4c 84 67 f4 1b 4f f7 cf e3 f1 70 ef bd f7 f2 e8 a3 8f b2 7c f9 72 d3 e0 91 65 99 8d 9b 36 f1 d8 63 8f 71 eb ad b7 62 b3 d9 2e f8 ed f9 3e fc 8b fd bb 12 5f 6e 36 93 21 1a 8d 32 d0 df 8f db ed 26 93 c9 90 48 24 a8 a9 a9 21 95 4a 61 b5 5a 59 b2 64 09 cb 96 2d 33 2b c9 8b a2 48 32 95 62 68 68 88 87 1f 7e 98 d1 d1 51 42 a1 10 d1 68 94 b1 b1 31 7a 7a 7a a8 a9 a9 e1 a1 87 1f c6 e9 74 b2 62 c5 0a ee bd f7 5e c6 c6 c6 10 45 91 07 1e 78 80 64 32 c9 de bd 7b b9 e5 96 5b a8 aa aa e2 cc 99 33 64 32 19 Data Ascii: QSSG2`l*N9Cmm-_Xz5+V0S4;v2n7-R)RLLgOp\|re6cqb.>_n6!2&H$!JaZYd-3+H2bhh~QBh1zzztb^Exd2{[3d2
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 15 12 17 04 81 db 6e bb cd 4c 20 5a bd 6a 15 36 bb 1d c3 30 90 65 99 d6 d6 56 fe e8 8f fe 88 f1 f1 71 6a 6b 6b f1 7a bd dc 72 cb 2d b4 b4 b4 90 4c 26 a9 af af 27 9d 4e 33 3e 3e 4e 7d 7d 3d f1 78 9c 50 28 44 7d 7d bd 59 3d ca 6a b1 50 57 5b 8b 20 8a d4 d5 d5 bd 3f 16 3b dd 92 8d ff de fc 30 9b 3d 0b f0 ca 76 24 41 e4 4b a7 fe 8d 17 27 4e 98 96 f1 99 f4 28 5d 83 63 b8 24 1b ff ab e5 a3 e6 d3 9f 57 d2 53 e6 ad ad 02 70 77 d9 0a 3e 5f 7d 33 72 21 52 25 63 a8 7c 67 e0 4d ee 2b 5f 65 66 75 36 d9 ca f9 a3 86 7b f9 ad f6 7f 21 a2 9d f3 33 6a e8 bc 16 6e e3 23 c1 75 58 85 7c bb 17 d8 82 fc 4e cd 76 be 76 f6 99 69 23 72 04 f2 c9 34 7f da f4 00 df ec 7f 95 9f 8f 1d bc 26 a1 97 57 8a 5b 7d 4b d8 e2 59 30 e5 e1 11 84 4b 47 69 bb 25 1b bf 51 75 23 6f 84 db af 49 e2 52 Data Ascii: nL Zj60eVqjkkzr-L&'N3>>N}}=xP(D}}Y=jPW[ ?;0=v$AK'N(]c$WSpw>_}3r!R%c\|gM+_efu6{!3jn#uX\|Nvvi#r4&W[}KY0KGi%Qu#oIR
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 16 d6 af cf df c3 8a 2c 93 cd e5 10 45 11 ab d5 ca bd f7 de 9b 9f 61 49 12 5f f9 ca 57 50 55 15 9b cd 86 a6 69 48 92 34 45 92 77 3a 14 db 71 a5 ee 9e f7 23 8a 7d bc d4 98 5c cf 28 aa 1f 16 fb 70 4d 16 3b 4f 26 07 f9 4f 9d 4f f1 bf 5a 3e 46 8b bd c2 0c 57 13 04 01 e9 3c e7 84 6e e8 74 a5 c7 f8 c3 33 4f 71 28 de 33 a7 ed 4a e9 39 d2 7a 8e 2a 8b 87 ff d4 70 2f 15 85 a2 14 86 61 70 30 d6 cd b7 07 df 98 a2 f5 f2 5c e8 08 cf 8d 1f e1 e3 c1 8d e6 d4 e8 e3 15 9b 78 61 fc d8 94 c4 a2 71 35 c1 1f 9e 79 8a e1 6c 8c cf 56 6d a5 bc 90 04 75 31 5f 68 4c 4b f3 cf 43 6f f1 17 3d bf 62 5c 4d bc e7 3e c5 0b 15 87 de 93 b5 6a 18 0c 65 a3 a6 22 e4 b4 56 a2 ad 8c ed fe a5 66 7f 72 ba c6 13 23 ef 5e 52 76 f7 f9 d0 51 be 54 b3 dd d4 2a 6f b1 07 b9 27 b0 92 bf 1f 78 7d de ef c7 Data Ascii: ,EaI_WPUiH4Ew:q#}\(pM;O&OOZ>FW<nt3Oq(3J9zp/ap0\xaq5ylVmu1_hLKCo=b\M>je"Vfr#^RvQTo'x}
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 68 59 37 d2 75 70 ff ca 94 50 42 09 e8 18 1c 88 9d e5 37 aa 6e 34 73 06 e6 13 0b 17 2e e4 e4 c9 13 f4 f6 f4 d0 d2 d2 c2 fe fd 07 68 6f 6f c3 e3 f1 b2 6b d7 2e 5a 5a 5a 08 04 02 a6 4f 74 ae 30 36 36 86 df ef 67 f5 9a 35 d4 d4 d4 f0 e3 27 9e 60 2c 14 a2 af b7 d7 d4 75 69 6f 6f 27 16 8b 71 f3 cd 37 b3 67 ef 5e 7c 3e 1f 5e af d7 b4 b6 27 26 26 e8 ea ec a4 ae ae 8e 03 07 0e d0 d2 d2 c2 be 7d fb 68 6e 6e e6 ed b7 df 26 55 48 d5 ef ec ec 34 e3 af e7 1f 02 92 ab 19 35 ba 07 35 fc 22 82 6c c3 d0 3c 58 ea ff 33 82 e2 41 ed fd 67 d4 f0 1b f9 ed 46 39 4a ed 1f 20 28 2e d4 9e 7f 44 8d fe 2c 1f 35 28 2d c4 52 fb bb 20 d9 ae f9 fd 2b 96 1e e1 12 4a c8 e3 ed 68 27 a3 d9 d8 35 39 77 20 10 20 9d ce 30 34 3c 6c 26 93 78 3c 5e 16 2d 5c 48 30 18 34 fd d6 73 8d 60 30 48 24 12 Data Ascii: hY7upPB7n4s.hook.ZZZOt066g5'`,uioo'q7g^\|>^'&&}hnn&UH455"l<X3AgF9J (.D,5(-R +Jh'59w 04<l&x<^-\H04s`0H$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49870	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:32 UTC	807	OUT	GET /wp-admin/admin-ajax.php HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _ga=GA1.2.1040263935.1714073125; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1
2024-04-25 19:25:33 UTC	935	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 19:25:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b838887bad51-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache, must-revalidate, max-age=0, no-store Expires: Wed, 11 Jan 1984 05:00:00 GMT accept-ch: Sec-CH-UA-Mobile ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p pragma: no-cache X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-kinsta-cache: BYPASS x-robots-tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TTe4Jj9B2DwDMi7%2B0gphNHyjktVqXpTJgMVKrZthQ0g5ZiGR2BDotVNe9TAf8aV7JvRGE%2FzH3xuIWlrMf7OWZ6z6%2B6upqiL4z2zkXYx6JhEoBdLVOCFbF56aZS%2BURniUfg0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:33 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-04-25 19:25:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49873	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:33 UTC	834	OUT	GET /wp-content/uploads/Price-banner-Earn-and-Excel.png HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}}; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _ga=GA1.2.1040263935.1714073125; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1
2024-04-25 19:25:33 UTC	914	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:33 GMT Content-Type: image/png Content-Length: 1162805 Connection: close CF-Ray: 87a0b83ac8b97be1-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "64900bcc-11be35" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Mon, 19 Jun 2023 08:03:24 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a45sGuRupoiF%2FN2CFKlWliIpnGQ%2BUY61m22DxI6%2FZXXZ%2FXKXZbjCKcPeK3gzfDh23F5Kt3zU%2BTKrCirn7Ec6f9ZbDd8sPOjysJ0g7rc0PjwPw4Jzc%2BppapORSEP95qaKZFc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 02 d0 08 06 00 00 00 cf 7d dd 56 00 00 00 4e 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 d8 00 00 00 01 00 00 00 d8 00 00 00 01 aa a2 87 67 00 00 00 1c 69 44 4f 54 00 00 00 02 00 00 00 00 00 00 01 68 00 00 00 28 00 00 01 68 00 00 01 68 00 09 5e 7c 59 97 c8 8d 00 00 40 00 49 44 41 54 78 01 ec bd 47 8c a5 d7 95 e7 a9 c6 18 60 1a 2a f5 ec 7a 33 8b 02 06 98 c5 a0 d7 33 8b ea 5e 0e 30 9b 19 0c 30 98 c6 00 05 4c 35 aa 54 5d ad 52 49 25 d1 49 2c 7a 89 2e 69 92 4c 7a 32 69 93 56 a2 4d 26 d3 30 bd f7 36 d2 fb c8 f0 3e 5e 44 bc 17 e6 b9 33 Data Ascii: PNGIHDR}VNeXIfMM>F(giDOTh(hh^\|Y@IDATxG`z33^00L5T]RI%I,z.iLz2iVM&06>^D3
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 63 27 c9 3b 61 36 70 c4 9a bd bb ec 5b 19 fe 7d 1b 50 97 c3 0e f9 6e 49 90 4e 20 af 80 75 19 da b1 19 a7 fc 77 12 0c bc 3e 5f 75 55 af d5 a6 83 45 07 83 b4 e1 60 30 e0 60 ae db e9 bf 25 ab 8e fc b5 46 3a eb cf 21 79 e7 fd eb 7c 7f 3a df df eb d6 c0 9f ca ef cf ff f5 fa ff 5c 00 bc 0c ff 1c 00 2e 85 7e ed 00 d0 c3 2d 40 a8 f2 02 84 82 88 a5 ca 55 36 98 01 f2 1c 76 f1 47 aa 40 a0 c0 56 c0 41 36 54 c4 b5 41 d4 66 6b 9a 3f b4 7d 33 84 3f a3 74 a5 e1 04 d0 14 f7 32 29 ad c8 4b 9b 2e c1 bf bc e9 53 7b da 44 07 18 8c f6 db f3 05 c4 bc 2c ed 3a e4 63 03 ee 9b 54 f5 e5 ed c5 46 3c b7 a7 f2 01 0b 17 a7 47 be ea aa de e2 fe 95 17 60 2e c6 2f 38 97 37 d1 0e 45 e8 db 01 1f b2 f0 f1 78 3c 20 5f 0b 18 0a ea 01 08 b4 e1 96 cc 54 e6 3a 47 1e e3 6e 6f df e7 94 fa cf e0 4e Data Ascii: c';a6p[}PnIN uw>_uUE`0`%F:!y\|:\.~-@U6vG@VA6TAfk?}3?t2)K.S{D,:cTF<G`./87Ex< _T:GnoN
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 25 64 20 30 22 4d bf 76 d8 b2 18 e0 b4 01 18 ca 0a 5e b5 f2 6f 04 11 53 1a e5 d4 a6 c6 92 db 16 ec 5a da bf cb 02 99 39 24 ce cf e1 b7 94 7f 49 6b 83 fe b5 3e a6 71 f2 25 b7 df 4e fe f1 dc 5c b6 c5 f8 7e fd f3 57 f9 96 0c 62 4d b8 cc f5 4c 7c 4c bf 07 f9 fb 33 8b f5 27 00 5b e2 7d 1b 9f d0 fa 98 b6 a1 e1 51 db b5 7b bf 7d f4 f1 27 76 f6 ec 79 3b 78 e8 88 7d f6 f9 67 68 01 6e b7 4f 3f fb cc 06 04 00 b7 6e 76 28 a8 f7 fa d4 e9 d3 b6 7a cd 6a db b1 6b 27 6b 48 20 11 59 27 79 08 f6 85 96 29 3e 79 37 f3 fc ff d0 eb ef c6 fd c7 73 d2 7b a5 b5 e4 6b 88 6f 89 e2 fe 5d c1 77 2d 3e d2 7c ad f9 b7 28 bf 87 f9 fd 4b e5 97 7e 7f 54 57 df 00 e4 13 20 4c 6d c4 37 2a e0 15 7d e8 9b a3 72 38 ad 9d 9c ae 7a fe 6d 2b f2 53 5f a9 6c d4 d1 f3 d5 da 0a 3f 6b 04 0a ec 8d 03 50 Data Ascii: %d 0"Mv^oSZ9$Ik>q%N\~WbML\|L3'[}Q{}'vy;x}ghnO?nv(zjk'kH Y'y)>y7s{ko]w->\|(K~TW Lm7*}r8zm+S_l?kP
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: b4 b6 91 55 ac d7 f4 0e d3 b7 c3 45 f9 c9 45 3d 95 bb 99 ef 9f 9e 75 82 79 09 f6 c9 e4 d7 df 59 be 5b 02 80 93 d2 04 a4 4c 98 fd 46 58 e6 c1 01 00 89 fb 7a 49 6b 46 63 4c df bf a5 fd 87 19 2c 73 65 2d dd f0 fb bb e4 fd fb 5d cf 5f 63 88 df 94 04 e9 00 38 f1 0f a6 90 65 7b ff fe db c2 f7 39 ff 16 b9 46 20 e3 f5 f4 af f8 fd 91 a9 b0 64 31 cd 77 43 6d b9 e6 ba b7 01 e4 23 7d 46 50 4f 3e 79 85 96 9f c7 43 0b b0 05 03 23 ae be 5d 9b 50 65 68 3b 9b 1e cf 94 32 fc 93 0f 0c c3 55 78 26 82 80 65 d6 4b 85 67 57 61 ad cd f2 cc 5c ab 8f fa ae f9 47 5e c4 05 fe 80 7c 8c 2d e2 a1 05 d8 82 81 68 01 92 17 66 bf 01 de 5c 83 4f 69 72 6a 2f 87 f1 95 e7 26 c4 f8 01 e8 02 2c 0a f8 29 2e b0 e8 90 50 be 1c e3 ac e2 0b 06 2e e0 cb 09 02 d6 12 0c 54 dc a1 24 72 f4 39 10 97 66 a3 Data Ascii: UEE=uyY[LFXzIkFcL,se-]_c8e{9F d1wCm#}FPO>yC#]Peh;2Ux&eKgWa\G^\|-hf\Oirj/&,).P.T$r9f
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 02 bf c9 0b ea 9b ef 43 55 71 e4 12 40 10 58 46 3b 82 81 73 c8 66 8e e7 31 47 5e b4 a3 71 b5 9c 9f f7 a7 71 32 be 2a e5 dc 31 fe 85 14 76 a8 48 1f 55 d6 f1 02 ce 35 f1 94 47 fb 61 26 ac 31 2b 4e ff a4 cd b3 ee c3 01 0f 01 5c 0b 8a cf 62 9a c9 3b 5c 67 9c 35 d5 03 80 d5 78 27 6a 63 fd 36 c4 31 08 73 dd 68 68 31 e7 2a 00 5d 26 b7 75 de a3 2a c0 4e a0 4f ed d6 88 67 27 53 5f 37 f9 65 0e 01 f7 00 73 8c c7 cd 7d 69 db 21 20 75 dd 04 97 b6 58 0c 68 83 01 89 68 a7 41 9f ee 2a 82 45 93 01 fd a4 bd 27 88 47 bc 49 7a 00 3d c6 9a c0 9e 43 3f 0f 93 96 60 60 86 7e d1 c6 04 1a 87 1a 37 ed 39 64 a4 9d 59 39 01 47 c0 14 69 26 2d 40 8d 81 76 64 56 2c 4d 43 28 73 e4 7b 38 95 a5 0e 0f 29 20 a0 a0 a0 3b 20 97 60 a2 43 47 7c 81 34 41 41 77 8a 53 5e 70 31 97 95 af 34 87 8f 94 Data Ascii: CUq@XF;sf1G^qq21vHU5Ga&1+N\b;\g5x'jc61shh1]&uNOg'S_7es}i! uXhhAE'GIz=C?``~79dY9Gi&-@vdV,MC(s{8) ; `CG\|4AAwS^p14
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 29 de 50 1e ed 37 05 21 29 db 0a e7 34 a5 87 6b 68 4e 5c ee e3 30 51 e0 4f 60 b1 4c 3c 41 45 07 81 0e 03 19 9f 00 23 f9 10 7c 5c d4 37 da d1 78 5a e9 11 6e f2 9d 90 0b 4d 46 fc 04 27 1d 00 0a 1e 26 e7 66 c9 0e 16 03 1c 86 76 23 75 49 73 ad 46 e5 21 87 80 8c 94 11 84 4b 30 cf 35 fa 04 f0 12 10 94 2f c8 a7 0b 52 04 07 1d ee cd e0 b3 ce f2 85 29 85 cf fa f3 33 11 1d 48 06 74 84 30 03 f9 04 e0 90 1f 66 b8 4d 5d c6 31 c7 fc e4 3c cc b8 80 92 0e 21 5d 3b 91 b1 08 62 26 20 28 df c3 ed 79 7e 06 a1 a0 60 2a eb 70 90 71 e6 7a 2a eb a0 13 5f 79 82 a3 b3 a3 3c f3 61 5b 18 eb b5 da c8 15 bf e4 63 01 30 57 07 aa d5 06 4f f9 a5 1d 0d 9d c9 87 f6 9f 09 02 ea 22 90 31 ce d7 93 c9 ae cc 80 31 eb 6d f4 1c c5 61 e2 7b f5 00 26 c0 bb d1 00 dc 0a f4 5b 87 f6 df 6a dc 17 68 00 Data Ascii: )P7!)4khN\0QO`L<AE#\|\7xZnMF'&fv#uIsF!K05/R)3Ht0fM]1<!];b& (y~`pqz_y<a[c0WO"11ma{&[jh
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 24 4d 6e 20 dc 14 63 98 62 6c 53 d4 9d a6 1d b4 a3 05 84 15 16 44 95 9f 9d c0 b0 b4 29 eb 0e 55 01 bd 94 55 bc c1 3b 5d 4f 5a 9b 9e cf 3f bf 6b e4 55 e5 93 5e 9f 19 c5 8d 00 71 19 c7 44 9f 9b ff d6 d1 02 74 93 5f 20 9f ce fa 13 fc ab a3 4d e7 d0 8f b4 fa 28 1a 80 5c b0 51 17 b4 c3 3c b8 09 00 6c 5e 03 00 5e 3b 88 09 f0 3e 34 fd 76 01 00 b7 00 00 d7 db fc e9 cf 6d 56 00 f0 3c 17 81 5c 22 ef da 31 b4 ef 80 d6 7d d4 e5 2c 40 01 c0 86 b7 d3 02 81 a1 19 48 7c 40 69 19 02 12 16 d8 73 8d bf 80 81 6e 36 9c 35 ff b2 39 f0 22 0d 40 41 40 ea f9 c5 20 68 00 fa 39 80 5d 00 ce 13 00 c0 7d d2 00 8c cd b3 83 38 40 5d 0b ae 24 d0 02 70 51 9e 60 5d eb 52 8f 04 ad 48 5f a4 95 95 20 61 36 ed 2d 36 e2 ed e5 54 46 1a 82 45 5a a7 7f c9 a2 23 7f ad 8b ce fa eb bc 7f f9 9b d2 f9 Data Ascii: $Mn cblSD)UU;]OZ?kU^qDt_ M(\Q<l^^;>4vmV<\"1},@H\|@isn659"@A@ h9]}8@]$pQ`]RH_ a6-6TFEZ#
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 01 1d 0c ba 29 f0 62 f0 d7 0e 01 8b 70 06 80 82 84 0e 01 43 03 30 2e 00 01 52 b6 69 00 36 87 ba e8 0f 0d c0 0c e9 0a 68 07 84 29 b4 f2 7c e3 21 30 d3 d2 b0 69 e5 25 88 97 a1 9f 4c 79 13 d4 2b 34 ff 32 d8 72 33 5f b4 fd 96 98 02 e7 3e 7d a3 9b db e9 f4 df 91 7f 5a 47 ad b5 d9 59 7f fe 6e 2d 7a 37 3a ef 5f 96 49 7c 77 3a df 9f 90 03 df ef b6 ef 6c 7c af 91 0d df f0 f6 f4 76 d9 75 be bf f1 cf 87 2c 93 d6 6f 5c fa 87 c4 1f c9 ef df ff 78 ff ff 62 43 c5 59 7e 98 f9 26 4d c0 00 7c 4b e3 a1 25 d8 9e d7 0e 02 55 b7 54 3e 6c d3 68 14 08 c6 68 a3 a5 cd b4 ce 13 73 d8 e2 00 61 96 4d 6d 80 28 69 5f 09 fe 8d 03 24 04 05 05 ab a6 04 07 49 73 78 25 48 c5 26 48 e0 61 6a 66 36 20 85 e2 38 07 16 6c 40 32 2c 9a c1 54 44 9b f8 99 32 80 82 be 05 26 26 00 33 ea 5f e3 11 60 ca Data Ascii: )bpC0.Ri6h)\|!0i%Ly+42r3_>}ZGYn-z7:_I\|w:l\|vu,o\xbCY~&M\|K%UT>lhhsaMm(i_$Isx%H&Hajf6 8l@2,TD2&&3_`
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 9d a1 93 00 cb 2e d7 00 14 08 f4 8b 40 fa 0f 64 13 e0 b4 79 4e 1b c7 d8 10 0a ba 24 f0 92 41 60 02 33 ca 6f df 24 e5 8d 67 06 7a ee 0b e8 15 9a 7e 8b cd 36 8b 76 0b a0 d1 e9 df 65 d8 91 bf 43 e4 ce fa cb d0 bd f3 fe e5 6f 8b af 89 ce f7 a7 78 3f 3a df 5f de 91 b4 1e 0a 5f bf 39 4a f3 df 1e f9 19 0a ff cb f9 fd d9 3b f4 af af d3 ea cb 20 b0 f0 05 09 dd 65 28 b8 d8 6c 38 97 1b af fd 9f 6c 28 a7 ac 17 b3 99 e3 5d 27 6c 80 ff 6e 6b 13 76 f9 f2 55 3b 71 e2 34 1b a1 39 eb 1f 18 b6 23 47 4f d8 d5 ab d7 fc 26 d2 33 67 ce db e5 2b dd 76 f4 f8 09 6e 22 bd e4 69 47 8e 1d f7 34 69 1e 5d a2 6e 57 d7 19 36 dc 6c be b8 25 f1 e4 a9 d3 b6 65 eb 76 db b6 6d 07 97 18 f4 d8 d9 f3 67 ed f0 d1 c3 6c 68 a7 fc 86 d2 7d 07 f9 03 9e ff d0 6b e3 5e e6 d0 67 6d dc 43 eb 46 1b db bc Data Ascii: .@dyN$A`3o$gz~6veCox?:__9J; e(l8l(]'lnkvU;q49#GO&3g+vn"iG4i]nW6l%evmglh}k^gmCF
2024-04-25 19:25:33 UTC	1369	IN	Data Raw: 26 cd a1 9f 7c 9c c3 42 bf 04 04 70 98 2e 03 71 9f 1b 80 bd 9c e6 ef 73 d2 5c 39 7f 90 73 00 eb 53 68 7a 4e 00 fd 4a dd ae f9 57 c7 cc b7 0a 64 ab 72 0e e0 02 a6 b7 75 a0 5f 73 12 ed 3f 34 00 65 22 9c 35 00 65 02 2c 00 d8 00 00 d6 ba f7 73 d6 df 0e 6b 70 09 48 33 01 c0 05 6e 01 ae 9e 15 00 c4 34 b8 fb 50 01 00 6b 02 80 49 eb af 21 98 07 f0 f3 0b 41 1c fa 01 f1 12 0c 8c 4b 42 04 ff 54 26 40 60 a1 f9 97 4d 82 3d 8f 3a c5 79 80 d2 00 0c 00 68 0e 03 bb 8a 5b 80 9b 23 c7 01 8f 00 c0 b8 e1 b7 b5 71 6a 6d 2c d9 34 01 a4 72 3c 7c 9d e3 27 6d 92 56 f9 62 f3 d5 b6 19 fb 4e 71 a1 45 68 50 e4 36 fc c2 11 df a0 d1 06 a6 6d 5e b7 38 f3 2e 36 6e ed 65 3b fd 77 e4 9f d7 43 67 fd e9 9d eb bc 7f 9d ef 4f e7 fb fb a7 fc fb f3 7f ac fc 77 c5 05 1f c3 85 36 60 eb 4c 40 c1 bd Data Ascii: &\|Bp.qs\9sShzNJWdru_s?4e"5e,skpH3n4PkI!AKBT&@`M=:yh[#qjm,4r<\|'mVbNqEhP6m^8.6ne;wCgOw6`L@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49878	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:33 UTC	559	OUT	GET /usersync.min.js?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:33 UTC	352	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:33 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 13130 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Wed, 24 Apr 2024 17:55:32 GMT ETag: W/"334a-18f113f9bb2"
2024-04-25 19:25:33 UTC	13130	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 75 73 65 72 73 79 6e 63 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 33 34 3a 28 65 2c 6e 2c 74 29 3d 3e 7b 76 61 72 20 69 2c 6f 2c 72 3b 76 6f 69 64 20 30 3d 3d 3d 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 69 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 6e 3d 7b 7d 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 6e 5b 69 5d 3d 74 5b 69 5d 7d 72 65 74 75 72 Data Ascii: /! For license information please see usersync.min.js.LICENSE.txt /(()=>{var e={34:(e,n,t)=>{var i,o,r;void 0===(o="function"==typeof(i=r=function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var i in t)n[i]=t[i]}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49883	108.139.23.251	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:33 UTC	527	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:33 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 45911 Connection: close Server: CloudFront Date: Thu, 25 Apr 2024 19:25:33 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: private, s-maxage=0, max-age=600 Set-Cookie: X-AB=24b5be485c2747719f2dadcc8288a94b;max-age=86400;expires=Fri, 26 Apr 2024 19:25:33 GMT;Path=/scevent.min.js;Secure;SameSite=None X-Cache: Miss from cloudfront Via: 1.1 8774711cd9fd32ceec95cdb13439f30c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: O3XkfplaFOAJ-SnZTc5Yf6sqSi9CzgYmf1f5U5zm99qLtj2G3nB6yQ==
2024-04-25 19:25:33 UTC	15722	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-04-25 19:25:33 UTC	16384	IN	Data Raw: 74 29 7d 63 61 74 63 68 28 74 29 7b 44 74 28 22 52 44 4f 22 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 29 7b 76 61 72 20 74 3b 64 6f 7b 74 3d 22 73 6e 61 70 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 37 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 77 68 69 6c 65 28 73 74 26 26 73 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 44 72 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 78 72 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 28 74 29 7c 7c 61 28 74 29 7c Data Ascii: t)}catch(t){Dt("RDO",t)}}function wr(){var t;do{t="snap"+Math.floor(1e7*Math.random())}while(st&&st.getElementById(t));return t}var Dr=m((function(){return JSON}));function xr(t){return void 0===t\|\|null==t\|\|function(t){return"boolean"==typeof t}(t)\|\|a(t)\|
2024-04-25 19:25:33 UTC	12666	IN	Data Raw: 20 6e 3d 74 5b 30 5d 2c 72 3d 22 22 2c 65 3d 31 3b 65 3c 44 28 74 29 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 6f 3d 6e 75 6c 6c 21 3d 41 69 5b 69 5d 3f 41 69 5b 69 5d 3a 22 22 3b 69 66 28 6f 3d 3d 3d 72 3f 6f 3d 22 22 3a 72 3d 6f 2c 22 37 22 21 3d 3d 6f 26 26 22 38 22 21 3d 3d 6f 7c 7c 28 6f 3d 22 22 29 2c 34 3d 3d 3d 44 28 6e 2b 3d 6f 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6e 5b 30 5d 2b 28 6e 75 6c 6c 21 3d 6e 5b 31 5d 3f 6e 5b 31 5d 3a 22 30 22 29 2b 28 6e 75 6c 6c 21 3d 6e 5b 32 5d 3f 6e 5b 32 5d 3a 22 30 22 29 2b 28 6e 75 6c 6c 21 3d 6e 5b 33 5d 3f 6e 5b 33 5d 3a 22 30 22 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 44 74 28 22 53 58 22 2c 74 29 2c 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 69 28 74 2c 6e 29 7b 66 6f 72 28 76 Data Ascii: n=t[0],r="",e=1;e<D(t);e++){var i=t[e],o=null!=Ai[i]?Ai[i]:"";if(o===r?o="":r=o,"7"!==o&&"8"!==o\|\|(o=""),4===D(n+=o))break}return n[0]+(null!=n[1]?n[1]:"0")+(null!=n[2]?n[2]:"0")+(null!=n[3]?n[3]:"0")}catch(t){return Dt("SX",t),""}}function Pi(t,n){for(v
2024-04-25 19:25:33 UTC	1139	IN	Data Raw: 2d 33 36 65 35 26 26 50 74 28 72 29 7d 29 29 3b 76 61 72 20 74 3d 54 6f 28 50 3f 50 2e 68 72 65 66 3a 22 22 29 7c 7c 54 6f 28 76 74 28 29 29 3b 74 26 26 45 6f 28 74 29 7d 28 29 3b 76 61 72 20 62 6f 3d 70 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 43 6f 28 29 7b 76 61 72 20 74 3d 70 74 28 29 3b 74 21 3d 3d 62 6f 26 26 74 26 26 28 62 6f 3d 74 2c 5f 65 2e 73 65 6e 64 28 74 29 29 7d 45 26 26 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 4f 74 28 54 2c 22 68 61 73 68 63 68 61 6e 67 65 22 2c 43 6f 29 2c 4f 74 28 54 2c 22 6c 6f 63 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 43 6f 29 2c 4f 74 28 54 2c 22 70 6f 70 73 74 61 74 65 22 2c 43 6f 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 43 6f 2c 32 35 30 29 3b 76 61 72 20 41 6f 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: -36e5&&Pt(r)}));var t=To(P?P.href:"")\|\|To(vt());t&&Eo(t)}();var bo=pt();function Co(){var t=pt();t!==bo&&t&&(bo=t,_e.send(t))}E&&location.href,Ot(T,"hashchange",Co),Ot(T,"locationchange",Co),Ot(T,"popstate",Co),setInterval(Co,250);var Ao=m((function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49886	31.13.88.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:33 UTC	537	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:33 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-25 19:25:33 UTC	1496	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-25 19:25:33 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-25 19:25:34 UTC	14842	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d Data Ascii: ll;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 Data Ascii: PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: Registered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnP
2024-04-25 19:25:34 UTC	1541	IN	Data Raw: 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: s:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return functi
2024-04-25 19:25:34 UTC	14843	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 Data Ascii: tion(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEv
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 Data Ascii: &b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49887	151.101.12.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:33 UTC	522	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:34 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4778 ETag: "a2a93a7555e1e5d3d59e9ac8d0f42647" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Thu, 25 Apr 2024 19:25:34 GMT
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 6d 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 Data Ascii: m()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.oner
2024-04-25 19:25:34 UTC	644	IN	Data Raw: 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 31 62 37 66 33 64 30 65 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f 6e Data Ascii: n(n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.1b7f3d0e.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Disposition

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49888	99.84.108.76	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	570	OUT	GET /v2/3819/wr-4d84483e4ddfd7d3afb00685f0750c13.js HTTP/1.1 Host: widget.wickedreports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:34 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 471 Connection: close Date: Thu, 25 Apr 2024 19:25:35 GMT Last-Modified: Wed, 14 Jul 2021 18:57:06 GMT ETag: "b20499f439a2f3dd4f591aabf183c0d6" Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 336e3c5e609a1115b5bba6aaccd0ce62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 X-Amz-Cf-Id: 2-a64YsY0dsgSwnb6RzHw2-4L2WKjerzlgCVFnEsnkAPUiWUn8f_hg==
2024-04-25 19:25:34 UTC	471	IN	Data Raw: 3b 77 69 6e 64 6f 77 2e 77 72 57 69 64 67 65 74 53 65 74 74 69 6e 67 73 3d 77 69 6e 64 6f 77 2e 77 72 57 69 64 67 65 74 53 65 74 74 69 6e 67 73 7c 7c 7b 27 63 6c 69 63 6b 62 61 6e 6b 27 3a 21 31 2c 27 68 75 62 73 70 6f 74 27 3a 21 31 2c 27 6c 65 67 61 63 79 42 72 6f 77 73 65 72 73 27 3a 21 31 2c 27 67 43 6c 69 63 6b 27 3a 21 30 2c 27 6f 72 67 61 6e 69 63 27 3a 21 30 2c 27 6d 69 6e 54 69 6d 65 4d 69 6e 75 74 65 73 27 3a 32 38 38 30 2c 27 6f 72 67 61 6e 69 63 44 6f 6d 61 69 6e 73 27 3a 5b 27 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 74 68 72 69 76 65 63 61 72 74 2e 63 6f 6d 27 2c 27 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 27 5d 2c 27 70 61 79 70 61 6c 45 43 27 3a 21 31 2c 27 66 61 63 65 62 6f 6f 6b 4f 43 54 27 3a 21 31 2c 27 63 49 64 27 3a 33 38 31 39 Data Ascii: ;window.wrWidgetSettings=window.wrWidgetSettings\|\|{'clickbank':!1,'hubspot':!1,'legacyBrowsers':!1,'gClick':!0,'organic':!0,'minTimeMinutes':2880,'organicDomains':['earnandexcel.thrivecart.com','earnandexcel.com'],'paypalEC':!1,'facebookOCT':!1,'cId':3819

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49889	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	1221	OUT	GET /wp-includes/js/thickbox/loadingAnimation.gif HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _ga=GA1.2.1040263935.1714073125; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _schn1=3drr
2024-04-25 19:25:34 UTC	916	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:34 GMT Content-Type: image/gif Content-Length: 15238 Connection: close CF-Ray: 87a0b8414ccd44e5-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "50986f2e-3b86" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 06 Nov 2012 02:00:14 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n0wrEWeEL3GVL5JhEfP%2FJ1EfT5%2BXEqgLuAL9U%2F9q%2BR6uLkeEYWjKM2vrVulT0YaI%2FhnW9Og3%2Beqow%2FI7GoS4YnMTSId9nJf5O5x8Uz451Hhn%2BWP6PBnAae7M%2FWlz9JLxXV4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:34 UTC	453	IN	Data Raw: 47 49 46 38 39 61 a0 01 1a 00 c4 00 00 fb fb fb f7 f7 f7 f3 f3 f3 ef ef ef ea ea ea e6 e6 e6 e2 e2 e2 de de de da da da d6 d6 d6 d2 d2 d2 ce ce ce ca ca ca c5 c5 c5 c1 c1 c1 bd bd bd b9 b9 b9 b5 b5 b5 b1 b1 b1 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 0a 00 13 00 2c 00 00 00 00 a0 01 1a 00 00 05 ff e0 d1 44 52 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff a7 07 01 c0 20 01 8f c8 a4 72 c9 6c 3a 9f 50 27 a4 40 8a 30 16 d8 ac 16 db 28 45 20 e0 b0 58 5c 7a 6c cf 58 86 69 cc 0e 97 d1 e7 ae e4 db 66 bf e1 5a 75 a9 6e 97 98 f1 59 72 74 7c 6e 7e 80 59 7a 12 84 64 86 87 0b 82 8b 85 7f 87 89 91 60 77 87 90 96 Data Ascii: GIF89a!NETSCAPE2.0!,DRihlp,tmx\| rl:P'@0(E X\zlXifZunYrt\|n~Yzd`w
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: 4c 83 ab 58 b3 66 0d 33 b5 6b 54 06 60 1c 68 1d 7b 95 ab d7 ae 55 21 90 25 6b f6 ac 54 b0 20 d7 6a 6d eb 16 6a 5a b9 73 c1 d4 7d 1b 16 2f 56 ba 75 ef fa 2d ab 77 2f 54 b8 62 07 03 76 2b 58 71 61 c3 88 07 37 58 7c b6 b1 5f ca 5e 2d e3 05 7c c2 80 e7 cf a0 3d 1f b0 e5 80 81 e9 d3 a8 51 db 5a 10 ba b5 e8 5b a9 63 9f 5e ed ba f5 e8 07 a5 65 c7 a6 5d 1b f4 ed 07 ba 77 9b e9 ed 9b 74 f0 d4 bc 89 1b f8 7d 5c f5 70 e5 cb 8d 37 37 9d 9c 38 f3 e9 0c aa f7 be 9d 7b ba f6 da d7 bd 3f 57 ce 1d 7b f6 f1 d6 a5 8b 67 0d fa 44 81 f7 f0 e3 bf 6f 60 eb 8a 23 07 b8 0d c8 df ff 5e 41 7d 47 0b e0 e7 80 7e fc c9 47 1f 70 00 0a 48 60 ff 81 f0 f9 87 e0 7d f9 31 18 df 81 f6 1d a2 a0 84 0d fe 07 e1 80 18 ce a7 a1 85 11 76 e8 60 85 80 5c d8 21 85 09 86 88 e1 88 29 72 78 e2 87 25 aa Data Ascii: LXf3kT`h{U!%kT jmjZs}/Vu-w/Tbv+Xqa7X\|_^-\|=QZ[c^e]wt}\p778{?W{gDo`#^A}G~GpH`}1v`\!)rx%
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef 9f 91 86 41 f1 2b 1a 8f c8 a4 72 c9 6c 3a 9f 26 88 44 f2 58 2d ae 8b c6 b4 05 e9 4a a9 2c 2c 63 2a 61 79 bf 55 15 36 bb 35 7b a7 69 f5 75 dc 56 9d e1 56 ac b6 ec 9e a0 c3 73 64 7d 7f 72 57 7b 5c 6f 60 79 0b 74 7c 76 89 71 28 6b 87 83 78 8b 8d 95 8a 29 93 75 8f 7e 96 9b 7a 9d 29 77 27 0f 11 12 11 2c 0a ac 44 a9 2c 0f b1 a7 af 2b ad ae 8e 29 b2 b3 aa b5 ad 13 b4 2a ba a8 bc 2a b6 bf b8 28 c2 c0 29 c6 cb c9 b2 c3 ab be a3 a6 d0 ce 27 cd c4 b9 d6 da 28 cd c8 d5 b1 d1 bd ac bf dd e1 bb d2 e5 d4 26 ca e7 26 d9 b0 dc ea ae ef 25 ee 26 0e 11 41 2c 09 fe 0a fb 20 b0 70 40 50 1f bf 15 fe fc 41 88 20 70 45 41 83 0d fa fd 0b 38 b0 e0 be 88 08 13 2e 6c a8 e2 e1 45 89 09 00 32 ac 38 01 22 c8 04 1b 49 ff 9a cc 18 92 Data Ascii: hlp,tmx\|A+rl:&DX-J,,cayU65{iuVVsd}rW{\o`yt\|vq(kx)u~z)w',D,+)*()'(&&%&A, p@PA pEA8.lE28"I
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: 5d f5 40 f7 3a c6 6d 2e 95 f5 52 e3 dc ee a8 3c 57 9e 0d 80 f3 b3 e5 f7 48 17 4a c0 c1 52 97 41 64 e5 ec 80 09 47 5e 66 ee 8d c8 ab 64 32 07 69 49 65 ea f1 92 9b 5c 24 d8 a2 09 4d 4a 32 73 99 9a b4 66 36 9b 79 cd 67 3a b3 7a 9c 9c e6 0c 66 d9 4b 54 e2 4f 95 a3 13 66 2e bf f8 cb f4 91 f3 98 a2 3c 67 2c df f8 ce d0 21 73 7d f2 24 a6 1f d5 39 3d 7d d6 11 97 fd 74 27 28 e1 59 4a 39 ae ce 9f 8d 4b db 36 b1 89 48 4c 2a b4 a1 d4 fc e6 e8 1e 8a bd 44 4a b2 9b 16 3c 67 23 77 19 ce e7 05 8d 92 a2 37 f4 a4 23 a5 e9 d1 1a 36 71 a3 41 04 e9 0e 71 87 45 83 6a 91 8e f8 3c e9 15 37 67 4a 27 c2 f4 7e 32 35 a3 4b d1 38 d3 5b c2 b2 a7 f0 ab 69 1a ef 89 53 2b ea 94 96 3c 65 a7 3c 81 fa 3f a1 32 d5 88 4e ad 9f 37 31 3a d2 6a 72 73 a1 53 c5 2a 38 49 8a d2 62 76 b4 ab 7e fc aa Data Ascii: ]@:m.R<WHJRAdG^fd2iIe\$MJ2sf6yg:zfKTOf.<g,!s}$9=}t'(YJ9K6HLDJ<g#w7#6qAqEj<7gJ'~25K8[iS+<e<?2N71:jrsS8Ibv~
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: 48 a3 3d 41 d7 3c 93 1d ba 08 b8 4b 3d b7 ec 50 c3 fe bb e9 ab e7 5e fa ee b7 8f 6e 7c ea c4 bf be 7c eb cd cf 2e fc b6 6a eb 48 b9 e8 00 04 e0 79 ec 07 5c cf bb e5 ec 76 cf f8 df da 2b 5e ba f7 c9 67 8f 3c b7 e2 d7 4d fe f6 c3 a3 6f ed fa 30 cb 9f 2e fc d4 57 6c bf fa b6 b3 bf 7f f9 0e 63 de ff e8 a7 bf f1 55 2e 7b f8 4b 5b 01 dd 77 40 00 86 cf 5d cf fb 9b d8 22 38 3c 6c f9 0e 7b b4 d3 1d 05 31 68 b2 0b a6 2d 66 1e 4c 5f 06 8f b7 c1 ef 2d 2d 84 5a 0b 61 ef 6a a7 c2 b3 a1 50 6d 2d 34 5a 09 2b 06 c3 b0 75 90 85 a7 9b 61 0a 6d a8 c3 1a ae ec 86 1a 6c 8e 01 b1 e7 40 84 b5 2f 6c 55 b8 dc 02 f7 96 40 1a 2e 71 65 49 7c e0 10 4d 58 c4 f3 4d 51 84 51 34 e2 ff 9a e8 bf 2b 8a 2b 8b 56 64 20 11 b9 58 3f ff 2f 2e 0b 8c 02 34 23 02 cd 97 46 31 52 91 8c 4f 14 81 d9 64 Data Ascii: H=A<K=P^n\|\|.jHy\v+^g<Mo0.WlcU.{K[w@]"8<l{1h-fL_--ZajPm-4Z+uaml@/lU@.qeI\|MXMQQ4++Vd X?/.4#F1ROd
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: 2b b3 cd da 8a ab ff ae 24 4c 3b 6b ad a9 3e 1b ad 0f da fa fa ab b5 c9 4a 4b ec b6 d5 76 2b ac b9 cb a2 9b 2e b2 d8 8e 10 2e b7 c1 42 ab 6c af f4 7a ab ac 08 a3 8e 7a ad b1 aa 26 50 2e b8 fd fe 4b ef 99 c3 fa 3b f0 b8 a9 0a 1c 2f bf 05 2f 3c 03 b0 08 9b ab f0 c3 13 00 eb 70 c2 07 18 9c 2e 00 15 13 7c 31 c0 0d 4b bc 6b c4 18 53 ec 02 c7 1e 33 0c c0 c6 16 77 6c 32 09 2a e7 76 f2 c8 f4 c2 2c b2 cc 29 07 3c b3 bc b0 42 dc ae b8 2c 38 bb ae c8 f8 72 0b ef bd d4 4e ac aa be ec 26 fd 6e cb 33 cc fb 31 d4 48 37 ed 34 00 4b 47 ad 35 cd 4f 1f 8d 83 d5 53 ff 2c b4 d4 5b d7 fb ed d8 e7 12 5d 34 b9 18 93 9d 36 d6 6c 0f 9d af d8 55 07 dd 2f cf 24 83 bc 72 cc 54 bf 9d 6a c8 6c e3 fc 31 e1 79 1b ee 32 e2 37 f3 7d f0 df 3b 07 0e f6 e0 90 17 ee f8 e1 95 27 7e f9 e2 99 37 Data Ascii: +$L;k>JKv+..Blzz&P.K;//<p.\|1KkS3wl2*v,)<B,8rN&n31H74KG5OS,[]46lU/$rTjl1y27};'~7
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: ad 1c 46 1a 07 d6 57 14 58 5f a0 81 ea 50 e8 cb a3 60 5f 60 c2 7b 3f 0b e2 b3 a0 ef 7e 7b 89 f3 e9 a9 40 9f 7d fe 91 00 a0 7c 27 f0 77 df ff 22 56 e8 a7 1e 7b 04 be d1 60 80 29 28 58 e0 04 07 ee 07 e1 82 28 64 f8 e0 7a fd 49 98 1f 85 f3 6d 78 a1 87 02 b2 17 22 7c 24 26 a8 22 87 2f 9c e7 80 2b 2a 10 60 23 01 06 d4 d3 82 8c 34 d6 68 63 01 f5 1c f5 9f 66 f9 cd b8 c2 8d 38 ea 28 62 3d 3d a6 70 23 90 0e 08 69 20 91 4c 1e 79 63 8e 08 72 42 a5 91 56 12 00 a5 94 18 6e d9 e4 09 48 62 b9 a3 98 2c 3c 19 e4 92 5c 3a 79 a5 92 f0 b5 e9 a6 97 6b c6 39 a6 09 65 c2 89 5f 95 3e da 68 e6 0c 86 44 99 e6 8d 21 65 39 a4 15 0d 08 da 25 01 85 8a 98 28 98 48 36 1a ca a3 83 da 28 29 7e 94 2e 7a 29 83 58 28 da 27 a3 7a 76 78 87 a7 73 82 6a e8 94 88 92 8a 42 a4 a1 6a 99 2a a4 84 b6 Data Ascii: FWX_P`_`{?~{@}\|'w"V{`)(X(dzImx"\|$&"/+`#4hcf8(b==p#i LycrBVnHb,<\:yk9e_>hD!e9%(H6()~.z)X('zvxsjBj
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: c1 2a bf b9 2a bb b4 a6 28 c7 c5 29 ca c8 29 ce b0 c3 bd 13 d4 c2 b1 c4 b6 ab c0 d5 db d7 d9 c9 d6 cf cd de d2 28 d1 cc 27 e3 d0 e5 dd aa df da bc e6 10 11 10 2c 0e 4f 0e 11 11 0d 2c 12 08 54 e0 2f df 8a 7d 4e fc 01 5c 21 50 e0 3d 83 2a 10 f6 fb 17 70 60 41 7d fc 14 56 74 88 0f 63 42 8a 0c 2d 76 3c 98 11 a4 8a 86 09 1e ff 7a 9c b8 f0 a4 48 88 29 24 6a 0c c9 11 26 0a 99 26 53 34 24 38 32 62 c9 96 3a 1b aa 24 f9 11 28 8a 9d 17 89 b2 dc c8 d3 26 15 16 0d a2 36 a8 c2 02 81 55 04 68 6c 9e 90 3a f5 e9 8a ab 58 bd aa e0 4a f5 eb d5 ac 50 a5 96 55 01 16 ed 0a b2 62 53 b4 8d 8b 02 ae 56 13 73 ef 96 b0 5b f5 2c dd ad 6a ff e2 f5 ab 97 04 5f b3 56 dd 8e 0d 5c 78 42 de b4 51 d7 ca 25 0c b9 6b e3 c7 ed 46 9d 60 c0 99 81 aa 05 2c 0c 88 3e a0 ea c9 8a ce 9e 1f 80 5e 21 Data Ascii: *())(',O,T/}N\!P=p`A}VtcB-v<zH)$j&&S4$82b:$(&6Uhl:XJPUbSVs[,j_V\xBQ%kF`,>^!
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: 64 12 1d 8a bb 84 32 6f a1 12 65 20 45 63 08 51 8c 5a 77 f4 6e 1b a5 a3 23 8d d6 b2 2e a6 73 80 4c f4 62 2b b5 28 3e 58 b2 b4 9b a0 7c a9 0e d7 58 45 95 c6 d4 8b 2e b5 69 10 ad 87 53 7f 86 f1 a4 f6 bb 29 50 69 6a d2 77 a2 54 6c 0c 95 a3 47 47 1a d1 8f 26 72 a9 1d 2d 68 30 89 39 d5 81 56 15 a1 4c 85 2a 41 ad a9 50 a9 22 13 ab 51 6d 82 58 c7 4a d6 b2 9a f5 ac 68 4d ab 5a d7 ca d6 b6 ba f5 ad 70 8d 6b 40 0e 10 02 00 21 f9 04 05 0a 00 13 00 2c 00 00 00 00 a0 01 1a 00 00 05 ff 60 f1 48 53 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff a6 07 41 b0 80 90 80 c8 a4 72 c9 6c 3a 9f d0 a8 13 b2 98 90 1a 8b 05 43 c2 75 41 be dc 47 2b bb 68 74 bd 60 89 78 ac e5 1e 59 5f ab 9a 5d 3e b7 e2 61 57 76 6b 5f e1 e7 2c 64 66 6f 70 69 6b 81 6d 7d 2a 7f 87 2a 82 8a Data Ascii: d2oe EcQZwn#.sLb+(>X\|XE.iS)PijwTlGG&r-h09VLAP"QmXJhMZpk@!,`HSihlp,tmx\|Arl:CuAG+ht`xY_]>aWvk_,dfopikm}*
2024-04-25 19:25:34 UTC	1369	IN	Data Raw: 5e 08 af 2c 78 ef 7f 02 eb 9f d5 70 28 31 1b ba d0 7e dc 8b e1 0f f7 c7 3d 00 f8 30 68 34 c4 de f8 b4 07 c4 02 1e 91 7c 44 0c 9f 0e 83 97 44 23 9e af 7e 51 84 e1 14 79 86 45 00 8e 6f 46 99 61 5d e9 88 d7 40 ff e3 2d f0 83 c2 5b 1b 19 25 68 c6 df c1 4e 75 17 0c 5e 1b 91 17 47 2e a6 b1 71 74 44 e3 1c d7 68 b5 3b 4a 2e 8f 6f d4 5d 1d 11 e8 47 0c f2 51 8e bd 3b e3 09 c0 08 b9 c2 6d 11 81 8c 73 de fb 08 57 b7 47 8a 2d 71 57 8c 24 06 0d e7 36 4d de 6f 92 9e 2c 20 27 e9 17 ca f0 81 12 7c 08 5b 62 27 93 88 bf bd a1 72 72 15 8b 62 2a e7 c5 48 de 8d 71 90 16 2c dd e9 8a 97 48 68 1d d2 8e 73 dc 65 19 7b 09 48 d2 81 4c 98 6c 24 e6 2f 09 19 4c 5c 72 0d 8e 7a 24 26 32 fb b8 47 67 16 b2 88 c4 ab e5 2a 9b 38 cb 58 9e ed 94 dc 84 65 23 05 06 4e 59 8a f3 6e e1 ec 9e 37 2b Data Ascii: ^,xp(1~=0h4\|DD#~QyEoFa]@-[%hNu^G.qtDh;J.o]GQ;msWG-qW$6Mo, '\|[b'rrbHq,Hhse{HLl$/L\rz$&2Gg8Xe#NYn7+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49891	18.64.236.18	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	548	OUT	GET /modules.25f289cf2c430c5f1dfb.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:34 UTC	718	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225866 Connection: close Date: Thu, 25 Apr 2024 13:00:16 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "b89693e18ed17f9b649ddaf638e17a57" Last-Modified: Thu, 25 Apr 2024 12:59:19 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f48cffdc03f0808f9e716538a6340862.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P1 X-Amz-Cf-Id: krMhOva0WKq9bG6aSTYHnPxnxRmSoEYI2u_DG0KJA4o-c2RjZ0NK7Q== Age: 23118
2024-04-25 19:25:34 UTC	15666	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 32 35 66 32 38 39 63 66 32 63 34 33 30 63 35 66 31 64 66 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.25f289cf2c430c5f1dfb.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 6e 55 73 65 72 49 64 28 21 30 29 3b 72 65 74 75 72 6e 28 70 61 72 73 65 49 6e 74 28 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 6c 69 63 65 28 2d 31 30 29 29 7c 7c 22 22 2c 31 36 29 2b 31 29 2f 4d 61 74 68 2e 70 6f 77 28 32 2c 34 30 29 7d 2c 63 6f 6d 70 61 72 65 52 61 74 69 6f 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 73 2e 67 65 74 41 73 4e 75 6d 62 65 72 28 29 2a 28 74 3f 31 30 30 3a 31 29 3c 3d 65 7d 29 2c 22 69 64 65 6e 74 69 66 69 65 72 2e 63 6f 6d 70 61 72 65 52 61 74 69 6f 22 29 7d 2c 63 3d 6e 28 34 38 30 38 29 2c 75 3d 5b 22 61 66 22 2c 22 61 72 22 2c 22 62 67 22 2c 22 63 61 22 2c 22 63 73 22 2c 22 63 79 22 2c 22 64 61 22 2c 22 64 65 22 2c 22 65 6c 22 2c 22 65 6e 22 2c 22 Data Ascii: nUserId(!0);return(parseInt((null==e?void 0:e.slice(-10))\|\|"",16)+1)/Math.pow(2,40)},compareRatio:hj.tryCatch((function(e,t){return s.getAsNumber()*(t?100:1)<=e}),"identifier.compareRatio")},c=n(4808),u=["af","ar","bg","ca","cs","cy","da","de","el","en","
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 6f 6e 5f 74 69 6d 65 5f 66 72 6f 6d 5f 72 65 6e 64 65 72 5f 6d 73 3a 6e 2e 66 72 6f 6d 52 65 6e 64 65 72 7d 29 7d 29 2c 22 64 61 74 61 22 29 2c 74 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 72 79 7b 68 6a 2e 72 65 71 75 65 73 74 3d 73 28 29 7d 63 61 74 63 68 28 65 29 7b 68 6a 2e 65 78 63 65 70 74 69 6f 6e 73 2e 6c 6f 67 28 65 2c 22 68 6a 2e 72 65 71 75 65 73 74 22 29 7d 7d 7d 2c 31 36 34 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 49 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 4a 4a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 63 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 Data Ascii: on_time_from_render_ms:n.fromRender})}),"data"),t};function c(){try{hj.request=s()}catch(e){hj.exceptions.log(e,"hj.request")}}},1646:function(e,t,n){"use strict";n.d(t,{IN:function(){return i},JJ:function(){return r},cr:function(){return o}});var r=funct
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 22 2b 65 2e 73 6c 69 63 65 28 31 29 3a 65 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 22 2d 22 21 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 65 2e 63 68 61 72 41 74 28 30 29 2c 6e 3d 65 2e 63 68 61 72 41 74 28 31 29 3b 72 65 74 75 72 6e 2f 5c 64 2f 2e 74 65 73 74 28 6e 29 3f 74 2b 22 5c 5c 33 22 2b 6e 2b 22 20 22 2b 65 2e 73 6c 69 63 65 28 32 29 3a 65 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 22 2d 22 3d 3d 3d 65 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 Data Ascii: "+e.slice(1):e},b=function(e){if(!e\|\|"-"!==e.charAt(0))return e;var t=e.charAt(0),n=e.charAt(1);return/\d/.test(n)?t+"\\3"+n+" "+e.slice(2):e},w=function(e){return 1===e.length&&"-"===e},S=function(e){var t=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replac
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 2e 73 65 74 28 22 74 61 67 73 54 6f 50 72 6f 63 65 73 73 22 2c 5b 5d 29 29 3b 76 61 72 20 6c 3d 42 2e 79 2e 67 65 74 28 22 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 22 29 3b 6c 2e 6c 65 6e 67 74 68 26 26 28 28 30 2c 63 2e 4e 29 28 69 2e 73 2e 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 2c 6c 2c 21 30 29 2e 66 6c 75 73 68 28 29 2c 42 2e 79 2e 73 65 74 28 22 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 22 2c 5b 5d 29 29 2c 68 6a 2e 73 65 74 74 69 6e 67 73 2e 75 73 65 72 5f 61 74 74 72 69 62 75 74 65 73 5f 65 6e 61 62 6c 65 64 26 26 61 2e 72 2e 66 6c 75 73 68 28 29 7d 29 2c 22 62 65 68 61 76 69 6f 72 2d 64 61 74 61 2e 72 65 63 6f 72 64 69 6e 67 2e 73 74 61 72 74 22 29 2c 73 65 74 41 6e 64 53 65 6e 64 50 61 67 65 43 6f 6e 74 65 6e 74 3a Data Ascii: .set("tagsToProcess",[]));var l=B.y.get("autoTagsToProcess");l.length&&((0,c.N)(i.s.AUTOTAG_RECORDING,l,!0).flush(),B.y.set("autoTagsToProcess",[])),hj.settings.user_attributes_enabled&&a.r.flush()}),"behavior-data.recording.start"),setAndSendPageContent:
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 3d 3d 3d 72 2e 72 6f 6f 74 4e 6f 64 65 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 72 2e 77 61 73 52 65 61 63 68 61 62 6c 65 43 61 63 68 65 2e 67 65 74 28 65 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 74 3d 72 2e 67 65 74 4f 6c 64 50 61 72 65 6e 74 28 65 29 3b 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 72 2e 67 65 74 57 61 73 52 65 61 63 68 61 62 6c 65 28 74 29 3b 72 65 74 75 72 6e 20 72 2e 77 61 73 52 65 61 63 68 61 62 6c 65 43 61 63 68 65 2e 73 65 74 28 65 2c 6e 29 2c 6e 7d 29 2c 22 54 72 65 65 43 68 61 6e 67 65 73 2e 67 65 74 57 61 73 52 65 61 63 68 61 62 6c 65 22 29 2c 72 2e 72 65 61 63 68 61 62 69 6c 69 74 79 43 68 61 6e 67 65 3d 68 6a 2e Data Ascii: nction(e){if(e===r.rootNode)return!0;if(!e)return!1;if(r.wasReachableCache.get(e))return!0;var t=r.getOldParent(e);if(t===e)return!1;var n=r.getWasReachable(t);return r.wasReachableCache.set(e,n),n}),"TreeChanges.getWasReachable"),r.reachabilityChange=hj.
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 6b 6e 6f 77 6e 4e 6f 64 65 73 2e 67 65 74 28 65 29 7d 29 2c 22 54 72 65 65 4d 69 72 72 6f 72 43 6c 69 65 6e 74 2e 67 65 74 4b 6e 6f 77 6e 4e 6f 64 65 22 29 2c 74 68 69 73 2e 6f 6e 54 72 65 65 4d 69 72 72 6f 72 55 70 64 61 74 65 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 2e 70 6f 73 74 4d 75 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 65 29 7d 29 2c 22 54 72 65 65 4d 69 72 72 6f 72 43 6c 69 65 6e 74 2e 6f 6e 54 72 65 65 4d 69 72 72 6f 72 55 70 64 61 74 65 22 29 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 50 6f 73 74 4d 75 74 61 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 73 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 Data Ascii: (e){return o.knownNodes.get(e)}),"TreeMirrorClient.getKnownNode"),this.onTreeMirrorUpdate=hj.tryCatch((function(e){o.postMutationCallbacks.push(e)}),"TreeMirrorClient.onTreeMirrorUpdate"),this.processPostMutationCallbacks=hj.tryCatch((function(){for(var e
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 7b 7d 2c 6e 3d 5b 5d 2c 6f 3d 21 31 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 69 73 4f 6e 44 6f 63 75 6d 65 6e 74 3d 6f 2c 61 2e 72 75 6c 65 3d 74 2c 61 2e 69 6e 64 65 78 3d 6e 2c 61 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 3d 6f 3f 6e 75 6c 6c 3a 28 69 3d 65 2c 68 6a 2e 73 65 6c 65 63 74 6f 72 28 29 2e 67 65 74 28 68 6a 2e 68 71 28 69 29 29 29 2c 61 2e 6e 6f 64 65 49 64 3d 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 67 65 74 4e 6f 64 65 49 64 28 65 29 2c 72 26 26 28 61 2e 69 64 3d 72 29 2c 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b Data Ascii: =function(){var e,t={},n=[],o=!1,i=function(e,t,n,r,o){var i,a={};return a.isOnDocument=o,a.rule=t,a.index=n,a.parentSelector=o?null:(i=e,hj.selector().get(hj.hq(i))),a.nodeId=hj.treeMirror.getNodeId(e),r&&(a.id=r),a};function a(e){n.forEach((function(t){
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 29 29 7b 69 66 28 21 53 2e 5f 77 73 2e 73 65 73 73 69 6f 6e 54 69 6d 65 64 4f 75 74 44 75 65 54 6f 49 6e 61 63 74 69 76 69 74 79 7c 7c 21 43 28 69 29 29 72 65 74 75 72 6e 20 53 3b 53 2e 5f 77 73 3d 6e 65 77 20 79 28 53 2e 66 6c 75 73 68 29 2c 68 6a 2e 5f 69 6e 69 74 2e 72 65 69 6e 69 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 30 29 2c 53 2e 5f 77 73 2e 63 6f 6e 6e 65 63 74 28 29 7d 76 61 72 20 61 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 53 2e 65 76 65 6e 74 73 2e 70 6f 70 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 5f 28 70 29 3b 72 65 74 75 72 6e 20 6e 3f 61 5b 69 5d 3d 74 3a 28 61 5b 69 5d 3d 61 5b 69 5d 7c 7c 5b 5d 2c 61 5b 69 5d 2e 70 75 73 68 28 74 29 29 2c 53 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 61 29 2c 53 7d 29 2c Data Ascii: )){if(!S._ws.sessionTimedOutDueToInactivity\|\|!C(i))return S;S._ws=new y(S.flush),hj._init.reinit(window.location.href,!0),S._ws.connect()}var a=null!==(o=S.events.pop())&&void 0!==o?o:_(p);return n?a[i]=t:(a[i]=a[i]\|\|[],a[i].push(t)),S.events.push(a),S}),
2024-04-25 19:25:34 UTC	16384	IN	Data Raw: 3a 7b 72 65 61 73 6f 6e 3a 22 74 6f 6f 2d 6c 6f 6e 67 22 7d 7d 29 7d 63 61 74 63 68 28 65 29 7b 73 28 65 2c 22 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 22 29 7d 7d 29 2c 6f 29 7d 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 72 2e 66 5f 2e 6e 6f 77 28 29 3e 3d 6e 2b 69 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 73 28 65 2c 22 63 68 65 63 6b 2d 63 6f 6f 6b 69 65 22 29 2c 21 30 7d 7d 7d 2c 33 38 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 72 3d 28 30 2c 6e 28 34 35 35 37 29 2e 4d 29 28 7b 73 65 73 73 69 6f 6e 41 63 63 65 70 74 65 64 3a 21 31 2c 73 65 73 73 69 6f 6e Data Ascii: :{reason:"too-long"}})}catch(e){s(e,"clear-cookie")}}),o)}return"number"==typeof n&&r.f_.now()>=n+i}catch(e){return s(e,"check-cookie"),!0}}},3883:function(e,t,n){"use strict";n.d(t,{Q:function(){return r}});var r=(0,n(4557).M)({sessionAccepted:!1,session

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49893	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	813	OUT	GET /cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bc2dc1e1-c043-4115-b003-10863bafdb69&u_sclid=23642ee4-9521-4f89-8751-3f4f3aa963a9 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:34 UTC	612	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:34 GMT set-cookie: sc_at=v2\|H4sIAAAAAAAAAAXBgQ3AMAgDsIuQEpGBOKcd4wqOn31CFO9jcIQpa+xOt6E176n+vGKXSSGdrsUPGP93LDIAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 672 x-envoy-upstream-service-time: 17 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:34 UTC	643	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 2c 20 64 6f 63 2c 20 73 64 6b 5f 75 72 6c 29 7b 0a 20 20 20 20 20 20 69 66 28 77 69 6e 2e 73 6e 61 70 74 72 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 76 61 72 20 74 72 3d 77 69 6e 2e 73 6e 61 70 74 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 74 72 2e 68 61 6e 64 6c 65 52 65 71 75 65 73 74 3f 20 74 72 2e 68 61 6e 64 6c 65 52 65 71 75 65 73 74 2e 61 70 70 6c 79 28 74 72 2c 20 61 72 67 75 6d 65 6e 74 73 29 3a 74 72 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 74 72 2e 71 75 65 75 65 Data Ascii: <!DOCTYPE html><html><head> <script> (function(win, doc, sdk_url){ if(win.snaptr) return; var tr=win.snaptr=function(){ tr.handleRequest? tr.handleRequest.apply(tr, arguments):tr.queue.push(arguments); }; tr.queue
2024-04-25 19:25:34 UTC	29	IN	Data Raw: 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49892	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	938	OUT	GET /td/ga/rul?tid=G-8Y0K4MPJV5&gacid=1040263935.1714073125&gtm=45je44o0v884867978z8835174253za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&z=1057499289 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:34 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 19:25:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Apr-2024 19:40:34 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 19:25:34 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-25 19:25:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49898	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	1385	OUT	GET /td/rul/416707819?random=1714073133449&cv=11&fst=1714073133449&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&hn=www.googleadservices.com&frm=0&tiba=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=1676511191.1714073129&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:34 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 19:25:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Apr-2024 19:40:34 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 19:25:34 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-25 19:25:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49899	151.101.12.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	535	OUT	GET /ct/lib/main.1b7f3d0e.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:34 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23080 ETag: "51780471bd680082c3977720b56df64f" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Thu, 25 Apr 2024 19:25:34 GMT
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 1f 8b 08 08 ed 27 28 66 00 03 6d 61 69 6e 2e 31 62 37 66 33 64 30 65 2e 6a 73 00 c4 5c 0f 6f db b6 b6 ff 2a 8e 80 b9 62 25 bb 92 ec 38 a9 2c d6 48 77 33 a0 0f 5b 5b ac dd c3 1b 82 20 50 6c 3a d6 ea 50 79 12 95 2c 37 f6 3e fb 3b 87 14 25 ca 96 92 34 db c3 c5 d6 44 a2 a8 c3 1f 0f cf 3f 9e 43 e5 60 59 f0 b9 48 52 6e 33 f2 70 1b 67 bd 84 3e 6c a7 ba b1 97 d9 42 35 f3 69 c6 44 91 71 3b 39 13 e7 9b 8d cd 29 5e d0 87 24 14 ee 3a 3c f0 5d f6 e7 4d 9a 89 3c 7c d8 6e 5d 06 8f 86 f3 78 bd b6 f9 b0 6c 77 b9 5b 5f 67 04 6e d6 f4 c0 73 39 21 ba 75 9b 0d af 29 73 b3 e1 9c 26 f0 73 41 2b 64 02 5e 06 74 d9 30 c5 4b b2 d9 7c ba fc 83 cd c5 70 c1 96 09 67 9f b3 f4 86 65 e2 5e 76 7b 60 bc b8 66 59 7c b9 66 21 90 bf 62 22 64 5b b2 05 7a 99 41 8f 3c 58 05 57 6f 2f ac 03 2a ee Data Ascii: '(fmain.1b7f3d0e.js\ob%8,Hw3[[ Pl:Py,7>;%4D?C`YHRn3pg>lB5iDq;9)^$:<]M<\|n]xlw[_gns9!u)s&sA+d^t0K\|pge^v{`fY\|f!b"d[zA<XWo/
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: d2 54 6b c1 37 9e 03 f9 ff 4e d8 1d 04 b9 fb 8d 30 22 b8 f4 2e cf 53 83 a9 fd 42 19 e8 1a ca 56 cb ec cc b2 1c 51 47 17 88 1d 6d 3a d3 74 3c 63 dd 0e fc e9 94 e4 77 89 98 63 48 f2 30 8f 73 66 c5 f9 3c 49 ac 50 5e af 41 16 b9 5f de 40 d4 1a 67 f7 56 a8 e3 d5 a9 6c 95 fa 1c ea cb 41 79 dd 53 be 44 f7 fd 6a d7 78 54 d7 79 1e e8 b7 e6 f9 20 a8 29 f8 13 d8 4f d4 f4 d4 6d 49 26 78 5d 0e ba 62 7f d6 38 de bd 7b e7 ab e6 4b f8 31 19 57 4f fe 30 46 2d 23 e5 50 7a 80 16 54 9c da c0 37 8e d2 f3 73 7a c7 b2 1f 81 94 4d c0 ca c1 a6 a5 96 97 6a 9b 26 d9 07 26 0b 18 08 14 61 e3 52 f9 4e be d9 28 d5 e4 e4 1d 06 38 5a 6d 4a 17 61 c9 fe ac ee cf 36 1b 66 76 9c 19 d7 21 23 11 f5 76 5e 85 e9 42 5b 44 6d ae ae ea c7 b8 ae 82 0a f0 4d 72 51 ea a5 15 e5 d2 4a b6 21 f4 94 ca d8 Data Ascii: Tk7N0".SBVQGm:t<cwcH0sf<IP^A_@gVlAySDjxTy )OmI&x]b8{K1WO0F-#PzT7szMj&&aRN(8ZmJa6fv!#v^B[DmMrQJ!
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: d8 d6 9f 83 f4 a9 57 e0 2a 73 e8 6a 8b e2 b0 a6 09 84 8d 6b c3 86 2e 22 7a ad 15 b4 25 32 19 c6 37 37 eb 7b 5b 3d 69 06 96 10 e1 dc 83 46 dc 47 8b 29 b9 6d 0d 6b 76 5e 2e 03 a4 7b f7 de 81 31 2b f1 bf dd 7e 1b 2a 4f 40 57 ee b7 e1 97 75 7a 57 de 9a 86 c0 c1 a4 12 f0 41 40 04 51 a7 af e5 16 da 86 70 67 0b 6f 7e f8 f8 e5 f3 e9 8f 5f 2f 7e 39 f9 9f 8b f7 bf 7f 3d fd 42 0f bd 76 d7 49 2b cf 21 5a 73 7c ad ad 66 25 42 64 f7 52 bd f6 32 e5 7e 05 4e 18 39 c2 87 ea b2 d5 c7 ba cb 34 6d a9 73 8c 83 ed d6 1d 07 32 c6 82 1e 36 69 f5 f8 62 98 17 97 32 97 d5 ef ab 78 4c df db be eb 13 63 6b bd 9d c7 e5 96 49 0d 70 e0 6f b7 10 11 7e 1b 7e fb 25 fe 53 75 c1 c4 05 b0 ec 26 4d d7 5f 92 7f 33 7a 0c 02 0e f7 ab d6 ed 4f 7b 12 d4 15 5b 57 85 44 fb 15 40 9d 9e 97 46 48 35 6e Data Ascii: Wsjk."z%277{[=iFG)mkv^.{1+~O@WuzWA@Qpgo~_/~9=BvI+!Zs\|f%BdR2~N94ms26ib2xLckIpo~~%Su&M_3zO{[WD@FH5n
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 39 b7 e7 f4 7e 5b b5 3c 5e 3b 5c 94 45 cf 8f f6 57 d0 07 bb 90 7c d2 75 e0 01 4c b4 70 17 6e dc ac 2b 96 af de 35 8e cc 3d 59 21 6f e9 be 53 ab 53 83 63 c2 1e 76 52 08 09 4b d6 72 75 d3 97 15 dd 74 65 b0 31 b2 51 1d cb 9f 5f 1d c3 43 48 b2 28 be 5b 20 40 c9 f3 b6 bb 71 cf 7f 7d f9 f4 91 ee a5 67 1e e4 89 2f 7d 92 c9 c5 83 4a e1 6e ed 44 1a f1 b2 68 82 8a 73 11 67 99 3a e2 e8 82 56 6e a7 aa 34 3a f6 de 4e ea d3 a1 97 c6 29 49 f1 03 18 62 d0 be ce 03 37 96 32 21 ca 6e 88 5e 91 70 a1 fc 1b 8b 84 d3 75 32 f4 6b 76 8f e7 85 f0 04 ca 7c ce f2 1c 7c f9 7d ca 17 5a 41 f5 21 d1 3a ff 7c 55 47 0b b0 7a cf 8c 17 5e 59 8a 5e eb 69 a2 f7 cd 13 68 af 4a 9f 2c 4f 18 a4 5d 67 8b 76 0f 43 ee 9e 0c 54 54 98 93 54 81 42 e7 d1 58 f0 3b 3d 33 34 30 67 7b 51 fb 12 b0 7a b2 c4 Data Ascii: 9~[<^;\EW\|uLpn+5=Y!oSScvRKrute1Q_CH([ @q}g/}JnDhsg:Vn4:N)Ib72!n^pu2kv\|\|}ZA!:\|UGz^Y^ihJ,O]gvCTTTBX;=340g{Qz
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 61 7b 55 de 8c 92 01 9b d5 b7 0e f2 6f c0 cc 02 3e 56 ff f1 8f ac 44 49 79 4e 2c 1d 60 de 8f 66 53 70 67 04 4f 80 f3 32 0f 9a 39 ec bc aa 16 a7 91 cf 46 f2 44 62 d7 57 c9 ea b8 98 ce be b7 91 69 fd ce 26 67 42 7f 5e 23 a7 57 65 77 99 cb 9c 14 e4 a4 fe bb 07 4d d9 c3 83 9e ed b2 b7 ff b9 7a f9 c7 1e da ff 26 06 7e a2 c5 b1 ba dd ac 77 93 f0 ff d8 bb d6 ae b6 91 26 fd 57 12 9f 84 57 1a c9 46 ad bb 00 0d 2f 01 42 48 b8 ad 81 64 26 84 70 14 23 40 09 48 8e 2d 93 30 d8 ff 7d 9f ea 6e 49 ed 0b 73 f9 b0 7b ce be 67 3f 24 48 7d ad ae ae ae 7a 5a dd 55 9e bf 75 ca 67 21 9d 29 67 32 45 1e c5 ad 0e d5 1f c2 d2 f5 35 00 04 ae c1 06 d5 05 10 e1 bc 33 e7 ea 9b 2d 3e cc ab 03 74 2c 88 bd b1 68 48 68 fa f9 94 0b 7f f6 c4 dd 96 c5 a7 84 dc 69 66 ce 39 8b 7f da e7 7e 59 bc Data Ascii: a{Uo>VDIyN,`fSpgO29FDbWi&gB^#WewMz&~w&WWF/BHd&p#@H-0}nIs{g?$H}zZUug!)g2E53->t,hHhif9~Y
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: c6 bb 7a 5e e2 29 1c 33 7f ec d8 3a 1e 37 6f 93 bb 7e 7a a9 8b 16 5e 2c 77 4a 2c 76 ba 47 2b 07 24 10 f6 1c 5f d4 35 b1 e0 26 68 d2 dc 75 bd 4c 05 dd a3 41 fa 2c 2f f2 36 97 20 18 98 fa 8e 5b e7 53 be 0b de 0f 2e 29 c4 53 c1 57 93 2c 62 f2 0a 22 42 a3 88 44 26 7d d8 6e 92 7b da e2 cc 09 a9 a6 3f bb 4b cb 9b e2 92 22 96 69 b3 51 06 f5 47 e9 6a 97 f3 0b bb 95 3d 9f fe b8 a0 68 6f 8b 7c d7 30 be 2a d4 23 0f a7 95 92 73 ff 59 2a e2 80 34 d7 5d 04 7c 78 9c ac 0e 3a 7b bb c7 27 f1 e3 eb a3 8b bd c3 cd 8d bd 8b e3 93 c3 ee c6 ce f6 ca 23 c0 37 46 bb c2 2c cb 1c 0d b2 95 d6 55 ff 82 c2 5c dd 1e 83 f2 e4 3a 6d 4d cc ad ed ee ee 7b 6c 9d b7 8f 76 df cd 97 ef 67 79 1b 3c ca ee d3 cb 76 da cf be a1 c2 f1 66 77 e3 68 fb 82 7a dc 3e d8 ee 1e 2f ae 34 ec 0d 92 7e da 26 Data Ascii: z^)3:7o~z^,wJ,vG+$_5&huLA,/6 [S.)SW,b"BD&}n{?K"iQGj=ho\|0#sY4]\|x:{'#7F,U\:mM{lvgy<vfwhz>/4~&
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 70 1c 87 46 1a 07 3e 17 47 dd ed d7 bb bf 19 ad ed 9f e4 8e 0f 24 f7 af 97 c3 7f c9 95 9b 3c 7b 39 34 9f 7d 19 95 cf ae e8 08 99 67 b5 78 50 b5 9c f7 0d 4c 23 c4 6b 36 9e c0 7c a0 e2 3f 0f 40 97 56 c2 90 c5 45 e7 44 a3 c5 a8 af e6 55 78 b7 6a 46 f3 5a b3 53 19 4e c1 c9 42 f1 af e2 e3 b4 b8 b6 2e 63 25 8e ac be 98 93 e3 f1 48 a8 4a b2 b5 c3 e6 f1 aa 7a 5c 2f 57 28 c0 ab 8e 79 ba 49 6c cf 87 18 8a 4f 7a a4 eb c5 17 4f 11 79 80 93 85 45 f5 06 bc f9 93 25 5a d2 8f 43 14 1d ee cb 59 74 0e c8 e0 f3 98 47 54 fb eb e2 0a a5 f4 76 e5 df 1f 55 b7 6f ad b5 dc d2 e9 46 7e d5 c0 c1 82 06 88 0d 64 87 44 4c 84 1e 0f 2a 57 4f c0 7a 89 f5 56 57 ff b6 a8 ff 9b 8a 13 2a a4 2b 14 48 57 40 30 46 ea b7 f6 bc 8a e8 30 d2 18 e9 85 91 86 15 fe 10 9f 31 c6 7c c7 b3 5d 2b a4 23 b5 Data Ascii: pF>G$<{94}gxPL#k6\|?@VEDUxjFZSNB.c%HJz\/W(yIlOzOyE%ZCYtGTvUoF~dDLWOzVW+HW@0F01\|]+#
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: a6 95 46 ad c0 8e d0 43 5b cc 86 42 57 10 08 88 f4 60 3e c1 88 29 30 02 3e 44 28 42 b6 be c1 25 98 d3 08 36 db 21 b2 1a 88 12 f8 7e 40 1c f6 55 b0 02 34 0c cb ed 86 64 35 15 dc 02 ac 00 eb 85 f9 52 21 0c b2 5d 80 01 c0 0c 15 cd d8 ae 4f 18 80 0f a2 01 36 81 17 3a 80 23 a1 8a 71 98 8f 0a 41 e4 f8 0a da 61 0c 33 11 80 18 57 05 3e 1e 84 c5 a5 db 6a 53 18 c8 03 86 b0 20 99 9e 0a 87 88 ef 21 f5 e1 a8 c8 08 73 80 c6 02 cc 9d 0a 92 60 71 5d 9a 36 12 bd 06 2f 31 88 47 e0 45 90 2b 15 3a 61 a8 56 80 a9 9b 02 51 a0 c6 0a 7d 18 5b 6b 0a 4f 31 e2 06 4c bb 33 05 ad 3c 48 b4 87 d5 11 a8 28 8b 59 3e ba b6 68 a9 4e e1 2d b2 ea 04 ad 14 e8 c5 5c c7 c6 9a 05 11 2a 0a 63 ae 0f 54 c1 30 67 0a 20 0b 3d ac 9a 08 0c 55 a0 19 56 14 80 02 26 c2 56 50 1a a6 17 24 62 f5 78 0a 60 43 Data Ascii: FC[BW`>)0>D(B%6!~@U4d5R!]O6:#qAa3W>jS !s`q]6/1GE+:aVQ}[kO1L3<H(Y>hN-\*cT0g =UV&VP$bx`C
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 65 71 59 67 ff 2e b2 7f 37 46 55 36 f4 c7 7d 9d fd 5d 64 7f 37 92 2a 1b 2a e5 a1 ce fe 28 b2 3f 1a c3 2a 1b 5a e6 47 9d fd 41 64 7f 30 ae aa 6c 28 1e 92 9e bf d8 ff 67 72 ff 3f f5 91 ae ac c3 00 ce ec ab 49 b6 b3 d9 0b c1 29 34 54 7d 82 a4 49 fd 2c 59 4b bb 76 4d ea e9 8a 9f 61 9d f6 be 92 05 b1 f1 d7 a4 ea ae 58 c7 77 f6 9a 54 e2 15 c3 1c bb 4e fc 5e 89 03 a0 5d 9d f8 b1 92 07 d3 6d 3a fa 50 09 04 7d 57 a4 b0 44 ff ec 9b 40 73 06 ce 7f 8e 67 d1 bd 81 de e0 a1 5f 16 4b 4b e2 2f 9d 66 74 f9 3d a5 f7 74 94 3f 7c 2a 5d fc 64 b9 c8 e3 3f 10 35 df f0 dd 70 53 36 bd e0 ce 85 3c a1 ac ca cc 77 fb 54 8e e8 b8 ca d5 57 07 eb 5a 3a f7 73 22 fc 63 cc 9c 67 42 13 df 8e 7e f6 3d 9d f0 80 af 2a 9e 7c a2 56 7d 00 6a 8a 88 e1 cc 5f cd 0d 43 b7 e2 58 73 96 44 44 e9 c6 b9 Data Ascii: eqYg.7FU6}]d7*(?ZGAd0l(gr?I)4T}I,YKvMaXwTN^]m:P}WD@sg_KK/ft=t?\|]d?5pS6<wTWZ:s"cgB~=\|V}j_CXsDD
2024-04-25 19:25:34 UTC	1378	IN	Data Raw: 3d a6 73 b9 aa 0b 09 aa 68 47 60 9b 88 25 1c 78 e4 1b 95 4d d5 c2 12 08 74 e2 64 91 89 be 8c 55 c0 67 61 3c 1d 30 23 05 e7 10 c8 ac 96 18 47 79 12 3e d7 f2 15 89 65 3e f8 24 e2 36 aa 29 17 f5 fc b5 8f 1b ca a9 1e 12 06 11 c1 a3 bf 49 c8 a2 8c d1 fd 87 e7 be 5b c0 94 95 7a 8a f8 95 77 0e f8 02 f3 f6 2b 94 80 c5 fa d6 7f 3c f8 d3 f6 57 0f 77 ce 77 cf 1f 05 dd f3 bf fd d7 cd 6a fd df 83 9d ff ec 87 bb 5f ce a3 73 18 b4 9f fb e5 8b b7 83 d2 d7 54 da f5 77 bc 47 ec b3 ac 67 6f f7 bb d6 f9 ee ce b9 7b ee 9d 3f 1a 3c 7c f0 88 2d f2 f4 f3 dd 96 4c 18 e6 25 66 f4 25 3f bf e9 b9 4c a4 5f 41 f0 f1 e3 f0 7a 9e ad 16 f3 54 0c 17 19 9d da 30 e5 94 7f 84 b6 d2 c5 64 17 88 7e 17 8b e8 ad 5c 3c 9f 13 0c c5 50 e5 37 ca d8 03 f2 a1 71 c1 a1 6c 7b db 76 2b 23 fc 46 7d 26 b2 Data Ascii: =shG`%xMtdUga<0#Gy>e>$6)I[zw+<Wwwj_sTwGgo{?<\|-L%f%?L_AzT0d~\<P7ql{v+#F}&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49900	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	616	OUT	GET /config/com/5e40fa19-dd6c-4373-b1e0-df7865ef9034.js?v=3.16.0-2404242003 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:35 UTC	565	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:34 GMT access-control-allow-origin: https://earnandexcel.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 190 x-envoy-upstream-service-time: 37 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:35 UTC	190	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 35 65 34 30 66 61 31 39 2d 64 64 36 63 2d 34 33 37 33 2d 62 31 65 30 2d 64 66 37 38 36 35 65 66 39 30 33 34 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 22 50 49 49 22 2c 22 41 56 33 22 5d 2c 22 69 70 67 22 3a 22 31 22 2c 22 62 22 3a 5b 22 45 52 52 22 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('5e40fa19-dd6c-4373-b1e0-df7865ef9034',{"asc":[],"a":["PII","AV3"],"ipg":"1","b":["ERR"],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49901	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	1387	OUT	GET /p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=e047ce99-8b6d-400f-973c-746356c74d77&u_sclid=23642ee4-9521-4f89-8751-3f4f3aa963a9&u_scsid=bc2dc1e1-c043-4115-b003-10863bafdb69&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=17632&m_fcps=7523&m_pi=17612&m_pl=0&m_pv=2&m_rd=20106&m_sh=1024&m_sl=1&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&trackId=2d218ca2-ef93-486f-b17e-95bb8b9b9529&ts=1714073132985&v=3.16.0-2404242003 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:34 UTC	681	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:34 GMT access-control-allow-origin: * cache-control: no-cache, no-transform set-cookie: sc_at=v2\|H4sIAAAAAAAAAAXBgQ0AIQgDwIlIWovwjmOCTMHwfxeKuhtpZMv8Q9gpyEq13jtc7J5h0pGifPADq2lATTIAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure content-type: image/png strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 68 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:34 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49902	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	1060	OUT	GET /wp-includes/js/thickbox/loadingAnimation.gif HTTP/1.1 Host: earnandexcel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _scid=e047ce99-8b6d-400f-973c-746356c74d77; _scid_r=e047ce99-8b6d-400f-973c-746356c74d77; _ga_8Y0K4MPJV5=GS1.1.1714073132.1.0.1714073132.60.0.0; _ga=GA1.1.1040263935.1714073125
2024-04-25 19:25:35 UTC	906	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:35 GMT Content-Type: image/gif Content-Length: 15238 Connection: close CF-Ray: 87a0b845ebf0ad68-ATL CF-Cache-Status: DYNAMIC Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: "50986f2e-3b86" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Tue, 06 Nov 2012 02:00:14 GMT ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=77ku1Ih%2BccrBYgy93h9RbnlFiwoO5SZMH0ttTipb1lLRqXLLY1smjV0mljgXaJecReFboPDEAatuwsj3lvYtY9BlcM%2FYQpuf4OwaFB70U64PGImxeSt%2FkRGThnu5kv%2BoMTk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:35 UTC	463	IN	Data Raw: 47 49 46 38 39 61 a0 01 1a 00 c4 00 00 fb fb fb f7 f7 f7 f3 f3 f3 ef ef ef ea ea ea e6 e6 e6 e2 e2 e2 de de de da da da d6 d6 d6 d2 d2 d2 ce ce ce ca ca ca c5 c5 c5 c1 c1 c1 bd bd bd b9 b9 b9 b5 b5 b5 b1 b1 b1 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 0a 00 13 00 2c 00 00 00 00 a0 01 1a 00 00 05 ff e0 d1 44 52 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff a7 07 01 c0 20 01 8f c8 a4 72 c9 6c 3a 9f 50 27 a4 40 8a 30 16 d8 ac 16 db 28 45 20 e0 b0 58 5c 7a 6c cf 58 86 69 cc 0e 97 d1 e7 ae e4 db 66 bf e1 5a 75 a9 6e 97 98 f1 59 72 74 7c 6e 7e 80 59 7a 12 84 64 86 87 0b 82 8b 85 7f 87 89 91 60 77 87 90 96 Data Ascii: GIF89a!NETSCAPE2.0!,DRihlp,tmx\| rl:P'@0(E X\zlXifZunYrt\|n~Yzd`w
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: 54 06 60 1c 68 1d 7b 95 ab d7 ae 55 21 90 25 6b f6 ac 54 b0 20 d7 6a 6d eb 16 6a 5a b9 73 c1 d4 7d 1b 16 2f 56 ba 75 ef fa 2d ab 77 2f 54 b8 62 07 03 76 2b 58 71 61 c3 88 07 37 58 7c b6 b1 5f ca 5e 2d e3 05 7c c2 80 e7 cf a0 3d 1f b0 e5 80 81 e9 d3 a8 51 db 5a 10 ba b5 e8 5b a9 63 9f 5e ed ba f5 e8 07 a5 65 c7 a6 5d 1b f4 ed 07 ba 77 9b e9 ed 9b 74 f0 d4 bc 89 1b f8 7d 5c f5 70 e5 cb 8d 37 37 9d 9c 38 f3 e9 0c aa f7 be 9d 7b ba f6 da d7 bd 3f 57 ce 1d 7b f6 f1 d6 a5 8b 67 0d fa 44 81 f7 f0 e3 bf 6f 60 eb 8a 23 07 b8 0d c8 df ff 5e 41 7d 47 0b e0 e7 80 7e fc c9 47 1f 70 00 0a 48 60 ff 81 f0 f9 87 e0 7d f9 31 18 df 81 f6 1d a2 a0 84 0d fe 07 e1 80 18 ce a7 a1 85 11 76 e8 60 85 80 5c d8 21 85 09 86 88 e1 88 29 72 78 e2 87 25 aa 28 21 8a 1b 2e f8 de 09 04 e4 Data Ascii: T`h{U!%kT jmjZs}/Vu-w/Tbv+Xqa7X\|_^-\|=QZ[c^e]wt}\p778{?W{gDo`#^A}G~GpH`}1v`\!)rx%(!.
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: 74 6d df 78 ae ef 7c ef 9f 91 86 41 f1 2b 1a 8f c8 a4 72 c9 6c 3a 9f 26 88 44 f2 58 2d ae 8b c6 b4 05 e9 4a a9 2c 2c 63 2a 61 79 bf 55 15 36 bb 35 7b a7 69 f5 75 dc 56 9d e1 56 ac b6 ec 9e a0 c3 73 64 7d 7f 72 57 7b 5c 6f 60 79 0b 74 7c 76 89 71 28 6b 87 83 78 8b 8d 95 8a 29 93 75 8f 7e 96 9b 7a 9d 29 77 27 0f 11 12 11 2c 0a ac 44 a9 2c 0f b1 a7 af 2b ad ae 8e 29 b2 b3 aa b5 ad 13 b4 2a ba a8 bc 2a b6 bf b8 28 c2 c0 29 c6 cb c9 b2 c3 ab be a3 a6 d0 ce 27 cd c4 b9 d6 da 28 cd c8 d5 b1 d1 bd ac bf dd e1 bb d2 e5 d4 26 ca e7 26 d9 b0 dc ea ae ef 25 ee 26 0e 11 41 2c 09 fe 0a fb 20 b0 70 40 50 1f bf 15 fe fc 41 88 20 70 45 41 83 0d fa fd 0b 38 b0 e0 be 88 08 13 2e 6c a8 e2 e1 45 89 09 00 32 ac 38 01 22 c8 04 1b 49 ff 9a cc 18 92 a2 43 8b 07 55 24 44 39 f2 65 Data Ascii: tmx\|A+rl:&DX-J,,cayU65{iuVVsd}rW{\o`yt\|vq(kx)u~z)w',D,+)*()'(&&%&A, p@PA pEA8.lE28"ICU$D9e
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: 52 e3 dc ee a8 3c 57 9e 0d 80 f3 b3 e5 f7 48 17 4a c0 c1 52 97 41 64 e5 ec 80 09 47 5e 66 ee 8d c8 ab 64 32 07 69 49 65 ea f1 92 9b 5c 24 d8 a2 09 4d 4a 32 73 99 9a b4 66 36 9b 79 cd 67 3a b3 7a 9c 9c e6 0c 66 d9 4b 54 e2 4f 95 a3 13 66 2e bf f8 cb f4 91 f3 98 a2 3c 67 2c df f8 ce d0 21 73 7d f2 24 a6 1f d5 39 3d 7d d6 11 97 fd 74 27 28 e1 59 4a 39 ae ce 9f 8d 4b db 36 b1 89 48 4c 2a b4 a1 d4 fc e6 e8 1e 8a bd 44 4a b2 9b 16 3c 67 23 77 19 ce e7 05 8d 92 a2 37 f4 a4 23 a5 e9 d1 1a 36 71 a3 41 04 e9 0e 71 87 45 83 6a 91 8e f8 3c e9 15 37 67 4a 27 c2 f4 7e 32 35 a3 4b d1 38 d3 5b c2 b2 a7 f0 ab 69 1a ef 89 53 2b ea 94 96 3c 65 a7 3c 81 fa 3f a1 32 d5 88 4e ad 9f 37 31 3a d2 6a 72 73 a1 53 c5 2a 38 49 8a d2 62 76 b4 ab 7e fc aa 48 39 ca d5 b1 06 51 ac 16 cd Data Ascii: R<WHJRAdG^fd2iIe\$MJ2sf6yg:zfKTOf.<g,!s}$9=}t'(YJ9K6HLDJ<g#w7#6qAqEj<7gJ'~25K8[iS+<e<?2N71:jrsS8Ibv~H9Q
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: b8 4b 3d b7 ec 50 c3 fe bb e9 ab e7 5e fa ee b7 8f 6e 7c ea c4 bf be 7c eb cd cf 2e fc b6 6a eb 48 b9 e8 00 04 e0 79 ec 07 5c cf bb e5 ec 76 cf f8 df da 2b 5e ba f7 c9 67 8f 3c b7 e2 d7 4d fe f6 c3 a3 6f ed fa 30 cb 9f 2e fc d4 57 6c bf fa b6 b3 bf 7f f9 0e 63 de ff e8 a7 bf f1 55 2e 7b f8 4b 5b 01 dd 77 40 00 86 cf 5d cf fb 9b d8 22 38 3c 6c f9 0e 7b b4 d3 1d 05 31 68 b2 0b a6 2d 66 1e 4c 5f 06 8f b7 c1 ef 2d 2d 84 5a 0b 61 ef 6a a7 c2 b3 a1 50 6d 2d 34 5a 09 2b 06 c3 b0 75 90 85 a7 9b 61 0a 6d a8 c3 1a ae ec 86 1a 6c 8e 01 b1 e7 40 84 b5 2f 6c 55 b8 dc 02 f7 96 40 1a 2e 71 65 49 7c e0 10 4d 58 c4 f3 4d 51 84 51 34 e2 ff 9a e8 bf 2b 8a 2b 8b 56 64 20 11 b9 58 3f ff 2f 2e 0b 8c 02 34 23 02 cd 97 46 31 52 91 8c 4f 14 81 d9 64 f8 42 e0 49 70 7a 1f 8c 5e f0 Data Ascii: K=P^n\|\|.jHy\v+^g<Mo0.WlcU.{K[w@]"8<l{1h-fL_--ZajPm-4Z+uaml@/lU@.qeI\|MXMQQ4++Vd X?/.4#F1ROdBIpz^
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: 3b 6b ad a9 3e 1b ad 0f da fa fa ab b5 c9 4a 4b ec b6 d5 76 2b ac b9 cb a2 9b 2e b2 d8 8e 10 2e b7 c1 42 ab 6c af f4 7a ab ac 08 a3 8e 7a ad b1 aa 26 50 2e b8 fd fe 4b ef 99 c3 fa 3b f0 b8 a9 0a 1c 2f bf 05 2f 3c 03 b0 08 9b ab f0 c3 13 00 eb 70 c2 07 18 9c 2e 00 15 13 7c 31 c0 0d 4b bc 6b c4 18 53 ec 02 c7 1e 33 0c c0 c6 16 77 6c 32 09 2a e7 76 f2 c8 f4 c2 2c b2 cc 29 07 3c b3 bc b0 42 dc ae b8 2c 38 bb ae c8 f8 72 0b ef bd d4 4e ac aa be ec 26 fd 6e cb 33 cc fb 31 d4 48 37 ed 34 00 4b 47 ad 35 cd 4f 1f 8d 83 d5 53 ff 2c b4 d4 5b d7 fb ed d8 e7 12 5d 34 b9 18 93 9d 36 d6 6c 0f 9d af d8 55 07 dd 2f cf 24 83 bc 72 cc 54 bf 9d 6a c8 6c e3 fc 31 e1 79 1b ee 32 e2 37 f3 7d f0 df 3b 07 0e f6 e0 90 17 ee f8 e1 95 27 7e f9 e2 99 37 2e f9 08 35 b3 6c 76 ff c6 aa Data Ascii: ;k>JKv+..Blzz&P.K;//<p.\|1KkS3wl2*v,)<B,8rN&n31H74KG5OS,[]46lU/$rTjl1y27};'~7.5lv
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: a0 81 ea 50 e8 cb a3 60 5f 60 c2 7b 3f 0b e2 b3 a0 ef 7e 7b 89 f3 e9 a9 40 9f 7d fe 91 00 a0 7c 27 f0 77 df ff 22 56 e8 a7 1e 7b 04 be d1 60 80 29 28 58 e0 04 07 ee 07 e1 82 28 64 f8 e0 7a fd 49 98 1f 85 f3 6d 78 a1 87 02 b2 17 22 7c 24 26 a8 22 87 2f 9c e7 80 2b 2a 10 60 23 01 06 d4 d3 82 8c 34 d6 68 63 01 f5 1c f5 9f 66 f9 cd b8 c2 8d 38 ea 28 62 3d 3d a6 70 23 90 0e 08 69 20 91 4c 1e 79 63 8e 08 72 42 a5 91 56 12 00 a5 94 18 6e d9 e4 09 48 62 b9 a3 98 2c 3c 19 e4 92 5c 3a 79 a5 92 f0 b5 e9 a6 97 6b c6 39 a6 09 65 c2 89 5f 95 3e da 68 e6 0c 86 44 99 e6 8d 21 65 39 a4 15 0d 08 da 25 01 85 8a 98 28 98 48 36 1a ca a3 83 da 28 29 7e 94 2e 7a 29 83 58 28 da 27 a3 7a 76 78 87 a7 73 82 6a e8 94 88 92 8a 42 a4 a1 6a 99 2a a4 84 b6 6a 42 a0 b0 5a 2a eb a1 9d d6 Data Ascii: P`_`{?~{@}\|'w"V{`)(X(dzImx"\|$&"/+`#4hcf8(b==p#i LycrBVnHb,<\:yk9e_>hD!e9%(H6()~.z)X('zvxsjBjjBZ*
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: c5 29 ca c8 29 ce b0 c3 bd 13 d4 c2 b1 c4 b6 ab c0 d5 db d7 d9 c9 d6 cf cd de d2 28 d1 cc 27 e3 d0 e5 dd aa df da bc e6 10 11 10 2c 0e 4f 0e 11 11 0d 2c 12 08 54 e0 2f df 8a 7d 4e fc 01 5c 21 50 e0 3d 83 2a 10 f6 fb 17 70 60 41 7d fc 14 56 74 88 0f 63 42 8a 0c 2d 76 3c 98 11 a4 8a 86 09 1e ff 7a 9c b8 f0 a4 48 88 29 24 6a 0c c9 11 26 0a 99 26 53 34 24 38 32 62 c9 96 3a 1b aa 24 f9 11 28 8a 9d 17 89 b2 dc c8 d3 26 15 16 0d a2 36 a8 c2 02 81 55 04 68 6c 9e 90 3a f5 e9 8a ab 58 bd aa e0 4a f5 eb d5 ac 50 a5 96 55 01 16 ed 0a b2 62 53 b4 8d 8b 02 ae 56 13 73 ef 96 b0 5b f5 2c dd ad 6a ff e2 f5 ab 97 04 5f b3 56 dd 8e 0d 5c 78 42 de b4 51 d7 ca 25 0c b9 6b e3 c7 ed 46 9d 60 c0 99 81 aa 05 2c 0c 88 3e a0 ea c9 8a ce 9e 1f 80 5e 21 da 00 69 55 2c 50 7f 0e 3d ba Data Ascii: ))(',O,T/}N\!P=*p`A}VtcB-v<zH)$j&&S4$82b:$(&6Uhl:XJPUbSVs[,j_V\xBQ%kF`,>^!iU,P=
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: 65 20 45 63 08 51 8c 5a 77 f4 6e 1b a5 a3 23 8d d6 b2 2e a6 73 80 4c f4 62 2b b5 28 3e 58 b2 b4 9b a0 7c a9 0e d7 58 45 95 c6 d4 8b 2e b5 69 10 ad 87 53 7f 86 f1 a4 f6 bb 29 50 69 6a d2 77 a2 54 6c 0c 95 a3 47 47 1a d1 8f 26 72 a9 1d 2d 68 30 89 39 d5 81 56 15 a1 4c 85 2a 41 ad a9 50 a9 22 13 ab 51 6d 82 58 c7 4a d6 b2 9a f5 ac 68 4d ab 5a d7 ca d6 b6 ba f5 ad 70 8d 6b 40 0e 10 02 00 21 f9 04 05 0a 00 13 00 2c 00 00 00 00 a0 01 1a 00 00 05 ff 60 f1 48 53 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff a6 07 41 b0 80 90 80 c8 a4 72 c9 6c 3a 9f d0 a8 13 b2 98 90 1a 8b 05 43 c2 75 41 be dc 47 2b bb 68 74 bd 60 89 78 ac e5 1e 59 5f ab 9a 5d 3e b7 e2 61 57 76 6b 5f e1 e7 2c 64 66 6f 70 69 6b 81 6d 7d 2a 7f 87 2a 82 8a 8b 86 7a 89 84 91 72 8d 29 8f Data Ascii: e EcQZwn#.sLb+(>X\|XE.iS)PijwTlGG&r-h09VLAP"QmXJhMZpk@!,`HSihlp,tmx\|Arl:CuAG+ht`xY_]>aWvk_,dfopikm}*zr)
2024-04-25 19:25:35 UTC	1369	IN	Data Raw: d5 70 28 31 1b ba d0 7e dc 8b e1 0f f7 c7 3d 00 f8 30 68 34 c4 de f8 b4 07 c4 02 1e 91 7c 44 0c 9f 0e 83 97 44 23 9e af 7e 51 84 e1 14 79 86 45 00 8e 6f 46 99 61 5d e9 88 d7 40 ff e3 2d f0 83 c2 5b 1b 19 25 68 c6 df c1 4e 75 17 0c 5e 1b 91 17 47 2e a6 b1 71 74 44 e3 1c d7 68 b5 3b 4a 2e 8f 6f d4 5d 1d 11 e8 47 0c f2 51 8e bd 3b e3 09 c0 08 b9 c2 6d 11 81 8c 73 de fb 08 57 b7 47 8a 2d 71 57 8c 24 06 0d e7 36 4d de 6f 92 9e 2c 20 27 e9 17 ca f0 81 12 7c 08 5b 62 27 93 88 bf bd a1 72 72 15 8b 62 2a e7 c5 48 de 8d 71 90 16 2c dd e9 8a 97 48 68 1d d2 8e 73 dc 65 19 7b 09 48 d2 81 4c 98 6c 24 e6 2f 09 19 4c 5c 72 0d 8e 7a 24 26 32 fb b8 47 67 16 b2 88 c4 ab e5 2a 9b 38 cb 58 9e ed 94 dc 84 65 23 05 06 4e 59 8a f3 6e e1 ec 9e 37 2b a9 4a 52 b2 b2 9c 8e 6c a7 2b Data Ascii: p(1~=0h4\|DD#~QyEoFa]@-[%hNu^G.qtDh;J.o]GQ;msWG-qW$6Mo, '\|[b'rrbHq,Hhse{HLl$/L\rz$&2Gg8Xe#NYn7+JRl+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49903	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	1301	OUT	GET /pagead/viewthroughconversion/416707819/?random=1714073133449&cv=11&fst=1714073133449&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&hn=www.googleadservices.com&frm=0&tiba=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=1676511191.1714073129&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-25 19:25:35 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 19:25:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi; expires=Sat, 25-Apr-2026 19:25:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 19:25:35 UTC	244	IN	Data Raw: 61 37 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: a75(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-25 19:25:35 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-25 19:25:35 UTC	1185	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 77 4e 7a 4d 78 4d 7a 4d 30 4e 44 6b 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTQwNzMxMzM0NDk',['https://www.google.com/pagead/1p-user-lis
2024-04-25 19:25:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49904	108.139.23.251	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	573	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-AB=24b5be485c2747719f2dadcc8288a94b
2024-04-25 19:25:35 UTC	571	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 45911 Connection: close Server: CloudFront Date: Wed, 24 Apr 2024 21:12:20 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: public, s-maxage=86400, max-age=600 ETag: 24b5be485c2747719f2dadcc8288a94b X-Cache: Hit from cloudfront Via: 1.1 ac5c3ac6e5d87e9394ed00e7554c9aee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: 3r0UImo1IXtVKvN_X2zhDKd4QLMGukZjk1SA1CIHUvIMhgE6Mbs2Ng== Age: 79995
2024-04-25 19:25:35 UTC	15813	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-04-25 19:25:35 UTC	16384	IN	Data Raw: 65 28 73 74 26 26 73 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 44 72 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 78 72 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 28 74 29 7c 7c 61 28 74 29 7c 7c 77 28 74 29 7d 76 61 72 20 52 72 2c 4e 72 3d 44 72 26 26 62 28 44 72 2e 73 74 72 69 6e 67 69 66 79 29 2c 4f 72 3d 27 5c 5c 22 6e 72 74 62 66 27 3b 66 75 6e 63 74 69 6f 6e 20 4c 72 28 74 29 7b 76 61 72 20 6e 3d 5b 5d 3b 69 66 28 4e 72 29 74 72 79 7b 72 65 74 75 72 6e 20 Data Ascii: e(st&&st.getElementById(t));return t}var Dr=m((function(){return JSON}));function xr(t){return void 0===t\|\|null==t\|\|function(t){return"boolean"==typeof t}(t)\|\|a(t)\|\|w(t)}var Rr,Nr=Dr&&b(Dr.stringify),Or='\\"nrtbf';function Lr(t){var n=[];if(Nr)try{return
2024-04-25 19:25:35 UTC	13714	IN	Data Raw: 38 22 21 3d 3d 6f 7c 7c 28 6f 3d 22 22 29 2c 34 3d 3d 3d 44 28 6e 2b 3d 6f 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6e 5b 30 5d 2b 28 6e 75 6c 6c 21 3d 6e 5b 31 5d 3f 6e 5b 31 5d 3a 22 30 22 29 2b 28 6e 75 6c 6c 21 3d 6e 5b 32 5d 3f 6e 5b 32 5d 3a 22 30 22 29 2b 28 6e 75 6c 6c 21 3d 6e 5b 33 5d 3f 6e 5b 33 5d 3a 22 30 22 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 44 74 28 22 53 58 22 2c 74 29 2c 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 69 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 44 28 6e 29 2c 65 3d 30 3b 65 3c 72 3b 65 2b 2b 29 69 74 28 74 2c 6e 5b 65 5d 29 7d 76 61 72 20 77 69 3d 5b 5d 3b 74 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 6e 2e 69 70 67 2c 6e 2e 74 2c 6e 2e 69 70 67 26 26 50 69 28 77 69 2c 68 28 6e 2e 69 70 67 Data Ascii: 8"!==o\|\|(o=""),4===D(n+=o))break}return n[0]+(null!=n[1]?n[1]:"0")+(null!=n[2]?n[2]:"0")+(null!=n[3]?n[3]:"0")}catch(t){return Dt("SX",t),""}}function Pi(t,n){for(var r=D(n),e=0;e<r;e++)it(t,n[e])}var wi=[];tt((function(t,n){n.ipg,n.t,n.ipg&&Pi(wi,h(n.ipg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49905	99.84.108.76	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:34 UTC	533	OUT	GET /widget.js HTTP/1.1 Host: widget.wickedreports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:35 UTC	532	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 25893 Connection: close Date: Thu, 25 Apr 2024 17:50:17 GMT Last-Modified: Thu, 25 Apr 2024 17:07:58 GMT ETag: "a573e0323f255d4ff82173d608f94309" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 21b0487d8c28cb4577401d2a73a03052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 X-Amz-Cf-Id: jUqU_yX9THMXqbwHmpxAyK9SZyKc2XSm9hSp4KpUgrmtQEGzSjcsJQ== Age: 5719
2024-04-25 19:25:35 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-04-25 19:25:35 UTC	9200	IN	Data Raw: 74 69 6f 6e 20 54 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 Data Ascii: tion T(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}var C=function(){function e(){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot
2024-04-25 19:25:35 UTC	309	IN	Data Raw: 66 65 72 72 65 72 2e 74 72 69 6d 28 29 3f 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 68 69 73 2e 72 65 66 65 72 72 65 72 29 3a 74 68 69 73 2e 72 65 66 65 72 72 65 72 3d 22 22 7d 7d 5d 29 26 26 55 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2c 65 7d 28 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 65 77 20 6a 28 65 2e 77 72 57 69 64 67 65 74 53 65 74 74 69 6e 67 73 29 2e 62 6f 6f 74 28 29 7d 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 2c 77 69 6e 64 6f 77 2e 5f 77 72 3d 67 7c 7c 5b 5d 2c 77 69 6e 64 6f 77 2e 5f 77 72 2e 73 65 Data Ascii: ferrer.trim()?this.referrer=encodeURIComponent(this.referrer):this.referrer=""}}])&&U(t.prototype,n),Object.defineProperty(t,"prototype",{writable:!1}),e}();!function(e,t,n){new j(e.wrWidgetSettings).boot()}(window,document),window._wr=g\|\|[],window._wr.se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49907	3.163.115.21	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:35 UTC	587	OUT	GET /sessions/2832943?s=0.25&r=0.06561110012468774 HTTP/1.1 Host: vc.hotjar.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:35 UTC	337	IN	HTTP/1.1 204 No Content Connection: close Access-Control-Allow-Origin: * Cache-Control: no-store Date: Thu, 25 Apr 2024 19:25:35 GMT X-Cache: Miss from cloudfront Via: 1.1 392ae56b81ecdd89977a6262a9d12eb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P9 X-Amz-Cf-Id: u8yIGVgjeTtxxGqwYgr2Gxh1Gib6C_wmaE-GhWQYdsbn4bRRDojukg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49909	151.101.0.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:35 UTC	634	OUT	GET /user/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1714073134026&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:35 UTC	685	IN	HTTP/1.1 200 OK Connection: close Content-Length: 327 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU9HWmhaalEwWm1JdE0ySmxPQzAwTWpBMExUazJaRGN0Wm1FMlpEWXlaR1kyTldSaw cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1525567893446579 Date: Thu, 25 Apr 2024 19:25:35 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 19:25:35 UTC	327	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49908	151.101.0.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:35 UTC	1349	OUT	GET /v3/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714073134031 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:35 UTC	657	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 19:25:35 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1225505242976908 Date: Thu, 25 Apr 2024 19:25:35 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 19:25:35 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49911	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:35 UTC	1258	OUT	GET /p?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&ev=PAGE_VIEW&intg=gtm&pids=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_c1=e047ce99-8b6d-400f-973c-746356c74d77&u_sclid=23642ee4-9521-4f89-8751-3f4f3aa963a9&u_scsid=bc2dc1e1-c043-4115-b003-10863bafdb69&bt=1d53c387&d_a=x86&d_bvs=%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D&d_os=10.0.0&d_ot=Windows&df=true&huah=true&m_dcl=17632&m_fcps=7523&m_pi=17612&m_pl=0&m_pv=2&m_rd=20106&m_sh=1024&m_sl=1&m_sw=1280&pl=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&trackId=2d218ca2-ef93-486f-b17e-95bb8b9b9529&ts=1714073132985&v=3.16.0-2404242003 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBgQ0AIQgDwIlIWovwjmOCTMHwfxeKuhtpZMv8Q9gpyEq13jtc7J5h0pGifPADq2lATTIAAAA=
2024-04-25 19:25:35 UTC	526	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:35 GMT access-control-allow-origin: * cache-control: no-cache, no-transform content-type: image/png strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 68 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:35 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49912	3.226.98.213	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:35 UTC	1100	OUT	GET /index.php?WickedClientID=3819&WickedEmail=&WickedTrackingDate=1714073134343&WickedURL=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&WickedReferrerURL=&WickedNullURL=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%26utm_term%3DOrganic%20traffic&WickedNullReferrerURL= HTTP/1.1 Host: track.wickedreports.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:36 UTC	342	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx X-Powered-By: PHP/8.1.26 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: *
2024-04-25 19:25:36 UTC	124	IN	Data Raw: 37 36 0d 0a 7b 22 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 22 34 39 36 34 38 37 35 32 33 39 32 39 38 38 32 33 34 37 31 32 35 30 30 36 31 38 33 32 33 38 34 31 32 33 36 37 39 39 34 38 32 36 39 38 34 39 38 39 33 30 39 30 31 34 37 34 22 2c 22 53 68 61 72 64 49 64 22 3a 22 73 68 61 72 64 49 64 2d 30 30 30 30 30 30 30 30 30 30 33 30 22 7d 20 54 72 61 63 6b 65 64 0d 0a Data Ascii: 76{"SequenceNumber":"49648752392988234712500618323841236799482698498930901474","ShardId":"shardId-000000000030"} Tracked
2024-04-25 19:25:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49913	31.13.88.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:35 UTC	1311	OUT	GET /signals/config/719379935201922?v=2.9.154&r=stable&domain=earnandexcel.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:36 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-25 19:25:36 UTC	1523	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-25 19:25:36 UTC	12	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 Data Ascii: /*** Copyri
2024-04-25 19:25:36 UTC	1500	IN	Data Raw: 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 Data Ascii: ght (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web s
2024-04-25 19:25:36 UTC	1500	IN	Data Raw: 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c Data Ascii: urn;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol
2024-04-25 19:25:36 UTC	1500	IN	Data Raw: 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: ototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){
2024-04-25 19:25:36 UTC	1500	IN	Data Raw: 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d 29 Data Ascii: shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e})
2024-04-25 19:25:36 UTC	1500	IN	Data Raw: 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 22 Data Ascii: };if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o=""
2024-04-25 19:25:36 UTC	1500	IN	Data Raw: 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c 3b 69 66 28 63 Data Ascii: ar d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null;if(c
2024-04-25 19:25:36 UTC	1500	IN	Data Raw: 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 6f Data Ascii: (b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return!0;fo
2024-04-25 19:25:36 UTC	1500	IN	Data Raw: 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 65 3d 63 2e 74 Data Ascii: Modules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)return;var e=c.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49917	151.101.128.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:36 UTC	448	OUT	GET /user/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1714073134026&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-25 19:25:36 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 327 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5EUm1NakZpWldVdFl6UXlZUzAwTm1JeExUZzBaamd0T1RWaE0yWXlZalE0Wm1Veg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 6257860478410606 Date: Thu, 25 Apr 2024 19:25:36 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 19:25:36 UTC	327	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49916	151.101.128.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:36 UTC	1163	OUT	GET /v3/?tid=2614453997099&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714073134031 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-25 19:25:36 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Fri, 25 Apr 2025 19:25:36 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1342807735543386 Date: Thu, 25 Apr 2024 19:25:36 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-25 19:25:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49919	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:36 UTC	1052	OUT	GET /cm/s?bt=1d53c387&pnid=140&cb=1714073135172&u_scsid=09f6e484-6aae-4988-9730-86d017ae8c98&u_sclid=dcdd61b2-8d42-4e1c-97ee-61a22e897fa1 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tr.snapchat.com/cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bc2dc1e1-c043-4115-b003-10863bafdb69&u_sclid=23642ee4-9521-4f89-8751-3f4f3aa963a9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAAXBgQ0AIQgDwIlIWovwjmOCTMHwfxeKuhtpZMv8Q9gpyEq13jtc7J5h0pGifPADq2lATTIAAAA=
2024-04-25 19:25:36 UTC	779	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:25:36 GMT location: https://pixel.tapad.com/idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1713917639082%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D set-cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ3AIAwDwIki2ZgmwDaVQqZgePrs53Quz/dBGFmyPuA2E7JUtr0nG6sOOxbjM0T5+RUXMeOTKUAAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 4 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49921	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:36 UTC	2355	OUT	POST /blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ HTTP/1.1 Host: earnandexcel.com Connection: keep-alive Content-Length: 790 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryHn7rWWmHFkS2YbGp Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _scid=e047ce99-8b6d-400f-973c-746356c74d77; _scid_r=e047ce99-8b6d-400f-973c-746356c74d77; _ga_8Y0K4MPJV5=GS1.1.1714073132.1.0.1714073132.60.0.0; _ga=GA1.1.1040263935.1714073125; _hjSessionUser_2832943=eyJpZCI6Ijc4MDVlYjQ2LWJmMWQtNTRlNi1hYzFkLWE2YWJkYWY3YzllNiIsImNyZWF0ZWQiOjE3MTQwNzMxMzM4ODksImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6IjgxZDgwMjQ1LTIwYzgtNDhkMS05NzUyLTBkNzQ0NjE1OTkyMiIsImMiOjE3MTQwNzMxMzM4OTIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1714073134342%2C%22c%22%3A3819%7D; _pin_unauth=dWlkPU9HWmhaalEwWm1JdE0ySmxPQzAwTWpBMExUazJaRGN0Wm1FMlpEWXlaR1kyTldSaw; _tt_enable_cookie=1; _ttp=JqnnrKuxcWw0MgqHxFigUNkJfTU
2024-04-25 19:25:36 UTC	790	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 6e 37 72 57 57 6d 48 46 6b 53 32 59 62 47 70 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6e 69 74 72 6f 42 65 61 63 6f 6e 55 72 6c 22 0d 0a 0d 0a 61 48 52 30 63 48 4d 36 4c 79 39 6c 59 58 4a 75 59 57 35 6b 5a 58 68 6a 5a 57 77 75 59 32 39 74 4c 32 4a 73 62 32 63 76 61 47 39 33 4c 58 52 76 4c 57 46 6b 5a 43 31 68 4c 57 78 6c 5a 32 56 75 5a 43 31 70 62 69 31 6c 65 47 4e 6c 62 43 31 68 4c 57 4e 76 62 58 42 79 5a 57 68 6c 62 6e 4e 70 64 6d 55 74 5a 33 56 70 5a 47 55 76 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 48 6e 37 72 57 57 6d 48 46 6b 53 32 59 62 47 70 0d 0a 43 6f 6e 74 Data Ascii: ------WebKitFormBoundaryHn7rWWmHFkS2YbGpContent-Disposition: form-data; name="nitroBeaconUrl"aHR0cHM6Ly9lYXJuYW5kZXhjZWwuY29tL2Jsb2cvaG93LXRvLWFkZC1hLWxlZ2VuZC1pbi1leGNlbC1hLWNvbXByZWhlbnNpdmUtZ3VpZGUv------WebKitFormBoundaryHn7rWWmHFkS2YbGpCont
2024-04-25 19:25:36 UTC	833	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b84eeac56744-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Vary: Accept-Encoding accept-ch: Sec-CH-UA-Mobile ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 x-nitro-beacon: FORWARD Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wZ90O9PJC0oMwMfDRY%2BbGh8SH0FhZ7IxDxdADkTeiwl9hnvPxf654YdTyvHeFIFHn9wBfIKesjo0XP0BcAM0WJE%2FUbCfFKEHqs074%2F0845gbRN%2FCK7NOk%2FXBvjZrXhfm7gM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:36 UTC	20	IN	Data Raw: 66 0d 0a 43 61 63 68 65 20 72 65 71 75 65 73 74 65 64 0d 0a Data Ascii: fCache requested
2024-04-25 19:25:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49924	142.250.105.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:36 UTC	1407	OUT	GET /pagead/1p-user-list/416707819/?random=1714073133449&cv=11&fst=1714071600000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&hn=www.googleadservices.com&frm=0&tiba=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=1676511191.1714073129&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtquHGB3TKa4tXTXFf9VxbZ33rUCavN1TFQCVWLaklqAwnYqJoJ&random=2776737244&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:36 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 19:25:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49925	3.131.125.53	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:36 UTC	868	OUT	GET /index.php?WickedClientID=3819&WickedEmail=&WickedTrackingDate=1714073134343&WickedURL=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&WickedReferrerURL=&WickedNullURL=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%26utm_term%3DOrganic%20traffic&WickedNullReferrerURL= HTTP/1.1 Host: track.wickedreports.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:36 UTC	342	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx X-Powered-By: PHP/8.1.26 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS, DELETE, PUT Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: *
2024-04-25 19:25:36 UTC	124	IN	Data Raw: 37 36 0d 0a 7b 22 53 65 71 75 65 6e 63 65 4e 75 6d 62 65 72 22 3a 22 34 39 36 34 38 37 31 39 30 36 34 37 32 35 32 34 32 32 31 35 32 37 32 30 32 34 32 32 33 36 39 31 38 35 33 38 32 31 39 38 36 30 30 34 36 32 35 39 37 35 36 37 32 38 38 32 22 2c 22 53 68 61 72 64 49 64 22 3a 22 73 68 61 72 64 49 64 2d 30 30 30 30 30 30 30 30 30 30 30 33 22 7d 20 54 72 61 63 6b 65 64 0d 0a Data Ascii: 76{"SequenceNumber":"49648719064725242215272024223691853821986004625975672882","ShardId":"shardId-000000000003"} Tracked
2024-04-25 19:25:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49929	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:36 UTC	825	OUT	GET /idsync/ex/push?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1713917639082%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:37 UTC	1147	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:37 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:25:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:25:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1713917639082%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49932	108.177.122.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	1171	OUT	GET /pagead/1p-user-list/416707819/?random=1714073133449&cv=11&fst=1714071600000&bg=ffffff&guid=ON&async=1&gtm=45be44o0z8835174253za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&hn=www.googleadservices.com&frm=0&tiba=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&npa=0&pscdl=noapi&auid=1676511191.1714073129&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtquHGB3TKa4tXTXFf9VxbZ33rUCavN1TFQCVWLaklqAwnYqJoJ&random=2776737244&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:37 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 19:25:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49934	64.233.176.139	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	1284	OUT	POST /g/collect?v=2&tid=G-8Y0K4MPJV5&gtm=45je44o0v884867978z8835174253za200&_p=1714073119888&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1040263935.1714073125&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1714073132&sct=1&seg=0&dl=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&dt=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&en=page_view&_fv=1&_ss=1&tfd=20077 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:37 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://earnandexcel.com Date: Thu, 25 Apr 2024 19:25:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49936	31.13.88.35	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	912	OUT	GET /tr/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rl=&if=false&ts=1714073135566&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714073135563.564279544&ler=empty&cdl=API_unavailable&it=1714073133540&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:37 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 19:25:37 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49937	31.13.88.35	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	1022	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rl=&if=false&ts=1714073135566&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714073135563.564279544&ler=empty&cdl=API_unavailable&it=1714073133540&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:37 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 19:25:37 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 19:25:37 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-25 19:25:37 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-25 19:25:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49941	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	911	OUT	GET /idsync/ex/push/check?partner_id=2884&partner_url=https%3A%2F%2Ftr.snapchat.com%2Fcm%2Fp%3Frand%3D1713917639082%26pnid%3D140%26pcid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2
2024-04-25 19:25:37 UTC	1182	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:37 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:25:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:25:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:25:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://tr.snapchat.com/cm/p?rand=1713917639082&pnid=140&pcid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49942	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	728	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 11041 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ3AIAwDwIki2ZgmwDaVQqZgePrs53Quz/dBGFmyPuA2E7JUtr0nG6sOOxbjM0T5+RUXMeOTKUAAAAA=
2024-04-25 19:25:37 UTC	11041	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 65 30 34 37 63 65 39 39 2d 38 62 36 64 2d 34 30 30 66 2d 39 37 33 63 2d 37 34 36 33 35 36 63 37 34 64 37 37 22 2c 22 6c 63 22 3a 22 36 35 66 63 39 39 37 35 2d 62 62 33 62 2d 34 30 38 35 2d 61 35 34 65 2d 66 31 30 39 37 31 64 30 31 33 33 37 22 2c 22 6c 73 22 3a 22 32 33 36 34 32 65 65 34 2d 39 35 32 31 2d 34 66 38 39 2d 38 37 35 31 2d 33 66 34 66 33 61 61 39 36 33 61 39 22 2c 22 72 22 3a 22 64 32 30 39 37 62 61 62 2d 62 30 66 66 2d 34 30 65 66 2d 61 35 34 62 2d 32 65 35 30 64 36 61 37 34 35 35 34 22 2c 22 73 73 22 3a 22 62 63 32 64 63 31 65 31 2d 63 30 34 33 2d 34 31 31 35 2d 62 30 30 33 2d 31 30 38 36 33 62 61 66 64 62 36 39 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"e047ce99-8b6d-400f-973c-746356c74d77","lc":"65fc9975-bb3b-4085-a54e-f10971d01337","ls":"23642ee4-9521-4f89-8751-3f4f3aa963a9","r":"d2097bab-b0ff-40ef-a54b-2e50d6a74554","ss":"bc2dc1e1-c043-4115-b003-10863bafdb69","df":true,"s
2024-04-25 19:25:37 UTC	483	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:37 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 3 server: API Gateway alt-svc: clear access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49943	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	727	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 943 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ3AIAwDwIki2ZgmwDaVQqZgePrs53Quz/dBGFmyPuA2E7JUtr0nG6sOOxbjM0T5+RUXMeOTKUAAAAA=
2024-04-25 19:25:37 UTC	943	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 65 30 34 37 63 65 39 39 2d 38 62 36 64 2d 34 30 30 66 2d 39 37 33 63 2d 37 34 36 33 35 36 63 37 34 64 37 37 22 2c 22 6c 63 22 3a 22 36 35 66 63 39 39 37 35 2d 62 62 33 62 2d 34 30 38 35 2d 61 35 34 65 2d 66 31 30 39 37 31 64 30 31 33 33 37 22 2c 22 6c 73 22 3a 22 32 33 36 34 32 65 65 34 2d 39 35 32 31 2d 34 66 38 39 2d 38 37 35 31 2d 33 66 34 66 33 61 61 39 36 33 61 39 22 2c 22 72 22 3a 22 30 63 65 62 66 37 35 37 2d 34 64 38 30 2d 34 66 36 63 2d 61 33 30 35 2d 35 36 63 35 61 63 62 38 63 38 36 61 22 2c 22 73 73 22 3a 22 62 63 32 64 63 31 65 31 2d 63 30 34 33 2d 34 31 31 35 2d 62 30 30 33 2d 31 30 38 36 33 62 61 66 64 62 36 39 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"e047ce99-8b6d-400f-973c-746356c74d77","lc":"65fc9975-bb3b-4085-a54e-f10971d01337","ls":"23642ee4-9521-4f89-8751-3f4f3aa963a9","r":"0cebf757-4d80-4f6c-a305-56c5acb8c86a","ss":"bc2dc1e1-c043-4115-b003-10863bafdb69","df":true,"s
2024-04-25 19:25:37 UTC	429	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:37 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49945	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	2383	OUT	GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Medium.ttf HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _scid=e047ce99-8b6d-400f-973c-746356c74d77; _scid_r=e047ce99-8b6d-400f-973c-746356c74d77; _ga_8Y0K4MPJV5=GS1.1.1714073132.1.0.1714073132.60.0.0; _ga=GA1.1.1040263935.1714073125; _hjSessionUser_2832943=eyJpZCI6Ijc4MDVlYjQ2LWJmMWQtNTRlNi1hYzFkLWE2YWJkYWY3YzllNiIsImNyZWF0ZWQiOjE3MTQwNzMxMzM4ODksImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6IjgxZDgwMjQ1LTIwYzgtNDhkMS05NzUyLTBkNzQ0NjE1OTkyMiIsImMiOjE3MTQwNzMxMzM4OTIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1714073134342%2C%22c%22%3A3819%7D; _pin_unauth=dWlkPU9HWmhaalEwWm1JdE0ySmxPQzAwTWpBMExUazJaRGN0Wm1FMlpEWXlaR1kyTldSaw; _tt_enable_cookie=1; _ttp=JqnnrKuxcWw0MgqHxFigUNkJfTU; _fbp=fb.1.1714073135563.564279544; utm_source=; utm_campaign=; growme_version={"name":"7.244.0","version":"7.244.0"}
2024-04-25 19:25:38 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:38 GMT Content-Type: application/x-font-ttf Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8579dc6ad94-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1f128" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0II3r6oK9wFoO%2F%2FX07c2%2BgojMoKFgk237i7WI6OaRq4%2FaHKhJveZpPtfKFOegcV6PUtQ0b0UDsJIm5G64wC12cFYTSzMjreEjFeh%2BW0YNyM7VfX2uebcie7%2BGceubHYfrEY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:38 UTC	437	IN	Data Raw: 37 63 30 62 0d 0a 00 01 00 00 00 10 01 00 00 04 00 00 46 46 54 4d 8c 62 d3 64 00 01 f1 0c 00 00 00 1c 4f 53 2f 32 4e eb 6e b1 00 00 01 88 00 00 00 60 63 6d 61 70 a7 be e8 c8 00 00 0d 94 00 00 05 b6 66 65 61 74 40 33 0d dd 00 01 eb d8 00 00 00 64 67 61 73 70 ff ff 00 03 00 01 ea 78 00 00 00 08 67 6c 79 66 d3 68 d7 1f 00 00 19 24 00 00 fa b0 68 65 61 64 15 07 13 4e 00 00 01 0c 00 00 00 36 68 68 65 61 08 42 06 2c 00 00 01 44 00 00 00 24 68 6d 74 78 77 99 83 20 00 00 01 e8 00 00 0b ac 6b 65 72 6e 93 91 2f eb 00 01 13 d4 00 00 b5 8e 6c 6f 63 61 15 a3 53 a2 00 00 13 4c 00 00 05 d8 6d 61 78 70 03 34 00 6f 00 00 01 68 00 00 00 20 6d 6f 72 78 34 af 10 b8 00 01 ec 3c 00 00 04 d0 6e 61 6d 65 9e 3b 13 2a 00 01 c9 64 00 00 09 b0 70 6f 73 74 5c 15 d2 df 00 01 d3 14 00 Data Ascii: 7c0bFFTMbdOS/2Nn`cmapfeat@3dgaspxglyfh$headN6hheaB,D$hmtxw kern/locaSLmaxp4oh morx4<name;*dpost\
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 00 00 00 a1 00 02 ef 50 00 e0 fa 00 00 00 00 00 00 00 00 55 4b 57 4e 00 40 00 20 fb 04 04 28 fe f5 00 00 04 28 01 0b 20 00 01 97 00 00 00 00 02 16 03 0f 00 00 00 20 00 01 03 1f 00 5a 00 00 00 00 01 4d 00 00 01 08 00 00 01 38 00 4d 01 c6 00 38 03 3d 00 27 02 7b 00 27 03 6b 00 25 02 d9 00 30 00 fe 00 38 01 90 00 31 01 90 00 15 01 f3 00 29 02 6c 00 2d 01 33 00 3e 01 d0 00 45 01 24 00 3b 02 1c 00 20 02 fc 00 35 01 ce 00 07 02 91 00 30 02 87 00 28 02 c8 00 1f 02 7f 00 29 02 ad 00 35 02 67 00 1d 02 a7 00 34 02 ae 00 2e 01 39 00 45 01 3d 00 48 02 97 00 26 02 73 00 48 02 97 00 4e 02 16 00 20 03 63 00 34 03 0f 00 00 02 de 00 64 03 42 00 30 03 2d 00 64 02 97 00 64 02 82 00 64 03 55 00 30 03 41 00 64 01 42 00 64 02 4f 00 19 02 c7 00 64 02 50 00 64 04 15 00 64 03 55 Data Ascii: PUKWN@ (( ZM8M8='{'k%081)l-3>E$; 50()5g4.9E=H&sHN c4dB0-dddU0AdBdOdPddU
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 02 c7 00 64 02 45 00 50 03 55 00 30 02 a5 00 2b 03 0e 00 00 02 3f 00 2f 04 1d ff f4 03 b7 00 2f 03 8a 00 31 02 8f 00 2d 02 81 00 27 01 f7 00 20 02 94 00 14 01 a0 00 17 01 1e ff d7 01 9f 00 14 01 94 00 14 00 c6 00 14 01 90 00 04 01 dc 00 14 00 00 ff 84 00 00 ff 84 00 00 ff 44 00 00 ff 3c 00 00 ff 53 00 00 ff 4a 00 00 ff b1 00 00 ff 46 00 00 ff 6e 00 00 ff 26 00 00 ff 44 00 00 ff b8 00 00 ff ba 00 00 ff 7e 00 00 ff a3 03 84 00 30 03 6b 00 3a 02 d6 00 30 02 c6 00 15 02 97 00 64 03 4a 00 15 02 4f 00 64 03 42 00 30 02 81 00 27 01 42 00 64 01 42 ff e9 02 4f 00 19 04 c7 00 16 04 ca 00 64 03 5e 00 15 02 c7 00 64 02 c4 00 04 03 3b 00 64 03 0f 00 00 02 d7 00 64 02 de 00 64 02 4f 00 64 03 38 00 0f 02 97 00 64 04 20 00 01 02 84 00 23 03 50 00 64 03 50 00 64 02 c7 00 Data Ascii: dEPU0+?//1-' D<SJFn&D~0k:0dJOdB0'BdBOd^d;dddOd8d #PdPd
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: fd 00 35 01 4d 00 4f 01 38 00 4d 02 19 00 28 02 17 00 28 01 51 00 50 01 ce 00 1e 01 ce 00 28 01 b3 00 64 01 b3 00 27 01 95 00 33 01 95 00 18 04 00 00 4c 02 63 00 4c 01 d6 00 48 02 8f 00 2f 02 90 00 41 01 95 00 2f 01 95 00 41 02 59 00 2c 02 81 00 27 02 97 00 93 02 d5 00 31 02 d5 00 31 01 ce 00 07 02 86 00 32 02 88 00 28 02 c8 00 1f 02 7f 00 29 02 ad 00 35 02 67 00 1d 02 a7 00 34 02 ae 00 2e 02 a8 00 24 02 a8 00 24 02 a8 00 3b 02 a8 00 40 02 a8 00 3e 02 a8 00 24 02 a8 00 42 02 a8 00 2e 02 a8 00 3d 02 a8 00 35 02 a8 00 2e 02 a8 00 24 02 a8 00 24 02 a8 00 3b 02 a8 00 42 02 a8 00 3e 02 a8 00 24 02 a8 00 3f 02 a8 00 30 02 a8 00 3d 02 a8 00 35 02 a8 00 2e 02 a8 00 50 02 a8 00 36 02 a8 00 3d 02 a8 00 24 02 a8 00 1a 02 a8 00 14 02 a8 00 2b 02 a8 00 1b 02 a8 00 4f Data Ascii: 5MO8M((QP(d'3LcLH/A/AY,'112()5g4.$$;@>$B.=5.$$;B>$?0=5.P6=$+O
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 00 1b 00 1c 00 1d 00 1e 00 1f 00 20 00 21 00 22 00 23 00 24 00 25 00 26 00 27 00 28 00 29 00 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 61 00 00 00 84 00 85 00 87 00 89 00 91 00 96 00 9c 00 a1 00 a0 00 a2 00 a4 00 a3 00 a5 00 a7 00 a9 00 a8 00 aa 00 ab 00 ad 00 ac 00 ae 00 af 00 b1 00 b3 00 b2 00 b4 00 b6 00 b5 00 ba 00 b9 00 bb 00 bc 02 1e 00 70 00 63 00 64 00 68 02 20 00 76 00 9f 00 6e 00 6a 02 38 00 74 00 69 02 58 00 86 00 98 02 54 00 71 02 59 02 5a 00 66 00 75 02 4e 02 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`apcdh vnj8tiXTqYZfuN
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 88 4d bc 4e 14 4e 3a 4e 92 4e be 4f 00 4f 48 4f 8a 4f d8 50 2a 50 48 50 64 50 96 50 c6 51 06 51 46 51 72 51 9c 51 e2 52 2a 52 76 52 bc 52 e6 53 02 53 3e 53 70 53 a0 53 c2 53 fc 54 34 54 7a 54 bc 54 fe 55 30 55 6e 55 90 55 b0 55 f8 56 38 56 5c 56 84 56 a8 56 d0 57 08 57 44 57 66 57 88 57 ba 58 06 58 24 58 40 58 4e 58 5c 58 7a 58 9a 58 b8 58 ee 59 24 59 5a 59 70 59 8c 59 a0 59 d4 5a 30 5a 42 5a 54 5a 8c 5a d8 5a e6 5b 1a 5b 6a 5b a8 5b e2 5c 0e 5c 46 5c 8e 5c b4 5c e4 5d 22 5d 3a 5d 64 5d 90 5d bc 5d ee 5e 28 5e 50 5e 80 5e ca 5f 28 5f 78 5f ec 60 56 60 a4 60 be 60 d8 60 f2 61 0c 61 2a 61 46 61 62 61 7e 61 aa 61 d0 61 f6 62 1a 62 40 62 66 62 a0 62 b6 62 cc 62 e8 62 f6 63 0a 63 6e 63 8e 63 b2 63 ea 64 0c 64 26 64 40 64 d4 64 e2 64 f8 65 06 65 1a 65 38 65 5c Data Ascii: MNN:NNOOHOOPPHPdPPQQFQrQQRRvRRSS>SpSSST4TzTTU0UnUUUV8V\VVVWWDWfWWXX$X@XNX\XzXXXY$YZYpYYYZ0ZBZTZZZ[[j[[\\F\\\]"]:]d]]]^(^P^^_(_x_`V````aa*aFaba~aaabb@bfbbbbbccncccdd&d@dddeee8e\
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 12 1d 01 14 06 48 33 d8 71 67 33 84 93 92 88 42 9e 01 0a 1c 87 db 4c 41 4a ff 00 a4 1d a3 fc 00 00 01 00 29 01 83 01 ca 03 0f 00 0e 00 00 13 37 27 37 17 35 33 15 37 17 07 17 07 27 07 5f 55 8b 1a 8b 56 8b 1b 8b 55 43 58 57 01 b4 76 2e 4f 2d 95 95 2d 4f 2e 76 31 76 76 00 00 00 00 01 00 2d 00 6a 02 3f 02 6e 00 0b 00 00 13 35 33 35 33 15 33 15 23 15 23 35 2d d1 70 d1 d1 70 01 37 6d ca ca 6d cd cd 00 01 00 3e ff 5e 00 f5 00 aa 00 11 00 00 17 27 36 37 06 23 22 26 35 34 36 33 32 16 1d 01 14 06 7c 36 43 20 0e 10 1f 2e 32 28 27 36 42 a2 30 2f 4a 06 2f 23 25 32 40 32 05 3c 72 00 00 01 00 45 01 08 01 8b 01 81 00 03 00 00 13 21 15 21 45 01 46 fe ba 01 81 79 00 00 00 01 00 3b ff fb 00 e9 00 aa 00 0a 00 00 37 34 36 33 32 16 15 14 06 22 26 3b 33 24 25 32 33 48 33 52 25 Data Ascii: H3qg3BLAJ)7'7537'_UVUCXWv.O--O.v1vv-j?n53533##5-pp7mm>^'67#"&54632\|6C .2('6B0/J/#%2@2<rE!!EFy;74632"&;3$%23H3R%
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 21 15 21 15 21 15 21 48 01 e3 fe 1d 01 e3 fe 1d 02 31 6f a8 6f 00 00 00 01 00 4e 00 27 02 71 02 6d 00 06 00 00 01 15 05 35 2d 01 35 02 71 fd dd 01 8b fe 75 01 77 58 f8 76 ae ae 74 00 00 00 00 02 00 20 ff f9 01 ef 03 1a 00 1b 00 24 00 00 01 32 16 15 14 06 07 0e 01 1d 01 23 35 34 36 3f 01 36 35 34 26 23 22 06 07 27 3e 01 02 14 16 33 32 36 34 26 22 01 0a 62 83 3c 43 29 23 73 27 2d 1b 4e 39 2c 29 46 13 67 19 78 10 2e 20 21 2e 2f 40 03 1a 77 5c 3d 54 3a 23 35 26 18 2d 34 4d 27 17 45 37 28 34 30 2f 39 41 55 fd 4e 42 2d 2d 42 2e 00 00 00 00 02 00 34 ff ad 03 3d 02 cf 00 32 00 3e 00 00 25 22 26 27 0e 01 23 22 26 35 34 36 33 32 16 17 37 33 07 06 33 32 36 35 34 26 23 22 06 15 14 1e 01 33 32 37 17 0e 01 23 22 26 35 34 36 33 32 16 15 14 06 01 22 06 17 1e 01 33 32 36 Data Ascii: !!!!H1ooN'qm5-5quwXvt $2#546?654&#"'>3264&"b<C)#s'-N9,)Fgx. !./@w\=T:#5&-4M'E7(40/9AUNB--B.4=2>%"&'#"&546327332654&#"327#"&54632"326
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 32 16 15 14 07 17 00 14 16 33 32 37 27 37 17 36 35 34 26 23 22 03 0f 60 6a 85 a8 e8 ec a7 a8 e9 51 5a fd 54 9e 73 4d 44 91 4f 94 2e 9f 72 73 11 54 4c e3 ac aa ea e6 ab 8a 6a 4c 01 b8 f0 a8 2a 7d 5a 83 49 59 78 a7 00 00 00 00 02 00 64 00 00 02 a9 03 0f 00 0d 00 18 00 00 13 21 32 16 15 14 06 07 13 23 03 23 11 23 13 33 32 36 35 34 2e 02 2b 01 64 01 26 89 82 57 4f ba 8b aa 95 7b 7b 9e 52 49 0d 20 40 2e 9e 03 0f 8a 67 52 74 1a fe c2 01 29 fe d7 01 98 4d 36 19 2a 28 17 00 00 00 01 00 27 ff f7 02 51 03 1a 00 26 00 00 05 22 26 27 37 1e 01 33 32 36 35 34 26 27 26 27 26 35 34 36 33 32 16 17 07 26 23 22 06 15 14 16 17 16 17 16 15 14 06 01 47 67 98 21 68 19 61 40 3c 4d 49 54 7f 39 3c 97 6d 63 82 1c 66 2d 71 39 4a 49 48 91 38 38 90 09 62 5a 36 3f 43 3a 31 2b 38 1a 28 Data Ascii: 2327'7654&#"`jQZTsMDO.rsTLjL}ZIYxd!2###32654.+d&WO{{RI @.gRt)M6('Q&"&'732654&'&'&54632&#"Gg!ha@<MIT9<mcf-q9JIH88bZ6?C:1+8(
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 33 11 14 06 23 22 27 37 16 33 32 36 3d 01 0e 01 13 34 26 22 06 14 16 32 36 01 2f 71 93 91 77 2b 66 1d 74 99 7e c3 4a 63 38 70 46 5c 1d 68 87 58 8e 58 59 8c 59 04 a2 6f 6a a8 2d 2d 51 fd f1 7e 94 a2 39 71 53 50 54 2e 2c 01 13 46 60 5f 8e 61 61 00 01 00 50 00 00 02 2f 03 2e 00 11 00 00 21 11 34 26 23 22 06 15 11 23 11 33 11 36 32 16 15 11 01 b8 3b 3b 38 43 77 77 3e c4 66 01 2b 3c 49 4a 3d fe d7 03 2e fe a4 4f 78 60 fe b7 00 02 00 3d 00 00 00 d9 03 12 00 07 00 0b 00 00 12 34 36 32 16 14 06 22 17 23 11 33 3d 2e 40 2e 2e 40 5c 77 77 02 a3 40 2f 2f 40 2e 5f fd ea 00 00 02 ff d7 fe f7 00 e2 03 12 00 09 00 16 00 00 12 34 36 33 32 16 14 06 23 22 07 11 14 06 23 22 27 15 16 33 32 35 11 44 2e 20 21 2f 2f 21 20 1b 2d 35 11 0d 19 1d c2 02 a3 40 2f 2f 40 2e 5f fd b8 3c Data Ascii: 3#"'7326=4&"26/qw+ft~Jc8pF\hXXYYoj--Q~9qSPT.,F`_aaP/.!4&#"#362;;8Cww>f+<IJ=.Ox`=462"#3=.@..@\ww@//@._4632#"#"'325D. !//! -5@//@._<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49947	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	2384	OUT	GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Regular.ttf HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _scid=e047ce99-8b6d-400f-973c-746356c74d77; _scid_r=e047ce99-8b6d-400f-973c-746356c74d77; _ga_8Y0K4MPJV5=GS1.1.1714073132.1.0.1714073132.60.0.0; _ga=GA1.1.1040263935.1714073125; _hjSessionUser_2832943=eyJpZCI6Ijc4MDVlYjQ2LWJmMWQtNTRlNi1hYzFkLWE2YWJkYWY3YzllNiIsImNyZWF0ZWQiOjE3MTQwNzMxMzM4ODksImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6IjgxZDgwMjQ1LTIwYzgtNDhkMS05NzUyLTBkNzQ0NjE1OTkyMiIsImMiOjE3MTQwNzMxMzM4OTIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1714073134342%2C%22c%22%3A3819%7D; _pin_unauth=dWlkPU9HWmhaalEwWm1JdE0ySmxPQzAwTWpBMExUazJaRGN0Wm1FMlpEWXlaR1kyTldSaw; _tt_enable_cookie=1; _ttp=JqnnrKuxcWw0MgqHxFigUNkJfTU; _fbp=fb.1.1714073135563.564279544; utm_source=; utm_campaign=; growme_version={"name":"7.244.0","version":"7.244.0"}
2024-04-25 19:25:38 UTC	934	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:38 GMT Content-Type: application/x-font-ttf Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8583c3a53d4-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1ebc0" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p2NYQhBQWMVZ7J%2FIF%2BN%2FdxcoEIUGC08O3F63%2BSyWpvcEEweIonp%2FQLA9y1O6%2FjIieAQ3tqjpRLjECXuy14tr5JwPNkHS2a5hXyygs3IpZh5wLTKclV7xzKQNJj2WBo%2B2otM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:38 UTC	435	IN	Data Raw: 32 39 38 63 0d 0a 00 01 00 00 00 10 01 00 00 04 00 00 46 46 54 4d 8c 71 cd ea 00 01 eb a4 00 00 00 1c 4f 53 2f 32 4e 87 6e a2 00 00 01 88 00 00 00 60 63 6d 61 70 6e c1 29 0a 00 00 0d 94 00 00 05 ae 66 65 61 74 40 33 0d dd 00 01 e6 60 00 00 00 64 67 61 73 70 ff ff 00 03 00 01 e5 00 00 00 00 08 67 6c 79 66 d6 c7 6f 98 00 00 19 1c 00 00 fc d8 68 65 61 64 15 25 0e 00 00 00 01 0c 00 00 00 36 68 68 65 61 08 51 05 d4 00 00 01 44 00 00 00 24 68 6d 74 78 4f 30 94 74 00 00 01 e8 00 00 0b ac 6b 65 72 6e 02 3f ad f7 00 01 15 f4 00 00 ae 4a 6c 6f 63 61 a2 59 e0 98 00 00 13 44 00 00 05 d8 6d 61 78 70 03 34 00 6f 00 00 01 68 00 00 00 20 6d 6f 72 78 38 76 14 99 00 01 e6 c4 00 00 04 e0 6e 61 6d 65 ef 84 7d e5 00 01 c4 40 00 00 09 5c 70 6f 73 74 80 c0 aa 38 00 01 cd 9c 00 Data Ascii: 298cFFTMqOS/2Nn`cmapn)feat@3`dgaspglyfohead%6hheaQD$hmtxO0tkern?JlocaYDmaxp4oh morx8vname}@\post8
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 a1 00 02 ef 50 00 e0 fa 00 00 00 00 00 00 00 00 55 4b 57 4e 00 40 00 20 fb 04 04 28 fe f5 00 00 04 28 01 0b 20 00 01 97 00 00 00 00 02 16 03 0f 00 00 00 20 00 01 03 1f 00 5a 00 00 00 00 01 4d 00 00 01 17 00 00 01 1e 00 54 01 93 00 3f 03 3d 00 28 02 6f 00 32 03 60 00 27 02 cc 00 35 00 da 00 3f 01 8d 00 36 01 8d 00 1a 01 fb 00 31 02 4f 00 32 01 1f 00 44 01 b4 00 4b 01 17 00 44 01 ec 00 23 02 ff 00 3a 01 ae 00 0d 02 83 00 37 02 84 00 31 02 a9 00 1e 02 76 00 2e 02 a2 00 3c 02 61 00 26 02 9a 00 3a 02 a4 00 37 01 26 00 4b 01 2e 00 4e 02 81 00 28 02 6b 00 4e 02 81 00 53 01 ff 00 22 03 61 00 38 03 07 00 03 02 dd 00 6d 03 45 00 36 03 29 00 6d 02 98 00 6d 02 7b 00 6d 03 59 00 36 03 3c 00 6d 01 2c 00 6d 02 41 00 1e 02 a5 00 6d 02 47 00 6d 04 0b 00 6d Data Ascii: PUKWN@ (( ZMT?=(o2`'5?61O2DKD#:71v.<a&:7&K.N(kNS"a8mE6)mm{mY6<m,mAmGmm
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 00 32 02 a6 00 6d 02 21 00 58 03 5b 00 36 02 a1 00 32 03 07 00 03 02 38 00 33 04 17 ff f7 03 c7 00 33 03 84 00 38 02 8e 00 34 02 74 00 31 01 ec 00 28 02 88 00 15 01 7c 00 19 01 07 ff e5 01 84 00 14 01 6c 00 14 00 a0 00 14 01 99 00 12 01 9f 00 14 00 00 ff 9a 00 00 ff 9a 00 00 ff 52 00 00 ff 45 00 00 ff 58 00 00 ff 5e 00 00 ff c4 00 00 ff 66 00 00 ff 74 00 00 ff 44 00 00 ff 52 00 00 ff c4 00 00 ff c4 00 00 ff 88 00 00 ff af 03 7f 00 36 03 68 00 3d 02 d5 00 37 02 b9 00 11 02 98 00 6d 03 4f 00 16 02 45 00 6d 03 45 00 36 02 74 00 31 01 2c 00 6d 01 2c ff f7 02 41 00 1e 04 b6 00 11 04 cf 00 6d 03 5c 00 16 02 a5 00 6d 02 b7 00 0c 03 37 00 6d 03 07 00 03 02 d0 00 6d 02 dd 00 6d 02 45 00 6d 03 29 00 10 02 98 00 6d 03 e8 ff ff 02 85 00 31 03 49 00 6d 03 49 00 6d 02 Data Ascii: 2m!X[6283384t1(\|lREX^ftDR6h=7mOEmE6t1,m,Am\m7mmmEm)m1ImIm
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 3a 01 3a 00 55 01 28 00 5a 02 01 00 2a 01 ff 00 2a 01 3e 00 57 01 b2 00 1e 01 b2 00 29 01 a7 00 6d 01 a7 00 28 01 91 00 37 01 91 00 1b 04 0a 00 51 02 6d 00 51 01 ba 00 4e 02 40 00 35 02 40 00 4b 01 64 00 35 01 64 00 4b 02 58 00 31 02 74 00 31 03 61 00 38 00 00 ff e8 02 e6 00 3b 02 e6 00 3b 01 ae 00 0d 02 78 00 3b 02 84 00 31 02 a9 00 1e 02 76 00 2e 02 a2 00 3c 02 61 00 26 02 9a 00 3a 02 a4 00 37 02 a8 00 2e 02 a8 00 2e 02 a8 00 4b 02 a8 00 51 02 a8 00 44 02 a8 00 2d 02 a8 00 4b 02 a8 00 3c 02 a8 00 4a 02 a8 00 41 02 a8 00 3c 02 a8 00 2e 02 a8 00 2e 02 a8 00 4b 02 a8 00 4e 02 a8 00 44 02 a8 00 2d 02 a8 00 4b 02 a8 00 3c 02 a8 00 4a 02 a8 00 41 02 a8 00 3b 02 a8 00 4b 02 a8 00 41 02 a8 00 44 02 a8 00 30 02 a8 00 20 02 a8 00 2b 02 a8 00 2f 02 a8 00 1f 02 a8 Data Ascii: ::U(Z**>W)m(7QmQN@5@Kd5dKX1t1a8;;x;1v.<a&:7..KQD-K<JA<..KND-K<JA;KAD0 +/
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 00 1e 00 1f 00 20 00 21 00 22 00 23 00 24 00 25 00 26 00 27 00 28 00 29 00 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 61 00 00 00 84 00 85 00 87 00 89 00 91 00 96 00 9c 00 a1 00 a0 00 a2 00 a4 00 a3 00 a5 00 a7 00 a9 00 a8 00 aa 00 ab 00 ad 00 ac 00 ae 00 af 00 b1 00 b3 00 b2 00 b4 00 b6 00 b5 00 ba 00 b9 00 bb 00 bc 02 1e 00 70 00 63 00 64 00 68 02 20 00 76 00 9f 00 6e 00 6a 02 38 00 74 00 69 02 58 00 86 00 98 02 54 00 71 02 59 02 5a 00 66 00 75 02 4e 02 51 02 50 01 6e 02 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`apcdh vnj8tiXTqYZfuNQPn
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: b2 4f 0c 4f 36 4f 76 4f b8 4f fc 50 4c 50 a0 50 be 50 dc 51 0a 51 3e 51 7c 51 bc 51 e8 52 14 52 56 52 a0 52 e6 53 2e 53 58 53 76 53 b4 53 e6 54 18 54 3c 54 78 54 b4 54 fa 55 3e 55 8a 55 be 56 00 56 24 56 44 56 88 56 ce 56 f6 57 1e 57 44 57 6c 57 a4 57 e2 58 06 58 2a 58 5e 58 a6 58 c4 58 e2 58 f0 58 fe 59 1a 59 36 59 52 59 84 59 b6 59 e6 59 fc 5a 1a 5a 2e 5a 5c 5a b8 5a ca 5a dc 5b 1a 5b 66 5b 74 5b a8 5c 02 5c 40 5c 7c 5c aa 5c e2 5d 26 5d 4c 5d 7c 5d c2 5d dc 5e 0a 5e 38 5e 64 5e 9a 5e d6 5e fe 5f 2c 5f 72 5f ce 60 24 60 9c 61 0c 61 60 61 78 61 90 61 a8 61 c0 61 da 61 f6 62 10 62 2a 62 52 62 74 62 94 62 b6 62 d8 62 fa 63 30 63 46 63 5e 63 7c 63 8a 63 a0 64 00 64 1a 64 40 64 7c 64 9e 64 b8 64 d2 65 66 65 74 65 8a 65 98 65 ac 65 c8 65 ee 66 04 66 1e 66 42 Data Ascii: OO6OvOOPLPPPQQ>Q\|QQRRVRRS.SXSvSSTT<TxTTU>UUVV$VDVVVWWDWlWWXXX^XXXXXYY6YRYYYYZZ.Z\ZZZ[[f[t[\\@\\|\\]&]L]\|]]^^8^d^^^_,_r_`$`aa`axaaaaabbbRbtbbbbc0cFc^c\|ccddd@d\|dddefeteeeeefffB
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 01 7f 19 9b fe 4f 35 98 01 1b 19 01 1b 9a 33 4e ff 00 00 01 00 31 01 89 01 ca 03 0f 00 0e 00 00 13 07 27 37 27 37 17 35 33 15 37 17 07 17 07 fd 61 2f 5f 9b 13 9c 3b 9c 13 9a 5e 2f 02 0d 84 23 84 33 38 33 a7 a7 33 38 33 84 23 00 00 00 00 01 00 32 00 85 02 1d 02 6b 00 0b 00 00 01 23 35 33 35 33 15 33 15 23 15 23 01 02 d0 d0 4b d0 d0 4b 01 54 4a cd cd 4a cf 00 00 00 00 01 00 44 ff 67 00 d9 00 87 00 0f 00 00 17 27 36 37 06 23 22 26 34 36 33 32 16 1d 01 14 6e 27 4e 09 0c 0c 1d 25 29 1d 23 2c 99 24 3b 3d 05 24 3c 29 36 2c 04 6e 00 00 00 01 00 4b 01 0f 01 69 01 62 00 03 00 00 01 21 35 21 01 69 fe e2 01 1e 01 0f 53 00 00 01 00 44 ff f7 00 d3 00 87 00 09 00 00 36 34 36 33 32 16 14 06 23 22 44 2a 1e 1d 2a 2a 1d 1e 21 3c 2a 2a 3c 2a 00 00 00 01 00 23 ff fb 01 ca 03 Data Ascii: O53N1'7'7537a/_;^/#383383#2k#53533##KKTJJDg'67#"&4632n'N%)#,$;=$<)6,nKib!5!iSD64632#"D*!<<*#
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 35 25 02 2e fe 50 01 b0 fd fa 02 06 02 47 cc cc 4f f6 48 f6 00 00 02 00 4e 00 e2 02 1d 02 11 00 03 00 07 00 00 01 21 35 21 11 21 35 21 02 1d fe 31 01 cf fe 31 01 cf 01 c3 4e fe d1 4c 00 01 00 53 00 60 02 59 02 94 00 06 00 00 13 35 05 15 05 35 25 53 02 06 fd fa 01 b0 02 46 4e f6 48 f6 4e cc 00 02 00 22 ff f7 01 d5 03 18 00 1c 00 28 00 00 01 22 07 27 3e 01 33 32 16 15 14 07 06 07 0e 01 1d 01 23 35 34 36 3f 01 3e 01 35 34 26 03 34 36 33 32 16 15 14 06 23 22 26 01 00 6d 29 48 1a 77 4d 5d 78 1d 19 45 2e 23 4d 2b 2f 1c 2e 21 45 94 23 18 19 21 21 19 18 23 02 cb 73 25 4b 50 70 55 3a 31 29 3a 26 39 2f 28 31 35 53 29 18 29 39 27 33 46 fd 67 18 22 22 18 19 22 22 00 00 02 00 38 ff af 03 38 02 cf 00 35 00 41 00 00 00 36 35 34 26 23 22 06 15 14 16 33 32 37 17 0e 01 23 Data Ascii: 5%.PGOHN!5!!5!11NLS`Y55%SFNHN"("'>32#546?>54&4632#"&m)HwM]xE.#M+/.!E#!!#s%KPpU:1):&9/(15S))9'3Fg""""885A654&#"327#
2024-04-25 19:25:38 UTC	626	IN	Data Raw: 03 17 00 0f 00 1f 00 00 05 27 06 23 22 26 35 34 36 33 32 16 15 14 07 17 01 14 16 33 32 37 27 37 17 36 35 34 26 23 22 06 03 17 66 69 8a a8 e0 e1 a9 a8 e1 5f 63 fd 3e af 86 67 4e 96 37 98 46 b0 86 85 ae 13 5c 51 e5 a8 aa e8 e5 a8 9a 70 55 01 5f 87 be 39 83 3d 89 59 77 87 be bb 00 02 00 6d 00 00 02 aa 03 0f 00 0d 00 15 00 00 13 11 23 11 21 32 16 15 14 06 07 13 23 03 27 33 32 36 34 26 2b 01 bf 52 01 0f 88 8b 7a 5d f2 64 e7 a0 b6 63 64 5e 67 b8 01 3d fe c3 03 0f 82 62 60 74 0c fe b5 01 3d 4b 5e 84 58 00 00 01 00 31 ff f8 02 3c 03 18 00 23 00 00 05 22 27 37 1e 01 33 32 36 34 26 27 2e 01 35 34 36 33 32 16 17 07 26 23 22 06 15 14 16 17 16 17 16 15 14 06 01 40 c7 48 47 1e 5e 4c 47 61 5c 5a 78 72 90 66 5d 7e 1c 46 32 81 42 60 4e 59 8a 3b 36 8a 08 bf 25 49 4e 4c 78 Data Ascii: '#"&54632327'7654&#"fi_c>gN7F\QpU_9=Ywm#!2#'3264&+Rz]dcd^g=b`t=K^X1<#"'73264&'.54632&#"@HG^LGa\Zxrf]~F2B`NY;6%INLx
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 2c 01 d6 fd cb 4c 02 78 4b 4b fd 88 4c 00 00 00 00 01 00 67 ff 87 01 79 03 5e 00 07 00 00 01 23 11 33 15 21 11 21 01 79 c6 c6 fe ee 01 12 03 1a fc b1 44 03 d7 00 00 00 00 01 00 21 ff fb 01 c9 03 2e 00 03 00 00 05 01 33 01 01 77 fe aa 53 01 55 05 03 33 fc cd 00 00 00 01 00 25 ff 87 01 37 03 5e 00 07 00 00 13 23 35 21 11 21 35 33 eb c6 01 12 fe ee c6 03 1a 44 fc 29 44 00 00 01 00 36 01 c3 02 17 03 0f 00 06 00 00 1b 01 33 13 23 27 07 36 cf 43 cf 5c 95 95 01 c3 01 4c fe b4 fe fe 00 01 00 00 ff 67 02 16 ff a9 00 03 00 00 05 15 21 35 02 16 fd ea 57 42 42 00 00 00 00 01 00 13 02 71 00 de 03 1d 00 03 00 00 13 17 23 27 72 6c 4b 80 03 1d ac ac 00 00 00 02 00 33 ff f7 01 e7 02 1f 00 19 00 25 00 00 01 35 34 23 22 07 27 36 33 32 17 16 15 11 23 35 23 Data Ascii: 7ff2,LxKKLgy^#3!!yD!.3wSU3%7^#5!!53D)D63#'6C\Lg!5WBBq#'rlK3%54#"'632#5#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49948	31.13.65.36	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	676	OUT	GET /tr/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rl=&if=false&ts=1714073135566&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714073135563.564279544&ler=empty&cdl=API_unavailable&it=1714073133540&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:38 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Apr 2024 19:25:37 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49949	31.13.65.36	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	713	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=719379935201922&ev=PageView&dl=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rl=&if=false&ts=1714073135566&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1714073135563.564279544&ler=empty&cdl=API_unavailable&it=1714073133540&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:38 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-25 19:25:38 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-25 19:25:38 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49950	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	2381	OUT	GET /wp-content/themes/edumall/assets/fonts/gordita/Gordita-Bold.ttf HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://earnandexcel.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://earnandexcel.com/wp-content/themes/edumall/assets/fonts/gordita/font-gordita.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _scid=e047ce99-8b6d-400f-973c-746356c74d77; _scid_r=e047ce99-8b6d-400f-973c-746356c74d77; _ga_8Y0K4MPJV5=GS1.1.1714073132.1.0.1714073132.60.0.0; _ga=GA1.1.1040263935.1714073125; _hjSessionUser_2832943=eyJpZCI6Ijc4MDVlYjQ2LWJmMWQtNTRlNi1hYzFkLWE2YWJkYWY3YzllNiIsImNyZWF0ZWQiOjE3MTQwNzMxMzM4ODksImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6IjgxZDgwMjQ1LTIwYzgtNDhkMS05NzUyLTBkNzQ0NjE1OTkyMiIsImMiOjE3MTQwNzMxMzM4OTIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1714073134342%2C%22c%22%3A3819%7D; _pin_unauth=dWlkPU9HWmhaalEwWm1JdE0ySmxPQzAwTWpBMExUazJaRGN0Wm1FMlpEWXlaR1kyTldSaw; _tt_enable_cookie=1; _ttp=JqnnrKuxcWw0MgqHxFigUNkJfTU; _fbp=fb.1.1714073135563.564279544; utm_source=; utm_campaign=; growme_version={"name":"7.244.0","version":"7.244.0"}
2024-04-25 19:25:38 UTC	924	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:38 GMT Content-Type: application/x-font-ttf Transfer-Encoding: chunked Connection: close CF-Ray: 87a0b8593d7b44f1-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Cache-Control: max-age=315360000 ETag: W/"60df32df-1e6e8" Expires: Thu, 31 Dec 2037 23:55:55 GMT Last-Modified: Fri, 02 Jul 2021 15:38:07 GMT Vary: Accept-Encoding ki-cache-type: None Ki-CF-Cache-Status: BYPASS ki-edge: v=20.2.7;mv=3.0.6 ki-origin: g1p X-Content-Type-Options: nosniff X-Edge-Location-Klb: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Jgtkl9QNUGMvxpNB49QUvch7pVgiMaPeH6CFlJ60Ctbx0Svbgk0WQoCdFZPv8WQcNIaUV0pBM7DXL6DipKZ%2BKeLNTIbJqyPh7vBburtJ36ANGztpZ4e%2FUncUlCfJsieD4E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:38 UTC	445	IN	Data Raw: 32 38 31 62 0d 0a 00 01 00 00 00 10 01 00 00 04 00 00 46 46 54 4d 8c 64 32 8f 00 01 e6 cc 00 00 00 1c 4f 53 2f 32 4f b3 6e 9f 00 00 01 88 00 00 00 60 63 6d 61 70 7b d9 f7 3f 00 00 0d 94 00 00 05 be 66 65 61 74 40 33 0d dd 00 01 e1 98 00 00 00 64 67 61 73 70 ff ff 00 03 00 01 e0 38 00 00 00 08 67 6c 79 66 10 5c d5 28 00 00 19 2c 00 00 f8 8c 68 65 61 64 14 fa 72 ae 00 00 01 0c 00 00 00 36 68 68 65 61 08 33 06 21 00 00 01 44 00 00 00 24 68 6d 74 78 9d 8b 74 03 00 00 01 e8 00 00 0b ac 6b 65 72 6e b3 c8 10 77 00 01 11 b8 00 00 ad e2 6c 6f 63 61 5b 1c 98 12 00 00 13 54 00 00 05 d8 6d 61 78 70 03 34 00 6f 00 00 01 68 00 00 00 20 6d 6f 72 78 34 4f 10 59 00 01 e1 fc 00 00 04 d0 6e 61 6d 65 b0 46 c4 0c 00 01 bf 9c 00 00 09 38 70 6f 73 74 26 67 ac e4 00 01 c8 d4 00 Data Ascii: 281bFFTMd2OS/2On`cmap{?feat@3dgasp8glyf\(,headr6hhea3!D$hmtxtkernwloca[Tmaxp4oh morx4OYnameF8post&g
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 00 e0 fa 00 00 00 00 00 00 00 00 55 4b 57 4e 00 20 00 20 fb 04 04 28 fe f5 00 00 04 28 01 0b 20 00 01 97 00 00 00 00 02 16 03 0f 00 00 00 20 00 01 03 1f 00 5a 00 00 00 00 01 4d 00 00 00 fb 00 00 01 53 00 4a 01 ff 00 32 03 4c 00 26 02 8c 00 16 03 79 00 23 02 ee 00 2c 01 1a 00 32 01 9c 00 2d 01 99 00 13 01 f7 00 26 02 6c 00 2b 01 41 00 33 01 ca 00 40 01 3a 00 31 02 32 00 1f 03 00 00 31 01 ee 00 03 02 a3 00 2f 02 95 00 23 02 d9 00 1f 02 93 00 27 02 b7 00 32 02 78 00 1f 02 ae 00 32 02 b7 00 2e 01 50 00 3c 01 55 00 3d 02 7a 00 25 02 79 00 44 02 7a 00 4a 02 28 00 1e 03 62 00 31 03 18 ff ff 02 e8 00 5b 03 40 00 2b 03 32 00 5b 02 97 00 5b 02 89 00 5b 03 59 00 2b 03 42 00 5b 01 59 00 5b 02 6e 00 1d 02 e0 00 5b 02 5c 00 5b 04 16 00 5b 03 64 00 5b 03 83 00 2b 02 b4 Data Ascii: UKWN (( ZMSJ2L&y#,2-&l+A3@:121/#'2x2.P<U=z%yDzJ(b1[@+2[[[Y+B[Y[n[\[[d[+
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 03 5a 00 2b 02 aa 00 28 03 18 ff ff 02 55 00 2a 04 1e ff f3 03 bc 00 2a 03 86 00 2c 02 97 00 27 02 8c 00 13 02 00 00 1c 02 a1 00 15 01 c2 00 15 01 35 ff d0 01 ac 00 14 01 a4 00 14 00 e8 00 14 01 b1 00 0b 02 1e 00 14 00 00 ff 47 00 00 ff 71 00 00 ff 3e 00 00 ff 32 00 00 ff 4a 00 00 ff 42 00 00 ff a0 00 00 ff 32 00 00 ff 65 00 00 ff 05 00 00 ff 3e 00 00 ff a8 00 00 ff a8 00 00 ff 4d 00 00 ff 8a 03 83 00 2b 03 73 00 37 02 de 00 2b 02 ea 00 18 02 97 00 5b 03 4c 00 15 02 5b 00 5b 03 3f 00 2b 02 8c 00 13 01 59 00 5b 01 59 ff e1 02 6e 00 1d 04 d5 00 17 04 c3 00 5b 03 61 00 15 02 e2 00 5b 02 d9 00 03 03 3c 00 5b 03 18 ff ff 02 ed 00 5b 02 e8 00 5b 02 59 00 5b 03 8a 00 36 02 97 00 5b 04 56 ff ff 02 92 00 1a 03 5e 00 5b 03 5e 00 5b 02 e0 00 5b 03 41 00 18 04 16 00 Data Ascii: Z+(U**,'5Gq>2JB2e>M+s7+[L[[?+Y[Yn[a[<[[[Y[6[V^[^[[A
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 56 00 49 02 33 00 30 02 3c 00 27 01 62 00 45 01 d7 00 24 01 d8 00 28 01 c5 00 5b 01 c5 00 27 01 a2 00 2f 01 a2 00 17 03 ef 00 43 02 70 00 43 01 d0 00 43 02 b3 00 29 02 b3 00 39 01 a0 00 29 01 a0 00 39 02 7f 00 2e 02 8c 00 13 02 2d 00 5d 02 d5 00 31 02 d5 00 31 01 ea 00 03 02 93 00 30 02 95 00 23 02 d9 00 1f 02 93 00 27 02 b7 00 32 02 78 00 1f 02 ae 00 32 02 b7 00 2e 02 a8 00 20 02 a8 00 20 02 a8 00 36 02 a8 00 3c 02 a8 00 30 02 a8 00 1e 02 a8 00 33 02 a8 00 28 02 a8 00 35 02 a8 00 30 02 b2 00 28 02 a8 00 21 02 a8 00 21 02 a8 00 34 02 a8 00 36 02 a8 00 2f 02 a8 00 1e 02 a8 00 33 02 a8 00 28 02 a8 00 35 02 a8 00 30 02 a8 00 28 02 a8 00 47 02 a8 00 2c 02 a8 00 23 02 a8 00 1c 02 a8 00 13 02 a8 00 14 02 a8 00 23 02 a8 00 16 02 a8 00 41 02 a8 00 26 02 a8 00 1f Data Ascii: VI30<'bE$(['/CpCC)9)9.-]110#'2x2. 6<03(50(!!46/3(50(G,##A&
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 00 1b 00 1c 00 1d 00 1e 00 1f 00 20 00 21 00 22 00 23 00 24 00 25 00 26 00 27 00 28 00 29 00 2a 00 2b 00 2c 00 2d 00 2e 00 2f 00 30 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 3a 00 3b 00 3c 00 3d 00 3e 00 3f 00 40 00 41 00 42 00 43 00 44 00 45 00 46 00 47 00 48 00 49 00 4a 00 4b 00 4c 00 4d 00 4e 00 4f 00 50 00 51 00 52 00 53 00 54 00 55 00 56 00 57 00 58 00 59 00 5a 00 5b 00 5c 00 5d 00 5e 00 5f 00 60 00 61 00 00 00 84 00 85 00 87 00 89 00 91 00 96 00 9c 00 a1 00 a0 00 a2 00 a4 00 a3 00 a5 00 a7 00 a9 00 a8 00 aa 00 ab 00 ad 00 ac 00 ae 00 af 00 b1 00 b3 00 b2 00 b4 00 b6 00 b5 00 ba 00 b9 00 bb 00 bc 02 1e 00 70 00 63 00 64 00 68 02 20 00 76 00 9f 00 6e 00 6a 02 38 00 74 00 69 02 58 00 86 00 98 02 54 00 71 02 59 02 5a 00 66 00 75 02 4e 02 Data Ascii: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`apcdh vnj8tiXTqYZfuN
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: dc 4d 10 4d 66 4d 8c 4d e4 4e 0e 4e 4c 4e 92 4e d4 4f 26 4f 72 4f 90 4f ae 4f de 50 10 50 4c 50 8c 50 b6 50 e0 51 24 51 6a 51 b0 51 f6 52 1e 52 3a 52 74 52 a6 52 d4 52 f6 53 2c 53 62 53 ac 53 f0 54 32 54 66 54 a6 54 c8 54 e6 55 2e 55 70 55 96 55 bc 55 e2 56 08 56 40 56 7a 56 9c 56 bc 56 ee 57 36 57 54 57 70 57 7e 57 8c 57 ac 57 cc 57 ec 58 24 58 5c 58 94 58 aa 58 c6 58 d8 59 08 59 6c 59 7e 59 8e 59 c6 5a 12 5a 20 5a 54 5a a2 5a ca 5a fa 5b 2c 5b 68 5b ac 5b d2 5b fe 5c 3e 5c 56 5c 7e 5c ac 5c da 5d 12 5d 4e 5d 76 5d a6 5e 02 5e 46 5e 96 5f 08 5f 70 5f c2 5f e0 5f fa 60 16 60 32 60 4e 60 6a 60 86 60 a4 60 d2 60 f8 61 1e 61 44 61 6a 61 92 61 ce 61 e4 61 fa 62 14 62 22 62 38 62 8c 62 ae 62 d2 63 0a 63 2c 63 48 63 64 63 f8 64 06 64 1c 64 2a 64 3e 64 5a 64 80 Data Ascii: MMfMMNNLNNO&OrOOOPPLPPPQ$QjQQRR:RtRRRS,SbSST2TfTTTU.UpUUUVV@VzVVVW6WTWpW~WWWWX$X\XXXXYYlY~YYZZ ZTZZZ[,[h[[[\>\V\~\\]]N]v]^^F^__p___``2`N`j````aaDajaaaabb"b8bbbcc,cHcdcddd*d>dZd
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 89 58 95 fa 24 fa 95 58 4b f6 a5 25 a6 f6 00 00 00 01 00 26 01 79 01 d1 03 0f 00 0e 00 00 13 07 27 37 27 37 17 35 33 15 37 17 07 17 07 fb 51 52 4f 81 20 80 69 81 21 81 4f 52 01 e8 6f 3c 6e 2b 60 2a 8b 8b 2a 60 2b 6e 3c 00 00 00 00 01 00 2b 00 61 02 41 02 78 00 0b 00 00 37 35 23 35 33 35 33 15 33 15 23 15 ee c3 c3 95 be be 61 c3 92 c2 c2 92 c3 00 00 01 00 33 ff 58 01 0d 00 cb 00 11 00 00 25 15 14 06 07 27 36 37 06 23 22 26 35 34 36 33 32 16 01 0d 4c 41 3b 49 21 13 10 26 33 3d 2b 32 40 48 05 43 7c 2c 39 30 4a 07 35 2a 2b 3d 48 00 00 00 00 01 00 40 00 f8 01 8a 01 92 00 03 00 00 25 21 35 21 01 8a fe b6 01 4a f8 9a 00 00 00 01 00 31 ff f4 01 09 00 cd 00 0a 00 00 17 22 26 35 34 36 32 16 15 14 06 9d 2c 40 3f 5a 3f 3f 0c 40 2c 2d 40 40 2d 2c 40 00 00 00 00 01 00 Data Ascii: X$XK%&y'7'7537QRO i!ORo<n+`*`+n<+aAx75#53533#a3X%'67#"&54632LA;I!&3=+2@HC\|,90J5+=H@%!5!J1"&5462,@?Z??@,-@@-,@
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 21 35 21 11 21 35 21 02 35 fe 0f 01 f1 fe 0f 01 f1 01 ae 91 fe 5c 92 00 01 00 4a 00 3f 02 55 02 99 00 07 00 00 01 25 35 05 15 05 35 25 01 a4 fe a6 02 0b fd f5 01 5a 01 6e 96 95 ef 7b f0 97 95 00 00 00 00 02 00 1e ff f5 02 01 03 1b 00 1a 00 25 00 00 01 22 07 27 3e 01 33 32 16 15 14 06 07 0e 01 1d 01 23 35 34 36 3f 01 36 35 34 26 02 34 36 33 32 16 15 14 06 23 22 01 0c 43 24 87 1f 84 4f 6b 86 3b 3f 24 26 98 22 28 30 3f 2e 9a 39 27 29 39 39 29 27 02 89 4b 47 46 50 77 5d 3e 57 33 1d 36 24 07 21 2b 40 23 2a 37 2d 21 2a fd a4 50 3a 39 29 28 38 00 00 00 02 00 31 ff ad 03 3e 02 d0 00 31 00 3d 00 00 25 22 26 27 0e 01 23 22 26 35 34 36 33 32 16 17 37 33 07 06 32 36 35 34 26 23 22 06 15 14 16 33 32 36 37 17 0e 01 23 22 26 35 34 36 33 32 16 15 14 06 01 22 06 17 1e 01 Data Ascii: !5!!5!5\J?U%55%Zn{%"'>32#546?654&4632#"C$Ok;?$&"(0?.9')99)'KGFPw]>W36$!+@#7-!P:9)(81>1=%"&'#"&54632732654&#"3267#"&54632"
2024-04-25 19:25:38 UTC	247	IN	Data Raw: 42 01 8f cc 92 17 6b 75 79 38 42 65 92 00 00 02 00 5b 00 00 02 b5 03 0f 00 0c 00 15 00 00 21 03 23 11 23 11 21 32 16 15 14 07 13 01 33 32 36 35 34 26 2b 01 02 01 a2 62 a2 01 35 78 9d a1 b1 fe 48 87 33 4a 49 35 86 01 19 fe e7 03 0f 81 77 ab 3a fe ce 01 af 32 33 34 2e 00 00 01 00 13 ff f4 02 64 03 1b 00 24 00 00 12 14 16 17 1e 01 15 14 06 23 22 26 27 37 1e 01 33 32 36 35 34 26 27 26 27 26 35 34 36 33 32 16 17 07 26 23 22 d4 3b 43 8c 86 98 87 6e a1 23 8c 17 59 3b 34 43 3d 57 89 36 3c a0 71 62 8f 22 86 28 6c 30 02 5c 46 2a 13 28 6d 5e 6b 87 63 55 48 33 3a 2f 24 22 29 1a 29 36 3a 57 67 85 58 51 49 60 00 00 01 00 15 00 00 02 8c 03 0f 00 07 00 00 01 23 35 21 15 23 11 23 01 00 eb 02 77 eb a1 02 72 9d 9d fd 8e 00 00 01 00 53 ff f5 02 0d 0a Data Ascii: Bkuy8Be[!##!232654&+b5xH3JI5w:234.d$#"&'732654&'&'&54632&#";Cn#Y;4C=W6<qb"(l0\F*(m^kcUH3:/$"))6:WgXQI`#5!##wrS
2024-04-25 19:25:38 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a c8 03 0f 00 11 00 00 01 11 14 06 23 22 26 35 11 33 03 14 16 33 32 36 35 11 02 c8 a0 9c 9d 9c a3 01 55 43 4a 51 03 0f fe 2d 9a ad ad 94 01 d9 fe 2b 53 56 59 4c 01 d9 00 00 00 01 00 0f 00 00 03 01 03 0f 00 06 00 00 1b 02 33 01 23 01 be cb cc ac fe e4 bb fe e5 03 0f fd ad 02 53 fc f1 03 0f 00 00 01 00 13 00 00 04 95 03 0f 00 0d 00 00 33 03 33 1b 01 33 1b 01 33 03 23 03 23 03 f9 e6 ad 95 a9 ad a9 9a a7 e8 af aa 02 ab 03 0f fd d4 02 2c fd d0 02 30 fc f1 02 38 fd c8 00 00 00 01 ff ff 00 00 02 f4 03 0f 00 0b 00 00 23 09 01 33 17 37 33 09 01 23 0b 01 01 01 1a fe f6 be ad af bd fe f4 01 1a bd bf c2 01 93 01 7c fe fe fe 85 fe 6c 01 1a fe e6 00 01 00 0e 00 00 02 ee 03 0f 00 08 00 00 09 01 33 1b 01 33 01 11 23 01 2d fe e1 bb b5 b7 b9 fe e1 a2 01 36 Data Ascii: 7ffa#"&533265UCJQ-+SVYL3#S3333##,08#373#\|l33#-6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49951	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:37 UTC	866	OUT	GET /cm/p?rand=1713917639082&pnid=140&pcid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://tr.snapchat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ3AIAwDwIki2ZgmwDaVQqZgePrs53Quz/dBGFmyPuA2E7JUtr0nG6sOOxbjM0T5+RUXMeOTKUAAAAA=
2024-04-25 19:25:38 UTC	729	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:38 GMT access-control-allow-origin: * cache-control: no-cache, no-transform set-cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ3AIAwDwIki2ZgmwDaVQqZg+PbJ53Quz/dBGFmyPuA2E7JUtr0nG6sOOxbjN0SNcxUfu5uW6EAAAAA=;SameSite=None;Version=1;Comment=;Domain=.snapchat.com;Path=/;Max-Age=33696000;Secure content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 3 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49953	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:38 UTC	727	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 942 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ3AIAwDwIki2ZgmwDaVQqZgePrs53Quz/dBGFmyPuA2E7JUtr0nG6sOOxbjM0T5+RUXMeOTKUAAAAA=
2024-04-25 19:25:38 UTC	942	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 65 30 34 37 63 65 39 39 2d 38 62 36 64 2d 34 30 30 66 2d 39 37 33 63 2d 37 34 36 33 35 36 63 37 34 64 37 37 22 2c 22 6c 63 22 3a 22 36 35 66 63 39 39 37 35 2d 62 62 33 62 2d 34 30 38 35 2d 61 35 34 65 2d 66 31 30 39 37 31 64 30 31 33 33 37 22 2c 22 6c 73 22 3a 22 32 33 36 34 32 65 65 34 2d 39 35 32 31 2d 34 66 38 39 2d 38 37 35 31 2d 33 66 34 66 33 61 61 39 36 33 61 39 22 2c 22 72 22 3a 22 61 33 38 65 39 62 30 37 2d 33 34 37 30 2d 34 32 30 61 2d 62 63 61 61 2d 36 35 35 35 36 33 33 34 65 30 31 63 22 2c 22 73 73 22 3a 22 62 63 32 64 63 31 65 31 2d 63 30 34 33 2d 34 31 31 35 2d 62 30 30 33 2d 31 30 38 36 33 62 61 66 64 62 36 39 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"e047ce99-8b6d-400f-973c-746356c74d77","lc":"65fc9975-bb3b-4085-a54e-f10971d01337","ls":"23642ee4-9521-4f89-8751-3f4f3aa963a9","r":"a38e9b07-3470-420a-bcaa-65556334e01c","ss":"bc2dc1e1-c043-4115-b003-10863bafdb69","df":true,"s
2024-04-25 19:25:38 UTC	388	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:38 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49956	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:38 UTC	541	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:38 UTC	719	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:38 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhj9BJvey1CUJaRd%2B6j2D%2Foo1gqg8bx6h%2BCFTf4su7LK8M8xEz4kfi1Gea%2BSx2eVXUt6HeYHHSCCig0Uog6pMVw6rLVnsj4dew%2FWp3Vxq9xux0DHm7vyBzEfbsK8ihRyIxi48owvMw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b85bef47137d-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49955	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:38 UTC	541	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:38 UTC	711	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:38 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hoLL4V0AoTn03g99vVGToGaPG1inL9j1Ah9nQvhR2rsd7rgYQHyQMbFtKkLz2NbG8VS%2BV8K8UQtRYZ7KE7P8XpsW9SHbIUxq5MJTValX9XTtmD3ioAEskST1wjqKrHqEptxr8hUvKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b85bde101877-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49958	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:38 UTC	639	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 1499 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:38 UTC	1499	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 63 78 22 3a 22 65 79 4a 7a 59 32 68 6c 62 57 45 69 4f 69 4a 70 5a 32 78 31 4f 6d 4e 76 62 53 35 7a 62 6d 39 33 63 47 78 76 64 32 46 75 59 57 78 35 64 47 6c 6a 63 79 35 7a 62 6d 39 33 63 47 78 76 64 79 39 6a 62 32 35 30 5a 58 68 30 63 79 39 71 63 32 39 75 63 32 4e 6f 5a 57 31 68 4c 7a 45 74 4d 43 30 77 49 69 77 69 5a 47 46 30 59 53 49 36 57 33 73 69 63 32 4e 6f 5a 57 31 68 49 6a 6f 69 61 57 64 73 64 54 70 6a 62 32 30 75 62 57 56 6b 61 57 46 32 61 57 35 6c 4c 33 4e 70 64 47 55 76 61 6e 4e 76 62 6e Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"cx":"eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoiaWdsdTpjb20ubWVkaWF2aW5lL3NpdGUvanNvbn
2024-04-25 19:25:39 UTC	864	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=1d4e7188-b664-494b-a825-2150f3957539; Expires=Fri, 25 Apr 2025 19:25:39 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NwnIKT7hMzrLrtEF%2FdbHJoRNkF8%2FzAx3Ei8G0dUPyDlGZayun32JwZgpAwbapq5idWrWNfz7kYRcxdbFuDkVbJHJHpIOIeKypnpHz5D484GiUs%2FOqkJtZSF5Wcx%2F86MIodTXhix25w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b85ead6eb0d9-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:39 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49957	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:38 UTC	639	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 1214 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:38 UTC	1214	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 70 61 67 65 5f 72 65 6e 64 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 34 34 2e 30 5c 22 2c 5c 22 62 65 74 61 4e 61 6d 65 5c 22 3a 5c 22 37 2e 32 34 34 2e 30 5c 22 2c 5c 22 69 73 4c 6f 67 67 65 64 49 6e 5c 22 3a 66 61 6c 73 65 2c 5c 22 67 72 6f 77 4c 61 62 73 5c 22 3a 66 61 6c 73 65 2c 5c 22 66 61 63 65 62 6f 6f 6b 53 68 61 72 65 45 6e 61 62 6c 65 64 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"page_render","se_pr":"{\"appVersion\":\"7.244.0\",\"betaName\":\"7.244.0\",\"isLoggedIn\":false,\"growLabs\":false,\"facebookShareEnabled
2024-04-25 19:25:39 UTC	862	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=75cc879d-91cc-48bb-808e-4bb832734c65; Expires=Fri, 25 Apr 2025 19:25:39 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E3LPqg6GHZ3DCkwJQKYBnVt9R1tZr6xDTx5Fe71vRYyjTjIvWLQqaM73swyEnC%2FA5%2FnZ%2BaHHRlnLJYSzpHxjk2tVge0rPOyXV7l8MtUIsYZSV24QkVZRXQYIWdrLYHenQZWvtPDYAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b85eac1f4520-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:39 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49964	104.21.41.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:41 UTC	677	OUT	GET /topics/ HTTP/1.1 Host: sda.fyi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:41 UTC	663	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 1284 Connection: close Cache-Control: public, no-cache Surrogate-Control: max-age=86400, stale-if-error=86400, stale-while-revalidate=60 Surrogate-Key: topics Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1bM6GCtleCuVotfwtZRQ8vLwinyIXYXE1Q0lOElQsJ35YOSSp7CcDF7nOMx%2BEcvZ0oa6RukY07eFzebc2XipfCuv4CJCLcTO67Vn33c4lazoIjNYNBNASXPg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b86daed66747-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:41 UTC	706	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6a 6d 39 6c 74 44 58 42 58 31 33 37 32 2f 76 2f 6f 4e 37 6b 30 6a 71 54 5a 39 55 39 78 4b 43 6a 75 67 65 5a 57 6a 4d 4a 44 78 72 46 36 35 47 6a 45 37 36 61 4c 31 4a 50 76 30 75 6e 65 4e 68 33 54 49 51 59 47 57 35 34 62 54 4e 4d 30 62 4c 79 46 31 46 74 67 67 41 41 41 42 57 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4e 6b 59 53 35 6d 65 57 6b 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6c 42 79 61 58 5a 68 59 33 6c 54 59 57 35 6b 59 6d 39 34 51 57 52 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="origin-trial" content="Ajm9ltDXBX1372/v/oN7k0jqTZ9U9xKCjugeZWjMJDxrF65GjE76aL1JPv0uneNh3TIQYGW54bTNM0bLyF1FtggAAABWeyJvcmlnaW4iOiJodHRwczovL3NkYS5meWk6NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWR
2024-04-25 19:25:41 UTC	578	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 74 6f 70 69 63 73 20 7c 7c 20 21 74 6f 70 69 63 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 20 6c 6f 67 3a 20 27 4e 6f 20 74 6f 70 69 63 73 20 72 65 74 75 72 6e 65 64 27 2c 20 6d 65 73 73 61 67 65 3a 20 27 74 6f 70 69 63 73 4c 6f 67 27 7d 29 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 Data Ascii: { if (!topics \|\| !topics.length) { window.parent.postMessage(JSON.stringify({ log: 'No topics returned', message: 'topicsLog'}), '*'); return } w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49965	172.67.164.44	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:41 UTC	549	OUT	GET /update?cats= HTTP/1.1 Host: sda.fyi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:41 UTC	761	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:41 GMT Content-Type: application/json Content-Length: 2 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Set-Cookie: mv_sda=; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cf55lpdcvyXrYhizAEHTbMFy1g0yNdBa5PWdeOg5NOHXsA8mY7sZzPemRomYPYOz%2FvFyofPTvxtPD5ZGZU1qoYcHNiI5iiroO%2BiTVjUl6dVRK0%2BXPyoUrbVm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b86dfd1b450f-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:41 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49972	34.107.165.188	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:42 UTC	596	OUT	GET /api/identity/envelope?pid=2 HTTP/1.1 Host: api.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:43 UTC	456	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Accept, Authorization, Content-Type, Cookie, Origin, X-Requested-With Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache, no-store Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49974	35.244.193.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:42 UTC	661	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1--- HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:43 UTC	761	IN	HTTP/1.1 307 Temporary Redirect vary: origin access-control-allow-credentials: true access-control-allow-origin: https://earnandexcel.com location: https://lexicon.33across.com/v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---&b=1&g=AgaxPzOWhH7pcNFuSmTljjLs7W1vK1ZzHBV0j0biRkI%3D referrer-policy: unsafe-url cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT Content-Length: 0 set-cookie: check=true; Max-Age=31536000; Expires=Fri, 25 Apr 2025 19:25:43 GMT; Path=/; Domain=.33across.com; Secure; SameSite=None via: 1.1 google date: Thu, 25 Apr 2024 19:25:42 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49968	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:42 UTC	609	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:43 UTC	523	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 25 Apr 2024 19:25:42 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://earnandexcel.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 202601 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:43 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49973	35.71.131.137	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:42 UTC	606	OUT	GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:43 UTC	596	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:43 GMT Content-Type: application/json Content-Length: 109 Connection: close server: Kestrel access-control-allow-credentials: true access-control-allow-headers: Origin, X-Requested-With, Content-Type, Content-Length, Content-Encoding, Vary, Cache-Control, Accept access-control-allow-origin: https://earnandexcel.com cache-control: private expires: Sat, 25 May 2024 19:25:43 GMT set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:25:43 GMT; domain=.adsrvr.org; path=/; secure; samesite=none vary: Origin
2024-04-25 19:25:43 UTC	109	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 46 41 4c 53 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 34 2d 32 35 54 31 39 3a 32 35 3a 34 33 22 7d Data Ascii: {"TDID":"500c5aec-af13-42d6-a7ea-250f9438d1fe","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2024-04-25T19:25:43"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49975	172.67.164.44	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:43 UTC	360	OUT	GET /update?cats= HTTP/1.1 Host: sda.fyi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_sda=
2024-04-25 19:25:43 UTC	742	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:43 GMT Content-Type: application/json Content-Length: 2 Connection: close Access-Control-Allow-Origin: * Set-Cookie: mv_sda=; Max-Age=2592000000; Domain=.sda.fyi; Secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=exHlAzd3CLAg5rgEmVNH%2FM1%2BJ7pS9mvmpl7Lt63KgFo44v%2BAo%2Bxf67Ox1QbR8Nuombf31EzsFHjaKutSDmTlZN4Sea4r9XIQjUmXP9uCYd%2FD2Fub0LgMr6id"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b87a1cfe53e6-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:43 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49976	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:43 UTC	1257	OUT	GET /usersync/sync?origin=https://earnandexcel.com&src=//exchange.mediavine.com&s2sVersion=production&gdpr=0&us_privacy=1---&gppString=DBABzw~1---~BqgAAAAAAgA&p=%7B%22appnexus%22%3Atrue%2C%22gumgum%22%3Atrue%2C%22huddled_masses%22%3Atrue%2C%22indexExchange%22%3Atrue%2C%22kargo%22%3Atrue%2C%22mediadotnet%22%3Atrue%2C%22mediagrid%22%3Atrue%2C%22openx%22%3Atrue%2C%22pubmatic%22%3Atrue%2C%22pulsepoint%22%3Atrue%2C%22rubicon%22%3Atrue%2C%22smartmedia%22%3Atrue%2C%22sovrn%22%3Atrue%2C%22triplelift%22%3Atrue%2C%22verizon%22%3Atrue%2C%22yieldmo%22%3Atrue%2C%22centro%22%3Atrue%7D HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:43 UTC	1126	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 5693 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Set-Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 09 May 2024 19:25:43 GMT; Secure; SameSite=None Set-Cookie: mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 09 May 2024 19:25:43 GMT; Secure; SameSite=None Set-Cookie: am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 09 May 2024 19:25:43 GMT; Secure; SameSite=None Set-Cookie: am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 09 May 2024 19:25:43 GMT; Secure; SameSite=None
2024-04-25 19:25:43 UTC	5693	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 73 79 6e 63 55 72 6c 73 27 2c 0a 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 73 3a 20 7b 22 6d 76 5f 75 75 69 64 22 3a 22 39 63 30 35 30 61 39 30 2d 30 33 33 39 2d 31 31 65 66 2d 38 66 35 64 2d 38 37 31 39 62 32 61 62 37 36 62 63 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 7d 2c 0a 20 20 20 20 20 20 20 20 73 79 6e 63 55 72 6c 73 3a 20 5b 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f Data Ascii: <script> window.parent.postMessage({ message: 'syncUrls', tokens: {"mv_uuid":"9c050a90-0339-11ef-8f5d-8719b2ab76bc","version":"invalidate-verizon-pushes"}, syncUrls: [{"type":"iframe","url":"https://ads.pubmatic.com/AdServer/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49978	35.244.193.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:43 UTC	734	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---&b=1&g=AgaxPzOWhH7pcNFuSmTljjLs7W1vK1ZzHBV0j0biRkI%3D HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2024-04-25 19:25:43 UTC	366	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://earnandexcel.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Thu, 25 Apr 2024 19:25:43 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:43 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49977	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:44 UTC	685	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:44 UTC	479	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 25 Apr 2024 19:25:43 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://earnandexcel.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 542986 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:44 UTC	366	IN	Data Raw: 31 36 32 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 32 4f 4c 4e 4e 56 38 77 62 53 55 79 51 6b 4a 36 61 44 68 32 55 45 68 4a 65 58 4a 77 65 6e 51 30 56 6c 46 51 55 47 68 77 63 55 74 4a 4f 47 55 7a 4e 6e 70 74 4e 54 42 73 4e 45 35 77 55 54 64 6d 63 55 38 77 53 44 68 30 53 6a 56 74 62 56 55 35 64 56 46 36 4e 6a 4e 42 51 56 6f 31 5a 6a 4e 4f 59 30 64 49 63 6b 64 31 64 6b 4e 68 4e 55 46 47 51 6d 70 6d 52 30 4a 74 56 31 42 42 56 31 46 46 57 56 64 4a 59 58 4e 4d 53 6e 4e 44 55 44 6c 43 63 47 35 77 4d 44 4e 48 52 31 46 70 51 6b 39 42 57 6e 68 50 5a 47 68 45 4e 54 6c 51 53 6b 5a 4c 59 6b 64 50 22 2c 22 62 69 64 49 64 22 3a 22 36 43 7a 75 61 56 39 69 54 31 5a 47 63 46 64 79 59 58 64 30 65 58 42 75 61 31 45 77 63 55 68 4d 4d 45 4e 71 5a 53 55 79 51 6b 59 31 5a 48 6c 48 Data Ascii: 162{"bundle":"2OLNNV8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUGhwcUtJOGUzNnptNTBsNE5wUTdmcU8wSDh0SjVtbVU5dVF6NjNBQVo1ZjNOY0dIckd1dkNhNUFGQmpmR0JtV1BBV1FFWVdJYXNMSnNDUDlCcG5wMDNHR1FpQk9BWnhPZGhENTlQSkZLYkdP","bidId":"6CzuaV9iT1ZGcFdyYXd0eXBua1EwcUhMMENqZSUyQkY1ZHlH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49981	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:44 UTC	755	OUT	GET /pagead/managed/js/gpt/m202404220101/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:44 UTC	730	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 25 Apr 2024 19:25:44 GMT Expires: Fri, 25 Apr 2025 19:25:44 GMT Cache-Control: public, immutable, max-age=31536000 Content-Type: text/javascript; charset=UTF-8 ETag: 12023246194401291214 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 461624 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:44 UTC	525	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 0a 20 4c 69 63 65 6e 73 65 64 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors Licensed
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 20 0a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 20 0a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 Data Ascii: ing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the Lice
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 6f 2c 4c 6f 2c 4e 6f 2c 50 6f 2c 51 6f 2c 4f 6f 2c 54 6f 2c 55 6f 2c 59 6f 2c 5a 6f 2c 61 70 2c 6b 70 2c 6d 70 2c 6f 70 2c 72 70 2c 71 70 2c 70 70 2c 42 70 2c 45 70 2c 46 70 2c 47 70 2c 48 70 2c 4a 70 2c 4c 70 2c 4d 70 2c 4e 70 2c 50 70 2c 51 70 2c 53 70 2c 52 70 2c 55 70 2c 58 70 2c 57 70 2c 59 70 2c 24 70 2c 61 71 2c 64 71 2c 65 71 2c 67 71 2c 6a 71 2c 69 71 2c 6c 71 2c 6d 71 2c 6e 71 2c 70 71 2c 71 71 2c 73 71 2c 72 71 2c 76 71 2c 78 71 2c 7a 71 2c 42 71 2c 47 71 2c 48 71 2c 49 71 2c 4a 71 2c 4c 71 2c 4f 71 2c 4d 71 2c 4e 71 2c 50 71 2c 51 71 2c 54 71 2c 55 71 2c 56 71 2c 57 71 2c 58 71 2c 59 71 2c 5a 71 2c 24 71 2c 62 72 2c 66 72 2c 68 72 2c 69 72 2c 6a 72 2c 6d 72 2c 77 72 2c 70 72 2c 42 72 2c 43 72 2c 44 72 2c 45 72 2c 47 72 2c 49 72 2c 4b 72 2c 4e Data Ascii: o,Lo,No,Po,Qo,Oo,To,Uo,Yo,Zo,ap,kp,mp,op,rp,qp,pp,Bp,Ep,Fp,Gp,Hp,Jp,Lp,Mp,Np,Pp,Qp,Sp,Rp,Up,Xp,Wp,Yp,$p,aq,dq,eq,gq,jq,iq,lq,mq,nq,pq,qq,sq,rq,vq,xq,zq,Bq,Gq,Hq,Iq,Jq,Lq,Oq,Mq,Nq,Pq,Qq,Tq,Uq,Vq,Wq,Xq,Yq,Zq,$q,br,fr,hr,ir,jr,mr,wr,pr,Br,Cr,Dr,Er,Gr,Ir,Kr,N
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 61 2b 22 3a 22 7d 29 7d 3b 5f 2e 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 75 61 3a 62 3b 61 3a 69 66 28 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 75 61 3a 62 2c 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 70 61 29 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 61 26 26 64 2e 47 6c 28 61 29 29 7b 61 3d 6e 65 77 20 5f 2e 70 61 28 Data Ascii: unction(a){return new sa(function(b){return b.substr(0,a.length+1).toLowerCase()===a+":"})};_.wa=function(a){var b=void 0===b?ua:b;a:if(b=void 0===b?ua:b,!(a instanceof _.pa)){for(var c=0;c<b.length;++c){var d=b[c];if(d instanceof sa&&d.Gl(a)){a=new _.pa(
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 7c 66 2e 69 6e 64 65 78 2d 67 2e 69 6e 64 65 78 7d 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 61 5b 62 5d 3d 63 5b 62 5d 2e 76 61 6c 75 65 7d 3b 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 54 61 28 61 29 7c 7c 21 5f 2e 54 61 28 62 29 7c 7c 61 2e 6c 65 6e 67 74 68 21 3d 62 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 55 61 2c 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 69 66 28 21 64 28 61 5b 65 5d 2c 62 5b 65 5d 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 3b 5f 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3e 62 3f 31 3a 61 3c 62 3f 2d 31 3a 30 7d 3b 55 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: \|f.index-g.index});for(b=0;b<a.length;b++)a[b]=c[b].value};Va=function(a,b){if(!_.Ta(a)\|\|!_.Ta(b)\|\|a.length!=b.length)return!1;for(var c=a.length,d=Ua,e=0;e<c;e++)if(!d(a[e],b[e]))return!1;return!0};_.Na=function(a,b){return a>b?1:a<b?-1:0};Ua=function(a,
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 62 29 62 3d 62 2e 67 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 22 29 3b 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 62 3b 66 62 28 61 29 7d 3b 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 72 63 3d 5f 2e 69 62 28 62 29 3b 66 62 28 61 29 7d 3b 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 6e 61 6d 65 3d 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 62 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 7d 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: a.setAttribute("nonce",b)};hb=function(a,b){if(b instanceof gb)b=b.g;else throw Error("");a.textContent=b;fb(a)};jb=function(a,b){a.src=_.ib(b);fb(a)};kb=function(a){a=a(function(b){b.name=b.constructor.name;b.stack=Error().stack});a.prototype=Object.crea
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 46 6f 75 6e 64 20 61 6e 20 75 6e 70 61 69 72 65 64 20 73 75 72 72 6f 67 61 74 65 22 29 3b 66 3d 36 35 35 33 33 7d 64 5b 63 2b 2b 5d 3d 66 3e 3e 31 32 7c 32 32 34 3b 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 26 36 33 7c 31 32 38 7d 64 5b 63 2b 2b 5d 3d 66 26 36 33 7c 31 32 38 7d 7d 61 3d 63 3d 3d 3d 64 2e 6c 65 6e 67 74 68 3f 64 3a 64 2e 73 75 62 61 72 72 61 79 28 30 2c 63 29 7d 72 65 74 75 72 6e 20 61 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 72 62 29 72 65 74 75 72 6e 20 73 62 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 Data Ascii: Found an unpaired surrogate");f=65533}d[c++]=f>>12\|224;d[c++]=f>>6&63\|128}d[c++]=f&63\|128}}a=c===d.length?d:d.subarray(0,c)}return a};qb=function(a){_.t.setTimeout(function(){throw a;},0)};tb=function(a){if(!rb)return sb(a);for(var b="",c=0,d=a.length-102
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 75 65 2c 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 61 3d 22 2d 22 2b 49 62 28 61 2c 62 29 29 3a 61 3d 49 62 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 61 7d 3b 4b 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 36 3e 61 2e 6c 65 6e 67 74 68 29 47 62 28 4e 75 6d 62 65 72 28 61 29 29 3b 65 6c 73 65 20 69 66 28 42 62 28 29 29 61 3d 42 69 67 49 6e 74 28 61 29 2c 44 62 3d 4e 75 6d 62 65 72 28 61 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3e 3e 3e 30 2c 46 62 3d 4e 75 6d 62 65 72 28 61 3e 3e 42 69 67 49 6e 74 28 33 32 29 26 42 69 67 49 6e 74 28 34 32 39 34 39 36 37 32 39 35 29 29 3b 65 6c 73 65 7b 76 61 72 20 62 3d 2b 28 22 2d 22 3d 3d 3d 61 5b 30 5d 29 3b 46 62 3d 44 62 3d 30 3b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 Data Ascii: ue,b=b.next().value,a="-"+Ib(a,b)):a=Ib(a,b);return a};Kb=function(a){if(16>a.length)Gb(Number(a));else if(Bb())a=BigInt(a),Db=Number(a&BigInt(4294967295))>>>0,Fb=Number(a>>BigInt(32)&BigInt(4294967295));else{var b=+("-"===a[0]);Fb=Db=0;for(var c=a.length
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 45 72 72 6f 72 28 29 3b 61 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 61 7d 3b 6b 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 6a 63 28 61 29 3b 69 66 28 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 5f 2e 78 28 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 63 61 6c 6c 28 62 2c 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 54 62 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 3b 6c 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 26 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 7d 3b 6e 63 3d 66 75 6e 63 74 69 Data Ascii: Error();a=void 0}return a};kc=function(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d=jc(a);if(d&1)return!0;if(!(b&&(Array.isArray(b)?_.x(b,"includes").call(b,c):b.has(c))))return!1;Tb(a,d\|1);return!0};lc=function(a){if(a&2)throw Error();};nc=functi
2024-04-25 19:25:44 UTC	1255	IN	Data Raw: 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 7d 3b 44 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 73 63 28 22 69 6e 74 33 32 22 29 3b 69 66 28 21 5f 2e 78 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 29 74 68 72 6f 77 20 73 63 28 22 69 6e 74 33 32 22 29 3b 72 65 74 75 72 6e 20 61 7c 30 7d 3b 45 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 20 61 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 3b 61 3d 2b 61 7d 69 66 28 Data Ascii: (Number,"isFinite").call(Number,a)?a\|0:void 0};Dc=function(a){if("number"!==typeof a)throw sc("int32");if(!_.x(Number,"isFinite").call(Number,a))throw sc("int32");return a\|0};Ec=function(a){if(null==a)return a;if("string"===typeof a){if(!a)return;a=+a}if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49995	34.36.130.12	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	949	OUT	GET /api/sync?external_reference=mediavine&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dchicory%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%25CHICORY_ID%25 HTTP/1.1 Host: e.chicoryapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	386	IN	HTTP/1.1 301 Moved Permanently location: https://exchange.mediavine.com/usersync/redirect?partner=chicory&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=AAAzNk7MVVwAABgDb-Nxvw vary: Origin,Accept-Encoding date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 0 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	50000	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	885	OUT	GET /usermatchredir?s=193478&cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	1314	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 0 Connection: close Location: /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 CF-Ray: 87a0b88cbfd8672d-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 19:25:46 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=957; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 19:25:46 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=957; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 19:25:46 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UHl%2B5GnkHlDYgwyIF9O5FcGlBA%2BZ3Q8WtYR8K1IsNKWevOrZbeKkjouEqnf%2F40RxDDQiWJBzIr2CwqLeun90crUrlAw%2FbhxynSedxcVvc2gkMK%2FK86HzAUcHMJo0zB%2F3q82G6TMS7kbazg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	49990	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	902	OUT	GET /w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	672	IN	HTTP/1.1 302 Found Set-Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; Version=1; Expires=Fri, 25-Apr-2025 19:25:46 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://u.openx.net/w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId= Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	49998	23.54.200.27	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	956	OUT	GET /cksync.php?cs=19&type=mdv&ovsid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&us_privacy=1---&redirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediadotnet%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%3Cvsid%3E HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	1061	IN	HTTP/1.1 302 Moved Temporarily Server: Apache Content-Length: 154 Content-Type: text/html Location: https://exchange.mediavine.com/usersync/redirect?partner=mediadotnet&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=3570747466355805000V10 Set-Cookie: visitor-id=3570747466355805000V10; Expires=Fri, 25 Apr 2025 19:25:46 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: data-mv=9c050a90-0339-11ef-8f5d-8719b2ab76bc~~19;Expires=Fri, 25 Apr 2025 19:25:46 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 25 Apr 2024 19:25:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 25 Apr 2024 19:25:46 GMT Connection: close
2024-04-25 19:25:46 UTC	154	IN	Data Raw: 3c 48 54 4d 4c 3e 0d 0a 3c 48 45 41 44 3e 0d 0a 3c 54 49 54 4c 45 3e 45 72 72 6f 72 20 50 61 67 65 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 0d 0a 41 6e 20 65 72 72 6f 72 20 28 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 29 20 68 61 73 20 6f 63 63 75 72 72 65 64 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 74 68 69 73 20 72 65 71 75 65 73 74 2e 0d 0a 3c 2f 42 4f 44 59 3e 0d 0a 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><TITLE>Error Page</TITLE></HEAD><BODY>An error (302 Moved Temporarily) has occurred in response to this request.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	50001	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	893	OUT	GET /getuid?gdpr=&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	825	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:46 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:46 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	50008	3.225.218.10	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	647	OUT	GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	592	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA&verify=true Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	50006	3.227.113.146	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	767	OUT	GET /server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId={PUB_USER_ID} HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	746	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: tuuid=ad75cf80-eab6-4ca8-953c-ac28e1bde6ed; Expires=Wed, 24 Jul 2024 19:25:46 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1714073146; Expires=Wed, 24 Jul 2024 19:25:46 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://ice.360yield.com/ul_cb/server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=%7BPUB_USER_ID%7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	49992	52.86.118.186	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	753	OUT	GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	653	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 0 Connection: close Location: https://ap.lijit.com/pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID&sovrn_retry=true Set-Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	49993	52.86.118.186	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	579	OUT	GET /www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702 HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	261	IN	HTTP/1.1 302 Moved Temporarily Server: awselb/2.0 Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Type: text/html Content-Length: 110 Connection: close Location: https://cdn.lijit.com:443/www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702
2024-04-25 19:25:46 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	49999	23.105.12.142	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	707	OUT	GET /api/sync?callerId=8 HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	270	IN	HTTP/1.1 200 OK content-length: 1126 content-type: text/html date: Thu, 25 Apr 2024 19:25:45 GMT set-cookie: pid=5382283141381983659; expires=Mon, 26 May 2025 19:24:46 GMT; domain=smartadserver.com; path=/; samesite=None; secure; samesite=none connection: close
2024-04-25 19:25:46 UTC	1126	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 73 6d 61 72 74 6d 65 64 69 61 26 70 61 72 74 6e 65 72 49 64 3d 35 33 38 32 32 38 33 31 34 31 33 38 31 39 38 33 36 35 39 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 20 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 69 73 73 69 3d 31 26 70 61 72 74 6e 65 72 69 64 3d 31 33 35 26 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 54 41 4d 5f 4f 4b 26 72 65 64 69 72 75 72 6c Data Ascii: <html><head></head><body><img src="//exchange.mediavine.com/usersync/redirect?partner=smartmedia&partnerId=5382283141381983659&gdpr=0&gdpr_consent=" /><img src="https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	49994	198.148.27.131	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	930	OUT	GET /bh/rtset?pid=562036&ev=9c050a90-0339-11ef-8f5d-8719b2ab76bc&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpulsepoint%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	1501	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-qpdt7 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=UQf1GlI5tayx;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 20-Apr-2025 19:25:46 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_UQf1GlI5tayx;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 20-Apr-2025 19:25:46 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1r0e\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 25-Apr-2025 19:25:46 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1r0e\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 25-Apr-2025 19:25:46 GMT;SameSite=None;Partitioned Location: https://exchange.mediavine.com/usersync/redirect?partner=pulsepoint&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=UQf1GlI5tayx&ev=9c050a90-0339-11ef-8f5d-8719b2ab76bc&pid=562036 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000 Set-Cookie: INGRESSCOOKIE=bc4a2eed7198485a; path=/; HttpOnly; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	49996	67.202.105.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	951	OUT	GET /ps/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2024-04-25 19:25:46 UTC	792	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374; Domain=.33across.com; Expires=Fri, 25-Apr-2025 19:25:46 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8340000C server: 33XP013 location: https://de.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X content-length: 0 date: Thu, 25 Apr 2024 19:25:45 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	49991	151.101.193.108	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	700	OUT	GET /dmp/async_usersync.html HTTP/1.1 Host: acdn.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	553	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53044 Server: nginx/1.18.0 (Ubuntu) Content-Type: text/html Last-Modified: Fri, 25 Mar 2022 16:06:02 GMT ETag: "623de86a-cf34" Expires: Thu, 18 Apr 2024 10:11:49 GMT Cache-Control: max-age=86402 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 25 Apr 2024 19:25:46 GMT Age: 33219 X-Served-By: cache-lga13626-LGA, cache-pdk-kfty2130033-PDK X-Cache: HIT, HIT X-Cache-Hits: 2910, 14 X-Timer: S1714073146.311687,VS0,VE0 Vary: Accept-Encoding
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 61 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 74 2c 61 2e 63 3d 65 2c 61 2e 64 3d 66 75 6e 63 74 69 6f Data Ascii: <!DOCTYPE html><html><head></head><body><script type="text/javascript">!function(t){var e={};function a(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,a),i.l=!0,i.exports}a.m=t,a.c=e,a.d=functio
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 6e 20 61 29 69 28 61 2c 6e 29 26 26 28 74 5b 6e 5d 3d 61 5b 6e 5d 29 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 2e 73 68 72 69 6e 6b 42 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 3f 74 3a 74 2e 73 75 62 61 72 72 61 79 3f 74 2e 73 75 62 61 72 72 61 79 28 30 2c 65 29 3a 28 74 2e 6c 65 6e 67 74 68 3d 65 2c 74 29 7d 3b 76 61 72 20 72 3d 7b 61 72 72 61 79 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 6e 2c 69 29 7b 69 66 28 65 2e 73 75 62 61 72 72 61 79 26 26 74 2e 73 75 62 61 72 72 61 79 29 74 2e 73 65 74 28 65 2e 73 75 62 61 72 72 61 79 28 61 2c 61 2b 6e 29 2c 69 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 74 5b 69 2b 72 5d 3d 65 5b 61 2b 72 5d 7d 2c Data Ascii: n a)i(a,n)&&(t[n]=a[n])}}return t},e.shrinkBuf=function(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)};var r={arraySet:function(t,e,a,n,i){if(e.subarray&&t.subarray)t.set(e.subarray(a,a+n),i);else for(var r=0;r<n;r++)t[i+r]=e[a+r]},
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 22 6f 6e 22 2b 74 2c 65 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 7c 7c 21 74 2e 70 75 72 70 6f 73 65 7c 7c 21 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 7c 7c 21 30 3d 3d 3d 74 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 5b 31 5d 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 64 61 74 61 3b 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 61 3d 65 2e 5f 5f 63 6d 70 52 65 74 75 72 6e 7c 7c 65 2e 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 3b 61 26 26 28 22 67 65 74 43 6f 6e 73 65 6e 74 44 61 74 61 22 3d 3d 3d 61 2e 63 6f 6d 6d 61 6e 64 26 26 61 2e 72 65 74 75 72 6e 56 61 6c 75 65 3f 68 28 61 2e 63 61 6c 6c 49 64 2c 61 2e 72 65 74 Data Ascii: "on"+t,e)},o=function(t){return!t\|\|!t.purpose\|\|!t.purpose.consents\|\|!0===t.purpose.consents[1]},l=function(t){var e=t.data;try{e=JSON.parse(e)}catch(t){}var a=e.__cmpReturn\|\|e.__tcfapiReturn;a&&("getConsentData"===a.command&&a.returnValue?h(a.callId,a.ret
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 33 3a 61 3b 64 6f 7b 72 3d 72 2b 28 69 3d 69 2b 65 5b 6e 2b 2b 5d 7c 30 29 7c 30 7d 77 68 69 6c 65 28 2d 2d 73 29 3b 69 25 3d 36 35 35 32 31 2c 72 25 3d 36 35 35 32 31 7d 72 65 74 75 72 6e 20 69 7c 72 3c 3c 31 36 7c 30 7d 7d 2c 32 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 5b 5d 2c 61 3d 30 3b 61 3c 32 35 36 3b 61 2b 2b 29 7b 74 3d 61 3b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 38 3b 6e 2b 2b 29 74 3d 31 26 74 3f 33 39 38 38 32 39 32 33 38 34 5e 74 3e 3e 3e 31 3a 74 3e 3e 3e 31 3b 65 5b 61 5d 3d 74 7d 72 65 74 75 72 6e 20 65 7d 28 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 69 29 7b Data Ascii: 3:a;do{r=r+(i=i+e[n++]\|0)\|0}while(--s);i%=65521,r%=65521}return i\|r<<16\|0}},20:function(t,e,a){"use strict";var n=function(){for(var t,e=[],a=0;a<256;a++){t=a;for(var n=0;n<8;n++)t=1&t?3988292384^t>>>1:t>>>1;e[a]=t}return e}();t.exports=function(t,e,a,i){
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 62 69 6e 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6c 28 74 2c 74 2e 6c 65 6e 67 74 68 29 7d 2c 65 2e 62 69 6e 73 74 72 69 6e 67 32 62 75 66 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 6e 2e 42 75 66 38 28 74 2e 6c 65 6e 67 74 68 29 2c 61 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 65 5b 61 5d 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 2e 62 75 66 32 73 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 61 2c 6e 2c 69 2c 72 2c 6f 3d 65 7c 7c 74 2e 6c 65 6e 67 74 68 2c 68 3d 6e 65 77 20 41 72 72 61 79 28 32 2a 6f 29 3b 66 6f 72 28 6e 3d 30 2c 61 3d 30 3b 61 3c 6f Data Ascii: urn e},e.buf2binstring=function(t){return l(t,t.length)},e.binstring2buf=function(t){for(var e=new n.Buf8(t.length),a=0,i=e.length;a<i;a++)e[a]=t.charCodeAt(a);return e},e.buf2string=function(t,e){var a,n,i,r,o=e\|\|t.length,h=new Array(2*o);for(n=0,a=0;a<o
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 61 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 61 3c 6e 3b 61 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 69 29 26 26 28 74 5b 69 5d 3d 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 69 3d 61 28 33 37 29 2c 72 3d 28 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: tion(){return(n=Object.assign\|\|function(t){for(var e,a=1,n=arguments.length;a<n;a++)for(var i in e=arguments[a])Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i]);return t}).apply(this,arguments)};e.__esModule=!0;var i=a(37),r=(window&&window.location
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 65 3d 6e 6f 6e 65 3b 73 65 63 75 72 65 3b 70 61 74 68 3d 22 2b 69 2b 72 7d 2c 74 68 69 73 2e 77 72 69 74 65 50 69 78 65 6c 4d 61 70 54 6f 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 70 69 78 65 6c 4d 61 70 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 65 2e 70 69 78 65 6c 4d 61 70 5b 74 5d 2c 6e 3d 61 2e 69 64 2c 69 3d 61 2e 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3b 72 65 74 75 72 6e 7b 69 64 3a 6e 2c 73 79 6e 63 5f 73 74 61 72 74 3a 61 2e 73 79 6e 63 5f 73 74 61 72 74 2c 73 79 6e 63 5f 63 6f 6d 70 6c 65 74 65 3a 69 7d 7d 29 2c 61 3d 69 2e 65 6e 63 6f 64 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 76 65 72 73 69 6f 6e 3a 73 2c 70 69 78 65 6c 73 3a 74 Data Ascii: e=none;secure;path="+i+r},this.writePixelMapToCookie=function(){var t=Object.keys(e.pixelMap).map(function(t){var a=e.pixelMap[t],n=a.id,i=a.sync_complete;return{id:n,sync_start:a.sync_start,sync_complete:i}}),a=i.encode(JSON.stringify({version:s,pixels:t
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 74 68 69 73 2e 70 72 6f 63 65 73 73 50 69 78 65 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3b 74 3d 65 2e 70 69 78 65 6c 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 29 7b 76 61 72 20 61 3d 74 2e 69 64 3b 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 7c 7c 28 65 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 5b 61 5d 3d 74 2c 65 2e 6c 6f 61 64 50 69 78 65 6c 28 74 29 29 7d 7d 2c 74 68 69 73 2e 69 6d 70 62 75 73 55 72 6c 3d 74 7c 7c 64 2c 74 68 69 73 2e 70 69 78 65 6c 51 75 65 75 65 3d 5b 5d 2c 74 68 69 73 2e 70 69 78 65 6c 52 65 71 75 65 73 74 4d 61 70 3d 7b 7d 2c 74 68 69 73 2e 70 69 78 65 6c 4d 61 70 3d 74 68 69 73 2e 72 65 61 64 50 69 78 65 6c 4d 61 70 46 72 6f 6d 43 6f 6f Data Ascii: .firstChild)},this.processPixels=function(){for(var t;t=e.pixelQueue.shift();){var a=t.id;e.pixelRequestMap[a]\|\|(e.pixelRequestMap[a]=t,e.loadPixel(t))}},this.impbusUrl=t\|\|d,this.pixelQueue=[],this.pixelRequestMap={},this.pixelMap=this.readPixelMapFromCoo
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 29 3e 3e 38 29 2c 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 32 35 35 26 61 29 29 2c 65 7d 7d 2c 34 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 66 6f 72 28 74 3d 53 74 72 69 6e 67 28 74 29 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 74 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3e 32 35 35 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 61 3d 22 22 3b 66 6f 72 28 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 3d 33 29 7b 76 61 72 20 6e 3d 5b 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 5d 3b 6e 5b 30 5d 3d 74 2e 63 68 61 72 43 6f 64 Data Ascii: )>>8),e+=String.fromCharCode(255&a)),e}},40:function(t,e,a){"use strict";t.exports=function(t){var e;for(t=String(t),e=0;e<t.length;e++)if(t.charCodeAt(e)>255)return null;var a="";for(e=0;e<t.length;e+=3){var n=[void 0,void 0,void 0,void 0];n[0]=t.charCod
2024-04-25 19:25:46 UTC	1371	IN	Data Raw: 65 77 20 45 72 72 6f 72 28 73 5b 61 5d 29 3b 69 66 28 65 2e 68 65 61 64 65 72 26 26 6e 2e 64 65 66 6c 61 74 65 53 65 74 48 65 61 64 65 72 28 74 68 69 73 2e 73 74 72 6d 2c 65 2e 68 65 61 64 65 72 29 2c 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 7b 76 61 72 20 5f 3b 69 66 28 5f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 69 63 74 69 6f 6e 61 72 79 3f 72 2e 73 74 72 69 6e 67 32 62 75 66 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 42 75 66 66 65 72 5d 22 3d 3d 3d 6c 2e 63 61 6c 6c 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3f 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 2e 64 69 63 74 69 6f 6e 61 72 79 29 3a 65 2e 64 69 63 74 69 6f 6e 61 72 79 2c 28 61 3d 6e 2e 64 65 66 6c 61 74 65 53 65 74 44 69 63 Data Ascii: ew Error(s[a]);if(e.header&&n.deflateSetHeader(this.strm,e.header),e.dictionary){var _;if(_="string"==typeof e.dictionary?r.string2buf(e.dictionary):"[object ArrayBuffer]"===l.call(e.dictionary)?new Uint8Array(e.dictionary):e.dictionary,(a=n.deflateSetDic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	49988	3.212.57.127	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	870	OUT	GET /usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	362	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 3017 Connection: close Server: nginx Set-Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8; Domain=.gumgum.com; Expires=Fri, 25 Apr 2025 19:25:46 GMT; Path=/; Secure; SameSite=None ETag: "0cbfebfff3f0c0e3cd297877944c5ac86" Timing-Allow-Origin: *
2024-04-25 19:25:46 UTC	3017	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 75 5f 34 61 31 61 33 36 66 66 2d 32 32 65 30 2d 34 61 31 31 2d 39 64 32 36 2d 64 32 35 35 61 63 36 34 33 37 64 38 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	49984	35.71.131.137	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	910	OUT	GET /track/cmf/generic?ttd_pid=1mahn14&ttd_puid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&ttd_tpi=1&rurl=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthe_trade_desk%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%25%25TDID%25%25 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe
2024-04-25 19:25:46 UTC	560	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 289 Connection: close server: Kestrel location: https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=500c5aec-af13-42d6-a7ea-250f9438d1fe set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:25:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwjQv7LOh9ryPBAFOAFaBzFtYWhuMTRgAg..; expires=Fri, 25 Apr 2025 19:25:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:25:46 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 74 68 65 5f 74 72 61 64 65 5f 64 65 73 6b 26 74 79 70 65 3d 70 69 78 65 6c 26 70 61 72 74 6e 65 72 49 64 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 22 3e 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 74 68 65 5f 74 72 61 64 65 5f 64 65 73 6b 26 74 79 70 65 3d 70 69 78 65 6c 26 70 61 72 74 6e 65 72 49 64 3d 35 30 30 63 35 61 Data Ascii: Redirecting to: <a href="https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=500c5aec-af13-42d6-a7ea-250f9438d1fe">https://exchange.mediavine.com/usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=500c5a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	50007	44.196.185.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	824	OUT	GET /api/v1/dsync/mediavine?exid=9c050a90-0339-11ef-8f5d-8719b2ab76bcus_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=7c5a292e-89b9-0bf7-5209-01cf0fa3be45; Path=/; Domain=kargo.com; Expires=Fri, 25 Apr 2025 19:25:46 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-25 19:25:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	50009	34.204.143.41	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	782	OUT	GET /usersync/sync?p=[]&mv_uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&version=invalidate-verizon-pushes HTTP/1.1 Host: exchange.journeymv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	1125	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 236 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Set-Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 09 May 2024 19:25:46 GMT; Secure; SameSite=None Set-Cookie: mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 09 May 2024 19:25:46 GMT; Secure; SameSite=None Set-Cookie: am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 09 May 2024 19:25:46 GMT; Secure; SameSite=None Set-Cookie: am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; Path=/; Expires=Thu, 09 May 2024 19:25:46 GMT; Secure; SameSite=None
2024-04-25 19:25:46 UTC	236	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 0a 20 20 20 20 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 73 79 6e 63 55 72 6c 73 27 2c 0a 20 20 20 20 20 20 20 20 74 6f 6b 65 6e 73 3a 20 7b 22 6d 76 5f 75 75 69 64 22 3a 22 39 63 30 35 30 61 39 30 2d 30 33 33 39 2d 31 31 65 66 2d 38 66 35 64 2d 38 37 31 39 62 32 61 62 37 36 62 63 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 69 6e 76 61 6c 69 64 61 74 65 2d 76 65 72 69 7a 6f 6e 2d 70 75 73 68 65 73 22 7d 2c 0a 20 20 20 20 20 20 20 20 73 79 6e 63 55 72 6c 73 3a 20 5b 5d 0a 20 20 20 20 20 20 7d 2c 20 22 75 6e 64 65 66 69 6e 65 64 22 29 0a 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e Data Ascii: <script> window.parent.postMessage({ message: 'syncUrls', tokens: {"mv_uuid":"9c050a90-0339-11ef-8f5d-8719b2ab76bc","version":"invalidate-verizon-pushes"}, syncUrls: [] }, "undefined") </script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	50002	107.23.208.6	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	904	OUT	GET /pbsync?gdpr=&gdpr_consent=&us_privacy=1---&redirectUri=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dyieldmo%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	836	IN	HTTP/1.1 302 Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VcxPliHbbPHsInhMSaUi%7C1714003200000%7C0; Max-Age=31536000; Expires=Fri, 25 Apr 2025 19:25:46 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://exchange.mediavine.com/usersync/redirect?partner=yieldmo&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=VcxPliHbbPHsInhMSaUi&gdpr=&gdpr_consent=&us_privacy=1--- Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	50012	173.194.219.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	899	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:46 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 104537 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 19:25:46 GMT Expires: Thu, 25 Apr 2024 20:15:46 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Last-Modified: Mon, 22 Apr 2024 19:45:51 GMT Content-Type: text/html Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:46 UTC	548	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 Data Ascii: rn b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 67 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 67 29 7d 3b 72 65 74 75 72 6e 20 65 7d 2c 22 65 73 36 22 29 3b 77 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 28 30 2c 71 2e 53 79 6d 62 6f 6c 29 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b Data Ascii: ol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(g){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(g\|\|"")+"_"+d++,g)};return e},"es6");w("Symbol.iterator",function(a){if(a)return a;a=(0,q.Symbol)("Symbol.iterator");
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6d 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 6e 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6f 61 3b 69 66 28 66 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 76 28 4f 62 6a 65 63 74 2c 22 73 Data Ascii: if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|ma},"es6");var na="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},oa;if(fa&&"function"==typeof v(Object,"s
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 61 72 20 63 3d 61 2e 67 2e 69 3b 69 66 28 63 29 72 65 74 75 72 6e 20 7a 61 28 61 2c 22 72 65 74 75 72 6e 22 69 6e 20 63 3f 63 5b 22 72 65 74 75 72 6e 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 64 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 75 72 6e 20 41 61 28 61 29 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 69 2c 63 29 3b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 Data Ascii: ar c=a.g.i;if(c)return za(a,"return"in c?c["return"]:function(d){return{value:d,done:!0}},b,a.g.return);a.g.return(b);return Aa(a)},za=function(a,b,c,d){try{var e=b.call(a.g.i,c);if(!(e instanceof Object))throw new TypeError("Iterator result "+e+" is not
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 73 61 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 61 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 2c 22 65 73 36 22 29 3b 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 29 7b 72 65 74 75 72 6e 20 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 66 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 Data Ascii: -a]=arguments[c];return b};w("Reflect.setPrototypeOf",function(a){return a?a:sa?function(b,c){try{return sa(b,c),!0}catch(d){return!1}}:null},"es6");w("Promise",function(a){function b(){this.g=null}function c(f){return f instanceof e?f:new e(function(h){h
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 6b 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 79 61 28 68 2c 66 29 3a 74 68 69 73 2e 46 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 32 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 57 28 31 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 66 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e Data Ascii: k);return}"function"==typeof h?this.ya(h,f):this.F(f)};e.prototype.s=function(f){this.W(2,f)};e.prototype.F=function(f){this.W(1,f)};e.prototype.W=function(f,h){if(0!=this.h)throw Error("Cannot settle("+f+", "+h+"): Promise already settled in state"+this.
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 28 72 2c 74 29 7b 6c 3d 72 3b 6e 3d 74 7d 29 3b 74 68 69 73 2e 5a 28 6b 28 66 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 66 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 Data Ascii: (r,t){l=r;n=t});this.Z(k(f,l),k(h,n));return p};e.prototype.catch=function(f){return this.then(void 0,f)};e.prototype.Z=function(f,h){function k(){switch(l.h){case 1:f(l.i);break;case 2:h(l.i);break;default:throw Error("Unexpected state: "+l.h);}}var l=th
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 69 66 28 21 63 28 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 6c 61 28 66 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 63 61 28 66 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 6c 61 28 66 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 66 29 3b 66 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 Data Ascii: .next()).done;)h=h.value,this.set(h[0],h[1])}};g.prototype.set=function(f,h){if(!c(f))throw Error("Invalid WeakMap key");if(!la(f,d)){var k=new b;ca(f,d,{value:k})}if(!la(f,d))throw Error("WeakMap key fail: "+f);f[d][this.g]=h;return this};g.prototype.get
2024-04-25 19:25:46 UTC	1255	IN	Data Raw: 2e 70 75 73 68 28 6c 2e 41 29 2c 74 68 69 73 5b 31 5d 2e 48 2e 6e 65 78 74 3d 6c 2e 41 2c 74 68 69 73 5b 31 5d 2e 48 3d 6c 2e 41 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 41 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 41 2e 48 2e 6e 65 78 74 3d 68 2e 41 2e 6e 65 78 74 2c 68 2e 41 2e 6e 65 78 74 2e 48 3d 68 2e 41 2e 48 2c 68 2e 41 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d Data Ascii: .push(l.A),this[1].H.next=l.A,this[1].H=l.A,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.A&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.A.H.next=h.A.next,h.A.next.H=h.A.H,h.A.head=null,this.size-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	49997	172.240.155.108	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	879	OUT	GET /ortb.gif?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dhuddled_masses%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%5BUID%5D HTTP/1.1 Host: sync.colossusssp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	736	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 25 Apr 2024 19:25:46 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: gtm_usr=d0626051-ab1d-48d9-956d-5cabbe158818; path=/; domain=.colossusssp.com; expires=Fri, 25 Apr 2025 19:25:46 GMT;SameSite=None;Secure Set-Cookie: lmg_r=15; path=/; domain=.colossusssp.com; expires=Fri, 25 Apr 2025 19:25:46 GMT;SameSite=None;Secure Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Location: https://exchange.mediavine.com/usersync/redirect?partner=huddled_masses&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=d0626051-ab1d-48d9-956d-5cabbe158818 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
2024-04-25 19:25:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	50004	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	852	OUT	GET /check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=9c050a90-0339-11ef-8f5d-8719b2ab76bc HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	1008	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=9c050a90-0339-11ef-8f5d-8719b2ab76bc Set-Cookie: tuuid=c3763edd-6f5b-429b-9620-61fb9ea820e0; path=/; expires=Fri, 25-Apr-2025 19:25:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1714073146; path=/; expires=Fri, 25-Apr-2025 19:25:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1714073146; path=/; expires=Fri, 25-Apr-2025 19:25:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1714073146; path=/; expires=Fri, 25-Apr-2025 19:25:46 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	50005	68.67.179.164	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	727	OUT	GET /getuid?https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	1591	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dappnexus%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID AN-X-Request-Uuid: 3a4591b0-d4a4-453e-a4b3-1bf957e60d6a Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:46 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:25:46 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:46 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 582.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	50003	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	678	OUT	GET /sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=9c050a90-0339-11ef-8f5d-8719b2ab76bc HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:46 UTC	834	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=9c050a90-0339-11ef-8f5d-8719b2ab76bc Set-Cookie: tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; path=/; expires=Fri, 25-Apr-2025 19:25:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1714073146; path=/; expires=Fri, 25-Apr-2025 19:25:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1714073146; path=/; expires=Fri, 25-Apr-2025 19:25:46 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1714073146; path=/; expires=Fri, 25-Apr-2025 19:25:46 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	50014	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	966	OUT	GET /w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId= HTTP/1.1 Host: u.openx.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146
2024-04-25 19:25:47 UTC	631	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; Version=1; Expires=Fri, 25-Apr-2025 19:25:46 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; Version=1; Expires=Fri, 10-May-2024 19:25:46 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 25 Apr 2024 19:25:46 GMT Content-Type: text/html Content-Length: 1472 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:47 UTC	1255	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6f 70 65 6e 78 26 75 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://exchange.mediavine.com/usersync/redirect?partner=openx&u
2024-04-25 19:25:47 UTC	217	IN	Data Raw: 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 78 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4d 7a 67 78 4e 54 59 33 5a 57 51 74 4f 57 51 34 4d 43 30 32 59 6a 63 33 4c 54 56 69 4e 47 55 74 4e 54 6b 30 4f 47 45 79 59 7a 67 34 4d 7a 49 33 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 78 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 22 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: rc="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MzgxNTY3ZWQtOWQ4MC02Yjc3LTViNGUtNTk0OGEyYzg4MzI3"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	50016	35.244.193.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	502	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---&b=1&g=AgaxPzOWhH7pcNFuSmTljjLs7W1vK1ZzHBV0j0biRkI%3D HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true
2024-04-25 19:25:47 UTC	257	IN	HTTP/1.1 200 OK cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Thu, 25 Apr 2024 19:25:46 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:47 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	50015	74.119.118.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:46 UTC	447	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&lsw=1&us_privacy=1--- HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	349	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 25 Apr 2024 19:25:45 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 536382 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:47 UTC	366	IN	Data Raw: 31 36 32 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 36 35 48 5a 34 31 38 34 4d 6d 70 56 61 56 56 7a 55 7a 46 79 5a 44 4e 79 4f 47 31 6a 55 47 52 4e 64 47 4d 32 62 30 4e 4f 59 6d 46 4f 53 32 4e 6a 55 47 67 32 64 45 46 4c 62 57 55 33 65 6a 4a 56 4d 7a 52 56 59 58 5a 77 53 6c 6c 52 63 56 5a 4f 62 6e 55 7a 52 7a 52 57 4e 45 64 57 55 47 31 76 52 46 56 6b 61 32 4a 30 59 6d 68 34 52 57 31 50 4e 45 4d 78 55 7a 4a 49 57 55 78 68 65 47 55 33 5a 54 4e 75 4d 44 49 33 61 7a 4e 4d 55 7a 64 4c 56 30 49 78 59 6e 5a 34 55 6b 31 6f 52 55 35 47 65 56 51 6c 4d 6b 5a 49 64 6a 6c 4d 53 55 51 7a 62 48 46 4f 22 2c 22 62 69 64 49 64 22 3a 22 57 56 43 49 6e 56 39 4f 62 6c 42 4a 55 33 49 78 64 56 68 43 4a 54 4a 47 56 58 68 77 54 55 31 51 51 33 4a 34 5a 33 6c 50 59 33 46 4a 55 47 64 54 Data Ascii: 162{"bundle":"65HZ4184MmpVaVVzUzFyZDNyOG1jUGRNdGM2b0NOYmFOS2NjUGg2dEFLbWU3ejJVMzRVYXZwSllRcVZObnUzRzRWNEdWUG1vRFVka2J0Ymh4RW1PNEMxUzJIWUxheGU3ZTNuMDI3azNMUzdLV0IxYnZ4Uk1oRU5GeVQlMkZIdjlMSUQzbHFO","bidId":"WVCInV9OblBJU3IxdVhCJTJGVXhwTU1QQ3J4Z3lPY3FJUGdT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	50020	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1383	OUT	GET /usersync/redirect?partner=mediadotnet&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=3570747466355805000V10 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	50017	3.33.220.150	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	425	OUT	GET /track/rid?ttd_pid=sne7dew&fmt=json HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe
2024-04-25 19:25:47 UTC	354	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: application/json Content-Length: 108 Connection: close server: Kestrel cache-control: private expires: Sat, 25 May 2024 19:25:47 GMT set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:25:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:25:47 UTC	108	IN	Data Raw: 7b 22 54 44 49 44 22 3a 22 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 22 2c 22 54 44 49 44 5f 4c 4f 4f 4b 55 50 22 3a 22 54 52 55 45 22 2c 22 54 44 49 44 5f 43 52 45 41 54 45 44 5f 41 54 22 3a 22 32 30 32 34 2d 30 33 2d 32 35 54 31 39 3a 32 35 3a 34 37 22 7d Data Ascii: {"TDID":"500c5aec-af13-42d6-a7ea-250f9438d1fe","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2024-03-25T19:25:47"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	50019	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	968	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dtriplelift%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290
2024-04-25 19:25:47 UTC	765	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=triplelift&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=1072080661979746722290 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:47 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:47 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	50025	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	834	OUT	OPTIONS /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&bundle=2OLNNV8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUGhwcUtJOGUzNnptNTBsNE5wUTdmcU8wSDh0SjVtbVU5dVF6NjNBQVo1ZjNOY0dIckd1dkNhNUFGQmpmR0JtV1BBV1FFWVdJYXNMSnNDUDlCcG5wMDNHR1FpQk9BWnhPZGhENTlQSkZLYkdP&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	523	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 25 Apr 2024 19:25:46 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-headers: content-type access-control-allow-methods: GET access-control-allow-origin: https://earnandexcel.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 263484 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:47 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	50037	3.225.218.10	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	766	OUT	GET /ups/58749/sync?redir=true&gpp_sid=-1&gpp=DBABzw~1---~BqgAAAAAAgA&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:25:47 UTC	785	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19bx~2i2j;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 25-Apr-2025 19:25:47 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://exchange.mediavine.com/usersync/redirect?partner=verizon&partnerId=y-AaAtVntE2uIuH8DV9kiMI70eDkRgJeaS~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:47 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	50029	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1423	OUT	GET /usersync/redirect?partner=pulsepoint&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=UQf1GlI5tayx&ev=9c050a90-0339-11ef-8f5d-8719b2ab76bc&pid=562036 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	50031	35.244.193.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	788	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:47 UTC	366	IN	HTTP/1.1 200 OK vary: origin access-control-allow-credentials: true access-control-allow-origin: https://earnandexcel.com cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Thu, 25 Apr 2024 19:25:47 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:47 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	50034	3.227.113.146	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	850	OUT	GET /ul_cb/server_match?&partner_id=1625&r=https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=%7BPUB_USER_ID%7D HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ad75cf80-eab6-4ca8-953c-ac28e1bde6ed; tuuid_lu=1714073146
2024-04-25 19:25:47 UTC	429	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://exchange.mediavine.com/usersync/redirect?partner=improvedigital&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=ad75cf80-eab6-4ca8-953c-ac28e1bde6ed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	50036	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1244	OUT	GET /usersync/redirect?partner=the_trade_desk&type=pixel&partnerId=500c5aec-af13-42d6-a7ea-250f9438d1fe HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	304	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 62 Connection: close Vary: Origin, Accept, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache Location: https://exchange.mediavine.com/pixel.gif
2024-04-25 19:25:47 UTC	62	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 70 69 78 65 6c 2e 67 69 66 Data Ascii: Found. Redirecting to https://exchange.mediavine.com/pixel.gif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	50021	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1400	OUT	GET /usersync/redirect?partner=huddled_masses&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=d0626051-ab1d-48d9-956d-5cabbe158818 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	50032	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	945	OUT	GET /ul_cb/check_uuid/https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dmediagrid%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24%7BBSW_UUID%7D?gdpr=0&gdpr_consent=&us_privacy=1---&user_id=9c050a90-0339-11ef-8f5d-8719b2ab76bc HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid_lu=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038
2024-04-25 19:25:47 UTC	640	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://exchange.mediavine.com/usersync/redirect?partner=mediagrid&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 Set-Cookie: tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; path=/; expires=Fri, 25-Apr-2025 19:25:47 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1714073147; path=/; expires=Fri, 25-Apr-2025 19:25:47 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	50035	52.86.118.186	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	815	OUT	GET /pixel?redir=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dsovrn%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID&sovrn_retry=true HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl
2024-04-25 19:25:47 UTC	595	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=sovrn&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=IjUNALZH0EzpouOqQka7fQWl Set-Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	50028	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	949	OUT	GET /usermatchredir?cb=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3DindexExchange%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D&s=193478&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; CMPS=957; CMPRO=957
2024-04-25 19:25:47 UTC	1145	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Connection: close Location: https://exchange.mediavine.com/usersync/redirect?partner=indexExchange&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=ZiquOtHM44EAAFGDARTZHgAA%26957 CF-Ray: 87a0b891ea47ad82-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 19:25:47 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=957; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 19:25:47 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y8yGDreHVkJvZVX%2Fdphxo8n8DJ0bV7Pnsf10aMzspnlyWhKnQYbRz9901SzZ6bEW9q1Aczyynf45yzFQXx49ytVQYP0SVnXINoAfqYjLgYMC9FW13EoCPfdjXsoQV2nNizeQ%2FCeT4wNAOQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	50026	67.202.105.33	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	923	OUT	GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: de.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	856	IN	HTTP/1.1 307 location: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=OY/j22Yqrjun+sRSDR0PmQ==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure referrer-policy: unsafe-url content-length: 0 date: Thu, 25 Apr 2024 19:25:46 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	50022	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1379	OUT	GET /usersync/redirect?partner=chicory&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=AAAzNk7MVVwAABgDb-Nxvw HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	50033	68.67.179.164	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	954	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dappnexus%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:25:47 UTC	1528	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://exchange.mediavine.com/usersync/redirect?partner=appnexus&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=3473854422107831099 AN-X-Request-Uuid: 65119c22-b9c5-473f-8f05-1cdc195a2117 Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:25:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 582.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	50027	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1413	OUT	GET /usersync/redirect?partner=yieldmo&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=VcxPliHbbPHsInhMSaUi&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	50038	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	771	OUT	GET /ul_cb/sync?ssp=themediagrid&gdpr=0&gdpr_consent=&us_privacy=1---&user_id=9c050a90-0339-11ef-8f5d-8719b2ab76bc HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid_lu=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038
2024-04-25 19:25:47 UTC	633	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //stags.bluekai.com/site/92145?id=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&redir=https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D452%26ssp%3Dthemediagrid%26user_id%3D&limit=1 Set-Cookie: tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; path=/; expires=Fri, 25-Apr-2025 19:25:47 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1714073147; path=/; expires=Fri, 25-Apr-2025 19:25:47 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	50056	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1242	OUT	GET /usersync/redirect?partner=smartmedia&partnerId=5382283141381983659&gdpr=0&gdpr_consent= HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	50042	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	795	OUT	GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=&gdpr_consent=&us_privacy=1---&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146
2024-04-25 19:25:47 UTC	556	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; Version=1; Expires=Fri, 25-Apr-2025 19:25:47 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://usersync.gumgum.com/usersync?b=opx&i=e3471057-7ce2-0d85-29d5-131ca07a4c01 Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	50063	74.119.117.16	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	779	OUT	GET /dis/usersync.aspx?r=30&p=273&cp=smartortb&cu=1&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D79%26partneruserid%3D%40%40CRITEO_USERID%40%40&gdpr=0&gdpr_consent= HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	701	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 19:25:46 GMT server: Kestrel cache-control: no-cache expires: Thu, 25 Apr 2024 00:00:00 GMT location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=79&partneruserid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: uid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145; expires=Tue, 20 May 2025 19:25:47 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 1127062 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	50061	216.22.16.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	823	OUT	GET /redir/?issi=1&partnerid=135&partneruserid=TAM_OK&redirurl=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fdcm%3Fpid%3Df7a5db36-1d5c-4c26-81b6-b4d0807faffb%26id%3DSMART_USER_ID&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659
2024-04-25 19:25:47 UTC	467	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 19:25:47 GMT cache-control: no-cache,no-store location: https://aax-eu.amazon-adsystem.com/s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=5382283141381983659&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=135:TAM_OK; expires=Fri, 25 Apr 2025 19:25:47 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	50045	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1034	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyNi1kMjU1YWM2NDM3ZDg=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:47 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:25:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:47 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50048	8.18.47.7	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	677	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_ca3aed69a6d948869efee; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 19:25:47 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240425%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 19:25:47 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 25 Apr 2024 19:25:46 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	50055	207.65.37.181	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	673	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=47752377&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	894	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 25 Apr 2024 19:25:47 GMT Transfer-Encoding: chunked Connection: close
2024-04-25 19:25:47 UTC	2745	IN	Data Raw: 61 61 64 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 44 33 74 66 37 32 6d 74 52 73 61 42 38 71 4a 67 31 6c 48 71 31 77 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 37 35 31 34 35 3f 62 69 64 64 65 72 5f 69 64 3d 31 39 35 37 35 35 26 62 69 64 64 65 72 5f 75 75 69 64 3d 30 46 37 42 35 46 45 46 Data Ascii: aadPubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=D3tf72mtRsaB8qJg1lHq1w%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://i.liadm.com/s/75145?bidder_id=195755&bidder_uuid=0F7B5FEF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50053	108.139.47.38	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	625	OUT	GET /www/sovrn_beacon_standalone/sovrn_standalone_beacon.js?iid=12343702 HTTP/1.1 Host: cdn.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl
2024-04-25 19:25:47 UTC	501	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 21172 Connection: close Last-Modified: Tue, 16 Jan 2024 17:32:11 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 19:23:45 GMT ETag: "b4ecf05fe49c7d270978fd43997bee50" X-Cache: Hit from cloudfront Via: 1.1 80d5d65d27a0450c8f0018381b103d7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P1 X-Amz-Cf-Id: nmPKrxnTsavKLXFHZHciTfBPUDkwYPKJsSlJaM4IGRZdderVneJwEA== Age: 123
2024-04-25 19:25:47 UTC	15883	IN	Data Raw: 2f 2f 73 6f 76 72 6e 20 62 65 61 63 6f 6e 20 73 74 61 6e 64 61 6c 6f 6e 65 20 2e 6a 73 0a 77 69 6e 64 6f 77 2e 73 6f 76 72 6e 20 3d 20 77 69 6e 64 6f 77 2e 73 6f 76 72 6e 20 7c 7c 20 7b 7d 3b 0a 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 20 3d 20 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 20 7c 7c 20 7b 7d 3b 0a 6c 65 74 20 62 65 61 63 6f 6e 46 6c 61 67 20 3d 20 66 61 6c 73 65 3b 0a 6c 65 74 20 63 6d 70 56 65 72 73 69 6f 6e 20 3d 20 30 3b 0a 0a 73 6f 76 72 6e 2e 61 75 63 74 69 6f 6e 20 3d 20 7b 0a 20 20 20 20 64 6f 4e 6f 74 54 72 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 28 6e 61 76 2c 20 77 69 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 6e 61 76 20 3d 20 6e 61 76 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 20 3d 20 77 69 6e 20 7c 7c Data Ascii: //sovrn beacon standalone .jswindow.sovrn = window.sovrn \|\| {};sovrn.auction = sovrn.auction \|\| {};let beaconFlag = false;let cmpVersion = 0;sovrn.auction = { doNotTrack: function (nav, win) { nav = nav \|\| navigator; win = win \|\|
2024-04-25 19:25:47 UTC	5289	IN	Data Raw: 77 69 6e 3b 0a 20 20 20 20 20 20 6c 65 74 20 63 6d 70 46 72 61 6d 65 3b 0a 20 20 20 20 20 20 6c 65 74 20 69 73 44 69 72 65 63 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 77 68 69 6c 65 20 28 66 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 5b 61 70 69 4e 61 6d 65 5d 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6d 70 46 72 61 6d 65 20 3d 20 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 73 44 69 72 65 63 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 7d 0a 0a 20 20 Data Ascii: win; let cmpFrame; let isDirect = false; while (f != null) { try { if (typeof f[apiName] === 'function') { cmpFrame = f; isDirect = true; break; } } catch (e) {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50058	52.205.109.183	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	640	OUT	GET /api/v1/dsync/mediavine?exid=9c050a90-0339-11ef-8f5d-8719b2ab76bcus_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dkargo%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D%24UID HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=7c5a292e-89b9-0bf7-5209-01cf0fa3be45
2024-04-25 19:25:47 UTC	674	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 208 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=1e60a9b0-536b-a93f-f083-0aaee2f2f842&s2sVersion=production&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc Pragma: no-cache Set-Cookie: ktcid=7c5a292e-89b9-0bf7-5209-01cf0fa3be45; Path=/; Domain=kargo.com; Expires=Fri, 25 Apr 2025 19:25:47 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-25 19:25:47 UTC	208	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 2f 72 65 64 69 72 65 63 74 3f 70 61 72 74 6e 65 72 3d 6b 61 72 67 6f 26 61 6d 70 3b 70 61 72 74 6e 65 72 49 64 3d 31 65 36 30 61 39 62 30 2d 35 33 36 62 2d 61 39 33 66 2d 66 30 38 33 2d 30 61 61 65 65 32 66 32 66 38 34 32 26 61 6d 70 3b 73 32 73 56 65 72 73 69 6f 6e 3d 70 72 6f 64 75 63 74 69 6f 6e 26 61 6d 70 3b 75 75 69 64 3d 39 63 30 35 30 61 39 30 2d 30 33 33 39 2d 31 31 65 66 2d 38 66 35 64 2d 38 37 31 39 62 32 61 62 37 36 62 63 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://exchange.mediavine.com/usersync/redirect?partner=kargo&partnerId=1e60a9b0-536b-a93f-f083-0aaee2f2f842&s2sVersion=production&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50040	34.236.60.188	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	715	OUT	GET /sync/gumgum?gdpr=&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:25:47 UTC	852	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Connection: close Location: https://usersync.gumgum.com/usersync?b=oth&i=y-_IfnGIJE2peK4sSE6yEVRW.U1zQWesG66kSq~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:47 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50052	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	846	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; TDCPM=CAEYASABKAIyCwjQv7LOh9ryPBAFOAFaBzFtYWhuMTRgAg..
2024-04-25 19:25:47 UTC	508	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 193 Connection: close server: Kestrel location: https://usersync.gumgum.com/usersync?b=ttd&i=500c5aec-af13-42d6-a7ea-250f9438d1fe set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:25:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASABKAIyCwiw7bbZh9ryPBAFOAFaBmd1bWd1bWAC; expires=Fri, 25 Apr 2025 19:25:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:25:47 UTC	193	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 22 3e 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://usersync.gumgum.com/usersync?b=ttd&i=500c5aec-af13-42d6-a7ea-250f9438d1fe">https://usersync.gumgum.com/usersync?b=ttd&i=500c5aec-af13-42d6-a7ea-250f9438d1fe</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50066	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	787	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK
2024-04-25 19:25:47 UTC	555	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; Version=1; Expires=Fri, 25-Apr-2025 19:25:47 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://id.rlcdn.com/464246.gif?partner_uid=41bccb41-99b0-03b3-11d7-830251b12c9f Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50047	64.74.236.31	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	745	OUT	GET /usersync/gumgum/?puid=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=&gdpr_consent=&us_privacy=1---&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	696	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 217 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&s=2&us_privacy=1--- P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=krpuyAK2nL0543a1Z1Tx; Path=/; Domain=zemanta.com; Expires=Fri, 25 Apr 2025 19:25:47 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 25 Apr 2024 19:25:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 19:25:47 UTC	217	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 67 75 6d 67 75 6d 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 25 32 46 75 73 65 72 73 79 6e 63 25 33 46 62 25 33 44 7a 65 6d 25 32 36 69 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 67 64 70 72 3d 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 75 69 64 3d 75 5f 34 61 31 61 33 36 66 66 2d 32 32 65 30 2d 34 61 31 31 2d 39 64 32 36 2d 64 32 35 35 61 63 36 34 33 37 64 38 26 61 6d 70 3b 73 3d 32 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&s=2&us_privacy=1---">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50044	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	817	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:25:47 UTC	1433	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=3473854422107831099 AN-X-Request-Uuid: f0d39f58-543f-479b-a8a8-f00a75491240 Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:25:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50065	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1393	OUT	GET /usersync/redirect?partner=indexExchange&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=ZiquOtHM44EAAFGDARTZHgAA%26957 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50043	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	759	OUT	GET /sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid_lu=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038
2024-04-25 19:25:47 UTC	315	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //beacon.lynx.cognitivlabs.com/bidSwitch.gif?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=cd1f46a5-d294-434b-82d4-0e4cc2e3d038

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50069	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	910	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&bundle=2OLNNV8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUGhwcUtJOGUzNnptNTBsNE5wUTdmcU8wSDh0SjVtbVU5dVF6NjNBQVo1ZjNOY0dIckd1dkNhNUFGQmpmR0JtV1BBV1FFWVdJYXNMSnNDUDlCcG5wMDNHR1FpQk9BWnhPZGhENTlQSkZLYkdP&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	479	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 25 Apr 2024 19:25:46 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-methods: GET access-control-allow-origin: https://earnandexcel.com cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 600681 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:47 UTC	380	IN	Data Raw: 31 37 30 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 6f 5f 62 64 7a 56 38 77 62 53 55 79 51 6b 4a 36 61 44 68 32 55 45 68 4a 65 58 4a 77 65 6e 51 30 56 6c 46 51 55 47 63 6c 4d 6b 4a 59 63 45 74 52 62 33 4a 49 63 7a 55 32 56 6a 64 46 63 45 74 71 54 44 4a 72 54 48 5a 79 4f 48 4a 42 4e 54 52 6a 59 7a 52 45 5a 33 4a 31 57 6b 70 4c 59 6b 64 71 4e 48 4d 33 61 46 64 4d 62 57 5a 48 4e 55 39 6e 59 6a 64 4c 56 6e 70 50 53 6b 59 30 4d 79 55 79 51 6e 4a 56 62 30 64 52 4e 6c 70 76 55 6d 4e 76 63 6a 4e 4e 57 55 5a 69 4a 54 4a 43 63 47 6b 7a 55 6a 56 72 51 56 49 6c 4d 6b 4a 52 4a 54 4a 43 59 6d 52 33 63 45 55 32 4f 57 46 4c 52 7a 52 78 53 67 22 2c 22 62 69 64 49 64 22 3a 22 58 5a 39 51 31 56 39 69 54 31 5a 47 63 46 64 79 59 58 64 30 65 58 42 75 61 31 45 77 63 55 68 4d 4d 45 Data Ascii: 170{"bundle":"o_bdzV8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUGclMkJYcEtRb3JIczU2VjdFcEtqTDJrTHZyOHJBNTRjYzREZ3J1WkpLYkdqNHM3aFdMbWZHNU9nYjdLVnpPSkY0MyUyQnJVb0dRNlpvUmNvcjNNWUZiJTJCcGkzUjVrQVIlMkJRJTJCYmR3cEU2OWFLRzRxSg","bidId":"XZ9Q1V9iT1ZGcFdyYXd0eXBua1EwcUhMME

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50059	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	814	OUT	GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:25:47 UTC	1437	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://us-u.openx.net/w/1.0/sd?id=537072399&val=3473854422107831099 AN-X-Request-Uuid: d366cb5e-e727-4a47-97ba-4acd97dfe364 Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:25:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50070	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1265	OUT	GET /usersync/redirect?partner=verizon&partnerId=y-AaAtVntE2uIuH8DV9kiMI70eDkRgJeaS~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50050	185.184.8.90	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	695	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	742	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:25:47 GMT vary: Accept-Encoding set-cookie: g=c0dNMeS67bcZWfBa7Ddv_1714073147813;Path=/;Domain=.creativecdn.com;Expires=Fri, 25-Apr-2025 19:25:47 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1714073147;Path=/;Domain=.creativecdn.com;Expires=Fri, 25-Apr-2025 19:25:47 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 25 Apr 2024 19:25:47 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50071	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1155	OUT	GET /pixel.gif HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	305	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: image/gif Content-Length: 1561 Connection: close Vary: Origin Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Wed, 24 Apr 2024 17:46:24 GMT ETag: W/"619-18f11373d80"
2024-04-25 19:25:47 UTC	1561	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 ff 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 33 00 99 33 00 cc 33 00 ff 33 33 00 33 33 33 33 33 66 33 33 99 33 33 cc 33 33 ff 33 66 00 33 66 33 33 66 66 33 66 99 33 66 cc 33 66 ff 33 99 00 33 99 33 33 99 66 33 99 99 33 99 cc 33 99 ff 33 cc 00 33 cc 33 33 cc 66 33 cc 99 33 cc cc 33 cc ff 33 ff 00 33 ff 33 33 ff 66 33 ff 99 33 ff cc 33 ff ff 66 00 00 66 00 33 66 00 66 66 00 99 66 00 cc 66 00 ff 66 33 00 66 33 33 66 33 Data Ascii: GIF89a3f3333f333ff3fffff3f3f3f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3333333f333ff3ffffff3f33f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50076	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1297	OUT	GET /usersync/redirect?partner=improvedigital&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=ad75cf80-eab6-4ca8-953c-ac28e1bde6ed HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50041	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	611	OUT	GET /sync?nid=1&gdpr=&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	1331	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:25:47 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-301aa7bd-c380-5476-64d7-fd91d206f9b9$ip$185.152.66.230 Set-Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 128 Connection: Close
2024-04-25 19:25:47 UTC	128	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 33 30 31 61 61 37 62 64 2d 63 33 38 30 2d 35 34 37 36 2d 36 34 64 37 2d 66 64 39 31 64 32 30 36 66 39 62 39 24 69 70 24 31 38 35 2e 31 35 32 2e 36 36 2e 32 33 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-301aa7bd-c380-5476-64d7-fd91d206f9b9$ip$185.152.66.230">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50074	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1276	OUT	GET /usersync/redirect?partner=sovrn&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=IjUNALZH0EzpouOqQka7fQWl HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50073	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1292	OUT	GET /usersync/redirect?partner=mediagrid&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50075	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1274	OUT	GET /usersync/redirect?partner=appnexus&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=3473854422107831099 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50049	52.7.87.144	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	766	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=&gdpr_consent=&us_privacy=1---&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:25:47 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=5b5548e1-f48f-42a5-987f-5a866f7c8916 Set-Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649; Path=/; Domain=ipredictive.com; Expires=Fri, 25 Apr 2025 19:25:47 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 76a21f65-4b36-456f-9b4b-de673f6b84db Content-Length: 108 Connection: Close
2024-04-25 19:25:47 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 35 62 35 35 34 38 65 31 2d 66 34 38 66 2d 34 32 61 35 2d 39 38 37 66 2d 35 61 38 36 36 66 37 63 38 39 31 36 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=5b5548e1-f48f-42a5-987f-5a866f7c8916">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50068	34.236.60.188	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	735	OUT	GET /sync/openx/80bdd263-c45b-a79a-7f79-1504977d800e?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:25:47 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:47 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-25 19:25:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50062	52.32.62.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	844	OUT	GET /visitor/bsync?uid=627080440e659fbe0f85333c665ae1de&name=SMARTADSERVER&url=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D117%26partneruserid%3DPARTNER_USER_ID%26gdpr%3DGDPR%26gdpr_consent%3DGDPR_CONSENT&gdpr=0&gdpr_consent= HTTP/1.1 Host: visitor.omnitagjs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	654	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close cache-control: no-cache, no-store, must-revalidate expires: 0 location: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=117&partneruserid=f3b7d652e007eae21eec0dd71ae622c5&gdpr=0&gdpr_consent=0 p3p: CP="CAO PSA OUR" pragma: no-cache set-cookie: ayl_visitor=f3b7d652e007eae21eec0dd71ae622c5; Path=/; Domain=omnitagjs.com; Max-Age=2592000; Secure; SameSite=None vary: Accept-Encoding x-content-type-options: nosniff X-Kong-Upstream-Latency: 14 X-Kong-Proxy-Latency: 1 Via: kong/2.8.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50077	34.200.65.202	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	750	OUT	GET /ups/58294/sync?_origin=1&uid=3abe37ae-8c9d-0f9a-1d89-c2fbff89b92e HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:25:47 UTC	609	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 19:25:47 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18za~2i2j;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 25-Apr-2025 19:25:47 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:47 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50067	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	727	OUT	GET /async_usersync?cbfn=queuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:25:47 UTC	1282	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 353fa36a-f722-46f8-b363-0fdd278a2ae0 Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:25:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50081	67.202.105.31	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	966	OUT	GET /deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 HTTP/1.1 Host: hde.tynt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=OY/j22Yqrjun+sRSDR0PmQ==
2024-04-25 19:25:47 UTC	1033	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22797f54a72d%22%2C%22f%22%3A1%2C%22ts%22%3A1714073147833%7D%2C%7B%22p%22%3A%224bee518595%22%2C%22f%22%3A1%2C%22ts%22%3A1714073147833%7D%2C%7B%22p%22%3A%2224c05c7b76%22%2C%22f%22%3A1%2C%22ts%22%3A1714073147833%7D%2C%7B%22p%22%3A%22d26852f088%22%2C%22f%22%3A1%2C%22ts%22%3A1714073147833%7D%2C%7B%22p%22%3A%22f9a4a8fd15%22%2C%22f%22%3A1%2C%22ts%22%3A1714073147833%7D%2C%7B%22p%22%3A%22008c314e8f%22%2C%22f%22%3A1%2C%22ts%22%3A1714073147833%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure referrer-policy: unsafe-url content-type: text/html content-length: 1920 date: Thu, 25 Apr 2024 19:25:47 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-04-25 19:25:47 UTC	1920	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 73 73 63 2d 63 6d 73 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 70 73 2f 3f 5f 3d 31 37 31 34 30 37 33 31 34 37 38 33 33 2e 26 72 69 3d 30 30 31 34 30 30 30 30 30 30 78 76 45 66 77 41 41 45 26 67 64 70 72 5f 35 38 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 26 72 75 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 78 63 68 61 6e 67 65 2e 6d 65 64 69 61 76 69 6e 65 Data Ascii: <!doctype html><html><head></head><body><script>(function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ssc-cms.33across.com/ps/?_=1714073147833.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50082	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1382	OUT	GET /usersync/redirect?partner=triplelift&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=1072080661979746722290 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50083	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	1283	OUT	GET /usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=da332442-e224-02bf-2eb1-e5d2da7e20fa HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:47 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50079	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	660	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4cacc85a-485d-8e29-8ea0-8166001986a7 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:47 UTC	783	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Apr 2024 19:25:47 GMT Content-Length: 0 Connection: close x-amz-rid: 8T5BGXDMZDZD4T7HT9A7 Set-Cookie: ad-id=AxKNRT4uX0MloXMUhygoKb4\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:47 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4cacc85a-485d-8e29-8ea0-8166001986a7&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50089	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	712	OUT	GET /w/1.0/sd?id=537072399&val=3473854422107831099 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK
2024-04-25 19:25:48 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50086	198.148.27.131	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	924	OUT	GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=UQf1GlI5tayx; VP=part_UQf1GlI5tayx; pb_rtb_ev=3-1r0e\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc; pb_rtb_ev_part=3-1r0e\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc; INGRESSCOOKIE=bc4a2eed7198485a
2024-04-25 19:25:48 UTC	1336	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-qpdt7 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=UQf1GlI5tayx;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 20-Apr-2025 19:25:48 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_UQf1GlI5tayx;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 20-Apr-2025 19:25:48 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1r0e\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc\|7bq.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 25-Apr-2025 19:25:48 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1r0e\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc\|7bq.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 25-Apr-2025 19:25:48 GMT;SameSite=None;Partitioned Location: https://rtb.gumgum.com/usersync?b=pln&i=UQf1GlI5tayx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50060	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	725	OUT	GET /get?p=M501991648&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D141%26partneruserid%3D$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	1176	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:48 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=ar101281&google_hm=ZmkxOGZSeHRIZlNTME9lbENBR09lMzJPdw%3D%3D&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZGZpMThmUnh0SGZTUzBPZWxDQUdPZTMyT3ciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19 Server: nginx/1.22.1 Set-Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; Max-Age=1296000; Expires=Fri, 10 May 2024 19:25:48 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Set-Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; Max-Age=1296000; Expires=Fri, 10 May 2024 19:25:48 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50090	35.244.193.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	556	OUT	GET /v1/envelope?pid=0014000000xvEfwAAE&gdpr=0&src=pbjs&ver=8.44.0&coppa=0&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: lexicon.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:48 UTC	257	IN	HTTP/1.1 200 OK cache-control: private, must-revalidate, max-age=28800 content-type: application/json Content-Length: 42 via: 1.1 google date: Thu, 25 Apr 2024 19:25:47 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:48 UTC	42	IN	Data Raw: 7b 22 73 75 63 63 65 65 64 65 64 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 43 6f 6f 6b 69 65 64 20 55 73 65 72 22 7d Data Ascii: {"succeeded":false,"error":"Cookied User"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50051	211.120.53.204	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	696	OUT	GET /aux/idsync?proto=gumgum HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	834	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://usersync.gumgum.com/usersync?b=sus&i=ZiquPMCo5r8AAPv8cvMAAAAA P3P: CP="See also http://www.scaleout.jp/privacy/" Set-Cookie: SOC=ZiquPMCo5r8AAPv8cvMAAAAA; path=/; expires=Sat, 25-Apr-26 19:25:48 GMT; domain=socdm.com; secure; SameSite=None X-SO-Ads-Time: 2 X-SO-HostName: a-ad40081.dc2p.scaleout.jp X-SO-LB-Hostname: a-tgng40001.dc2p.scaleout.jp X-SO-LB-Data: {"ban":false,"clean_query":"\/aux\/idsync?proto=gumgum","cluster_id":0,"gdpr":false,"ipv4":"185.152.66.230","key":"ZiquPMCo5r8AAPv8cvMAAAAA","privacy_sensitive":false,"uid":"","upstream_id":"a-ad40081"} X-SO-Key: ZiquPMCo5r8AAPv8cvMAAAAA X-SO-IP: 185.152.66.230 X-SO-Cluster-ID: 0 X-SO-Upstream-ID: a-ad40081

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50091	216.22.16.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	745	OUT	GET /redir/?issi=1&partnerid=79&partneruserid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659; csync=135:TAM_OK
2024-04-25 19:25:48 UTC	401	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 25 Apr 2024 19:25:47 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=79:7d0d2d72-8a65-404e-bc6d-3d00a8d24145\|135:TAM_OK; expires=Fri, 25 Apr 2025 19:25:48 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-04-25 19:25:48 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50094	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	785	OUT	GET /usersync?b=ttd&i=500c5aec-af13-42d6-a7ea-250f9438d1fe HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:48 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50093	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	682	OUT	GET /usersync?b=opx&i=e3471057-7ce2-0d85-29d5-131ca07a4c01 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:48 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50095	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:47 UTC	686	OUT	GET /usersync?b=oth&i=y-_IfnGIJE2peK4sSE6yEVRW.U1zQWesG66kSq~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:48 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50096	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	665	OUT	GET /usersync?b=apn&i=3473854422107831099 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:48 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50092	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	702	OUT	GET /usersync?b=sta&i=0-301aa7bd-c380-5476-64d7-fd91d206f9b9$ip$185.152.66.230 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:48 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50097	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	682	OUT	GET /usersync?b=vnt&i=5b5548e1-f48f-42a5-987f-5a866f7c8916 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:48 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50087	64.74.236.31	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	784	OUT	GET /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=&gdpr_consent=&puid=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&s=2&us_privacy=1--- HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=krpuyAK2nL0543a1Z1Tx
2024-04-25 19:25:48 UTC	603	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 112 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://usersync.gumgum.com/usersync?b=zem&i=krpuyAK2nL0543a1Z1Tx&us_privacy=1--- P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=krpuyAK2nL0543a1Z1Tx; Path=/; Domain=zemanta.com; Expires=Fri, 25 Apr 2025 19:25:48 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 25 Apr 2024 19:25:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 19:25:48 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 7a 65 6d 26 61 6d 70 3b 69 3d 6b 72 70 75 79 41 4b 32 6e 4c 30 35 34 33 61 31 5a 31 54 78 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 2d 2d 2d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=zem&i=krpuyAK2nL0543a1Z1Tx&us_privacy=1---">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50100	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1052	OUT	GET /usersync/redirect?partner=kargo&partnerId=1e60a9b0-536b-a93f-f083-0aaee2f2f842&s2sVersion=production&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50101	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	997	OUT	GET /usersync/redirect?partner=smartmedia&partnerId=5382283141381983659&gdpr=0&gdpr_consent= HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50102	169.197.150.7	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	529	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_ca3aed69a6d948869efee; CDIPARTNERS=%7B%221%22%3A%2220240425%22%7D
2024-04-25 19:25:48 UTC	645	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://usersync.gumgum.com/usersync?b=dit&i=di_ca3aed69a6d948869efee set-cookie: CDIUSER=di_ca3aed69a6d948869efee; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 19:25:48 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240425%22%2C%22142%22%3A%2220240425%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 19:25:48 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 25 Apr 2024 19:25:47 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50105	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	626	OUT	GET /464246.gif?partner_uid=41bccb41-99b0-03b3-11d7-830251b12c9f HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	729	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CPaqHBIvCisIARCUaxokNDFiY2NiNDEtOTliMC0wM2IzLTExZDctODMwMjUxYjEyYzlmEAAaDQi83KqxBhIFCOgHEABCAEoA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=XeU/dIO6VQPmZz936F67MWTAMJYkoJy+u/LHJPhouew=; Path=/; Domain=rlcdn.com; Expires=Fri, 25 Apr 2025 19:25:48 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 24 Jun 2024 19:25:48 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50104	216.22.16.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	743	OUT	GET /redir/?issi=1&partnerid=117&partneruserid=f3b7d652e007eae21eec0dd71ae622c5&gdpr=0&gdpr_consent=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659; csync=135:TAM_OK
2024-04-25 19:25:48 UTC	398	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 25 Apr 2024 19:25:47 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=117:f3b7d652e007eae21eec0dd71ae622c5\|135:TAM_OK; expires=Fri, 25 Apr 2025 19:25:48 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-04-25 19:25:48 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50108	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	831	OUT	GET /pixel?google_nid=openx&google_hm=MzgxNTY3ZWQtOWQ4MC02Yjc3LTViNGUtNTk0OGEyYzg4MzI3 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:48 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:25:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:48 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50107	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	999	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:25:48 UTC	1514	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3473854422107831099&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 4c0d8e39-3311-451d-8241-5697c855ac23 Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:48 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:25:48 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:48 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50099	34.200.31.123	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	682	OUT	GET /bidSwitch.gif?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	601	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://x.bidswitch.net/sync?dsp_id=425&user_group=1&expires=365&user_id=4df7d229-f8a3-4c53-bb16-fd8aeed54a56&ssp=gumgum2&bsw_param=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 Set-Cookie: UID=4df7d229-f8a3-4c53-bb16-fd8aeed54a56; expires=Fri, 25 Apr 2025 19:25:48 GMT; path=/; secure; samesite=none Set-Cookie: ss=jTJs01KclCE4W4cXxGyytvkK3AWkRc%2BQg42GR1GkXZdVKjDchTOGCV88GqqLLnIpizFIV5rtf3c%2FBnXDcvQstQ%3D%3D; expires=Fri, 25 Apr 2025 19:25:48 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50098	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	738	OUT	GET /track/cmf/openx?oxid=147ab427-54f7-35d3-4eae-03f1682a4d47&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; TDCPM=CAEYASABKAIyCwiw7bbZh9ryPBAFOAFaBmd1bWd1bWAC
2024-04-25 19:25:48 UTC	579	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=147ab427-54f7-35d3-4eae-03f1682a4d47&gdpr=0&gdpr_consent= set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:25:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYASACKAIyCwiw7bbZh9ryPBAFOAFaBmd1bWd1bWAC; expires=Fri, 25 Apr 2025 19:25:48 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:25:48 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 74 74 64 5f 70 75 69 64 3d 31 34 37 61 62 34 32 37 2d 35 34 66 37 2d 33 35 64 33 2d 34 65 61 65 2d 30 33 66 31 36 38 32 61 34 64 34 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=147ab427-54f7-35d3-4eae-03f1682a4d47&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=500c5aec-af13-42d6-a7ea-250

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50109	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	800	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	815	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Length: 0 Connection: close x-amz-rid: D4MX97QFDZJ01YAE6RH6 Set-Cookie: ad-id=A4m2pWkWTUlLrdWQlXXRkjw\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50110	18.160.83.5	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	535	OUT	GET /aax2/apstag.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	652	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 310652 Connection: close Date: Thu, 25 Apr 2024 19:01:16 GMT Last-Modified: Wed, 24 Apr 2024 20:29:36 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 c3af1bb2028605770032345c7c19b7aa.cloudfront.net (CloudFront), 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 ETag: "2972ffd0c9787e6772a94009915bbae7" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: KIY_FB8ZfkeMwLEE4ZVX2b1PAhqbTzO58D04EMnYUoc_19kHYkpywg== Age: 1473
2024-04-25 19:25:48 UTC	15732	IN	Data Raw: 2f 2a 21 20 40 61 6d 7a 6e 2f 61 70 73 77 65 62 61 70 73 74 61 67 6c 69 62 72 61 72 79 20 2d 20 77 65 62 2d 63 6c 69 65 6e 74 2d 62 75 6e 64 6c 65 20 2d 20 76 32 34 2e 34 31 38 2e 32 32 31 31 20 2d 20 32 30 32 34 2d 30 34 2d 31 38 20 32 32 3a 31 31 3a 32 34 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e Data Ascii: /! @amzn/apswebapstaglibrary - web-client-bundle - v24.418.2211 - 2024-04-18 22:11:24 /!function(){"use strict";var t=function(e,n){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 29 7d 29 29 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 67 70 70 53 74 72 69 6e 67 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 22 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6e 3d 72 29 7d 63 61 74 63 68 28 74 29 7b 6f 3d 22 45 3a 70 69 6e 67 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 7d 72 65 74 75 72 6e 5b 6e 2c 6f 5d 7d 28 65 29 2c 32 29 2c 74 3d 6c 5b 30 5d 2c 61 3d 6c 5b 31 5d 2c 75 3d 22 70 69 6e 67 22 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 76 3d 63 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6f 3b 74 72 79 7b 76 61 72 20 72 3d 74 2e 67 6c 6f 62 61 6c 43 6f Data Ascii: &&"object"==typeof t&&(n=t)}));void 0===n&&(null!==(e=null==r?void 0:r.gppString)&&void 0!==e?e:"").length>0&&(n=r)}catch(t){o="E:ping: ".concat(t)}return[n,o]}(e),2),t=l[0],a=l[1],u="ping","object"!=typeof t&&(v=c(function(t){var e,o;try{var r=t.globalCo
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 61 6e 67 65 28 74 2c 6d 2e 75 6e 6b 6e 6f 77 6e 2c 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 72 66 61 63 65 45 72 72 6f 72 54 6f 45 78 74 65 72 6e 61 6c 55 73 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 72 65 6a 65 63 74 29 29 74 72 79 7b 74 2e 64 65 74 61 69 6c 2e 72 65 6a 65 63 74 28 65 29 2c 24 28 29 26 26 58 2e 65 72 72 6f 72 28 65 29 7d 63 61 74 63 68 28 74 29 7b 58 2e 65 72 72 6f 72 28 74 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 49 6e 76 61 6c 69 64 41 63 63 6f 75 6e 74 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 Data Ascii: ange(t,m.unknown,e)},t.prototype.surfaceErrorToExternalUsers=function(t,e){var n;if(void 0!==(null===(n=t.detail)\|\|void 0===n?void 0:n.reject))try{t.detail.reject(e),$()&&X.error(e)}catch(t){X.error(t)}},t.prototype.handleInvalidAccountError=function(t,e)
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 30 3d 3d 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 6c 69 4d 6f 64 75 6c 65 45 6e 61 62 6c 65 64 26 26 28 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 6c 69 4d 6f 64 75 6c 65 45 6e 61 62 6c 65 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 2e 39 35 2c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 67 6f 6f 67 6c 65 74 61 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 2e 63 6d 64 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 67 6c 6f 62 61 6c 43 6f 6e 74 65 78 74 2e 67 6f 6f 67 6c 65 74 61 67 2e 70 75 62 61 64 73 28 29 2e 73 65 74 54 61 72 67 65 74 69 6e 67 28 22 6c 69 2d 6d 6f 64 75 6c 65 2d 65 6e 61 Data Ascii: 0===t.globalContext.liModuleEnabled&&(t.globalContext.liModuleEnabled=Math.random()<.95,null===(n=null===(e=t.globalContext)\|\|void 0===e?void 0:e.googletag)\|\|void 0===n\|\|n.cmd.push((function(){t.globalContext.googletag.pubads().setTargeting("li-module-ena
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 30 21 3d 3d 74 2e 73 6c 6f 74 50 61 72 61 6d 73 26 26 28 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 2e 65 78 74 3d 74 2e 73 6c 6f 74 50 61 72 61 6d 73 29 2c 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 3d 6e 28 6e 28 7b 7d 2c 6f 2e 73 70 65 63 2e 70 6c 61 63 65 6d 65 6e 74 29 2c 50 65 28 74 29 29 2c 6f 7d 2c 50 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 65 64 69 61 54 79 70 65 3d 3d 3d 62 65 2e 4d 75 6c 74 69 46 6f 72 6d 61 74 3f 65 3d 49 65 28 74 2e 6d 75 6c 74 69 46 6f 72 6d 61 74 50 72 6f 70 65 72 74 69 65 73 2c 74 2e 63 6f 6d 70 61 6e 69 6f 6e 73 29 3a 74 2e 6d 65 64 69 61 54 79 70 65 3d 3d 3d 62 65 2e 56 69 64 65 6f 3f 28 65 2e 76 69 64 65 6f 3d 7b 7d 2c 76 6f 69 64 20 30 21 3d 3d 74 2e Data Ascii: 0!==t.slotParams&&(o.spec.placement.ext=t.slotParams),o.spec.placement=n(n({},o.spec.placement),Pe(t)),o},Pe=function(t){var e={};return t.mediaType===be.MultiFormat?e=Ie(t.multiFormatProperties,t.companions):t.mediaType===be.Video?(e.video={},void 0!==t.
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 70 61 69 72 65 64 45 76 65 6e 74 73 29 7c 7c 72 2e 6c 65 6e 67 74 68 3c 31 7c 7c 72 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7d 29 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 70 61 69 72 65 64 45 76 65 6e 74 73 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 65 6d 70 74 79 20 61 72 72 61 79 20 6f 66 20 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 74 29 3b 65 2e 75 70 64 61 74 65 28 73 6e 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: id 0===u?void 0:u.pairedEvents)\|\|r.length<1\|\|r.some((function(t){return"string"!=typeof t})))throw new Error("Parameter pairedEvents must be a non-empty array of string");return r.forEach((function(n){var r="".concat(n,":").concat(t);e.update(sn,(function
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 6c 22 3d 3d 3d 61 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 28 65 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 6e 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 64 28 74 29 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 Data Ascii: l"===a(t)?t:String(t)}(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function l(t){return function(t){if(Array.isArray(t))return d(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 28 6d 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 7d 29 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 Data Ascii: sn't been initialised - super() hasn't been called");return t}function m(t){return(m=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(t){return t.__proto__\|\|Object.getPrototypeOf(t)})(t)}function g(t,e){if(!(t instanceof e))throw new TypeError(
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 22 2c 6f 3d 4f 62 6a 65 63 74 28 72 2e 63 29 28 22 75 72 6c 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6f 29 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 29 3b 74 72 79 7b 74 72 79 7b 65 3d 28 77 28 74 2c 21 31 29 26 26 28 4f 62 6a 65 63 74 28 75 2e 63 29 28 22 61 6d 70 41 64 43 6f 6e 74 65 78 74 22 2c 22 67 65 74 52 65 66 65 72 72 65 72 55 72 6c 22 29 2c 74 2e 63 6f 6e 74 65 78 74 29 7c 7c 74 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 29 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 6e 29 7b 65 3d 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 6e 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 Data Ascii: ",o=Object(r.c)("url");if(null!==o)return encodeURIComponent(o);try{try{e=(w(t,!1)&&(Object(u.c)("ampAdContext","getReferrerUrl"),t.context)\|\|t.top.document).referrer}catch(n){e=t.document.referrer}n=encodeURIComponent(e)}catch(n){}return n}catch(n){retur
2024-04-25 19:25:48 UTC	16384	IN	Data Raw: 65 63 61 74 69 6f 6e 4c 61 62 65 6c 22 29 3b 78 26 26 22 22 21 3d 3d 78 26 26 28 7a 2e 63 64 65 70 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 78 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 74 72 79 7b 76 61 72 20 4d 3d 4f 62 6a 65 63 74 28 68 2e 61 29 28 5f 29 2e 72 65 61 64 28 22 63 6f 6e 73 65 6e 74 2f 47 50 50 44 61 74 61 22 29 7c 7c 7b 7d 2c 4c 3d 4d 2e 67 70 70 53 74 72 69 6e 67 2c 55 3d 4d 2e 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 2c 56 3d 30 3c 28 4c 7c 7c 22 22 29 2e 6c 65 6e 67 74 68 2c 42 3d 30 3c 28 55 7c 7c 5b 5d 29 2e 6c 65 6e 67 74 68 3b 56 26 26 28 7a 2e 67 70 70 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4c 29 29 2c 42 26 26 28 7a 2e 67 70 70 5f 73 69 64 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 Data Ascii: ecationLabel");x&&""!==x&&(z.cdep=encodeURIComponent(x))}catch(t){}try{var M=Object(h.a)(_).read("consent/GPPData")\|\|{},L=M.gppString,U=M.applicableSections,V=0<(L\|\|"").length,B=0<(U\|\|[]).length;V&&(z.gpp=encodeURIComponent(L)),B&&(z.gpp_sid=encodeURIComp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50112	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	792	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:48 UTC	660	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEC8ps8Pv3-KJUhIjF_YDojg&google_cver=1 Date: Thu, 25 Apr 2024 19:25:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 295 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:48 UTC	295	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 43 38 70 73 38 50 76 33 2d 4b 4a 55 68 49 6a 46 5f 59 44 6f 6a 67 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESEC8ps8Pv3-KJUhIjF_YDojg&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50114	3.163.101.59	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1328	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=a5d6e528-31e3-472a-bdab-24466191fa18&iiqpciddate=1714073144763&tsrnd=17_1714073144779&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	1678	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 19:25:48 GMT Set-Cookie: intentIQ=wVTUfJaaOu; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:48 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=a5d6e528-31e3-472a-bdab-24466191fa18&iiqpciddate=1714073144763&tsrnd=17_1714073144779&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&ckls=true&ci=wVTUfJaaOu&nc=false&trid=-1569032401 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:48 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 2d3d2d50d26ac994841cde79fc5be2c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P8 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: q2m1aW8aqDGg0Ae1_BvedV9APoGBjhXIWzNfA1ph46Yt4ffMunSZuw==
2024-04-25 19:25:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50115	74.119.117.4	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	542	OUT	GET /js/ld/publishertag.ids.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	483	IN	HTTP/1.1 200 OK server: nginx date: Thu, 25 Apr 2024 19:25:48 GMT content-type: text/javascript content-length: 42433 last-modified: Tue, 09 Apr 2024 12:20:57 GMT etag: "661532a9-a5c1" expires: Fri, 26 Apr 2024 19:25:48 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:48 UTC	15901	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 52 3d 72 3d 72 7c 7c 7b 7d 29 5b 52 2e 45 72 72 6f 72 3d 30 5d 3d 22 45 72 72 6f 72 22 2c 52 5b 52 2e 57 61 72 6e 69 6e 67 3d 31 5d 3d 22 57 61 72 6e 69 6e 67 22 2c 52 5b 52 2e 44 65 62 75 67 3d 32 5d 3d 22 44 65 62 75 67 22 3b 76 61 72 20 72 2c 4c 3d 5b 22 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 38 66 31 63 3b 22 2c 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 22 2c 22 70 61 64 64 69 6e 67 3a 20 31 70 78 20 34 70 78 3b 22 2c 22 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 22 5d 2e 6a 6f 69 6e 28 22 20 22 29 2c 64 3d 28 6e 2e 4c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f Data Ascii: !function(){"use strict";(R=r=r\|\|{})[R.Error=0]="Error",R[R.Warning=1]="Warning",R[R.Debug=2]="Debug";var r,L=["color: #fff;","background: #ff8f1c;","display: inline-block;","padding: 1px 4px;","border-radius: 3px;"].join(" "),d=(n.Log=function(e,t){var o
2024-04-25 19:25:48 UTC	16319	IN	Data Raw: 74 63 68 28 65 29 7b 7d 7d 65 6c 73 65 20 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 65 2c 74 2c 63 2c 76 6f 69 64 20 30 2c 69 29 3b 72 65 74 75 72 6e 20 73 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 65 2c 22 22 2c 30 2c 74 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 21 31 3a 6f 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 29 66 6f 72 28 76 61 72 20 6f 3d 30 2c 6e 3d 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 6f 3c 6e 2e Data Ascii: tch(e){}}else this.setCookieString(e,t,c,void 0,i);return s},h.prototype.deleteCookie=function(e,t,o){this.setCookie(e,"",0,t,o=void 0===o?!1:o)},h.prototype.getCookie=function(e,t){if(this.cookiesEnabled)for(var o=0,n=(t\|\|document).cookie.split(";");o<n.
2024-04-25 19:25:48 UTC	10213	IN	Data Raw: 3d 6e 65 77 20 4f 3b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 28 29 2c 65 7d 2c 4f 2e 43 72 65 61 74 65 57 69 74 68 53 74 61 72 74 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 4f 28 21 31 29 3b 72 65 74 75 72 6e 20 74 2e 73 74 61 72 74 54 69 6d 65 3d 65 2c 74 7d 2c 4f 2e 54 69 6d 65 53 69 6e 63 65 50 61 67 65 4c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f Data Ascii: =new O;return e.start(),e},O.CreateWithStartTime=function(e){var t=new O(!1);return t.startTime=e,t},O.TimeSincePageLoad=function(){if(window.performance){if(window.performance.now)return window.performance.now();if(window.performance.timing&&window.perfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50103	54.239.38.253	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	685	OUT	GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=5382283141381983659&gdpr=0&gdpr_consent= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	794	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Length: 0 Connection: close x-amz-rid: WM0JSM3SHAN35C82EDE0 Set-Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://aax-eu.amazon-adsystem.com/s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=5382283141381983659&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50117	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1029	OUT	GET /usersync/redirect?partner=verizon&partnerId=y-AaAtVntE2uIuH8DV9kiMI70eDkRgJeaS~A&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid=-1 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50116	74.119.118.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	722	OUT	GET /sid/json?origin=prebid&topUrl=https%3A%2F%2Fearnandexcel.com%2F&domain=earnandexcel.com&bundle=2OLNNV8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUGhwcUtJOGUzNnptNTBsNE5wUTdmcU8wSDh0SjVtbVU5dVF6NjNBQVo1ZjNOY0dIckd1dkNhNUFGQmpmR0JtV1BBV1FFWVdJYXNMSnNDUDlCcG5wMDNHR1FpQk9BWnhPZGhENTlQSkZLYkdP&lsw=1&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145
2024-04-25 19:25:48 UTC	350	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 25 Apr 2024 19:25:48 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 1562971 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:48 UTC	475	IN	Data Raw: 31 43 46 0d 0a 7b 22 62 75 6e 64 6c 65 22 3a 22 69 30 72 6c 31 6c 38 77 62 53 55 79 51 6b 4a 36 61 44 68 32 55 45 68 4a 65 58 4a 77 65 6e 51 30 56 6c 46 51 55 48 52 47 4a 54 4a 43 5a 48 52 74 64 6c 64 45 65 6d 35 74 4f 54 49 35 4d 48 64 30 51 56 42 50 5a 6b 51 30 61 31 46 5a 63 57 78 59 56 31 70 69 64 6b 39 59 56 57 4a 6f 54 32 4a 48 64 55 6b 34 65 56 46 52 55 57 78 52 63 6b 6f 33 62 45 6c 54 51 58 5a 30 55 6d 39 75 59 32 70 77 65 6b 70 51 63 6d 46 48 5a 55 4a 4a 4a 54 4a 43 62 57 78 71 62 48 55 6c 4d 6b 5a 34 64 31 41 7a 4a 54 4a 47 63 7a 4a 36 62 47 70 4e 53 6d 4a 78 63 48 45 7a 54 57 45 35 52 43 55 79 52 6d 74 58 56 6a 52 4d 64 45 64 77 64 57 31 42 52 6d 46 48 61 7a 46 4a 55 47 5a 4c 59 6b 4e 59 56 30 45 6c 4d 30 51 6c 4d 30 51 22 2c 22 62 69 64 49 64 Data Ascii: 1CF{"bundle":"i0rl1l8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUHRGJTJCZHRtdldEem5tOTI5MHd0QVBPZkQ0a1FZcWxYV1pidk9YVWJoT2JHdUk4eVFRUWxRcko3bElTQXZ0Um9uY2pwekpQcmFHZUJJJTJCbWxqbHUlMkZ4d1AzJTJGczJ6bGpNSmJxcHEzTWE5RCUyRmtXVjRMdEdwdW1BRmFHazFJUGZLYkNYV0ElM0QlM0Q","bidId

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50119	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	919	OUT	GET /pixel.gif HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	305	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 1561 Connection: close Vary: Origin Access-Control-Allow-Credentials: true Cache-Control: no-cache, private Accept-Ranges: bytes Last-Modified: Wed, 24 Apr 2024 17:46:24 GMT ETag: W/"619-18f11373d80"
2024-04-25 19:25:48 UTC	1561	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 ff 00 00 00 00 00 00 00 33 00 00 66 00 00 99 00 00 cc 00 00 ff 00 33 00 00 33 33 00 33 66 00 33 99 00 33 cc 00 33 ff 00 66 00 00 66 33 00 66 66 00 66 99 00 66 cc 00 66 ff 00 99 00 00 99 33 00 99 66 00 99 99 00 99 cc 00 99 ff 00 cc 00 00 cc 33 00 cc 66 00 cc 99 00 cc cc 00 cc ff 00 ff 00 00 ff 33 00 ff 66 00 ff 99 00 ff cc 00 ff ff 33 00 00 33 00 33 33 00 66 33 00 99 33 00 cc 33 00 ff 33 33 00 33 33 33 33 33 66 33 33 99 33 33 cc 33 33 ff 33 66 00 33 66 33 33 66 66 33 66 99 33 66 cc 33 66 ff 33 99 00 33 99 33 33 99 66 33 99 99 33 99 cc 33 99 ff 33 cc 00 33 cc 33 33 cc 66 33 cc 99 33 cc cc 33 cc ff 33 ff 00 33 ff 33 33 ff 66 33 ff 99 33 ff cc 33 ff ff 66 00 00 66 00 33 66 00 66 66 00 99 66 00 cc 66 00 ff 66 33 00 66 33 33 66 33 Data Ascii: GIF89a3f3333f333ff3fffff3f3f3f3333f3333333333f3333333f3f33ff3f3f3f3333f3333333f3333333f333ff3ffffff3f33f3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50118	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1061	OUT	GET /usersync/redirect?partner=improvedigital&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=ad75cf80-eab6-4ca8-953c-ac28e1bde6ed HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50120	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1038	OUT	GET /usersync/redirect?partner=appnexus&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=3473854422107831099 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50113	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	703	OUT	GET /sync?dsp_id=452&ssp=themediagrid&user_id= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:25:48 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-04-25 19:25:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50111	185.184.8.90	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	761	OUT	GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=c0dNMeS67bcZWfBa7Ddv_1714073147813; ts=1714073147
2024-04-25 19:25:48 UTC	402	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:25:48 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 25 Apr 2024 19:25:48 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50121	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	727	OUT	GET /async_usersync?cbfn=queuePixels HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://acdn.adnxs.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:25:48 UTC	1282	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 4505e04d-e6a4-4d94-9f56-f1e724a236f4 Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:48 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:25:48 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:48 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50123	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	788	OUT	GET /usersync?b=adf&i=4033174624989640038&gdpr=&gdpr_consent= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:48 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50126	23.105.12.142	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	806	OUT	GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659; csync=79:7d0d2d72-8a65-404e-bc6d-3d00a8d24145\|135:TAM_OK
2024-04-25 19:25:48 UTC	173	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 19:25:48 GMT location: https://usersync.gumgum.com/usersync?b=sad&i=5382283141381983659 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50127	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1289	OUT	GET /usersync/redirect?partner=gumgum&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50125	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	773	OUT	GET /usersync?b=sus&i=ZiquPMCo5r8AAPv8cvMAAAAA HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:48 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:48 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50128	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1055	OUT	GET /pixel?google_nid=ar101281&google_hm=ZmkxOGZSeHRIZlNTME9lbENBR09lMzJPdw%3D%3D&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fa.audrte.com%2Fddp%3Fred%3DeyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZGZpMThmUnh0SGZTUzBPZWxDQUdPZTMyT3ciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:48 UTC	856	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZGZpMThmUnh0SGZTUzBPZWxDQUdPZTMyT3ciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent= Date: Thu, 25 Apr 2024 19:25:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 491 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:48 UTC	399	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 64 64 70 3f 72 65 64 3d 65 79 4a 31 49 6a 6f 69 61 48 52 30 63 48 4d 36 4c 79 39 79 64 47 49 74 59 33 4e 35 62 6d 4d 75 63 32 31 68 63 6e 52 68 5a 48 4e 6c 63 6e 5a 6c 63 69 35 6a 62 32 30 76 63 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://a.audrte.com/ddp?red=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcm
2024-04-25 19:25:48 UTC	92	IN	Data Raw: 52 6d 62 33 4a 74 49 6e 30 73 65 79 4a 75 59 57 31 6c 49 6a 6f 69 63 32 31 68 63 6e 51 69 66 56 31 39 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: Rmb3JtIn0seyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50129	8.18.47.7	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	802	OUT	GET /usersync/141?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_ca3aed69a6d948869efee; CDIPARTNERS=%7B%221%22%3A%2220240425%22%7D
2024-04-25 19:25:48 UTC	704	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_ca3aed69a6d948869efee set-cookie: CDIUSER=di_ca3aed69a6d948869efee; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 19:25:48 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240425%22%2C%22141%22%3A%2220240425%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 24 Oct 2025 19:25:48 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 25 Apr 2024 19:25:48 GMT server: a connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50122	107.20.103.201	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	504	OUT	GET /sync/openx/80bdd263-c45b-a79a-7f79-1504977d800e?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:25:48 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:48 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-25 19:25:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50130	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1056	OUT	GET /usersync/redirect?partner=mediagrid&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50131	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1040	OUT	GET /usersync/redirect?partner=sovrn&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=IjUNALZH0EzpouOqQka7fQWl HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:48 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50124	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:48 UTC	388	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:25:48 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 25 Apr 2024 19:35:48 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50133	34.96.70.87	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	625	OUT	GET /encrypted-signals/encrypted-tag-g.js HTTP/1.1 Host: invstatic101.creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=c0dNMeS67bcZWfBa7Ddv_1714073147813; ts=1714073147
2024-04-25 19:25:49 UTC	397	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 last-modified: Mon, 05 Feb 2024 22:07:56 GMT etag: cd19e0900da0cdbc6697310fd9330fb6 x-cloud-trace-context: fa1a72782936b8252f63fcafdb691372 date: Thu, 25 Apr 2024 19:25:48 GMT server: Google Frontend Content-Length: 1195 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	858	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 45 53 50 20 2d 20 52 54 42 48 6f 75 73 65 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 31 2e 32 2e 35 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 74 62 68 6f 75 73 65 2e 63 6f 6d 2f 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 65 73 70 22 29 2c 6e 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 74 62 68 6f 75 73 65 2d 73 65 67 6d 65 6e 74 73 22 29 2c 6f 3d 70 62 6a 73 2e 67 65 74 55 73 65 72 49 64 73 28 29 3f 2e 70 75 62 63 69 64 3b 72 65 74 75 72 6e 20 73 69 67 6e 61 6c 5f 64 Data Ascii: /** * ESP - RTBHouse * @version v1.2.5 * @link https://www.rtbhouse.com/ */!function(){async function e(){var e=window.localStorage.getItem("rtbhouse-esp"),n=window.localStorage.getItem("rtbhouse-segments"),o=pbjs.getUserIds()?.pubcid;return signal_d
2024-04-25 19:25:49 UTC	337	IN	Data Raw: 28 29 29 2e 6d 65 73 73 61 67 65 7d 28 73 69 67 6e 61 6c 5f 64 65 63 72 79 70 74 65 64 29 2e 74 68 65 6e 28 65 3d 3e 65 29 7d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 65 29 7d 73 65 6e 64 5f 73 69 67 6e 61 6c 28 29 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 7c 7c 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 3d 5b 5d 29 2c 6e 75 6c 6c 21 3d 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 72 73 26 26 67 6f 6f 67 6c 65 74 61 67 2e 73 65 63 75 72 65 53 69 67 6e 61 6c 50 72 6f 76 69 64 65 Data Ascii: ()).message}(signal_decrypted).then(e=>e)}new class{constructor(e){Object.assign(this,e)}send_signal(){window.googletag.secureSignalProviders\|\|(window.googletag.secureSignalProviders=[]),null!=googletag.secureSignalProviders&&googletag.secureSignalProvide

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50134	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	847	OUT	GET /dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4m2pWkWTUlLrdWQlXXRkjw\|t
2024-04-25 19:25:49 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: KFCJVDRGQMCQ9MC8KRXQ Set-Cookie: ad-id=A4m2pWkWTUlLrdWQlXXRkjw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 19:25:48 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50138	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	745	OUT	GET /w/1.0/sd?id=537073061&val=8019790904257964151&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK
2024-04-25 19:25:49 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50141	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	748	OUT	GET /1000.gif?memo=CPaqHBIvCisIARCUaxokNDFiY2NiNDEtOTliMC0wM2IzLTExZDctODMwMjUxYjEyYzlmEAAaDQi83KqxBhIFCOgHEABCAEoA HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=XeU/dIO6VQPmZz936F67MWTAMJYkoJy+u/LHJPhouew=; pxrc=CAA=
2024-04-25 19:25:49 UTC	751	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=4ed460d6b77f74c88ddb7c0df6169502c9db6e10ebcbc8aaafce5f336cc72652791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=XeU/dIO6VQPmZz936F67MWTAMJYkoJy+u/LHJPhouew=; Path=/; Domain=rlcdn.com; Expires=Fri, 25 Apr 2025 19:25:48 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 24 Jun 2024 19:25:48 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50142	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	796	OUT	GET /w/1.0/sd?id=537072971&val=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=147ab427-54f7-35d3-4eae-03f1682a4d47&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK
2024-04-25 19:25:49 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528; Version=1; Expires=Fri, 10-May-2024 19:25:48 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50140	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	734	OUT	GET /w/1.0/sd?id=537072991&val=CAESEC8ps8Pv3-KJUhIjF_YDojg&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK
2024-04-25 19:25:49 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50139	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	707	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4cacc85a-485d-8e29-8ea0-8166001986a7&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A4m2pWkWTUlLrdWQlXXRkjw\|t
2024-04-25 19:25:49 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 8G8A8NCJSYFD23XZF1CW Set-Cookie: ad-id=A4m2pWkWTUlLrdWQlXXRkjw; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 19:25:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50148	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	848	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=D3tf72mtRsaB8qJg1lHq1w%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:49 UTC	662	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Thu, 25 Apr 2024 19:25:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50146	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	860	OUT	GET /pixel?google_nid=pubmatic&google_hm=MEY3QjVGRUYtNjlBRC00NkM2LTgxRjItQTI2MEQ2NTFFQUQ3&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:49 UTC	678	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Thu, 25 Apr 2024 19:25:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50144	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1394	OUT	GET /usersync/redirect?partner=pubmatic&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:49 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50149	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	821	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:49 UTC	736	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEM-j6CSoDg41BAFzi37WM4U&google_cver=1 Date: Thu, 25 Apr 2024 19:25:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	379	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50145	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1052	OUT	GET /usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=da332442-e224-02bf-2eb1-e5d2da7e20fa HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:49 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50143	18.160.18.79	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	1419	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=a5d6e528-31e3-472a-bdab-24466191fa18&iiqpciddate=1714073144763&tsrnd=17_1714073144779&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&ckls=true&ci=wVTUfJaaOu&nc=false&trid=-1569032401 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intentIQ=wVTUfJaaOu; IQver=1.9
2024-04-25 19:25:49 UTC	1334	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 19:25:49 GMT Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:49 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: intentIQCDate=1714073149012; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:49 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=3113763558#1714073149012#0#1714073149012; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:49 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=wVTUfJaaOu; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:49 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:49 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTU1NzlfMCZVQXpFRmQ4; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:49 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 51164155275c508076425faa0467bff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Lw4uY8fOvKIwtp_XTiuhHQb9v0Q3RF29jd-3-E-v6pge-VIjfjrKTA==
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50152	3.212.57.127	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	710	OUT	GET /usersync?b=pln&i=UQf1GlI5tayx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	263	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50147	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	730	OUT	GET /xuid?mid=7976&xuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290
2024-04-25 19:25:49 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:49 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:49 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:25:49 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50151	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	807	OUT	GET /usersync?b=rth&i=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=gumgum&tc=1 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50155	34.102.146.192	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:48 UTC	521	OUT	GET /esp.js HTTP/1.1 Host: oa.openxcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:49 UTC	783	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqXwvXxRjdz-KGDCiR-b6R4WaHiYaV5K1WWrVoLQbxL9EVMZULoX8en96BO2c6AXZtHXS05c8jG0w x-goog-generation: 1622140251693895 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 7927 Content-Encoding: gzip x-goog-hash: crc32c=f21hYg== x-goog-hash: md5=31VCuIvA42jGmZdUpbniug== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 7927 Server: UploadServer Date: Thu, 25 Apr 2024 06:30:22 GMT Expires: Fri, 25 Apr 2025 06:30:22 GMT Cache-Control: no-transform Last-Modified: Thu, 27 May 2021 18:30:51 GMT ETag: "df5542b88bc0e368c6999754a5b9e2ba" Content-Type: application/javascript Age: 46527 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	472	IN	Data Raw: 1f 8b 08 08 5b e5 af 60 02 ff 74 6d 70 6d 74 39 72 5f 31 74 7a 00 cd 3c 0b 7b db 36 92 7f 45 e2 75 65 62 0d d3 56 d2 47 4a 85 d1 ba ae db 64 37 89 bd b1 d3 6d 4f 51 7d b4 04 49 6c 68 52 25 21 3b ae c5 fb ed 37 33 00 48 90 a2 ec 74 9b de 5d bf c6 e2 03 18 0c 06 f3 c6 80 37 51 32 4d 6f bc f4 c3 85 c8 97 c1 6c 95 4c 64 94 26 ae 64 77 d7 61 d6 11 c1 5d 31 30 0f 3b 99 9b b0 bb 68 e6 8a 51 32 66 99 90 ab 2c e9 e0 b5 27 3e 2c d3 4c e6 03 ec 92 06 f8 28 b8 8b fc 84 c7 7e b7 cf f5 4b ff ae 28 06 ba 93 c4 4e 93 30 8e dd d4 f4 e5 29 af ae 33 06 37 71 d0 3d a8 9e 15 ba 6b e6 5d 05 92 67 de 24 10 f0 77 6a 61 cc 05 07 f4 32 2f c5 4b b6 5e 9f 5c fe 22 26 d2 9b 8a 59 94 88 d3 2c 5d 8a 4c de 52 b3 3b 91 ac ae 44 16 5e c6 c2 87 31 e6 42 fa 49 c1 0a 80 97 d5 28 e0 ac 12 d5 Data Ascii: [`tmpmt9r_1tz<{6EuebVGJd7mOQ}IlhR%!;73Ht]7Q2MolLd&dwa]10;hQ2f,'>,L(~K(N0)37q=k]g$wja2/K^\"&Y,]LR;D^1BI(
2024-04-25 19:25:49 UTC	1255	IN	Data Raw: 4d a2 65 96 ca 14 27 e9 2d c2 fc e4 26 31 c4 52 c2 80 1d 10 c6 32 70 1c 9e 01 75 f3 a0 ff 88 15 ee a8 c6 e4 19 bb 93 46 2a 60 99 a1 01 af 0f 69 c9 2b b5 e7 48 b9 88 87 d0 2f bb 25 0a e4 81 1c 45 63 37 64 7c 15 e4 1e ad 46 31 09 e5 64 81 24 d2 18 5f a7 d1 14 21 b0 22 f7 a6 69 22 86 c2 5d 31 1f 10 be 8a 72 e1 65 22 4f e3 6b 7c e4 c9 85 48 70 71 58 51 a1 65 93 5c c3 b3 c8 a8 17 61 11 e5 3c 09 c2 6c 0e ac 91 80 f6 30 ab 26 6e 3a 7a 18 d7 2d 7b c1 0c 54 c7 30 90 5e b8 5c c6 b7 2e ca 7b a5 9c 72 1a cb 0d 69 ae 39 5f 71 27 11 1f 80 f5 60 02 65 9b d5 46 1b b9 c8 d2 1b 6a 94 bb 34 e3 03 56 30 56 14 bc 9c 8b 61 84 a0 7c 62 bd ab 78 08 94 55 7d 1d 70 9d 94 f0 d4 55 4a 2e 3a c8 ee 20 7f 03 45 87 26 6b f0 2c 68 b2 07 90 c9 31 50 2a b1 55 6a 65 a8 7e 40 bd f2 34 48 bc Data Ascii: Me'-&1R2puF`i+H/%Ec7d\|F1d$_!"i"]1re"Ok\|HpqXQe\a<l0&n:z-{T0^\.{ri9_q'`eFj4V0Va\|bxU}pUJ.: E&k,h1PUje~@4H
2024-04-25 19:25:49 UTC	1255	IN	Data Raw: ab c6 bf b0 82 2e 4f 1b 29 78 be 5e 83 62 17 b4 9a 41 69 63 70 16 52 74 88 0c dc 6e 1d 88 0a e0 09 02 6c 0c 1b 8c cc dc 9c 2c 4d a5 53 80 ce 2a 15 ef 07 42 52 a3 0a 44 14 d2 ed 1e 58 18 1e 23 40 94 9d 12 4f d0 79 c8 76 16 9f a9 e8 4c 31 e3 a6 1f ae 98 a3 16 67 77 a3 fc 75 f8 1a e4 31 16 c9 5c 2e 98 f1 07 f7 fa e0 65 96 43 0b 50 cd e8 82 0d 76 77 93 a7 a6 ed 80 51 60 ad 03 c2 84 55 58 68 55 35 4a 70 21 90 6d 03 cc ae 0c 1a ef b5 5c 9b 16 70 55 54 de 2a 31 73 54 68 d1 bb c3 5b ff d0 d2 4d 87 a5 b1 d0 0e 88 86 46 1e 08 b8 e6 46 66 63 cb 34 5e c3 4a 81 2b 9d ad 26 c0 a6 c1 82 2f 6a f7 31 8f c9 19 8b c3 5b 94 ac 20 77 17 a0 44 2b 77 f6 3b 43 4e 86 c2 9f 6f 3c 6f 89 de db 96 00 03 7a 6b 58 3d e3 6e 17 dd 23 01 9a 23 86 60 66 73 4c 78 81 aa b5 42 6f bd 06 81 87 Data Ascii: .O)x^bAicpRtnl,MSBRDX#@OyvL1gwu1\.eCPvwQ`UXhU5Jp!m\pUT1sTh[MFFfc4^J+&/j1[ wD+w;CNo<ozkX=n##`fsLxBo
2024-04-25 19:25:49 UTC	1255	IN	Data Raw: de e2 28 4c 30 4f 81 7a be 13 76 26 71 98 e7 9d 10 fe 2f b7 3e 9c 4f 83 69 7d b3 b3 12 5f 58 4e 5c 3f e3 4f e3 32 1a 97 1a 17 32 f1 aa fd a8 c0 be 59 af c1 6b 4d 3c 7b 7f 0a fd 68 87 5c 68 07 1c 4e f4 9c 12 cf ec 57 c1 bb ed 5b f7 09 c6 09 1c f9 b5 9d 9e 96 bf 86 39 69 d7 de 04 04 15 9a d0 33 68 a4 e2 be 3f 69 51 2d 8d a0 1c ea e1 a7 dd cc f3 d5 c6 dc 27 99 83 2d 33 8f b7 09 07 f0 28 49 30 04 99 4a 92 25 63 96 c0 fc 69 a4 54 56 fc 9e 92 11 54 46 f0 70 a4 cb 41 8c c2 1d af d7 e6 8d bd 65 5b 56 d8 a8 c9 cc 20 ba fe 34 d8 7f 04 11 b5 a8 eb 29 e9 ea 8c 2a d9 62 91 93 eb 78 3f db d8 c6 2e a3 6a 93 3d d3 81 d7 13 be d7 37 d1 b0 73 62 f6 07 82 ac 91 c1 01 29 cb 82 da 13 95 98 e1 ce ab 70 49 1d c0 fb 39 13 aa ef b0 46 23 df 39 34 35 05 ba e1 fe cf ee d0 7f 1b ad Data Ascii: (L0Ozv&q/>Oi}_XN\?O22YkM<{h\hNW[9i3h?iQ-'-3(I0J%ciTVTFpAe[V 4)*bx?.j=7sb)pI9F#945
2024-04-25 19:25:49 UTC	1255	IN	Data Raw: b5 6d fe fa 84 36 75 af aa 3c 6a b4 aa 77 b4 f8 63 5b ff 87 39 b4 0e d2 c8 e2 e6 46 c2 24 5d a1 7b 90 4a d2 fc 1d d3 b0 83 bd 30 3b 83 d3 77 4a 9d f7 31 78 20 43 8e 69 b7 5c 65 00 2b 66 b7 a8 b8 75 c2 0d fa 1a d2 02 f7 6e 3a 6d 5b 40 0c b7 53 db 86 a1 84 5f 6b fe 2d 4d 40 eb 9f cc 66 c0 19 fc a1 06 bb db 1b 68 bb b1 59 29 df 8e 7e 99 df 2d d9 cf ec 7d 7f 30 f6 de 43 a9 dc 60 4a 55 da 6c b3 66 52 86 e5 db 59 d3 ec d7 9a e7 7c 8b 91 e5 c6 ba e2 fa 92 59 fd dd 5c db 9e 53 df b0 a0 30 a0 95 73 35 59 59 98 d9 c1 20 a9 d2 77 c9 ee 2e cb f0 58 91 d6 8c 18 e9 1f 81 18 1f 81 40 ab e3 48 d5 89 8c 5f d2 28 71 b1 66 7c 1b c9 3f 95 b4 e0 ba 6c 97 96 ba 8c 80 84 2c 8d 92 99 19 5b d9 5e 91 40 eb 6d b8 e0 b4 e4 82 5f 72 bb 18 66 7b 8f bf 9f 9d bc f6 96 a8 e1 b4 54 16 73 Data Ascii: m6u<jwc[9F$]{J0;wJ1x Ci\e+fun:m[@S_k-M@fhY)~-}0C`JUlfRY\|Y\S0s5YY w.X@H_(qf\|?l,[^@m_rf{Ts
2024-04-25 19:25:49 UTC	1255	IN	Data Raw: b3 20 f7 40 66 ca 1a 55 2a e7 41 28 67 d5 de 93 7b d6 ea 3f 8b 3c 0f e7 58 45 a7 ea c3 f0 10 80 d0 41 86 42 55 6a 3f 03 10 99 bc 47 a5 83 bf e0 c6 6c 2b 84 a7 5e 36 d7 9c d9 5c 63 9d 3d 38 ab f4 c8 cb da 69 fc f6 64 b6 75 54 58 b3 34 ee 6e 53 0d a3 32 8d 60 db f4 95 17 5e a6 99 ac d2 ed 09 69 eb 33 f0 9f d4 73 70 1c e9 8a 50 75 f4 f6 64 44 60 7f 7c f5 f2 b9 94 cb 37 ca da 0d 6a e7 f4 22 05 17 14 7d d4 92 53 37 71 7f 12 98 35 8b 5a 58 3d 6a e3 73 17 6b 13 c1 8c 1c c6 f1 1b 91 83 ba cd c5 73 f5 ca a5 dd 26 9d 07 c0 63 37 95 26 cf 86 ef 92 d1 3b d9 19 1b 95 6e ac c3 3b 98 12 46 29 ad f5 f9 07 54 15 68 d8 d3 79 97 38 b8 71 92 af 2e 61 59 dc 3e 2f 0b af f0 f3 0f 5b 4c 52 c3 18 f9 0d 63 a4 0c 9b 4a 79 e8 f5 32 a6 08 9a 9a d7 a5 f9 a1 4f 13 90 59 01 5e 4e 48 e3 Data Ascii: @fU*A(g{?<XEABUj?Gl+^6\c=8iduTX4nS2`^i3spPudD`\|7j"}S7q5ZX=jsks&c7&;n;F)Thy8q.aY>/[LRcJy2OY^NH
2024-04-25 19:25:49 UTC	1180	IN	Data Raw: 4f b1 df 4d 30 77 72 e0 97 df a0 00 2f e3 39 a6 e0 e9 60 cf 13 7d 04 cb 54 c5 04 ed 91 14 29 bb 1b f5 65 c1 8b 8b 55 be 0c 97 d1 d0 fd cc 23 5e 73 9d b7 67 d0 27 ba 0e 27 b7 9d 38 ba cc c2 ec 16 3f 6b b0 c4 13 a8 09 7e d0 c0 74 71 b1 f0 f3 ed d9 29 15 30 f2 3e 6f 84 6a c9 f0 1f 6e e6 41 53 c5 61 10 66 b8 cc b7 46 c9 45 d6 59 84 ea 7b 09 f3 08 cc 2f b1 2a 0c e1 e1 47 13 5c f0 c9 98 2f e8 e4 30 04 23 f4 ab 37 23 1f 9a 90 9c cc ea 13 3a 3f fa ee f0 f4 45 fb 64 1a bd 68 4e e7 47 6a 4a 8f 36 a7 d4 cd bc f9 74 99 1d a2 c7 26 c0 bd ca 3c 40 7c 9a 66 9e c6 3d 1f 7d f9 f5 18 4f d0 2d 57 d9 32 cd 45 f5 bc 3f fe b7 09 c0 11 68 45 85 e4 a3 a8 30 b9 5a 5a 24 38 7a 75 fa c0 fc a1 3d 4d fe 07 9a cf 91 46 db a1 b1 6d 3a b0 bb 26 0d 48 41 18 42 1c d5 e8 a0 5f 69 62 1c fd Data Ascii: OM0wr/9`}T)eU#^sg''8?k~tq)0>ojnASafFEY{/*G\/0#7#:?EdhNGjJ6t&<@\|f=}O-W2E?hE0ZZ$8zu=MFm:&HAB_ib

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50150	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	744	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; TDCPM=CAEYASACKAIyCwiw7bbZh9ryPBAFOAFaBmd1bWd1bWAC
2024-04-25 19:25:49 UTC	625	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=500c5aec-af13-42d6-a7ea-250f9438d1fe&gdpr=0&gdpr_consent= set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:25:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFGAEgASgCMgsI4uCk6Ifa8jwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 25 Apr 2025 19:25:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:25:49 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=500c5aec-af13-42d6-a7ea-250f9438d1fe&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50154	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	1024	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3473854422107831099&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166
2024-04-25 19:25:49 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:48 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:48 GMT; path=/ Set-Cookie: PugT=1714073148; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:48 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50153	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	804	OUT	GET /sync?dsp_id=425&user_group=1&expires=365&user_id=4df7d229-f8a3-4c53-bb16-fd8aeed54a56&ssp=gumgum2&bsw_param=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:25:49 UTC	537	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //usersync.gumgum.com/usersync?b=bsw&i=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50162	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	436	OUT	GET /usersync?b=dit&i=di_ca3aed69a6d948869efee HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50165	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	468	OUT	GET /usersync?b=sta&i=0-301aa7bd-c380-5476-64d7-fd91d206f9b9$ip$185.152.66.230 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50167	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-04-25 19:25:49 UTC	795	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:25:49 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCTDdFN01WVndBQUJScFJMVHpwQQ&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Csas%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AABL7E7MVVwAABRpRLTzpA; Domain=bidr.io; expires=Sun, 25 May 2025 15:25:49 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Sun, 25 May 2025 15:25:49 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50157	34.204.109.177	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	644	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:49 UTC	490	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Length: 0 Connection: close Location: /s/75145?bidder_id=195755&bidder_uuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&_li_chk=true&previous_uuid=16375e6d718343c98be0eb3cedad6305 Set-Cookie: lidid=16375e6d-7183-43c9-8be0-eb3cedad6305; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:49 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50163	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	431	OUT	GET /usersync?b=apn&i=3473854422107831099 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50164	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	448	OUT	GET /usersync?b=opx&i=e3471057-7ce2-0d85-29d5-131ca07a4c01 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50158	40.76.134.238	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	832	OUT	GET /l/FZt5psomz79DGe~O1V5PkX7S8-NVJIdw0INR-k~Duu9c36GyIDyElf4y8fa2~-9InNSq4BCadyu-8tQSiIkaVleT~Yh8GI4ocNSeo4~API4DJEsYNIMg2sPMMXvjcckTUFy53ZYw3gzv35jSAchydRkSr2XFgqe-kzzlKTlv1VT7-TlAc0PcX7nFzbKlHypwbpU3AWUAJgUx%200F7B5FEF-69AD-46C6-81F2-A260D651EAD7&rnd=RND HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:49 UTC	176	IN	HTTP/1.1 403 Forbidden Server: Microsoft-Azure-Application-Gateway/v2 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: text/html Content-Length: 581 Connection: close
2024-04-25 19:25:49 UTC	581	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50161	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	448	OUT	GET /usersync?b=vnt&i=5b5548e1-f48f-42a5-987f-5a866f7c8916 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50170	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	481	OUT	GET /w/1.0/sd?id=537072399&val=3473854422107831099 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK
2024-04-25 19:25:49 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50166	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	452	OUT	GET /usersync?b=oth&i=y-_IfnGIJE2peK4sSE6yEVRW.U1zQWesG66kSq~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50174	18.160.83.5	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	578	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:49 UTC	715	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Thu, 25 Apr 2024 19:25:50 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin X-Cache: Miss from cloudfront Via: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: 0nQN0iuwuPAQaJ6RtmL4hraGAJz0HYflhJWfLtvL3l2kIOhghCoOlg==
2024-04-25 19:25:49 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50173	18.160.83.5	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	691	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fearnandexcel.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY\|t
2024-04-25 19:25:49 UTC	496	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 471 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Cache-Control: max-age=21550, s-maxage=21600 Date: Thu, 25 Apr 2024 19:25:49 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 ad663ff6398ba4f8e7f1c844ed264cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: SsKXFAcaYyEhsuPQnelYF76OVoDPV2c76yjjmIUEwZXVYdMFmgrLew==
2024-04-25 19:25:49 UTC	471	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 70 75 62 63 6f 6d 6d 6f 6e 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 69 64 35 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 22 2c 22 33 70 6d 65 74 61 64 61 74 61 22 3a 22 5b 7b 5c 22 70 72 6f 70 65 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"prope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50159	34.150.170.96	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:49 UTC	961	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=BB7435D573F24117990D5894FB5D3774; Path=/; domain=simpli.fi; Expires=Sat, 26-Apr-25 19:25:49 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=BB7435D573F24117990D5894FB5D3774; Path=/; domain=simpli.fi; Expires=Sat, 26-Apr-25 19:25:49 GMT; Secure; Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:BB7435D573F24117990D5894FB5D3774 Expires: Wed, 24 Apr 2024 19:25:49 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-04-25 19:25:49 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50169	216.22.16.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	537	OUT	GET /redir/?issi=1&partnerid=79&partneruserid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659; csync=117:f3b7d652e007eae21eec0dd71ae622c5\|135:TAM_OK
2024-04-25 19:25:49 UTC	438	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 25 Apr 2024 19:25:49 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=79:7d0d2d72-8a65-404e-bc6d-3d00a8d24145\|117:f3b7d652e007eae21eec0dd71ae622c5\|135:TAM_OK; expires=Fri, 25 Apr 2025 19:25:49 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-04-25 19:25:49 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50172	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	682	OUT	GET /usersync?b=zem&i=krpuyAK2nL0543a1Z1Tx&us_privacy=1--- HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:49 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:49 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50168	216.22.16.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	535	OUT	GET /redir/?issi=1&partnerid=117&partneruserid=f3b7d652e007eae21eec0dd71ae622c5&gdpr=0&gdpr_consent=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659; csync=117:f3b7d652e007eae21eec0dd71ae622c5\|135:TAM_OK
2024-04-25 19:25:49 UTC	398	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 25 Apr 2024 19:25:49 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=117:f3b7d652e007eae21eec0dd71ae622c5\|135:TAM_OK; expires=Fri, 25 Apr 2025 19:25:49 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-04-25 19:25:49 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50160	54.239.38.253	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	732	OUT	GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=5382283141381983659&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY\|t
2024-04-25 19:25:49 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: M79YC5H6SZQFGKM2S2FJ Set-Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 19:25:49 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50177	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	1055	OUT	GET /usersync/redirect?partner=gumgum&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:49 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50178	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	1007	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_ca3aed69a6d948869efee HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; pi=157108:2; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166
2024-04-25 19:25:49 UTC	626	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:49 GMT; path=/ Set-Cookie: PugT=1714073149; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:49 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50175	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	929	OUT	GET /ddp?red=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZGZpMThmUnh0SGZTUzBPZWxDQUdPZTMyT3ciLCJkIjpbeyJuYW1lIjoiYWRmb3JtIn0seyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230
2024-04-25 19:25:49 UTC	826	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:49 GMT Location: https://dmp.adform.net/serving/cookie/match/?party=1003&r=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZGZpMThmUnh0SGZTUzBPZWxDQUdPZTMyT3ciLCJkIjpbeyJuYW1lIjoic21hcnQifV19&gdpr=0&gdpr_consent= Server: nginx/1.22.1 Set-Cookie: arcki2_ddp2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073149686; Max-Age=1296000; Expires=Fri, 10 May 2024 19:25:49 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50179	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	467	OUT	GET /sync?dsp_id=452&ssp=themediagrid&user_id= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:25:49 UTC	187	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50180	34.236.60.188	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	757	OUT	GET /sync/pubmatic/0F7B5FEF-69AD-46C6-81F2-A260D651EAD7?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:25:49 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-25 19:25:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50182	35.190.39.111	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	601	OUT	POST /encrypt HTTP/1.1 Host: esp.rtbhouse.com Connection: keep-alive Content-Length: 202 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:49 UTC	202	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 72 5f 69 64 22 3a 22 72 74 62 68 6f 75 73 65 22 2c 22 73 69 67 6e 61 6c 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 25 32 46 62 6c 6f 67 25 32 46 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 25 32 46 22 2c 22 45 49 44 22 3a 22 33 30 33 61 62 61 38 31 2d 39 62 61 64 2d 34 64 66 35 2d 62 64 66 36 2d 64 66 32 64 62 64 66 36 31 39 38 30 22 2c 22 74 6f 70 69 63 73 22 3a 22 5b 5d 22 7d 7d Data Ascii: {"publisher_id":"rtbhouse","signal":{"domain":"https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F","EID":"303aba81-9bad-4df5-bdf6-df2dbdf61980","topics":"[]"}}
2024-04-25 19:25:49 UTC	452	IN	HTTP/1.1 200 OK access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: POST access-control-allow-headers: X-Requested-With content-type: application/json x-cloud-trace-context: 903e4971ebc1d84d565008f1f8e523e2 date: Thu, 25 Apr 2024 19:25:49 GMT server: Google Frontend Content-Length: 285 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	285	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 61 6c 62 41 37 77 71 6a 30 56 43 68 6e 55 53 56 6c 75 34 51 58 6c 6e 38 79 32 68 41 4e 59 43 41 64 77 6f 49 46 48 6f 79 77 48 39 65 51 33 51 4e 2f 77 73 77 5a 6f 57 36 43 68 70 34 64 49 7a 50 36 4e 6e 30 37 57 41 52 44 48 4a 63 52 33 39 6a 71 63 36 4b 5a 4e 74 72 45 33 45 38 6a 41 59 6b 53 64 4d 39 33 31 51 42 55 5a 43 35 30 66 37 35 43 34 6c 35 43 68 43 54 6a 4f 41 65 56 4e 63 57 6e 34 34 69 44 59 74 72 48 4b 62 71 72 49 7a 54 64 74 61 4d 6b 5a 4c 79 42 45 61 37 4a 77 31 66 71 67 59 48 4a 4f 48 70 33 69 65 6c 70 35 58 6f 38 4b 6f 6f 35 4d 53 77 58 64 71 74 6e 37 34 32 4c 67 57 41 4a 39 68 63 5a 47 39 74 43 64 47 42 6e 45 45 36 78 6a 55 6d 56 50 72 51 76 7a 41 7a 73 35 4d Data Ascii: {"status":"true","message":"albA7wqj0VChnUSVlu4QXln8y2hANYCAdwoIFHoywH9eQ3QN/wswZoW6Chp4dIzP6Nn07WARDHJcR39jqc6KZNtrE3E8jAYkSdM931QBUZC50f75C4l5ChCTjOAeVNcWn44iDYtrHKbqrIzTdtaMkZLyBEa7Jw1fqgYHJOHp3ielp5Xo8Koo5MSwXdqtn742LgWAJ9hcZG9tCdGBnEE6xjUmVPrQvzAzs5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50183	34.200.65.202	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	805	OUT	GET /ups/58292/sync?_origin=1&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; IDSYNC=18za~2i2j
2024-04-25 19:25:49 UTC	753	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18za~2i2j:18z8~2i2j";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 25-Apr-2025 19:25:49 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-_lSRfHxE2uVwioFwy1BptKe04y_kGWo-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:49 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50184	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	970	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFCTDdFN01WVndBQUJScFJMVHpwQQ&gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Csas%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:49 UTC	743	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Csas%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Date: Thu, 25 Apr 2024 19:25:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	390	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 61 64 78 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50185	34.120.135.53	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:49 UTC	824	OUT	GET /esp?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528
2024-04-25 19:25:49 UTC	390	IN	HTTP/1.1 200 OK X-Powered-By: Express Access-Control-Allow-Origin: https://earnandexcel.com Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-v3VHThBbfrAc4tbonWnFMMiyvIs" Date: Thu, 25 Apr 2024 19:25:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:49 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 65 44 6c 68 54 47 5a 32 4d 58 64 44 61 56 46 56 5a 55 31 7a 57 6b 52 42 4d 53 74 31 5a 7a 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 78 39 61 4c 66 76 31 77 43 69 51 55 65 4d 73 5a 44 41 31 2b 75 67 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoieDlhTGZ2MXdDaVFVZU1zWkRBMSt1Zz09In0=","i":"x9aLfv1wCiQUeMsZDA1+ug=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50186	52.7.87.144	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	815	OUT	GET /d/sync/cookie/generic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=${ADELPHIC_CUID}&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649
2024-04-25 19:25:50 UTC	549	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:25:50 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=5b5548e1-f48f-42a5-987f-5a866f7c8916&gdpr=0&gdpr_consent= Set-Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649; Path=/; Domain=ipredictive.com; Expires=Fri, 25 Apr 2025 19:25:50 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: d95746d9-b011-4e3b-80ee-84e815bf3de8 Content-Length: 205 Connection: Close
2024-04-25 19:25:50 UTC	205	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 7a 49 31 4d 43 5a 30 62 44 30 78 4d 6a 6b 32 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 35 62 35 35 34 38 65 31 2d 66 34 38 66 2d 34 32 61 35 2d 39 38 37 66 2d 35 61 38 36 36 66 37 63 38 39 31 36 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=5b5548e1-f48f-42a5-987f-5a866f7c8916&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50187	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	836	OUT	GET /syncframe?origin=publishertagids&topUrl=earnandexcel.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145
2024-04-25 19:25:50 UTC	410	IN	HTTP/1.1 200 OK content-type: text/html; charset=utf-8 date: Thu, 25 Apr 2024 19:25:49 GMT server: Kestrel cache-control: private, max-age=3600 transfer-encoding: chunked x-robots-tag: noindex cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp server-processing-duration-in-ticks: 1027238 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:50 UTC	14626	IN	Data Raw: 33 39 31 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 44 4f 4d 41 49 4e 5f 4e 41 4d 45 20 3d 20 22 63 73 6d 2e 75 73 35 2e 75 73 2e 63 72 69 74 65 6f 2e 6e 65 74 22 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 43 4f 4e 46 49 47 5f 43 53 4d 5f 52 41 54 49 4f 20 3d 20 31 30 30 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 47 55 4d 5f 44 4f 4d 41 49 4e 20 3d 20 22 67 75 6d 2e 63 72 69 74 65 6f 2e 63 6f 6d 22 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 Data Ascii: 3915<!DOCTYPE html><html><head> <script type="text/javascript"> window.CONFIG_CSM_DOMAIN_NAME = "csm.us5.us.criteo.net"; window.CONFIG_CSM_RATIO = 100; window.GUM_DOMAIN = "gum.criteo.com"; </script> <script type="t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50188	34.120.135.53	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	875	OUT	GET /esp?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528 If-None-Match: W/"55-v3VHThBbfrAc4tbonWnFMMiyvIs"
2024-04-25 19:25:50 UTC	333	IN	HTTP/1.1 304 Not Modified X-Powered-By: Express Access-Control-Allow-Origin: https://earnandexcel.com Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"55-v3VHThBbfrAc4tbonWnFMMiyvIs" Date: Thu, 25 Apr 2024 19:25:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50194	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	805	OUT	GET /w/1.0/sd?id=537148856&val=ZiquOwAASpL9rwAi&_test=ZiquOwAASpL9rwAi HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528
2024-04-25 19:25:50 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:50 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50190	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	881	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=syn%2Csas%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABL7E7MVVwAABRpRLTzpA; bitoIsSecure=ok
2024-04-25 19:25:50 UTC	596	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:25:50 GMT location: https://sync.technoratimedia.com/services?uid=AABL7E7MVVwAABRpRLTzpA&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 Server: gunicorn set-cookie: bito=AABL7E7MVVwAABRpRLTzpA; Domain=bidr.io; expires=Sun, 25 May 2025 15:25:50 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	50195	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	873	OUT	GET /w/1.0/pd?plm=5 HTTP/1.1 Host: google-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528
2024-04-25 19:25:50 UTC	643	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; Version=1; Expires=Fri, 25-Apr-2025 19:25:50 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1714073146.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8; Version=1; Expires=Fri, 10-May-2024 19:25:50 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 25 Apr 2024 19:25:50 GMT Content-Type: text/html Content-Length: 749 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:50 UTC	612	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6f 72 74 61 2e 63 6c 69 63 6b 61 67 79 2e 63 6f 6d 2f 70 69 78 65 6c 2e 67 69 66 3f 63 68 3d 34 26 63 6d 3d 30 62 66 34 38 30 63 32 2d 30 36 38 64 2d 30 39 39 64 2d Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://aorta.clickagy.com/pixel.gif?ch=4&cm=0bf480c2-068d-099d-
2024-04-25 19:25:50 UTC	137	IN	Data Raw: 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 39 35 35 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 31 32 30 34 63 37 64 62 2d 30 66 66 30 2d 30 38 35 34 2d 30 34 34 66 2d 39 62 32 37 35 62 61 36 38 63 34 62 22 3e 0a 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: src="https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=1204c7db-0ff0-0854-044f-9b275ba68c4b"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50196	107.178.254.65	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	675	OUT	GET /api/sync?pid=5324&it=1&iv=4ed460d6b77f74c88ddb7c0df6169502c9db6e10ebcbc8aaafce5f336cc72652791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:50 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=4ed460d6b77f74c88ddb7c0df6169502c9db6e10ebcbc8aaafce5f336cc72652791426b5417dce21&rand=05370859 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=GkXQXHx-JIbhq4Lu; Path=/; Domain=pippio.com; Expires=Fri, 25 Apr 2025 19:25:50 GMT; Secure; SameSite=None Set-Cookie: didts=1714073150; Path=/; Domain=pippio.com; Expires=Fri, 25 Apr 2025 19:25:50 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Mon, 24 Jun 2024 19:25:50 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL7cqrEGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Mon, 24 Jun 2024 19:25:50 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:50 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50201	34.204.109.177	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	756	OUT	GET /s/75145?bidder_id=195755&bidder_uuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&_li_chk=true&previous_uuid=16375e6d718343c98be0eb3cedad6305 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=16375e6d-7183-43c9-8be0-eb3cedad6305
2024-04-25 19:25:51 UTC	623	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Length: 0 Connection: close Location: https://d.turn.com/r/dd/id/L21rdC8xOTcxL2NpZC8xNzQ5ODczMjc1L3QvMg/url/https://i.liadm.com/s/53233?bidder_id=183658&bidder_uuid=$!%7BTURN_UUID%7D Set-Cookie: _li_ss=CggKBgjSARDiFw; Max-Age=2592000; Expires=Sat, 25 May 2024 19:25:51 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=16375e6d-7183-43c9-8be0-eb3cedad6305; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:51 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	50199	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	1044	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; PugT=1714073149
2024-04-25 19:25:51 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	50202	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	1102	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEM-j6CSoDg41BAFzi37WM4U&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; PugT=1714073149
2024-04-25 19:25:51 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:50 GMT; path=/ Set-Cookie: PugT=1714073150; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	50198	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	1076	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:BB7435D573F24117990D5894FB5D3774 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; PugT=1714073149
2024-04-25 19:25:51 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:50 GMT; path=/ Set-Cookie: PugT=1714073150; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:50 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	50204	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	714	OUT	GET /usersync?b=bsw&i=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:51 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	50205	67.202.105.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	1352	OUT	GET /ps/?us_privacy=1---&ts=1714073147833.2&ri=25&ru=https%3A%2F%2Fads.pubmatic.com%2FAdServer%2Fjs%2Fuser_sync.html%3F%26p%3D156423%26us_privacy%3D%24%7BUS_PRIVACY%7D%26predirect%3Dhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D25%2526external_user_id%253D HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:51 UTC	735	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374; Domain=.33across.com; Expires=Fri, 25-Apr-2025 19:25:51 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP016 location: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D content-length: 0 date: Thu, 25 Apr 2024 19:25:51 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	50203	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	665	OUT	GET /usersync?b=sad&i=5382283141381983659 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:51 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	50200	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:50 UTC	1098	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=500c5aec-af13-42d6-a7ea-250f9438d1fe&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; PugT=1714073149
2024-04-25 19:25:51 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:51 GMT; path=/ Set-Cookie: PugT=1714073151; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:51 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	50207	207.65.37.182	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	1042	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-_lSRfHxE2uVwioFwy1BptKe04y_kGWo-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; PugT=1714073149
2024-04-25 19:25:51 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:51 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1714073151; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:51 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	50212	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	587	OUT	GET /w/1.0/sd?id=537073061&val=8019790904257964151&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528
2024-04-25 19:25:51 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	50214	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	576	OUT	GET /w/1.0/sd?id=537072991&val=CAESEC8ps8Pv3-KJUhIjF_YDojg&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528
2024-04-25 19:25:51 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	50213	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	638	OUT	GET /w/1.0/sd?id=537072971&val=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=147ab427-54f7-35d3-4eae-03f1682a4d47&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528
2024-04-25 19:25:51 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; Version=1; Expires=Fri, 10-May-2024 19:25:51 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	50215	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	448	OUT	GET /usersync?b=zem&i=krpuyAK2nL0543a1Z1Tx&us_privacy=1--- HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:51 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	50216	67.202.105.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	1200	OUT	GET /ps/?_=1714073147833.&ri=0014000000xvEfwAAE&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:51 UTC	700	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374; Domain=.33across.com; Expires=Fri, 25-Apr-2025 19:25:51 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 100000000008200000A server: 33XP004 location: https://exchange.mediavine.com/usersync/redirect?partner=thirty_three_across&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=212578338838864 content-length: 0 date: Thu, 25 Apr 2024 19:25:50 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	50219	67.202.105.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	1166	OUT	GET /ps/?us_privacy=1---&ts=1714073147833.6&ri=90&ru=https%3A%2F%2Fib.adnxs.com%2Fgetuid%3Fhttps%253A%252F%252Fevents-ssc.33across.com%252Fmatch%253Fliv%253Dh%2526us_privacy%253D%24%7BUS_PRIVACY%7D%2526bidder_id%253D90%2526external_user_id%253D%2524UID HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:51 UTC	681	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374; Domain=.33across.com; Expires=Fri, 25-Apr-2025 19:25:51 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 40000000008200000A server: 33XP009 location: https://ib.adnxs.com/getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D90%26external_user_id%3D%24UID content-length: 0 date: Thu, 25 Apr 2024 19:25:50 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	50218	34.200.65.202	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	994	OUT	GET /ups/58350/sync?redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; IDSYNC="18za~2i2j:18z8~2i2j"
2024-04-25 19:25:51 UTC	747	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18za~2i2j:18z8~2i2j:190u~2i2j";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 25-Apr-2025 19:25:51 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ssc-cms.33across.com/ps/?xi=99&us_privacy=&xu=y-sbgedPRE2uGCHaiyczZu1yO_Tokoo8Hh~A Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:51 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	50217	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	947	OUT	GET /sync?ssp=the33across&us_privacy=1--- HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:25:51 UTC	403	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //cm.g.doubleclick.net/pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=the33across&bsw_param=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&google_hm=Y2QxZjQ2YTUtZDI5NC00MzRiLTgyZDQtMGU0Y2MyZTNkMDM4&gdpr_consent=&gdpr=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	50220	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	1021	OUT	GET /getuid?gdpr=0&cmp_cs=&us_privacy=1---&redir=https%3A%2F%2Fssc-cms.33across.com%2Fps%2F%3Fus_privacy%3D1---%26xi%3D33%26xu%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290
2024-04-25 19:25:51 UTC	681	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Length: 0 Connection: close Location: https://ssc-cms.33across.com/ps/?us_privacy=1---&xi=33&xu=1072080661979746722290 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:51 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:51 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	50221	18.160.78.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	545	OUT	GET /cs/27053452/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:51 UTC	383	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 25 Apr 2024 19:25:51 GMT Location: /internal-cs/27053452/beacon.js Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 3d166e50ec93c97ac61aad558d457798.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: UhlqMk_g4M8Qg3nGoKFTaA5jUxjsxJpt0dxaQ3V8oR7xvMT5B3tQdA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	50227	108.139.15.100	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	530	OUT	GET /ope-dmplite.js HTTP/1.1 Host: cdn.opecloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:51 UTC	572	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 67619 Connection: close Date: Thu, 25 Apr 2024 19:24:55 GMT Server: nginx/1.24.0 Last-Modified: Wed, 17 Apr 2024 10:28:11 GMT ETag: "661fa43b-10823" Expires: Thu, 02 May 2024 19:24:55 GMT Cache-Control: max-age=604800 Cache-Control: public Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d5d585dce9ad5e702dfde5c38b8b4b9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: _U-gphh1f3UyffvrtnlwTzCtHBU8ZeYY9jkAx5SHq7YYlYiT9wai9A== Age: 56
2024-04-25 19:25:51 UTC	15812	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 66 75 6e 6e 65 6c 3d 74 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 43 61 6c 6c 50 72 6f 6d 69 73 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6d 61 78 43 61 6c 6c 44 65 6c 61 79 4d 73 3d 32 65 33 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 50 69 78 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 75 6e 6e 65 6c 2e 77 69 74 68 52 61 63 65 50 72 6f 74 65 63 74 69 6f 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: !function(){"use strict";var t=function(){function t(t){this.funnel=t,this.initialCallPromise=null,this.maxCallDelayMs=2e3}return t.prototype.callPixel=function(t,n){var e=this;return this.funnel.withRaceProtection((function(){return new Promise((function
2024-04-25 19:25:51 UTC	16384	IN	Data Raw: 65 41 63 63 65 73 73 4f 6b 28 29 5d 3b 63 61 73 65 20 31 3a 69 66 28 6e 2e 73 65 6e 74 28 29 29 72 65 74 75 72 6e 5b 32 2c 74 68 69 73 2e 73 74 6f 72 61 67 65 5d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4d 69 73 73 69 6e 67 20 63 6f 6e 73 65 6e 74 20 66 6f 72 20 61 63 63 65 73 73 69 6e 67 20 64 65 76 69 63 65 20 73 74 6f 72 61 67 65 2e 22 29 7d 7d 29 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 73 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 29 7d 2c 74 7d 28 29 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 65 7c 7c 28 65 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 Data Ascii: eAccessOk()];case 1:if(n.sent())return[2,this.storage];throw Error("Missing consent for accessing device storage.")}}))}))},t.prototype.removeItem=function(t){this.storage.removeItem(t)},t}(),K=function(t,n,e,r){return new(e\|\|(e=Promise))((function(o,i){f
2024-04-25 19:25:51 UTC	16384	IN	Data Raw: 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 2c 63 6f 6e 74 65 6e 74 3a 74 68 69 73 2e 65 6e 63 6f 64 65 41 73 46 6f 72 6d 55 72 6c 53 74 72 69 6e 67 28 7b 66 70 69 64 3a 6e 75 6c 6c 21 3d 65 3f 65 3a 22 22 7d 29 7d 2c 6f 3d 6e 3f 22 2f 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 76 32 2f 74 61 67 67 65 72 2f 64 65 6c 65 74 65 22 29 3a 22 2f 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 76 32 2f 74 61 67 67 65 72 2f 64 65 6c 65 74 65 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 74 74 70 43 6c 69 65 6e 74 2e 73 65 6e 64 52 65 71 75 65 73 74 28 22 50 4f 53 54 22 2c 6f 2c 7b 7d 2c 7b 7d 2c 72 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 61 74 61 41 63 63 65 73 73 3d 66 75 6e 63 74 69 6f Data Ascii: tion/x-www-form-urlencoded",content:this.encodeAsFormUrlString({fpid:null!=e?e:""})},o=n?"/".concat(t,"/").concat(n,"/v2/tagger/delete"):"/".concat(t,"/v2/tagger/delete");return this.httpClient.sendRequest("POST",o,{},{},r)},t.prototype.dataAccess=functio
2024-04-25 19:25:51 UTC	16384	IN	Data Raw: 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 65 63 6b 56 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 28 29 26 26 5b 31 2c 32 2c 33 2c 34 2c 37 2c 39 2c 31 30 5d 2e 65 76 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 70 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 28 6e 29 7d 29 29 7d 2c 6e 7d 28 55 74 29 2c 4c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 6e 2e 64 65 76 69 63 65 41 63 63 65 73 73 52 65 73 74 72 69 63 74 65 64 3d 21 30 2c 6e 7d 72 65 74 75 72 6e 20 46 74 28 6e Data Ascii: nt=function(){var t=this;return this.checkVendorConsent()&&[1,2,3,4,7,9,10].every((function(n){return t.purposeConsent(n)}))},n}(Ut),Lt=function(t){function n(){var n=null!==t&&t.apply(this,arguments)\|\|this;return n.deviceAccessRestricted=!0,n}return Ft(n
2024-04-25 19:25:51 UTC	2655	IN	Data Raw: 5d 26 26 69 5b 31 5d 3c 6f 5b 33 5d 29 29 7b 61 2e 6c 61 62 65 6c 3d 69 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 69 5b 30 5d 26 26 61 2e 6c 61 62 65 6c 3c 6f 5b 31 5d 29 7b 61 2e 6c 61 62 65 6c 3d 6f 5b 31 5d 2c 6f 3d 69 3b 62 72 65 61 6b 7d 69 66 28 6f 26 26 61 2e 6c 61 62 65 6c 3c 6f 5b 32 5d 29 7b 61 2e 6c 61 62 65 6c 3d 6f 5b 32 5d 2c 61 2e 6f 70 73 2e 70 75 73 68 28 69 29 3b 62 72 65 61 6b 7d 6f 5b 32 5d 26 26 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 3d 6e 2e 63 61 6c 6c 28 74 2c 61 29 7d 63 61 74 63 68 28 74 29 7b 69 3d 5b 36 2c 74 5d 2c 72 3d 30 7d 66 69 6e 61 6c 6c 79 7b 65 3d 6f 3d 30 7d 69 66 28 35 26 69 5b 30 5d 29 74 68 72 6f 77 20 69 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 Data Ascii: ]&&i[1]<o[3])){a.label=i[1];break}if(6===i[0]&&a.label<o[1]){a.label=o[1],o=i;break}if(o&&a.label<o[2]){a.label=o[2],a.ops.push(i);break}o[2]&&a.ops.pop(),a.trys.pop();continue}i=n.call(t,a)}catch(t){i=[6,t],r=0}finally{e=o=0}if(5&i[0])throw i[1];return{v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	50226	35.241.45.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	523	OUT	GET /js/pandg-sdk.js HTTP/1.1 Host: pghub.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:51 UTC	906	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPq5eApaJPvLDBiB_tTLOOhis3_2ZU41oqeJKEnRxEJz7mqbDKLNS_37K01kQ-G3xPsd2QrU_8PfZQ Date: Thu, 25 Apr 2024 19:25:51 GMT Last-Modified: Mon, 05 Jun 2023 16:36:50 GMT ETag: W/"47a886353056caf33a998c6041e20896" Vary: Accept-Encoding x-goog-generation: 1685983010517890 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 5009 Content-Type: application/javascript x-goog-hash: crc32c=aHj4lg== x-goog-hash: md5=R6iGNTBWyvM6mYxgQeIIlg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Access-Control-Allow-Origin X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-25 19:25:51 UTC	1255	IN	Data Raw: 31 61 33 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 65 5b 72 5d 29 72 65 74 75 72 6e 20 65 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 6e 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e Data Ascii: 1a35!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n
2024-04-25 19:25:51 UTC	1255	IN	Data Raw: 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 74 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 Data Ascii: <arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r])}return t}).apply(this,arguments)}function s(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"
2024-04-25 19:25:51 UTC	1255	IN	Data Raw: 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 74 29 3b 72 65 74 75 72 6e 22 6e 6f 2d 63 6f 6f 6b 69 65 22 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 7d 7d 2c 7b 6b 65 79 3a 22 73 74 6f 72 65 49 6e 41 6c 6c 53 74 6f 72 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 22 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 74 2c 65 29 7d 7d 5d 2c 28 6e 3d 5b 7b 6b 65 79 3a 22 73 74 6f 72 61 67 65 4b 65 Data Ascii: calStorage.getItem(t);return"no-cookie"===r?null:r}},{key:"storeInAllStores",value:function(t,e){var n="".concat(t,"=").concat(encodeURIComponent(e));document.cookie="".concat(n,"; path=/; SameSite=Strict"),localStorage.setItem(t,e)}}],(n=[{key:"storageKe
2024-04-25 19:25:51 UTC	1255	IN	Data Raw: 2c 7b 6c 61 73 74 53 79 6e 63 54 69 6d 65 3a 74 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 54 61 70 61 64 4d 65 74 61 43 6f 6f 6b 69 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 74 6f 72 65 49 6e 41 6c 6c 53 74 6f 72 65 73 28 74 68 69 73 2e 73 74 6f 72 61 67 65 4b 65 79 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 7d 5d 29 26 26 73 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 73 28 65 2c 72 29 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 7d 28 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 74 3f 6e Data Ascii: ,{lastSyncTime:t}))}},{key:"setTapadMetaCookie",value:function(e){t.storeInAllStores(this.storageKey,JSON.stringify(e))}}])&&s(e.prototype,n),r&&s(e,r),t}();function y(t,e){return function(t){if(Array.isArray(t))return t}(t)\|\|function(t,e){var n=null==t?n
2024-04-25 19:25:51 UTC	1255	IN	Data Raw: 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 29 7b 69 66 28 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 67 28 74 2c 65 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 6e 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 6e 7c 7c 22 53 65 74 22 3d 3d 3d 6e 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3a 22 41 72 67 75 6d Data Ascii: must have a [Symbol.iterator]() method.")}()}function m(t,e){if(t){if("string"==typeof t)return g(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n\|\|"Set"===n?Array.from(t):"Argum
2024-04-25 19:25:51 UTC	442	IN	Data Raw: 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 3f 5b 5d 3a 65 3f 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2c 74 5b 65 5d 5d 7d 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 3b 65 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 5b 31 5d 7d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 2c 6e 3d 65 5b Data Ascii: codeURIComponent(n),"=").concat(encodeURIComponent(r))}))}function S(t,e){return 0===Object.keys(t).length?[]:e?Object.keys(t).map((function(e){return[e,t[e]]})).filter((function(t){var e=y(t,2);e[0];return null!=e[1]})).map((function(t){var e=y(t,2),n=e[
2024-04-25 19:25:51 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 5b 65 2c 74 5b 65 5d 5d 7d 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 3b 65 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 5b 31 5d 7d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 2c 6e 3d 65 5b 30 5d 2c 72 3d 65 5b 31 5d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 5b 74 2c 72 5b 74 5d 5d 7d 29 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 79 28 74 2c 32 29 3b 65 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 5b 31 5d 7d Data Ascii: 1000p((function(e){return[e,t[e]]})).filter((function(t){var e=y(t,2);e[0];return null!=e[1]})).map((function(t){var e=y(t,2),n=e[0],r=e[1];return Object.keys(r).map((function(t){return[t,r[t]]})).filter((function(t){var e=y(t,2);e[0];return null!=e[1]}
2024-04-25 19:25:51 UTC	1255	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 29 7d 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 2c 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 72 2c 6e 2e 6c 61 73 74 43 68 69 6c 64 29 7d 29 29 7d 7d 5d 29 26 26 6b 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 6b 28 65 2c 72 29 2c 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 72 65 74 75 72 6e 28 49 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 Data Ascii: on(){return t()},r.onerror=function(t){return e(t)},n.insertBefore(r,n.lastChild)}))}}])&&k(e.prototype,n),r&&k(e,r),t}();function I(){return(I=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototy
2024-04-25 19:25:51 UTC	1255	IN	Data Raw: 7d 7d 2c 7b 6b 65 79 3a 22 63 61 6c 6c 50 69 78 65 6c 53 65 72 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 73 79 6e 63 55 72 6c 28 29 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 4f 28 65 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 65 74 74 79 50 72 69 6e 74 44 61 74 61 50 61 72 61 6d 73 29 29 2c 6f 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 72 65 74 75 72 6e 20 6f 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 30 2c 6f 2e 6f 70 65 6e 28 22 47 45 54 22 2c 72 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5b 22 61 62 6f 72 74 22 2c 22 65 72 72 6f 72 22 2c 22 74 69 6d 65 6f 75 74 22 5d 2e 66 6f 72 45 61 63 Data Ascii: }},{key:"callPixelServer",value:function(e,n){var r="".concat(this.syncUrl(),"?").concat(O(e,this.config.prettyPrintDataParams)),o=new XMLHttpRequest;return o.withCredentials=!0,o.open("GET",r),new Promise((function(e,n){["abort","error","timeout"].forEac
2024-04-25 19:25:51 UTC	339	IN	Data Raw: 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 28 55 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 67 65 74 3f 52 65 66 6c 65 63 74 2e 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 3b 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 26 26 6e 75 6c 6c 21 3d 3d 28 74 3d 44 28 74 29 29 3b 29 3b 72 65 74 75 72 6e 20 74 7d 28 74 2c 65 29 3b 69 66 28 72 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 65 29 3b 72 65 74 75 72 Data Ascii: )}}function U(t,e,n){return(U="undefined"!=typeof Reflect&&Reflect.get?Reflect.get:function(t,e,n){var r=function(t,e){for(;!Object.prototype.hasOwnProperty.call(t,e)&&null!==(t=D(t)););return t}(t,e);if(r){var o=Object.getOwnPropertyDescriptor(r,e);retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	50223	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	463	OUT	GET /xuid?mid=7976&xuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&dongle=u6nf&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1072080661979746722290
2024-04-25 19:25:51 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:51 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:51 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:25:51 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	50222	18.160.18.103	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	1301	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=396660830&iiqidtype=2&iiqpcid=a5d6e528-31e3-472a-bdab-24466191fa18&iiqpciddate=1714073144763&tsrnd=17_1714073144779&jsver=5.086&uh=%7B%220%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117%5C%22%22%2C%221%22%3A%22%3F0%22%2C%222%22%3A%22%5C%22Windows%5C%22%22%2C%223%22%3A%22%5C%22x86%5C%22%22%2C%224%22%3A%22%5C%2264%5C%22%22%2C%226%22%3A%22%5C%2210.0.0%5C%22%22%2C%227%22%3A%22%3F0%22%2C%228%22%3A%22%5C%22Google%20Chrome%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%2C%20%5C%22Not%3BA%3DBrand%5C%22%3Bv%3D%5C%228.0.0.0%5C%22%2C%20%5C%22Chromium%5C%22%3Bv%3D%5C%22117.0.5938.132%5C%22%22%7D&ckls=true&ci=wVTUfJaaOu&nc=false&trid=-1569032401 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: intentIQ=wVTUfJaaOu; IQver=1.9; ASDT=0; intentIQCDate=1714073149012; IQPData=3113763558#1714073149012#0#1714073149012; CSDT=UEQ6MTU1NzlfMCZVQXpFRmQ4
2024-04-25 19:25:51 UTC	1201	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 19:25:51 GMT Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: intentIQ=wVTUfJaaOu; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTU1NzlfMCZVQXpFR0dL; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=3113763558#1714073151444#0#1714073149012; Domain=.intentiq.com; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 bd3f4df95f7c836cc4eb6a22d92ac2c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PyoBdMbWf2Nh2glN-I6IceSdO48QTSJuGgP2hDqqsbG37TEtBnLKcQ==
2024-04-25 19:25:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	50230	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	873	OUT	GET /w/1.0/pd?plm=5 HTTP/1.1 Host: google-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; pd=v2\|1714073146\|vMbwgag2gKhEvPkWgyiK; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528
2024-04-25 19:25:51 UTC	643	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; Version=1; Expires=Fri, 25-Apr-2025 19:25:51 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8; Version=1; Expires=Fri, 10-May-2024 19:25:51 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: text/html Content-Length: 749 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:51 UTC	749	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6f 72 74 61 2e 63 6c 69 63 6b 61 67 79 2e 63 6f 6d 2f 70 69 78 65 6c 2e 67 69 66 3f 63 68 3d 34 26 63 6d 3d 30 62 66 34 38 30 63 32 2d 30 36 38 64 2d 30 39 39 64 2d Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://aorta.clickagy.com/pixel.gif?ch=4&cm=0bf480c2-068d-099d-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	50232	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	771	OUT	GET /idsync/ex/receive?partner_id=1955&partner_device_id=1204c7db-0ff0-0854-044f-9b275ba68c4b HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:25:51 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:51 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:25:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:25:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:25:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:51 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	50233	13.33.4.68	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	627	OUT	GET /configs/38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: config.aps.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:51 UTC	390	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 602 Connection: close Server: CloudFront Date: Thu, 25 Apr 2024 18:50:17 GMT Cache-Control: max-age=3600 X-Cache: Hit from cloudfront Via: 1.1 442817b8ed9905d22aba1f0284647858.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P1 X-Amz-Cf-Id: pXr-u3owHNLxWr0wE3qsF224s3K_s05UrFWiomidwrs-0ohFjxyZjg== Age: 2134
2024-04-25 19:25:51 UTC	602	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 74 72 79 20 7b 63 6f 6e 73 74 20 61 63 63 6f 75 6e 74 49 64 20 3d 20 22 33 38 39 31 38 30 39 35 2d 38 65 34 35 2d 34 33 33 32 2d 38 38 62 66 2d 32 32 36 62 33 35 31 34 63 62 36 34 22 3b 77 69 6e 64 6f 77 2e 5f 61 70 73 20 3d 20 77 69 6e 64 6f 77 2e 5f 61 70 73 20 7c 7c 20 6e 65 77 20 4d 61 70 28 29 3b 69 66 20 28 21 5f 61 70 73 2e 68 61 73 28 61 63 63 6f 75 6e 74 49 64 29 29 20 7b 5f 61 70 73 2e 73 65 74 28 61 63 63 6f 75 6e 74 49 64 2c 20 7b 20 71 75 65 75 65 3a 20 6e 65 77 20 41 72 72 61 79 28 29 2c 20 73 74 6f 72 65 3a 20 6e 65 77 20 4d 61 70 28 29 20 7d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 28 6e 61 6d 65 2c 20 64 65 74 61 69 6c 29 20 7b 5f 61 70 73 2e 67 65 74 28 61 63 63 6f 75 6e 74 49 64 29 Data Ascii: (function () {try {const accountId = "38918095-8e45-4332-88bf-226b3514cb64";window._aps = window._aps \|\| new Map();if (!_aps.has(accountId)) {_aps.set(accountId, { queue: new Array(), store: new Map() });}function record(name, detail) {_aps.get(accountId)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.5	50224	52.46.155.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	488	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=4cacc85a-485d-8e29-8ea0-8166001986a7&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:51 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: RHBWP8RNY2S29EWHP3RB Set-Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:51 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 19:25:51 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.5	50231	52.7.87.144	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	739	OUT	GET /d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID} HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649
2024-04-25 19:25:51 UTC	464	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:25:51 GMT Location: https://us-u.openx.net/w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916 Set-Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649; Path=/; Domain=ipredictive.com; Expires=Fri, 25 Apr 2025 19:25:51 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 20147927-9fd0-413a-bd54-a24af9647928 Content-Length: 112 Connection: Close
2024-04-25 19:25:51 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 33 30 32 38 26 61 6d 70 3b 76 61 6c 3d 35 62 35 35 34 38 65 31 2d 66 34 38 66 2d 34 32 61 35 2d 39 38 37 66 2d 35 61 38 36 36 66 37 63 38 39 31 36 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://us-u.openx.net/w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.5	50225	67.202.6.206	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	476	OUT	GET /usersync?b=pln&i=UQf1GlI5tayx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:51 UTC	263	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-04-25 19:25:51 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.5	50235	193.122.130.38	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	929	OUT	GET /services?uid=AABL7E7MVVwAABRpRLTzpA&srv=cs&pid=73&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:51 UTC	1431	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://ssum-sec.casalemedia.com/usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DC0097AB6264C438E881925A307B022D7%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526bee_sync_partners%253Dsas%25252Cpp%25252Cpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D2%26uid%3D Set-Cookie: tads_uidp_73=AABL7E7MVVwAABRpRLTzpA; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=C0097AB6264C438E881925A307B022D7; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240425192551+0000; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:51 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 187985825 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.5	50238	35.186.253.211	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	773	OUT	GET /sync/dds HTTP/1.1 Host: rtb.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073148953528; pd=v2\|1714073146.4\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:51 UTC	443	IN	HTTP/1.1 302 Found Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: text/html; charset=utf-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=open&google_hm=yyw-G_1xjP2o2k9GuzN3_Q==&ox_sc=1&ox_init=1 P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Thu, 25 Apr 2024 19:25:51 GMT Content-Length: 138 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:51 UTC	138	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 79 79 77 2d 47 5f 31 78 6a 50 32 6f 32 6b 39 47 75 7a 4e 33 5f 51 3d 3d 26 61 6d 70 3b 6f 78 5f 73 63 3d 31 26 61 6d 70 3b 6f 78 5f 69 6e 69 74 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=open&google_hm=yyw-G_1xjP2o2k9GuzN3_Q==&ox_sc=1&ox_init=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.5	50239	34.36.216.150	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	619	OUT	GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:51 UTC	424	IN	HTTP/1.1 302 Found set-cookie: ssi=20d6f965-a0e4-4486-bb52-f6976948d853#1714073151634; Domain=.sitescout.com; Expires=Fri, 25-Apr-2025 19:25:51 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=4&gdpr=0 Content-Length: 0 date: Thu, 25 Apr 2024 19:25:51 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.5	50236	207.65.37.181	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	1406	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=98485457&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; PugT=1714073150; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; SPugT=1714073151
2024-04-25 19:25:51 UTC	962	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715212800%3A259_201_263_262_261_260%7C1714608000%3A252_265; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714608000%3A223_2_15%7C1715212800%3A231_54_13_48_178_3_5_233_240_104_21_22_71_166_165_250_220_8_55_46%7C1714867200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 25 Apr 2024 19:25:51 GMT Transfer-Encoding: chunked Connection: close
2024-04-25 19:25:51 UTC	2250	IN	Data Raw: 38 62 65 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 76 78 69 69 5f 70 69 64 3d 31 30 30 36 37 26 76 78 69 69 5f 70 64 69 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 35 31 45 41 44 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 34 30 32 34 35 31 39 33 26 76 61 6c 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 Data Ascii: 8bePubMatic.loadAsyncImagePixel('https://thrtle.com/insync?vxii_pid=10067&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://us-u.openx.net/w/1.0/sd?id=540245193&val=0F7B5FEF-69AD-46C6-81F2-A260D6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.5	50243	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:51 UTC	541	OUT	OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://earnandexcel.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:52 UTC	715	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:52 GMT Content-Length: 0 Connection: close access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true access-control-allow-headers: Content-Type, SP-Anonymous access-control-max-age: 5 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DyVPYL0cfTm4Hc9CLXbhXXpsySSS7umYlcXw1La%2BUlWEctr%2F6RItC73fHEJ7VEmAcqyWvR9QUTzIwNNzED1aENIbCk0rNQh527Oka0WlCFvYQ%2BoeC7EqUnT8tfC81ThDjZSykNcq0A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b8b11aa369e7-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.5	50242	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1656	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=5b5548e1-f48f-42a5-987f-5a866f7c8916&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; chkChromeAb67Sec=1; DPSync3=1715212800%3A201_263%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223%7C1715212800%3A3_250_104_231_220_21_54_22_13_71_166; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; SPugT=1714073151; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; PugT=1714073151
2024-04-25 19:25:52 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:52 GMT; path=/ Set-Cookie: PugT=1714073152; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:52 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:52 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.5	50237	34.198.78.192	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	733	OUT	GET /pixel.gif?ch=4&cm=0bf480c2-068d-099d-383b-98b08c184376&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:52 UTC	938	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:52 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240425.4c3b815cb X-Aorta-Host: 3a1c719bec90 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZiquQIPQzJS1XtQhuYTwyGhu set-cookie: cb=ZiquQIPQzJS1XtQhuYTwyGhu; Max-Age=63027504; Expires=Sat, 25 Apr 2026 07:04:16 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"4","t":"2024-04-25 19:25:52"}]; Max-Age=63027504; Expires=Sat, 25 Apr 2026 07:04:16 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.5	50229	5.9.235.249	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	782	OUT	POST /mediavine-prod/recomms/items/4a0d234a-a41e-428a-8b50-810331596236/items/?frontend_timestamp=1714073149&frontend_sign=f7471ef987cf6d189aea5339e254ece904afcbe3 HTTP/1.1 Host: client-rapi-mediavine.recombee.com Connection: keep-alive Content-Length: 707 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:52 UTC	707	OUT	Data Raw: 7b 22 63 6f 75 6e 74 22 3a 35 30 2c 22 72 65 74 75 72 6e 50 72 6f 70 65 72 74 69 65 73 22 3a 74 72 75 65 2c 22 69 6e 63 6c 75 64 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 22 74 69 74 6c 65 2c 64 65 73 63 72 69 70 74 69 6f 6e 2c 69 6d 67 55 72 6c 2c 75 72 6c 2c 73 69 74 65 49 64 22 2c 22 74 61 72 67 65 74 55 73 65 72 49 64 22 3a 22 63 64 38 38 62 65 61 33 2d 62 35 31 32 2d 34 38 65 38 2d 62 31 37 32 2d 62 66 61 32 65 30 31 33 64 61 31 38 22 2c 22 66 69 6c 74 65 72 22 3a 22 28 27 73 69 74 65 49 64 27 20 3d 3d 20 5c 22 61 39 33 62 64 36 36 32 2d 30 35 61 31 2d 34 63 65 37 2d 38 31 63 65 2d 34 63 36 37 62 63 63 65 66 31 39 30 5c 22 29 20 61 6e 64 20 28 6e 6f 74 20 28 27 75 72 6c 27 20 7e 20 5c 22 2e 2a 2f 32 5b 30 2d 39 5d 2b 2f 3f 5b 30 2d 39 5d 2b 2f 3f 5b Data Ascii: {"count":50,"returnProperties":true,"includedProperties":"title,description,imgUrl,url,siteId","targetUserId":"cd88bea3-b512-48e8-b172-bfa2e013da18","filter":"('siteId' == \"a93bd662-05a1-4ce7-81ce-4c67bccef190\") and (not ('url' ~ \".*/2[0-9]+/?[0-9]+/?[
2024-04-25 19:25:53 UTC	455	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: application/json; charset=utf-8 Content-Length: 133384 Connection: close Vary: Accept-Encoding X-Recombee-Request-Id: 6bd6a3631b7d6e878222264eb5f0ce8f Cache-Control: no-cache Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token, Authorization Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS
2024-04-25 19:25:53 UTC	3641	IN	Data Raw: 7b 22 72 65 63 6f 6d 6d 49 64 22 3a 20 22 36 62 64 36 61 33 36 33 31 62 37 64 36 65 38 37 38 32 32 32 32 36 34 65 62 35 66 30 63 65 38 66 22 2c 20 22 72 65 63 6f 6d 6d 73 22 3a 20 5b 7b 22 69 64 22 3a 20 22 31 61 65 31 32 39 30 34 2d 32 37 63 34 2d 34 31 34 34 2d 62 33 36 65 2d 62 63 33 39 61 35 37 31 31 61 36 36 22 2c 20 22 76 61 6c 75 65 73 22 3a 20 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 69 73 20 61 20 70 6f 77 65 72 66 75 6c 20 73 70 72 65 61 64 73 68 65 65 74 20 73 6f 66 74 77 61 72 65 20 74 68 61 74 20 65 6e 61 62 6c 65 73 20 75 73 65 72 73 20 74 6f 20 6f 72 67 61 6e 69 7a 65 2c 20 61 6e 61 6c 79 7a 65 2c 20 61 6e 64 20 76 69 73 75 61 6c 69 7a 65 20 64 61 74 61 2e 20 4f 6e 65 20 6f 66 74 65 Data Ascii: {"recommId": "6bd6a3631b7d6e878222264eb5f0ce8f", "recomms": [{"id": "1ae12904-27c4-4144-b36e-bc39a5711a66", "values": {"description": "Microsoft Excel is a powerful spreadsheet software that enables users to organize, analyze, and visualize data. One ofte
2024-04-25 19:25:53 UTC	4096	IN	Data Raw: 74 68 65 20 5c 75 32 30 31 63 4e 65 77 20 43 6f 6d 6d 65 6e 74 5c 75 32 30 31 64 20 62 75 74 74 6f 6e 2e 20 45 6e 74 65 72 20 79 6f 75 72 20 63 6f 6d 6d 65 6e 74 20 69 6e 20 74 68 65 20 63 6f 6d 6d 65 6e 74 20 62 6f 78 2e 20 4b 65 79 62 6f 61 72 64 20 53 68 6f 72 74 63 75 74 3a 20 53 65 6c 65 63 74 20 74 68 65 20 63 65 6c 6c 2e 20 50 72 65 73 73 20 53 68 69 66 74 20 2b 20 46 32 20 74 6f 20 69 6e 73 65 72 74 20 61 20 63 6f 6d 6d 65 6e 74 2e 20 45 6e 74 65 72 20 79 6f 75 72 20 63 6f 6d 6d 65 6e 74 20 69 6e 20 74 68 65 20 70 72 6f 76 69 64 65 64 20 74 65 78 74 20 62 6f 78 2e 20 45 64 69 74 20 61 6e 64 20 44 65 6c 65 74 65 20 43 6f 6d 6d 65 6e 74 73 3a 20 54 6f 20 65 64 69 74 20 61 20 63 6f 6d 6d 65 6e 74 2c 20 72 69 67 68 74 2d 63 6c 69 63 6b 20 6f 6e 20 74 Data Ascii: the \u201cNew Comment\u201d button. Enter your comment in the comment box. Keyboard Shortcut: Select the cell. Press Shift + F2 to insert a comment. Enter your comment in the provided text box. Edit and Delete Comments: To edit a comment, right-click on t
2024-04-25 19:25:53 UTC	4096	IN	Data Raw: 69 73 20 68 61 6e 64 79 20 77 68 65 6e 20 79 6f 75 20 77 61 6e 74 20 61 20 72 61 70 69 64 20 6f 76 65 72 76 69 65 77 20 6f 66 20 74 68 65 20 73 75 6d 20 77 69 74 68 6f 75 74 20 63 6c 75 74 74 65 72 69 6e 67 20 79 6f 75 72 20 73 70 72 65 61 64 73 68 65 65 74 20 77 69 74 68 20 66 6f 72 6d 75 6c 61 73 2e 20 53 75 62 74 6f 74 61 6c 20 46 75 6e 63 74 69 6f 6e 20 66 6f 72 20 47 72 6f 75 70 65 64 20 44 61 74 61 3a 20 49 66 20 79 6f 75 72 20 64 61 74 61 20 69 73 20 6f 72 67 61 6e 69 7a 65 64 20 69 6e 20 67 72 6f 75 70 73 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 66 69 6e 64 20 74 68 65 20 73 75 6d 20 66 6f 72 20 65 61 63 68 20 67 72 6f 75 70 2c 20 74 68 65 20 53 75 62 74 6f 74 61 6c 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 61 20 76 61 6c 75 61 62 6c 65 20 Data Ascii: is handy when you want a rapid overview of the sum without cluttering your spreadsheet with formulas. Subtotal Function for Grouped Data: If your data is organized in groups and you want to find the sum for each group, the Subtotal function is a valuable
2024-04-25 19:25:53 UTC	4096	IN	Data Raw: 6d 61 74 69 6f 6e 2c 20 6d 61 6b 69 6e 67 20 69 74 20 65 61 73 69 65 72 20 66 6f 72 20 75 73 65 72 73 20 74 6f 20 6e 61 76 69 67 61 74 65 20 74 68 72 6f 75 67 68 20 63 6f 6d 70 6c 65 78 20 64 61 74 61 73 65 74 73 2e 20 48 6f 77 20 74 6f 20 41 64 64 20 41 72 72 6f 77 20 69 6e 20 45 78 63 65 6c 20 5c 75 32 30 31 33 20 35 20 48 61 63 6b 73 20 74 6f 20 41 64 64 20 41 72 72 6f 77 73 20 55 73 69 6e 67 20 74 68 65 20 5c 75 32 30 31 63 49 6e 73 65 72 74 5c 75 32 30 31 64 20 54 61 62 3a 20 4e 61 76 69 67 61 74 65 20 74 6f 20 74 68 65 20 5c 75 32 30 31 63 49 6e 73 65 72 74 5c 75 32 30 31 64 20 74 61 62 20 69 6e 20 74 68 65 20 45 78 63 65 6c 20 72 69 62 62 6f 6e 2e 20 43 6c 69 63 6b 20 6f 6e 20 74 68 65 20 5c 75 32 30 31 63 53 68 61 70 65 73 5c 75 32 30 31 64 20 6f Data Ascii: mation, making it easier for users to navigate through complex datasets. How to Add Arrow in Excel \u2013 5 Hacks to Add Arrows Using the \u201cInsert\u201d Tab: Navigate to the \u201cInsert\u201d tab in the Excel ribbon. Click on the \u201cShapes\u201d o
2024-04-25 19:25:53 UTC	4096	IN	Data Raw: 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 65 72 61 73 65 20 65 78 69 73 74 69 6e 67 20 64 61 74 61 2c 20 77 68 65 74 68 65 72 20 69 74 5c 75 32 30 31 39 73 20 6e 75 6d 62 65 72 73 2c 20 74 65 78 74 2c 20 6f 72 20 64 61 74 65 73 2c 20 77 69 74 68 6f 75 74 20 61 66 66 65 63 74 69 6e 67 20 6f 74 68 65 72 20 63 65 6c 6c 73 20 69 6e 20 74 68 65 20 77 6f 72 6b 73 68 65 65 74 2e 20 52 65 73 65 74 20 46 6f 72 6d 75 6c 61 73 3a 20 49 66 20 79 6f 75 20 68 61 76 65 20 61 70 70 6c 69 65 64 20 66 6f 72 6d 75 6c 61 73 20 74 6f 20 61 20 63 65 6c 6c 2c 20 63 6c 65 61 72 69 6e 67 20 69 74 20 63 61 6e 20 72 65 73 65 74 20 74 68 65 20 63 65 6c 6c 20 74 6f 20 69 74 73 20 64 65 66 61 75 6c 74 20 73 74 61 74 65 2c 20 72 65 6d 6f 76 69 6e 67 20 74 68 65 20 66 6f 72 6d 75 6c Data Ascii: allows you to erase existing data, whether it\u2019s numbers, text, or dates, without affecting other cells in the worksheet. Reset Formulas: If you have applied formulas to a cell, clearing it can reset the cell to its default state, removing the formul
2024-04-25 19:25:53 UTC	4096	IN	Data Raw: 2d 34 63 65 37 2d 38 31 63 65 2d 34 63 36 37 62 63 63 65 66 31 39 30 22 2c 20 22 74 69 74 6c 65 22 3a 20 22 48 6f 77 20 74 6f 20 43 6c 65 61 72 20 61 20 43 65 6c 6c 20 69 6e 20 45 78 63 65 6c 3a 20 41 20 43 6f 6d 70 72 65 68 65 6e 73 69 76 65 20 47 75 69 64 65 22 2c 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 63 6c 65 61 72 2d 61 2d 63 65 6c 6c 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 64 30 64 37 36 35 32 34 2d 66 64 36 35 2d 34 30 34 39 2d 61 30 37 36 2d 37 36 66 66 36 38 62 39 36 30 61 38 22 2c 20 22 76 61 6c 75 65 73 22 3a 20 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 Data Ascii: -4ce7-81ce-4c67bccef190", "title": "How to Clear a Cell in Excel: A Comprehensive Guide", "url": "https://earnandexcel.com/blog/how-to-clear-a-cell-in-excel-a-comprehensive-guide/"}}, {"id": "d0d76524-fd65-4049-a076-76ff68b960a8", "values": {"description"
2024-04-25 19:25:53 UTC	4096	IN	Data Raw: 20 57 68 69 6c 65 20 45 78 63 65 6c 20 6f 66 66 65 72 73 20 6d 75 6c 74 69 70 6c 65 20 6d 65 74 68 6f 64 73 20 74 6f 20 63 6f 75 6e 74 20 73 70 65 63 69 66 69 63 20 77 6f 72 64 73 2c 20 74 68 65 72 65 20 61 72 65 20 73 6f 6d 65 20 65 73 73 65 6e 74 69 61 6c 20 74 69 70 73 20 79 6f 75 20 73 68 6f 75 6c 64 20 6b 65 65 70 20 69 6e 20 6d 69 6e 64 20 74 6f 20 65 6e 73 75 72 65 20 61 63 63 75 72 61 63 79 20 61 6e 64 20 65 66 66 69 63 69 65 6e 63 79 3a 20 55 73 65 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 6e 64 20 63 6c 65 61 6e 20 64 61 74 61 3a 20 45 6e 73 75 72 65 20 74 68 61 74 20 74 68 65 20 64 61 74 61 20 79 6f 75 20 61 72 65 20 77 6f 72 6b 69 6e 67 20 77 69 74 68 20 69 73 20 66 72 65 65 20 66 72 6f 6d 20 75 6e 6e 65 63 65 73 73 61 72 79 20 66 6f 72 6d 61 74 Data Ascii: While Excel offers multiple methods to count specific words, there are some essential tips you should keep in mind to ensure accuracy and efficiency: Use consistent and clean data: Ensure that the data you are working with is free from unnecessary format
2024-04-25 19:25:53 UTC	4096	IN	Data Raw: 63 4c 69 73 74 20 65 6e 74 72 69 65 73 5c 75 32 30 31 64 20 62 6f 78 20 6f 72 20 69 6d 70 6f 72 74 20 61 20 6c 69 73 74 20 66 72 6f 6d 20 61 20 72 61 6e 67 65 20 69 6e 20 79 6f 75 72 20 77 6f 72 6b 73 68 65 65 74 2e 20 41 64 64 20 74 68 65 20 4c 69 73 74 3a 20 4f 6e 63 65 20 79 6f 75 72 20 6c 69 73 74 20 69 73 20 65 6e 74 65 72 65 64 2c 20 63 6c 69 63 6b 20 5c 75 32 30 31 63 41 64 64 5c 75 32 30 31 64 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 69 6e 20 74 68 65 20 43 75 73 74 6f 6d 20 4c 69 73 74 73 20 62 6f 78 2e 20 59 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 6d 75 6c 74 69 70 6c 65 20 6c 69 73 74 73 20 69 66 20 6e 65 65 64 65 64 2e 20 43 6f 6e 66 69 72 6d 20 61 6e 64 20 43 6c 6f 73 65 3a 20 43 6f 6e 66 69 72 6d 20 79 6f 75 72 20 6c 69 73 74 20 62 79 Data Ascii: cList entries\u201d box or import a list from a range in your worksheet. Add the List: Once your list is entered, click \u201cAdd\u201d to include it in the Custom Lists box. You can create multiple lists if needed. Confirm and Close: Confirm your list by
2024-04-25 19:25:53 UTC	4096	IN	Data Raw: 20 6d 65 6e 75 2e 20 53 74 65 70 20 35 3a 20 43 68 6f 6f 73 65 20 5c 75 32 30 31 63 46 72 65 65 7a 65 20 54 6f 70 20 52 6f 77 5c 75 32 30 31 64 20 6f 72 20 5c 75 32 30 31 63 46 72 65 65 7a 65 20 46 69 72 73 74 20 43 6f 6c 75 6d 6e 5c 75 32 30 31 64 20 49 6e 20 74 68 65 20 6d 65 6e 75 2c 20 79 6f 75 5c 75 32 30 31 39 6c 6c 20 66 69 6e 64 20 6f 70 74 69 6f 6e 73 20 6c 69 6b 65 20 5c 75 32 30 31 63 46 72 65 65 7a 65 20 54 6f 70 20 52 6f 77 5c 75 32 30 31 64 20 61 6e 64 20 5c 75 32 30 31 63 46 72 65 65 7a 65 20 46 69 72 73 74 20 43 6f 6c 75 6d 6e 2e 5c 75 32 30 31 64 20 43 68 6f 6f 73 65 20 5c 75 32 30 31 63 46 72 65 65 7a 65 20 46 69 72 73 74 20 43 6f 6c 75 6d 6e 5c 75 32 30 31 64 20 74 6f 20 70 69 6e 20 74 68 65 20 73 65 6c 65 63 74 65 64 20 63 6f 6c 75 6d Data Ascii: menu. Step 5: Choose \u201cFreeze Top Row\u201d or \u201cFreeze First Column\u201d In the menu, you\u2019ll find options like \u201cFreeze Top Row\u201d and \u201cFreeze First Column.\u201d Choose \u201cFreeze First Column\u201d to pin the selected colum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.5	50228	5.9.235.249	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	737	OUT	POST /mediavine-prod/detailviews/?frontend_timestamp=1714073149&frontend_sign=42faff7b8a981d17856a0b704b07ebe9987dc2c8 HTTP/1.1 Host: client-rapi-mediavine.recombee.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:52 UTC	118	OUT	Data Raw: 7b 22 63 61 73 63 61 64 65 43 72 65 61 74 65 22 3a 74 72 75 65 2c 22 75 73 65 72 49 64 22 3a 22 63 64 38 38 62 65 61 33 2d 62 35 31 32 2d 34 38 65 38 2d 62 31 37 32 2d 62 66 61 32 65 30 31 33 64 61 31 38 22 2c 22 69 74 65 6d 49 64 22 3a 22 34 61 30 64 32 33 34 61 2d 61 34 31 65 2d 34 32 38 61 2d 38 62 35 30 2d 38 31 30 33 33 31 35 39 36 32 33 36 22 7d Data Ascii: {"cascadeCreate":true,"userId":"cd88bea3-b512-48e8-b172-bfa2e013da18","itemId":"4a0d234a-a41e-428a-8b50-810331596236"}
2024-04-25 19:25:53 UTC	427	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 4 Connection: close X-Recombee-Request-Id: 3318418cfe8b95390b1689068d36c9e4 Cache-Control: no-cache Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token, Authorization Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS
2024-04-25 19:25:53 UTC	4	IN	Data Raw: 22 6f 6b 22 Data Ascii: "ok"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.5	50246	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	727	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 942 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ3AIAwDwIki2ZgmwDaVQqZg+PbJ53Quz/dBGFmyPuA2E7JUtr0nG6sOOxbjN0SNcxUfu5uW6EAAAAA=
2024-04-25 19:25:52 UTC	942	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 65 30 34 37 63 65 39 39 2d 38 62 36 64 2d 34 30 30 66 2d 39 37 33 63 2d 37 34 36 33 35 36 63 37 34 64 37 37 22 2c 22 6c 63 22 3a 22 36 35 66 63 39 39 37 35 2d 62 62 33 62 2d 34 30 38 35 2d 61 35 34 65 2d 66 31 30 39 37 31 64 30 31 33 33 37 22 2c 22 6c 73 22 3a 22 32 33 36 34 32 65 65 34 2d 39 35 32 31 2d 34 66 38 39 2d 38 37 35 31 2d 33 66 34 66 33 61 61 39 36 33 61 39 22 2c 22 72 22 3a 22 38 30 39 31 39 64 64 30 2d 65 34 65 30 2d 34 31 39 62 2d 62 30 62 62 2d 39 63 32 32 35 34 31 63 35 35 39 36 22 2c 22 73 73 22 3a 22 62 63 32 64 63 31 65 31 2d 63 30 34 33 2d 34 31 31 35 2d 62 30 30 33 2d 31 30 38 36 33 62 61 66 64 62 36 39 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"e047ce99-8b6d-400f-973c-746356c74d77","lc":"65fc9975-bb3b-4085-a54e-f10971d01337","ls":"23642ee4-9521-4f89-8751-3f4f3aa963a9","r":"80919dd0-e4e0-419b-b0bb-9c22541c5596","ss":"bc2dc1e1-c043-4115-b003-10863bafdb69","df":true,"s
2024-04-25 19:25:52 UTC	429	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:52 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.5	50249	207.65.37.181	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1680	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=24186430&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; SPugT=1714073151; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; PugT=1714073151; chkChromeAb67Sec=2; pi=157108:4; DPSync3=1715212800%3A259_201_263_262_261_260%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223_2_15%7C1715212800%3A231_54_13_48_178_3_5_233_240_104_21_22_71_166_165_250_220_8_55_46%7C1714867200%3A63
2024-04-25 19:25:52 UTC	1068	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715212800%3A260_259_201_263_261_256_262_258%7C1714608000%3A252_265%7C1714089600%3A255%7C1715040000%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1715212800%3A8_266_233_240_165_250_46_13_5_22_71_249_231_3_104_220_54_264_7_166_56_21_234_99_48_178_55_176%7C1715299200%3A35%7C1716595200%3A224%7C1714608000%3A223_15_2%7C1714867200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 25 Apr 2024 19:25:52 GMT Transfer-Encoding: chunked Connection: close
2024-04-25 19:25:52 UTC	2368	IN	Data Raw: 39 33 34 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 35 31 45 41 44 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: 934PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.5	50253	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1099	OUT	GET /pixel?google_nid=bidswitch_dbm&google_cm&google_sc&ssp=the33across&bsw_param=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&google_hm=Y2QxZjQ2YTUtZDI5NC00MzRiLTgyZDQtMGU0Y2MyZTNkMDM4&gdpr_consent=&gdpr= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:52 UTC	741	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://x.bidswitch.net/sync?dsp_id=16&user_id=CAESENA8ZoFCtGuGdCfh5676he0&google_cver=1&ssp=the33across&bsw_param=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr_consent=&gdpr= Date: Thu, 25 Apr 2024 19:25:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 392 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:52 UTC	392	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 64 73 70 5f 69 64 3d 31 36 26 61 6d 70 3b 75 73 65 72 5f 69 64 3d 43 41 45 53 45 4e 41 38 5a 6f 46 43 74 47 75 47 64 43 66 68 35 36 37 36 68 65 30 26 61 6d 70 3b 67 6f 6f 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://x.bidswitch.net/sync?dsp_id=16&user_id=CAESENA8ZoFCtGuGdCfh5676he0&goog

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.5	50248	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1128	OUT	GET /usermatchredir?s=191740&cb=https%3A%2F%2Fsync.technoratimedia.com%2Fservices%3Fsrv%3Dcs%26nuid%3DC0097AB6264C438E881925A307B022D7%26att%3D1%26pid%3D82%26cb%3Dhttps%253A%252F%252Fmatch.prod.bidr.io%252Fcookie-sync%253Fgdpr%253D0%2526bee_sync_partners%253Dsas%25252Cpp%25252Cpm%2526bee_sync_current_partner%253Dsyn%2526bee_sync_initiator%253Dadx%2526bee_sync_hop_count%253D2%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; CMPS=957; CMPRO=957
2024-04-25 19:25:52 UTC	1292	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:52 GMT Content-Length: 0 Connection: close Location: https://sync.technoratimedia.com/services?srv=cs&nuid=C0097AB6264C438E881925A307B022D7&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&uid=ZiquOtHM44EAAFGDARTZHgAA%26957 CF-Ray: 87a0b8b4aaf36776-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 19:25:52 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=957; Path=/; Domain=casalemedia.com; Expires=Wed, 24 Jul 2024 19:25:52 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=STZhXt%2BEOdzUYe4gsdpZDbX6z79PMKhNwfFKcq5Clix1RzHf%2BeUhQ3IF28rjnTKt3O0c6iQIBdJWbWIR%2BGUx05KQzu7o0NlPABRYNoqjr2RBeTATGmPPR6eb6ZLAhJnIuN0H7j8tDmWtHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.5	50250	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1530	OUT	GET /usersync/redirect?partner=thirty_three_across&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=212578338838864 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:52 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.5	50255	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1012	OUT	GET /sid/json?origin=publishertagids&domain=earnandexcel.com&sn=ChromeSyncframe&so=2&topUrl=earnandexcel.com&bundle=o_bdzV8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUGclMkJYcEtRb3JIczU2VjdFcEtqTDJrTHZyOHJBNTRjYzREZ3J1WkpLYkdqNHM3aFdMbWZHNU9nYjdLVnpPSkY0MyUyQnJVb0dRNlpvUmNvcjNNWUZiJTJCcGkzUjVrQVIlMkJRJTJCYmR3cEU2OWFLRzRxSg&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gum.criteo.com/syncframe?origin=publishertagids&topUrl=earnandexcel.com&us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145
2024-04-25 19:25:52 UTC	349	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 25 Apr 2024 19:25:52 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 751981 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:25:52 UTC	480	IN	Data Raw: 31 44 34 0d 0a 7b 22 73 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 6d 6f 76 65 53 69 64 22 3a 66 61 6c 73 65 2c 22 62 75 6e 64 6c 65 22 3a 22 61 73 62 36 77 46 38 77 62 53 55 79 51 6b 4a 36 61 44 68 32 55 45 68 4a 65 58 4a 77 65 6e 51 30 56 6c 46 51 55 48 42 68 61 43 55 79 52 6e 5a 51 54 56 68 33 4d 6b 55 6c 4d 6b 49 77 63 6b 4a 4b 4e 6a 59 34 55 45 31 51 4e 48 70 4a 4e 32 56 72 55 79 55 79 51 6a 41 33 51 32 51 31 59 54 5a 51 57 6a 4a 6a 4d 44 42 54 53 33 64 43 57 6c 5a 36 61 44 6c 47 52 46 55 35 4e 56 6c 4d 5a 44 6b 6c 4d 6b 4a 79 62 54 46 68 53 57 56 77 63 32 31 78 53 32 4a 44 4e 6b 45 77 61 6e 52 51 52 32 46 55 57 6b 39 6f 65 56 51 34 64 46 67 30 4e 58 46 7a 56 46 51 6c 4d 6b 4a 34 61 32 35 56 61 58 46 77 63 44 6c 73 63 55 4d 30 4e 44 5a 34 65 55 5a 54 52 55 Data Ascii: 1D4{"sid":null,"removeSid":false,"bundle":"asb6wF8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUHBhaCUyRnZQTVh3MkUlMkIwckJKNjY4UE1QNHpJN2VrUyUyQjA3Q2Q1YTZQWjJjMDBTS3dCWlZ6aDlGRFU5NVlMZDklMkJybTFhSWVwc21xS2JDNkEwanRQR2FUWk9oeVQ4dFg0NXFzVFQlMkJ4a25VaXFwcDlscUM0NDZ4eUZTRU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.5	50252	67.202.105.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	970	OUT	GET /ps/?us_privacy=1---&xi=33&xu=1072080661979746722290 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:52 UTC	682	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374; Domain=.33across.com; Expires=Fri, 25-Apr-2025 19:25:52 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP004 location: https://events-ssc.33across.com/match?bidder_id=33&external_user_id=1072080661979746722290&ts=1714073152&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- content-length: 0 date: Thu, 25 Apr 2024 19:25:51 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.5	50256	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	688	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id= HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:52 UTC	888	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Apr 2024 19:25:52 GMT Content-Length: 0 Connection: close x-amz-rid: W9B840KT2KQ48GVSS3EN Set-Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 19:25:52 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=aabZheBiTA-2vl2B5W91eQ&rk=usync-na Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.5	50251	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1135	OUT	GET /getuid?https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D90%26external_user_id%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:25:52 UTC	1478	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:25:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=3473854422107831099 AN-X-Request-Uuid: 19dcc6c1-9ea0-48d4-9de2-f6564d762d8b Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:52 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:25:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:25:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.5	50257	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1198	OUT	POST /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Content-Length: 9029 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:52 UTC	9029	OUT	Data Raw: 7b 22 63 6f 6e 6e 65 63 74 49 64 22 3a 22 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 7b 22 73 6c 75 67 22 3a 22 68 6f 62 62 69 65 73 2d 61 6e 64 2d 69 6e 74 65 72 65 73 74 73 22 2c 22 74 69 74 6c 65 22 3a 22 48 6f 62 62 69 65 73 20 26 20 49 6e 74 65 72 65 73 74 73 22 2c 22 69 61 62 43 6f 64 65 22 3a 22 49 41 42 39 22 7d 5d 2c 22 64 65 76 69 63 65 22 3a 7b 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 76 22 3a 22 4e 54 20 31 30 2e 30 22 2c 22 64 6e 74 22 3a 30 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 75 61 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 Data Ascii: {"connectId":"","categories":[{"slug":"hobbies-and-interests","title":"Hobbies & Interests","iabCode":"IAB9"}],"device":{"os":"Windows","osv":"NT 10.0","dnt":0,"h":1024,"w":1280,"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
2024-04-25 19:25:53 UTC	300	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: application/json; charset=utf-8 Content-Length: 37936 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Observe-Browsing-Topics: ?1
2024-04-25 19:25:53 UTC	16084	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 32 66 36 36 64 62 65 36 32 32 30 36 32 37 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 32 66 36 36 64 62 65 36 32 32 30 36 32 37 22 2c 22 69 6d 70 69 64 22 3a 22 32 66 36 36 64 62 65 36 32 32 30 36 32 37 22 2c 22 70 72 69 63 65 22 3a 31 2e 30 30 33 31 36 2c 22 61 64 6d 22 3a 22 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 5c 22 31 2e 30 5c 22 20 65 6e 63 6f 64 69 6e 67 3d 5c 22 55 54 46 2d 38 5c 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 5c 22 6e 6f 5c 22 3f 3e 3c 56 41 53 54 20 76 65 72 73 69 6f 6e 3d 5c 22 32 2e 30 5c 22 3e 3c 41 64 20 69 64 3d 5c 22 31 35 32 34 31 39 31 36 5c 22 3e 3c 49 6e 4c 69 6e 65 3e 3c 41 64 53 79 73 74 65 6d 20 76 65 72 73 69 6f 6e 3d 5c 22 31 2e 30 5c 22 3e 59 61 68 6f 6f Data Ascii: [{"id":"2f66dbe6220627","seatbid":[{"bid":[{"id":"2f66dbe6220627","impid":"2f66dbe6220627","price":1.00316,"adm":"<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?><VAST version=\"2.0\"><Ad id=\"15241916\"><InLine><AdSystem version=\"1.0\">Yahoo
2024-04-25 19:25:53 UTC	1485	IN	Data Raw: 73 4b 4e 72 6b 47 47 55 59 62 79 58 31 68 59 35 36 75 67 4f 43 52 46 37 51 6a 32 71 33 79 50 79 45 52 4a 33 78 51 45 43 79 76 58 6f 66 73 6b 2d 69 63 52 5f 56 74 6e 57 4b 43 4e 55 62 2d 31 49 64 65 41 58 74 71 44 48 4f 42 36 58 6f 47 39 72 77 6d 76 69 43 6e 72 4c 67 53 68 69 79 33 43 76 31 74 55 58 68 66 59 49 36 41 77 39 6e 53 6b 59 53 2d 4d 39 6a 50 4e 48 5f 6f 4f 47 33 6f 48 4d 56 32 37 50 6c 39 6a 65 63 70 35 75 70 55 6d 30 2d 67 68 5a 37 4d 50 46 41 53 68 38 66 48 43 6b 4e 78 7a 33 49 76 6c 6f 76 37 4e 76 55 49 72 4f 65 4c 42 47 63 4d 70 41 68 49 41 6d 6e 4a 32 45 6a 4a 52 38 56 6c 72 76 6f 57 38 69 46 47 30 64 62 62 5f 46 4f 7a 73 42 6f 43 6c 68 4a 42 59 6c 42 6a 6f 35 4a 64 32 77 4a 7a 63 58 77 61 42 44 66 5a 47 45 69 47 50 4e 35 2d 36 45 79 4c 53 Data Ascii: sKNrkGGUYbyX1hY56ugOCRF7Qj2q3yPyERJ3xQECyvXofsk-icR_VtnWKCNUb-1IdeAXtqDHOB6XoG9rwmviCnrLgShiy3Cv1tUXhfYI6Aw9nSkYS-M9jPNH_oOG3oHMV27Pl9jecp5upUm0-ghZ7MPFASh8fHCkNxz3Ivlov7NvUIrOeLBGcMpAhIAmnJ2EjJR8VlrvoW8iFG0dbb_FOzsBoClhJBYlBjo5Jd2wJzcXwaBDfZGEiGPN5-6EyLS
2024-04-25 19:25:53 UTC	16384	IN	Data Raw: 59 63 41 34 68 6c 76 76 74 35 6d 6f 78 69 51 70 49 4c 47 48 71 47 32 61 5f 74 64 38 6d 6a 6e 79 6a 5a 33 67 4e 34 59 44 51 6f 72 6e 4f 43 58 44 4b 51 4b 2d 38 76 7a 77 5a 72 46 33 50 6e 68 54 78 55 4c 39 41 44 4d 6b 61 53 69 2d 43 4c 69 74 6c 57 4d 36 65 70 6e 4c 2d 73 73 72 32 6f 54 39 58 4e 30 78 47 58 39 70 6e 2d 57 6d 4a 76 5f 63 72 39 76 4b 4f 46 4d 51 6c 47 46 74 6f 44 6f 41 62 7a 46 70 49 5f 66 49 49 6b 67 65 76 4d 49 47 4e 67 56 5f 56 6d 63 42 58 6c 47 45 6c 64 61 77 69 46 4d 30 34 74 69 33 59 66 47 52 4c 68 67 4b 6b 6a 73 55 4c 6d 41 42 70 6e 5f 37 79 70 55 34 76 5a 55 75 2d 36 4f 58 62 53 74 68 36 72 2d 67 46 62 68 67 7a 4b 5a 75 58 78 2d 66 49 79 79 4a 34 33 5f 59 76 61 69 2d 4b 2d 49 6d 54 7a 38 4b 47 56 30 61 5f 7a 63 52 4a 6e 31 76 69 58 42 Data Ascii: YcA4hlvvt5moxiQpILGHqG2a_td8mjnyjZ3gN4YDQornOCXDKQK-8vzwZrF3PnhTxUL9ADMkaSi-CLitlWM6epnL-ssr2oT9XN0xGX9pn-WmJv_cr9vKOFMQlGFtoDoAbzFpI_fIIkgevMIGNgV_VmcBXlGEldawiFM04ti3YfGRLhgKkjsULmABpn_7ypU4vZUu-6OXbSth6r-gFbhgzKZuXx-fIyyJ43_Yvai-K-ImTz8KGV0a_zcRJn1viXB
2024-04-25 19:25:53 UTC	3983	IN	Data Raw: 5c 22 2c 5c 22 6c 69 6e 65 49 74 65 6d 49 44 5c 22 3a 5c 22 33 31 37 35 35 38 31 5c 22 2c 5c 22 63 72 65 61 74 69 76 65 49 44 5c 22 3a 5c 22 37 31 35 39 33 31 30 5c 22 2c 5c 22 70 75 62 6c 69 73 68 65 72 49 44 5c 22 3a 5c 22 33 5c 22 2c 5c 22 73 69 74 65 50 6c 61 63 65 6d 65 6e 74 49 44 5c 22 3a 5c 22 31 35 37 34 33 32 31 5c 22 2c 5c 22 61 75 63 74 69 6f 6e 49 44 5c 22 3a 5c 22 36 30 36 30 37 34 34 36 30 35 38 35 38 34 33 34 37 39 32 3a 31 37 31 34 30 37 33 31 35 32 38 37 30 5c 22 2c 5c 22 61 64 52 65 71 75 65 73 74 44 6f 6d 61 69 6e 4e 61 6d 65 5c 22 3a 5c 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 5c 22 7d 2c 5c 22 69 61 73 50 61 72 61 6d 73 5c 22 3a 7b 5c 22 63 61 6d 70 61 69 67 6e 49 44 5c 22 3a 5c 22 35 35 30 32 31 30 5c 22 2c 5c 22 6c 69 6e Data Ascii: \",\"lineItemID\":\"3175581\",\"creativeID\":\"7159310\",\"publisherID\":\"3\",\"sitePlacementID\":\"1574321\",\"auctionID\":\"6060744605858434792:1714073152870\",\"adRequestDomainName\":\"earnandexcel.com\"},\"iasParams\":{\"campaignID\":\"550210\",\"lin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.5	50258	18.160.83.122	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	2568	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&pid=eWu57J4Q2sVgL&cb=0&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:53 UTC	473	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 597 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:52 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 ad663ff6398ba4f8e7f1c844ed264cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: RRJy805BFcl0int9YwbtD8V7teZC9wGXc64_AzEnv5DxRYZH5-HB_g==
2024-04-25 19:25:53 UTC	597	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 47 7a 72 53 79 58 49 65 34 77 63 41 52 75 49 4d 52 74 78 6a 73 45 41 41 41 47 50 46 72 69 75 53 51 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 44 5f 51 55 55 6d 22 2c 22 73 69 7a 65 22 3a 22 37 32 38 78 39 30 22 2c 22 6d 65 74 61 22 3a 5b 22 73 6c 6f 74 49 44 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 73 69 7a 65 Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JGzrSyXIe4wcARuIMRtxjsEAAAGPFriuSQEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICD_QUUm","size":"728x90","meta":["slotID","mediaType","size

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.5	50260	18.160.83.5	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	497	OUT	GET /cdn/prod/config?src=600&u=https%3A%2F%2Fearnandexcel.com&pubid=38918095-8e45-4332-88bf-226b3514cb64 HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:52 UTC	401	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=UTF-8 Content-Length: 471 Connection: close Cache-Control: max-age=21550, s-maxage=21600 Date: Thu, 25 Apr 2024 19:25:52 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: gUAfLV46kyijuXMF-LzwSiclJ0co5lKxJ00PKozODAjKjLynQCMdww==
2024-04-25 19:25:52 UTC	471	IN	Data Raw: 7b 22 33 70 76 65 6e 64 6f 72 22 3a 22 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 6c 69 76 65 52 61 6d 70 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 70 75 62 63 6f 6d 6d 6f 6e 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 29 20 7b 77 69 6e 64 6f 77 2e 61 70 73 74 61 67 2e 5f 5f 69 64 35 5f 5f 20 3d 20 66 61 6c 73 65 3b 7d 7d 29 28 29 3b 22 2c 22 33 70 6d 65 74 61 64 61 74 61 22 3a 22 5b 7b 5c 22 70 72 6f 70 65 Data Ascii: {"3pvendor":"(function(){if (window.apstag) {window.apstag.__liveRamp__ = false;}})();;(function(){if (window.apstag) {window.apstag.__pubcommon__ = false;}})();;(function(){if (window.apstag) {window.apstag.__id5__ = false;}})();","3pmetadata":"[{\"prope

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.5	50259	207.65.37.182	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	1602	OUT	GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; SPugT=1714073151; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; PugT=1714073151; chkChromeAb67Sec=2; pi=157108:4; DPSync3=1715212800%3A259_201_263_262_261_260%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223_2_15%7C1715212800%3A231_54_13_48_178_3_5_233_240_104_21_22_71_166_165_250_220_8_55_46%7C1714867200%3A63
2024-04-25 19:25:52 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:52 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1714073152; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:52 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.5	50254	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	973	OUT	GET /a?adform_uid=4033174624989640038&r=eyJ1IjoiaHR0cHM6Ly9ydGItY3N5bmMuc21hcnRhZHNlcnZlci5jb20vcmVkaXIvP2lzc2lcdTAwM2QxXHUwMDI2cGFydG5lcmlkXHUwMDNkMTQxXHUwMDI2cGFydG5lcnVzZXJpZFx1MDAzZGZpMThmUnh0SGZTUzBPZWxDQUdPZTMyT3ciLCJkIjpbeyJuYW1lIjoic21hcnQifV19 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; arcki2_ddp2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073149686
2024-04-25 19:25:53 UTC	781	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:53 GMT Location: https://rtb-csync.smartadserver.com/redir/?partnerid=141&partneruserid=fi18fRxtHfSS0OelCAGOe32Ow&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648%26r%3Dhttps%253A%252F%252Fa.audrte.com%252Fp%253F Server: nginx/1.22.1 Set-Cookie: arcki2_adform=4033174624989640038!20220908!1714073153104; Max-Age=1296000; Expires=Fri, 10 May 2024 19:25:53 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.5	50261	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	681	OUT	POST /openrtb/pbjs?s=1018789 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2627 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; CMPS=957; CMPRO=957
2024-04-25 19:25:52 UTC	2627	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 32 38 63 61 36 64 37 39 62 66 30 32 35 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 45 61 72 6e 20 61 6e 64 20 45 78 63 65 6c 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 70 Data Ascii: {"id":"528ca6d79bf025","site":{"page":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/","domain":"earnandexcel.com","publisher":{"domain":"earnandexcel.com"},"name":"Earn and Excel","cat":["IAB9"],"sectioncat":["IAB9"],"p
2024-04-25 19:25:53 UTC	890	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 87a0b8b60dea673d-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 19:25:53 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WND2v7AaD2eROhvAhwA3y2d2%2BojRONFTAp4lc3Ca2UbIS9wy0q1qggmRzQYlK7fqfbA2k1F4SXb6kLNlTH%2BMgDCg%2BVUWlVG8el9vhuvJpu6k1xSCRPcj3JqOK9WbENORjSkZdTlS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:53 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 35 32 38 63 61 36 64 37 39 62 66 30 32 35 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"528ca6d79bf025","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.5	50262	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	681	OUT	POST /openrtb/pbjs?s=1018789 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2677 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; CMPS=957; CMPRO=957
2024-04-25 19:25:52 UTC	2677	OUT	Data Raw: 7b 22 69 64 22 3a 22 35 32 38 63 61 36 64 37 39 62 66 30 32 35 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 45 61 72 6e 20 61 6e 64 20 45 78 63 65 6c 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 70 Data Ascii: {"id":"528ca6d79bf025","site":{"page":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/","domain":"earnandexcel.com","publisher":{"domain":"earnandexcel.com"},"name":"Earn and Excel","cat":["IAB9"],"sectioncat":["IAB9"],"p
2024-04-25 19:25:53 UTC	890	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: application/json Content-Length: 36 Connection: close CF-Ray: 87a0b8b60f47adb9-ATL CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Fri, 25 Apr 2025 19:25:53 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0nvSrIo7MNvutp35UgiyLtzbo7nGglWQVLbLbfyVlnMIMdyzoH2lDUTa%2B8LmyyI%2FzAIKLYbGE41Eh4oFUOLrD0ITSEtE0DLyhJfkF0Da474OJLzracLAcGm%2FGLnwKuppRDJ2LsaR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:53 UTC	36	IN	Data Raw: 7b 22 69 64 22 3a 22 35 32 38 63 61 36 64 37 39 62 66 30 32 35 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"528ca6d79bf025","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.5	50265	18.160.78.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	554	OUT	GET /internal-cs/27053452/beacon.js HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:53 UTC	558	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 10415 Connection: close Last-Modified: Mon, 15 Apr 2024 09:46:35 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 19:25:54 GMT Cache-Control: max-age=86400 ETag: "380203da1313f445d8bc395ba3b88bad" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 31240efd84da865ccb5c6adf215095b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: ARfFeHBnMx7MEmQK62cLhkysWNNGTEg4PiyuZQkBIoqr-4T5sK_E5g==
2024-04-25 19:25:53 UTC	10415	IN	Data Raw: 76 61 72 20 43 4f 4d 53 43 4f 52 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 3c 65 3b 69 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 74 5b 72 5d 3d 6e 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: var COMSCORE=function(t){var n=function(){return n=Object.assign\|\|function(t){for(var n,i=1,e=arguments.length;i<e;i++)for(var r in n=arguments[i])Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r]);return t},n.apply(this,arguments)};"function"==typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.5	50266	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	829	OUT	GET /w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:53 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.5	50268	18.160.83.5	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	425	OUT	GET /bao-csm/aps-comm/aps_csm.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:53 UTC	622	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6482 Connection: close Date: Wed, 24 Apr 2024 23:27:54 GMT Last-Modified: Thu, 29 Feb 2024 02:13:08 GMT ETag: "a4d296427fc806b21335359e398c025c" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 x-amz-version-id: r5.lR.LJ66XEXzxUUVo7iMemjL_F_GoE Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fdb22b1b92ec7ff757a3e7a9ca70a2a4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: uPZXediUJs3fEwVsHnGvRwc6FGEhdEq1jc_VhwmnEEjdOSO2sT97Bg== Age: 71880
2024-04-25 19:25:53 UTC	6482	IN	Data Raw: 76 61 72 20 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 3d 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 7c 7c 7b 7d 3b 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 3d 5b 5d 2c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 72 65 70 6f 72 74 45 72 72 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 66 6f 72 28 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 2e 74 65 73 74 28 61 29 3d 3d 3d 21 31 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 29 2c 22 2f 22 21 3d 3d 61 2e 73 75 62 73 74 72 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 61 2b 3d 22 2f 22 29 2c 62 3d 30 3b 62 3c 61 6d 7a 6e 5f 61 70 73 5f 63 73 6d 2e 65 72 72 6f 72 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 3d 27 7b 22 61 64 Data Ascii: var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.5	50267	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	741	OUT	GET /pixel?google_nid=open&google_hm=yyw-G_1xjP2o2k9GuzN3_Q==&ox_sc=1&ox_init=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:53 UTC	618	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1 Date: Thu, 25 Apr 2024 19:25:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 249 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	249	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 6f 70 65 6e 78 2e 6e 65 74 2f 73 79 6e 63 2f 64 64 73 3f 6f 78 5f 73 63 3d 31 26 61 6d 70 3b 6f 78 5f 69 6e 69 74 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.5	50273	34.36.216.150	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:52 UTC	693	OUT	GET /dmp/pixelSync?cookieQ=1&nid=4&gdpr=0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=20d6f965-a0e4-4486-bb52-f6976948d853#1714073151634
2024-04-25 19:25:53 UTC	785	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=20d6f965-a0e4-4486-bb52-f6976948d853#1714073151634; Domain=.sitescout.com; Expires=Fri, 25-Apr-2025 19:25:53 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIxNyI6MTcxNDA3MzE1MzE1MX0; Domain=.sitescout.com; Expires=Sat, 25-May-2024 19:25:53 GMT; Path=/; Secure; SameSite=None location: https://us-u.openx.net/w/1.0/sd?id=537072977&val=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 25 Apr 2024 19:25:52 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.5	50269	107.20.103.201	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	521	OUT	GET /sync/pubmatic/0F7B5FEF-69AD-46C6-81F2-A260D651EAD7?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:25:53 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:53 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-04-25 19:25:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.5	50264	207.65.37.181	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	1679	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=8224538&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; SPugT=1714073151; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; PugT=1714073151; chkChromeAb67Sec=2; pi=157108:4; DPSync3=1715212800%3A259_201_263_262_261_260%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223_2_15%7C1715212800%3A231_54_13_48_178_3_5_233_240_104_21_22_71_166_165_250_220_8_55_46%7C1714867200%3A63
2024-04-25 19:25:53 UTC	1068	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 25 Apr 2024 19:25:53 GMT Transfer-Encoding: chunked Connection: close
2024-04-25 19:25:53 UTC	2368	IN	Data Raw: 39 33 34 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 68 72 6f 73 63 72 69 70 74 2e 64 65 6c 69 76 65 72 79 65 6e 67 69 6e 65 2e 61 64 73 77 69 7a 7a 2e 63 6f 6d 2f 73 79 6e 63 4d 65 3f 70 61 72 74 6e 65 72 44 6f 6d 61 69 6e 3d 6d 72 74 6e 73 76 72 2e 63 6f 6d 26 69 64 54 79 70 65 3d 63 6f 6f 6b 69 65 26 70 61 72 74 6e 65 72 55 73 65 72 49 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 35 31 45 41 44 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e Data Ascii: 934PubMatic.loadAsyncImagePixel('https://synchroscript.deliveryengine.adswizz.com/syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.5	50271	207.65.37.179	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	1803	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 2943 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; SPugT=1714073151; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; chkChromeAb67Sec=2; pi=157108:4; DPSync3=1715212800%3A259_201_263_262_261_260%7C1714608000%3A252_265; SyncRTB3=1714608000%3A223_2_15%7C1715212800%3A231_54_13_48_178_3_5_233_240_104_21_22_71_166_165_250_220_8_55_46%7C1714867200%3A63; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; PugT=1714073152
2024-04-25 19:25:53 UTC	2943	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 34 30 37 33 31 35 30 37 39 32 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 31 33 37 37 32 36 65 31 34 63 37 33 35 63 37 22 2c 22 74 61 67 69 64 22 3a 22 73 74 69 63 6b 79 5f 6f 75 74 73 74 72 65 61 6d 5f 64 65 73 6b 74 6f 70 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 31 2e 32 34 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 32 32 39 35 32 31 32 32 39 36 31 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2f 75 6e 69 76 65 72 73 61 6c 5f 70 6c 61 79 65 72 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 Data Ascii: {"id":"1714073150792","at":1,"cur":["USD"],"imp":[{"id":"137726e14c735c7","tagid":"sticky_outstream_desktop","bidfloor":1.24,"secure":1,"ext":{"data":{"pbadslot":"/1030006,22952122961/earnandexcel/universal_player","adserver":{"name":"gam","adslot":"/1030
2024-04-25 19:25:53 UTC	387	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://earnandexcel.com Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=pubmatic.com; Expires=Wed, 24 Jul 2024 19:25:53 GMT; HttpOnly; Secure; SameSite=None; Partitioned; Date: Thu, 25 Apr 2024 19:25:53 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.5	50275	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	823	OUT	GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:53 UTC	683	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAESEEMI4Y7uYSmhIWHrUpmtfqM&google_cver=1 Date: Thu, 25 Apr 2024 19:25:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 326 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	326	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 70 75 74 3d 43 41 45 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&put=CAE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.5	50274	3.226.121.246	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	824	OUT	POST /header/auction?lib=prebid&v=8.44.0&referrer=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 3596 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290
2024-04-25 19:25:53 UTC	3596	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 76 69 6e 65 5f 73 74 69 63 6b 79 5f 64 65 73 6b 74 6f 70 5f 6f 75 74 73 74 72 65 61 6d 5f 50 72 65 62 69 64 22 2c 22 66 6c 6f 6f 72 22 3a 31 2e 36 33 2c 22 76 69 64 65 6f 22 3a 7b 22 61 70 69 22 3a 5b 31 2c 32 5d 2c 22 62 6f 78 69 6e 67 61 6c 6c 6f 77 65 64 22 3a 31 2c 22 63 6f 6e 74 65 78 74 22 3a 22 6f 75 74 73 74 72 65 61 6d 22 2c 22 64 65 6c 69 76 65 72 79 22 3a 5b 32 5d 2c 22 6c 69 6e 65 61 72 69 74 79 22 3a 31 2c 22 6d 61 78 64 75 72 61 74 69 6f 6e 22 3a 33 30 2c 22 6d 69 6e 64 75 72 61 74 69 6f 6e 22 3a 35 2c 22 6d 61 78 62 69 74 72 61 74 65 22 3a 31 35 33 32 2c 22 6d 69 6d 65 73 22 3a 5b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 Data Ascii: {"imp":[{"id":0,"tagid":"Mediavine_sticky_desktop_outstream_Prebid","floor":1.63,"video":{"api":[1,2],"boxingallowed":1,"context":"outstream","delivery":[2],"linearity":1,"maxduration":30,"minduration":5,"maxbitrate":1532,"mimes":["application/javascript"
2024-04-25 19:25:53 UTC	740	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 p3p: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:53 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None content-length: 19 connection: close
2024-04-25 19:25:53 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.5	50279	67.202.105.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	980	OUT	GET /ps/?xi=99&us_privacy=&xu=y-sbgedPRE2uGCHaiyczZu1yO_Tokoo8Hh~A HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:53 UTC	694	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374; Domain=.33across.com; Expires=Fri, 25-Apr-2025 19:25:53 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP016 location: https://events-ssc.33across.com/match?bidder_id=99&external_user_id=y-sbgedPRE2uGCHaiyczZu1yO_Tokoo8Hh%7EA&ts=1714073153&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Thu, 25 Apr 2024 19:25:53 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.5	50284	35.186.253.211	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	773	OUT	GET /sync/dds HTTP/1.1 Host: rtb.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:53 UTC	443	IN	HTTP/1.1 302 Found Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: text/html; charset=utf-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=open&google_hm=yyw-G_1xjP2o2k9GuzN3_Q==&ox_sc=1&ox_init=1 P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Length: 138 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	138	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 79 79 77 2d 47 5f 31 78 6a 50 32 6f 32 6b 39 47 75 7a 4e 33 5f 51 3d 3d 26 61 6d 70 3b 6f 78 5f 73 63 3d 31 26 61 6d 70 3b 6f 78 5f 69 6e 69 74 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=open&google_hm=yyw-G_1xjP2o2k9GuzN3_Q==&ox_sc=1&ox_init=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.5	50281	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	1406	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis
2024-04-25 19:25:53 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:25:53 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=MBqnvcOAVHZk1_2R0gb5ubmYQuY&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2024-04-25 19:25:53 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4d 42 71 6e 76 63 4f 41 56 48 5a 6b 31 5f 32 52 30 67 62 35 75 62 6d 59 51 75 59 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=MBqnvcOAVHZk1_2R0gb5ubmYQuY&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.5	50286	34.36.216.150	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	683	OUT	GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=20d6f965-a0e4-4486-bb52-f6976948d853#1714073151634
2024-04-25 19:25:53 UTC	785	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=20d6f965-a0e4-4486-bb52-f6976948d853#1714073151634; Domain=.sitescout.com; Expires=Fri, 25-Apr-2025 19:25:53 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyIxNyI6MTcxNDA3MzE1MzIxMH0; Domain=.sitescout.com; Expires=Sat, 25-May-2024 19:25:53 GMT; Path=/; Secure; SameSite=None location: https://us-u.openx.net/w/1.0/sd?id=537072977&val=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 25 Apr 2024 19:25:52 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.5	50287	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	771	OUT	GET /idsync/ex/receive?partner_id=1955&partner_device_id=1204c7db-0ff0-0854-044f-9b275ba68c4b HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:25:53 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:53 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:25:53 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:25:53 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:25:53 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.5	50283	34.198.78.192	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	733	OUT	GET /pixel.gif?ch=4&cm=0bf480c2-068d-099d-383b-98b08c184376&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:53 UTC	938	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240425.4c3b815cb X-Aorta-Host: 3a1c719bec90 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/sd?id=537073026&val=ZiquQXeRy6jM9IHPeZYNrP2I set-cookie: cb=ZiquQXeRy6jM9IHPeZYNrP2I; Max-Age=63027504; Expires=Sat, 25 Apr 2026 07:04:17 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"4","t":"2024-04-25 19:25:53"}]; Max-Age=63027504; Expires=Sat, 25 Apr 2026 07:04:17 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.5	50282	34.200.31.123	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	967	OUT	GET /pbmtc.gif?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=$UID HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=4df7d229-f8a3-4c53-bb16-fd8aeed54a56; ss=jTJs01KclCE4W4cXxGyytvkK3AWkRc%2BQg42GR1GkXZdVKjDchTOGCV88GqqLLnIpizFIV5rtf3c%2FBnXDcvQstQ%3D%3D
2024-04-25 19:25:53 UTC	337	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=4df7d229-f8a3-4c53-bb16-fd8aeed54a56&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.5	50285	52.7.87.144	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	739	OUT	GET /d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID} HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649
2024-04-25 19:25:53 UTC	464	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:25:53 GMT Location: https://us-u.openx.net/w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916 Set-Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649; Path=/; Domain=ipredictive.com; Expires=Fri, 25 Apr 2025 19:25:53 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 6efc5679-250e-4777-a419-127b86b0220a Content-Length: 112 Connection: Close
2024-04-25 19:25:53 UTC	112	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 33 30 32 38 26 61 6d 70 3b 76 61 6c 3d 35 62 35 35 34 38 65 31 2d 66 34 38 66 2d 34 32 61 35 2d 39 38 37 66 2d 35 61 38 36 36 66 37 63 38 39 31 36 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://us-u.openx.net/w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.5	50263	3.218.216.11	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	722	OUT	POST /web/visit?fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f HTTP/1.1 Host: pdmp.dcapi.dmp.3lift.com Connection: keep-alive Content-Length: 237 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290
2024-04-25 19:25:53 UTC	237	OUT	Data Raw: 7b 22 6f 70 65 5f 63 68 61 6e 6e 65 6c 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 65 5f 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 6f 70 65 5f 76 69 73 69 74 22 2c 22 6f 70 65 5f 69 74 65 6d 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 2c 22 6f 70 65 5f 72 65 66 22 3a 22 22 2c 22 6f 70 65 5f 64 63 5f 72 65 67 69 6f 6e 22 3a 22 75 73 2d 65 61 73 74 2d 31 22 2c 22 63 6d 70 73 74 61 74 75 73 22 3a 22 6e 6f 74 72 65 71 75 69 72 65 64 22 2c 22 6f 70 65 5f 74 65 6e 61 6e 74 22 3a 22 62 34 22 7d Data Ascii: {"ope_channel":"tagger","ope_event_type":"ope_visit","ope_item_uri":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/","ope_ref":"","ope_dc_region":"us-east-1","cmpstatus":"notrequired","ope_tenant":"b4"}
2024-04-25 19:25:53 UTC	557	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 204 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Set-Cookie: ope_uidp=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f; Expires=Fri, 25 Apr 2025 19:25:53 GMT; Domain=tagger.opecloud.com; Path=/; Secure; HttpOnly; Partitioned; SameSite=None Location: https://pdmp.dcapi.dmp.3lift.com/web/visit?tr=true&fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f Server: akka-http/10.2.8
2024-04-25 19:25:53 UTC	204	IN	Data Raw: 54 68 65 20 72 65 71 75 65 73 74 20 73 68 6f 75 6c 64 20 62 65 20 72 65 70 65 61 74 65 64 20 77 69 74 68 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 64 6d 70 2e 64 63 61 70 69 2e 64 6d 70 2e 33 6c 69 66 74 2e 63 6f 6d 2f 77 65 62 2f 76 69 73 69 74 3f 74 72 3d 74 72 75 65 26 66 70 69 64 3d 65 32 63 64 62 63 32 35 2d 65 65 64 63 2d 34 65 39 39 2d 38 66 62 66 2d 63 64 63 34 64 33 35 30 36 35 30 66 22 3e 74 68 69 73 20 55 52 49 3c 2f 61 3e 2c 20 62 75 74 20 66 75 74 75 72 65 20 72 65 71 75 65 73 74 73 20 63 61 6e 20 73 74 69 6c 6c 20 75 73 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 55 52 49 2e Data Ascii: The request should be repeated with <a href="https://pdmp.dcapi.dmp.3lift.com/web/visit?tr=true&fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f">this URI</a>, but future requests can still use the original URI.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.5	50293	35.190.39.111	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	347	OUT	GET /encrypt HTTP/1.1 Host: esp.rtbhouse.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:53 UTC	311	IN	HTTP/1.1 405 Method Not Allowed content-type: application/json x-cloud-trace-context: edf91a848e933485345b1e10d4e20ab9 date: Thu, 25 Apr 2024 19:25:53 GMT server: Google Frontend Content-Length: 31 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.5	50292	34.120.135.53	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	631	OUT	GET /esp?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:53 UTC	335	IN	HTTP/1.1 200 OK X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=utf-8 Content-Length: 85 ETag: W/"55-v3VHThBbfrAc4tbonWnFMMiyvIs" Date: Thu, 25 Apr 2024 19:25:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	85	IN	Data Raw: 7b 22 65 73 70 22 3a 22 65 79 4a 70 49 6a 6f 69 65 44 6c 68 54 47 5a 32 4d 58 64 44 61 56 46 56 5a 55 31 7a 57 6b 52 42 4d 53 74 31 5a 7a 30 39 49 6e 30 3d 22 2c 22 69 22 3a 22 78 39 61 4c 66 76 31 77 43 69 51 55 65 4d 73 5a 44 41 31 2b 75 67 3d 3d 22 7d Data Ascii: {"esp":"eyJpIjoieDlhTGZ2MXdDaVFVZU1zWkRBMSt1Zz09In0=","i":"x9aLfv1wCiQUeMsZDA1+ug=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.5	50280	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:25:53 UTC	258	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //a.sportradarserving.com/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.5	50288	54.166.33.239	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	848	OUT	GET /ping_match.gif?ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:53 UTC	711	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 25 Apr 2024 19:25:53 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-03c2fcfe9579ca555@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=2MKo2Xc81S04Jb5; Domain=.w55c.net; Expires=Mon, 26 May 2025 05:25:53 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.5	50298	3.226.156.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	794	OUT	GET /v1/targeting?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f&tenant=b4 HTTP/1.1 Host: pdmp.papi-public.us-east-1.tagger.opecloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:53 UTC	248	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: application/json Content-Length: 134 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Cache-Control: no-cache
2024-04-25 19:25:53 UTC	134	IN	Data Raw: 7b 22 73 22 3a 22 30 63 37 58 47 75 49 63 58 7a 30 43 49 6e 52 39 6a 2f 6e 79 37 44 45 4a 35 50 4c 53 53 44 4d 4c 30 56 4c 46 33 4e 32 61 71 75 34 42 4f 64 32 4b 53 4a 58 42 22 2c 22 74 22 3a 22 63 39 46 4d 68 65 75 4d 54 57 33 4f 38 79 6f 44 4b 71 70 39 49 5a 75 61 51 67 35 77 56 38 47 50 69 71 51 5a 39 43 6f 42 54 6a 5a 6d 7a 41 3d 3d 22 2c 22 6b 69 64 22 3a 32 2c 22 74 74 6c 5f 73 22 3a 37 36 7d Data Ascii: {"s":"0c7XGuIcXz0CInR9j/ny7DEJ5PLSSDML0VLF3N2aqu4BOd2KSJXB","t":"c9FMheuMTW3O8yoDKqp9IZuaQg5wV8GPiqQZ9CoBTjZmzA==","kid":2,"ttl_s":76}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.5	50294	52.95.126.160	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	499	OUT	GET /s/dcm?pid=f7a5db36-1d5c-4c26-81b6-b4d0807faffb&id=5382283141381983659&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:53 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: AZZNZ0BHVVKJHV74SJK3 Set-Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 19:25:53 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.5	50295	192.184.67.70	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:53 UTC	828	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=ELIBCwHZK_ijAA; expires=Wed, 24-Jul-2024 19:25:53 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=662aae41-88636-483f3-1b196; expires=Mon, 26-May-2025 19:25:53 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.5	50303	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	753	OUT	GET /pixel?google_nid=rubicon&google_hm=NjFlNDNmODYxZTE3OTc0ODkwMjFjZjRkMTZkODkwNTNlZWE2ZjE4Yg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:25:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.5	50304	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	724	OUT	GET /pixel?google_nid=rp&google_cm&google_hm=TFZGTVdDRzMtUy1DWUVR HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:53 UTC	679	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&google_gid=CAESEEIT7sIJhDkJNHjTF0e3j_U&google_cver=1 Date: Thu, 25 Apr 2024 19:25:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:53 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 45 49 54 37 73 49 4a 68 44 6b Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&google_gid=CAESEEIT7sIJhDk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.5	50302	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	1212	OUT	GET /usersync/redirect?partner=rubicon&partnerId=LVFMWC1R-1E-MDQF HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:53 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.5	50300	34.236.60.188	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	733	OUT	GET /sync/rubicon/Fn5nKwpD0tTRlqm-hfHrbQ?csrc= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:25:53 UTC	873	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Length: 0 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=y-hKMN43pE2oIZGYSj0nFNv89LBaL6gluWsDFmQA--~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:25:53 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.5	50307	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	639	OUT	POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 Host: some.growplow.events Connection: keep-alive Content-Length: 1260 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:53 UTC	1260	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 22 3a 22 69 67 6c 75 3a 63 6f 6d 2e 73 6e 6f 77 70 6c 6f 77 61 6e 61 6c 79 74 69 63 73 2e 73 6e 6f 77 70 6c 6f 77 2f 70 61 79 6c 6f 61 64 5f 64 61 74 61 2f 6a 73 6f 6e 73 63 68 65 6d 61 2f 31 2d 30 2d 34 22 2c 22 64 61 74 61 22 3a 5b 7b 22 73 65 5f 63 61 22 3a 22 70 61 67 65 41 63 74 69 6f 6e 73 22 2c 22 73 65 5f 61 63 22 3a 22 72 65 6e 64 65 72 22 2c 22 73 65 5f 70 72 22 3a 22 7b 5c 22 61 70 70 56 65 72 73 69 6f 6e 5c 22 3a 5c 22 37 2e 32 34 34 2e 30 5c 22 2c 5c 22 62 65 74 61 4e 61 6d 65 5c 22 3a 5c 22 37 2e 32 34 34 2e 30 5c 22 2c 5c 22 69 73 4c 6f 67 67 65 64 49 6e 5c 22 3a 66 61 6c 73 65 2c 5c 22 67 72 6f 77 4c 61 62 73 5c 22 3a 66 61 6c 73 65 2c 5c 22 66 61 63 65 62 6f 6f 6b 53 68 61 72 65 45 6e 61 62 6c 65 64 5c 22 3a 74 72 Data Ascii: {"schema":"iglu:com.snowplowanalytics.snowplow/payload_data/jsonschema/1-0-4","data":[{"se_ca":"pageActions","se_ac":"render","se_pr":"{\"appVersion\":\"7.244.0\",\"betaName\":\"7.244.0\",\"isLoggedIn\":false,\"growLabs\":false,\"facebookShareEnabled\":tr
2024-04-25 19:25:54 UTC	858	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close set-cookie: collector_cookie=510c0dbf-feee-45f6-b1df-132aed506412; Expires=Fri, 25 Apr 2025 19:25:53 GMT; Path=/ p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA" access-control-allow-origin: https://earnandexcel.com access-control-allow-credentials: true CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aapnp0EGE1aT%2FurPmm2A97HhdNtYqRqfu8ECyUJvcBTLeOQM7jusL25UGtfVievmYTLHOgY5Nq2kkNetjufy3booIsBksT94mr9qqje7kyxy53d3KcDMm5VoplYYekdNOmwdSUnryg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a0b8bb6bbd4526-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:54 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.5	50299	3.218.216.11	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	760	OUT	POST /web/visit?tr=true&fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f HTTP/1.1 Host: pdmp.dcapi.dmp.3lift.com Connection: keep-alive Content-Length: 237 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:25:53 UTC	237	OUT	Data Raw: 7b 22 6f 70 65 5f 63 68 61 6e 6e 65 6c 22 3a 22 74 61 67 67 65 72 22 2c 22 6f 70 65 5f 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 6f 70 65 5f 76 69 73 69 74 22 2c 22 6f 70 65 5f 69 74 65 6d 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 2c 22 6f 70 65 5f 72 65 66 22 3a 22 22 2c 22 6f 70 65 5f 64 63 5f 72 65 67 69 6f 6e 22 3a 22 75 73 2d 65 61 73 74 2d 31 22 2c 22 63 6d 70 73 74 61 74 75 73 22 3a 22 6e 6f 74 72 65 71 75 69 72 65 64 22 2c 22 6f 70 65 5f 74 65 6e 61 6e 74 22 3a 22 62 34 22 7d Data Ascii: {"ope_channel":"tagger","ope_event_type":"ope_visit","ope_item_uri":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/","ope_ref":"","ope_dc_region":"us-east-1","cmpstatus":"notrequired","ope_tenant":"b4"}
2024-04-25 19:25:54 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:54 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 4 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Server: akka-http/10.2.8
2024-04-25 19:25:54 UTC	4	IN	Data Raw: 66 70 69 64 Data Ascii: fpid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.5	50310	193.122.130.38	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	1108	OUT	GET /services?srv=cs&nuid=C0097AB6264C438E881925A307B022D7&att=1&pid=82&cb=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpp%252Cpm%26bee_sync_current_partner%3Dsyn%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&uid=ZiquOtHM44EAAFGDARTZHgAA%26957 HTTP/1.1 Host: sync.technoratimedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tads_uidp_73=AABL7E7MVVwAABRpRLTzpA; tads_uid=C0097AB6264C438E881925A307B022D7; tads_uid_cd=20240425192551+0000; tads_zora=2
2024-04-25 19:25:54 UTC	1171	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Thu, 25 Apr 2024 19:25:54 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 0 Connection: close Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpp%2Cpm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=2 Set-Cookie: tads_uidp_82=ZiquOtHM44EAAFGDARTZHgAA&957; Max-Age=259200; Expires=Sun, 28 Apr 2024 19:25:54 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid=C0097AB6264C438E881925A307B022D7; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:54 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_uid_cd=20240425192551+0000; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:54 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None set-cookie: tads_zora=2; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:54 GMT; Path=/; Domain=.technoratimedia.com; Secure; SameSite=None access-control-allow-origin: https://ads.pubmatic.com/ access-control-allow-credentials: true access-control-allow-methods: POST,GET,HEAD,OPTIONS X-Varnish: 193770114 Age: 0 Via: 1.1 varnish

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.5	50313	54.166.33.239	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	890	OUT	GET /ping_match.gif?scc=1&ei=PUBMATIC&rurl=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=2MKo2Xc81S04Jb5
2024-04-25 19:25:54 UTC	773	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 25 Apr 2024 19:25:54 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:2MKo2Xc81S04Jb5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-801-g0076fb7#rel-ec2-master i-0e2d0f3a7e153dbdf@us-east-1b@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=2MKo2Xc81S04Jb5; Domain=.w55c.net; Expires=Sun, 25 May 2025 19:25:54 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchpubmatic=5; Domain=.w55c.net; Expires=Sat, 25 May 2024 19:25:54 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.5	50314	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	786	OUT	GET /iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:54 UTC	827	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:54 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 281 Connection: close x-amz-rid: 66KRHJBK9KXYQ7CK4ZSH Set-Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:54 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 19:25:54 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:54 UTC	281	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 72 63 3d 22 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 76 33 2f 70 72 3f 65 78 6c 69 73 74 3d 67 67 5f 61 6e 2d 64 62 35 26 66 76 3d 31 2e 30 26 61 3d 63 6d 26 63 6d 33 70 70 64 3d 31 26 64 6d 74 3d 33 26 67 64 70 72 3d 30 22 20 73 61 6e 64 62 6f 78 3d 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 Data Ascii: <html><body style="background-color:transparent"><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//s.amazon-adsystem.com/v3/pr?exlist=gg_an-db5&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0" sandbox="allow-same-origin allow-scripts

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.5	50312	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	2114	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=MBqnvcOAVHZk1_2R0gb5ubmYQuY&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; PugT=1714073152; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63
2024-04-25 19:25:54 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:53 GMT; path=/ Set-Cookie: PugT=1714073153; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:53 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.5	50311	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	2172	OUT	GET /AdServer/Pug?vcode=bz0xJnR5cGU9MSZjb2RlPTM0MzkmdGw9MTI5NjAw&piggybackCookie=4df7d229-f8a3-4c53-bb16-fd8aeed54a56&r=https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=${PUBMATIC_UID} HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; PugT=1714073152; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63
2024-04-25 19:25:54 UTC	781	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:54 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:54 GMT; path=/ Set-Cookie: PugT=1714073154; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:54 GMT; path=/ Location: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.5	50309	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:53 UTC	1199	OUT	POST /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive Content-Length: 13868 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:53 UTC	13868	OUT	Data Raw: 7b 22 63 6f 6e 6e 65 63 74 49 64 22 3a 22 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 7b 22 73 6c 75 67 22 3a 22 68 6f 62 62 69 65 73 2d 61 6e 64 2d 69 6e 74 65 72 65 73 74 73 22 2c 22 74 69 74 6c 65 22 3a 22 48 6f 62 62 69 65 73 20 26 20 49 6e 74 65 72 65 73 74 73 22 2c 22 69 61 62 43 6f 64 65 22 3a 22 49 41 42 39 22 7d 5d 2c 22 64 65 76 69 63 65 22 3a 7b 22 6f 73 22 3a 22 57 69 6e 64 6f 77 73 22 2c 22 6f 73 76 22 3a 22 4e 54 20 31 30 2e 30 22 2c 22 64 6e 74 22 3a 30 2c 22 68 22 3a 31 30 32 34 2c 22 77 22 3a 31 32 38 30 2c 22 75 61 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 Data Ascii: {"connectId":"","categories":[{"slug":"hobbies-and-interests","title":"Hobbies & Interests","iabCode":"IAB9"}],"device":{"os":"Windows","osv":"NT 10.0","dnt":0,"h":1024,"w":1280,"ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
2024-04-25 19:25:54 UTC	301	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:54 GMT Content-Type: application/json; charset=utf-8 Content-Length: 112046 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Observe-Browsing-Topics: ?1
2024-04-25 19:25:54 UTC	16083	IN	Data Raw: 5b 7b 22 69 64 22 3a 22 33 30 38 38 65 65 61 62 36 32 62 65 30 61 37 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 33 30 32 36 38 32 31 37 31 36 33 34 30 39 30 39 31 32 32 35 36 30 22 2c 22 69 6d 70 69 64 22 3a 22 33 30 38 38 65 65 61 62 36 32 62 65 30 61 37 22 2c 22 70 72 69 63 65 22 3a 30 2e 33 31 39 31 30 32 2c 22 61 64 6d 22 3a 22 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 49 4d 47 27 29 2e 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 74 6c 78 2e 33 6c 69 66 74 2e 63 6f 6d 2f 73 32 73 2f 6e 6f 74 69 66 79 3f 70 78 3d 31 26 70 72 3d 30 2e 33 32 32 26 74 73 3d 31 37 31 34 30 37 33 31 35 34 26 61 69 64 3d 33 30 32 36 38 32 31 37 31 36 33 34 30 39 30 39 31 32 32 35 36 Data Ascii: [{"id":"3088eeab62be0a7","seatbid":[{"bid":[{"id":"3026821716340909122560","impid":"3088eeab62be0a7","price":0.319102,"adm":"<script>document.createElement('IMG').src=\"https://tlx.3lift.com/s2s/notify?px=1&pr=0.322&ts=1714073154&aid=302682171634090912256
2024-04-25 19:25:54 UTC	16355	IN	Data Raw: 74 61 5c 22 3a 7b 5c 22 76 61 6c 75 65 5c 22 3a 5c 22 33 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 35 33 34 7d 7d 2c 7b 5c 22 64 61 74 61 5c 22 3a 7b 5c 22 76 61 6c 75 65 5c 22 3a 5c 22 44 6f 6e 61 74 65 20 4d 6f 6e 74 68 6c 79 5c 22 2c 5c 22 74 79 70 65 5c 22 3a 31 32 7d 7d 5d 7d 2c 5c 22 65 76 65 6e 74 5c 22 3a 5b 7b 5c 22 74 79 70 65 5c 22 3a 32 2c 5c 22 6d 65 74 68 6f 64 5c 22 3a 31 2c 5c 22 61 70 69 5c 22 3a 5b 5d 2c 5c 22 75 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 5c 5c 2f 5c 5c 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 5c 5c 2f 64 62 6d 5c 5c 2f 61 64 3f 64 62 6d 5f 63 3d 41 4b 41 6d 66 2d 41 42 56 69 6a 42 69 39 6e 74 6d 6f 44 65 65 51 69 30 51 6a 74 66 34 41 4b 57 56 35 50 68 34 62 65 6e 52 6c 4e 72 33 32 6c 37 Data Ascii: ta\":{\"value\":\"3\",\"type\":534}},{\"data\":{\"value\":\"Donate Monthly\",\"type\":12}}]},\"event\":[{\"type\":2,\"method\":1,\"api\":[],\"url\":\"https:\\/\\/googleads.g.doubleclick.net\\/dbm\\/ad?dbm_c=AKAmf-ABVijBi9ntmoDeeQi0Qjtf4AKWV5Ph4benRlNr32l7
2024-04-25 19:25:54 UTC	16384	IN	Data Raw: 4c 63 4d 44 43 4e 30 62 5f 2d 75 56 4f 57 30 47 53 55 63 78 62 7a 56 79 64 62 63 44 75 44 5f 61 74 70 70 6a 69 34 79 48 69 4e 6d 30 53 36 6a 71 4a 50 6e 78 36 56 6e 68 4a 47 50 4d 69 5f 6c 66 59 4c 49 2f 5b 45 52 52 4f 52 43 4f 44 45 5d 5d 5d 3e 3c 2f 45 72 72 6f 72 3e 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 75 6e 69 66 69 65 64 2e 61 64 73 61 66 65 70 72 6f 74 65 63 74 65 64 2e 63 6f 6d 2f 76 65 76 65 6e 74 2f 69 6d 70 72 65 73 73 69 6f 6e 2f 38 35 34 35 38 35 2f 36 38 39 32 36 39 31 38 3f 78 73 49 64 3d 37 38 39 33 32 31 37 30 37 36 39 37 31 37 36 30 36 37 26 69 61 73 5f 78 61 70 70 62 3d 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 26 69 61 73 5f 78 61 64 75 72 3d 26 69 61 73 5f 64 73 70 49 44 3d 33 30 Data Ascii: LcMDCN0b_-uVOW0GSUcxbzVydbcDuD_atppji4yHiNm0S6jqJPnx6VnhJGPMi_lfYLI/[ERRORCODE]...</Error><Impression><![CDATA[https://unified.adsafeprotected.com/vevent/impression/854585/68926918?xsId=789321707697176067&ias_xappb=earnandexcel.com&ias_xadur=&ias_dspID=30
2024-04-25 19:25:54 UTC	16384	IN	Data Raw: 42 77 56 41 67 41 63 46 51 49 41 41 42 77 6d 6d 6f 5f 5f 67 77 51 56 42 68 55 49 4a 74 6a 5a 34 34 4d 45 46 74 71 79 6f 59 41 45 45 52 55 43 46 51 53 6d 74 42 55 57 74 42 55 57 74 42 55 57 74 42 55 57 74 42 55 57 74 42 55 57 74 42 55 57 74 42 55 41 48 42 77 73 46 6f 43 78 69 71 53 37 37 49 4f 74 4b 68 62 72 73 72 58 5a 35 2d 4b 41 35 36 55 42 41 41 41 57 71 74 71 59 67 41 51 57 5f 4d 47 62 67 41 51 57 73 4c 48 41 67 77 51 57 5f 72 44 41 67 77 51 56 47 42 77 55 76 67 51 55 5f 67 63 41 46 51 51 6d 74 42 55 57 74 42 55 57 74 42 55 52 4e 51 34 6d 74 42 55 30 41 67 41 73 4c 42 61 5a 38 64 58 55 78 6f 6e 4d 6d 39 49 42 46 71 6e 2d 7a 4f 5f 6c 68 37 75 44 35 41 45 41 46 6f 53 35 31 65 49 4d 42 69 69 71 32 70 69 41 42 42 62 38 77 5a 75 41 42 42 62 2d 73 4d 43 44 Data Ascii: BwVAgAcFQIAABwmmo__gwQVBhUIJtjZ44MEFtqyoYAEERUCFQSmtBUWtBUWtBUWtBUWtBUWtBUWtBUWtBUAHBwsFoCxiqS77IOtKhbrsrXZ5-KA56UBAAAWqtqYgAQW_MGbgAQWsLHAgwQW_rDAgwQVGBwUvgQU_gcAFQQmtBUWtBUWtBURNQ4mtBU0AgAsLBaZ8dXUxonMm9IBFqn-zO_lh7uD5AEAFoS51eIMBiiq2piABBb8wZuABBb-sMCD
2024-04-25 19:25:54 UTC	16384	IN	Data Raw: 66 6c 58 70 58 68 6e 77 67 35 45 41 36 41 76 50 51 5f 73 56 76 55 6f 55 64 64 76 61 7a 2d 61 67 6f 42 73 2d 6e 46 2d 5f 78 6d 37 71 34 36 45 34 66 4b 39 52 32 32 78 64 72 44 75 41 75 79 68 50 69 72 53 71 34 63 41 37 34 39 31 53 64 77 36 78 38 5a 70 42 74 59 64 5f 7a 41 7a 65 37 4b 74 71 39 66 2d 66 47 61 59 5a 4c 75 75 46 74 66 2d 46 45 5f 39 67 78 4e 6a 52 69 4f 7a 41 6e 55 34 56 59 57 6b 37 30 32 6f 6c 5a 75 76 7a 4a 36 38 53 44 33 6d 70 43 4a 5f 61 45 66 4c 48 66 7a 61 5a 42 31 6d 46 4e 49 4c 35 32 78 4d 71 45 46 6c 44 4c 31 56 62 4b 74 41 55 49 62 48 48 2d 43 41 57 68 67 4b 7a 39 34 78 67 43 7a 53 53 56 4c 52 38 45 42 42 33 6b 59 71 77 74 63 53 57 34 44 41 6b 54 48 31 57 37 67 32 53 57 34 59 46 66 57 52 6b 6a 51 61 6d 68 5f 57 62 64 64 76 2d 50 4c 5f Data Ascii: flXpXhnwg5EA6AvPQ_sVvUoUddvaz-agoBs-nF-_xm7q46E4fK9R22xdrDuAuyhPirSq4cA7491Sdw6x8ZpBtYd_zAze7Ktq9f-fGaYZLuuFtf-FE_9gxNjRiOzAnU4VYWk702olZuvzJ68SD3mpCJ_aEfLHfzaZB1mFNIL52xMqEFlDL1VbKtAUIbHH-CAWhgKz94xgCzSSVLR8EBB3kYqwtcSW4DAkTH1W7g2SW4YFfWRkjQamh_Wbddv-PL_
2024-04-25 19:25:55 UTC	16384	IN	Data Raw: 54 55 56 4b 64 30 35 50 51 55 45 75 4a 6d 52 31 63 6e 4d 39 65 48 6c 30 51 32 39 6c 4a 6d 4e 79 63 6d 56 73 63 6a 30 6d 5a 6e 42 68 50 54 59 31 4e 43 5a 77 59 32 30 39 4d 79 5a 32 59 7a 30 7a 4a 6e 4e 68 61 57 51 39 4d 6a 59 30 4e 54 56 6d 5a 54 4d 74 59 32 55 79 5a 69 30 30 4f 47 51 79 4c 54 67 7a 4d 7a 6b 74 59 32 55 31 5a 47 51 32 4d 57 56 6a 4d 57 59 31 4a 6d 6c 6a 64 44 31 56 62 6d 74 75 62 33 64 75 4a 6d 46 31 59 33 51 39 4d 53 5a 31 63 31 39 77 63 6d 6c 32 59 57 4e 35 50 54 45 74 4c 53 30 6d 61 57 30 39 4d 53 5a 74 59 7a 31 6d 4d 6a 4e 68 4e 54 64 69 4e 53 31 69 4d 44 41 78 4c 54 51 33 5a 6d 59 74 4f 44 5a 6d 5a 69 30 31 4d 54 59 34 4d 44 55 31 4e 6d 55 35 4f 44 6b 6d 59 57 4a 79 50 54 67 30 4d 54 51 32 4f 57 5a 6d 4c 54 41 32 5a 44 59 74 4e 47 4d Data Ascii: TUVKd05PQUEuJmR1cnM9eHl0Q29lJmNycmVscj0mZnBhPTY1NCZwY209MyZ2Yz0zJnNhaWQ9MjY0NTVmZTMtY2UyZi00OGQyLTgzMzktY2U1ZGQ2MWVjMWY1JmljdD1Vbmtub3duJmF1Y3Q9MSZ1c19wcml2YWN5PTEtLS0maW09MSZtYz1mMjNhNTdiNS1iMDAxLTQ3ZmYtODZmZi01MTY4MDU1NmU5ODkmYWJyPTg0MTQ2OWZmLTA2ZDYtNGM
2024-04-25 19:25:55 UTC	14072	IN	Data Raw: 5a 58 68 6a 61 47 46 75 5a 32 55 6d 5a 48 4e 77 50 54 45 31 4a 6d 52 68 61 54 31 75 59 6d 74 72 4f 47 70 74 4a 6d 52 6a 61 54 31 34 5a 48 4a 7a 65 57 30 7a 4a 6d 52 7a 59 6d 6b 39 4d 6a 67 79 4e 43 5a 6b 59 33 4a 70 50 54 52 79 62 58 4a 34 65 47 39 30 4a 6d 46 6b 64 6d 51 39 64 47 6c 6d 64 47 39 75 64 47 39 31 63 6d 6c 7a 62 53 35 6a 62 32 30 6d 5a 54 31 46 55 6c 4a 50 55 6c 39 55 55 6b 46 44 53 30 6c 4f 52 79 49 73 49 6d 6c 71 63 43 49 36 4d 43 77 69 61 57 5a 7a 49 6a 6f 77 4c 43 4a 68 64 48 52 75 64 58 4a 73 49 6a 6f 69 49 6e 30 73 49 6e 4e 6a 63 69 49 36 57 33 73 69 64 53 49 36 49 6d 68 30 64 48 42 7a 4f 69 38 76 61 57 52 7a 65 57 35 6a 4c 6e 4a 73 59 32 52 75 4c 6d 4e 76 62 53 38 7a 4f 54 55 33 4d 7a 59 75 5a 32 6c 6d 50 33 42 68 63 6e 52 75 5a 58 4a Data Ascii: ZXhjaGFuZ2UmZHNwPTE1JmRhaT1uYmtrOGptJmRjaT14ZHJzeW0zJmRzYmk9MjgyNCZkY3JpPTRybXJ4eG90JmFkdmQ9dGlmdG9udG91cmlzbS5jb20mZT1FUlJPUl9UUkFDS0lORyIsImlqcCI6MCwiaWZzIjowLCJhdHRudXJsIjoiIn0sInNjciI6W3sidSI6Imh0dHBzOi8vaWRzeW5jLnJsY2RuLmNvbS8zOTU3MzYuZ2lmP3BhcnRuZXJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.5	50315	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:54 UTC	738	OUT	GET /track/cmf/rubicon HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFGAEgASgCMgsI4uCk6Ifa8jwQBTgBWghwdWJtYXRpY2AC
2024-04-25 19:25:54 UTC	624	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:54 GMT Content-Length: 289 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=500c5aec-af13-42d6-a7ea-250f9438d1fe&gdpr=0&gdpr_consent=&expires=30 set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:25:54 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFGAEgAigCMgsI4uCk6Ifa8jwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 25 Apr 2025 19:25:54 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:25:54 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 67 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=500c5aec-af13-42d6-a7ea-250f9438d1fe&gdpr=0&gdpr_consent=&expires=30">https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=500c5aec-af13-42d6-a7ea-250f9438d1fe&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.5	50318	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:54 UTC	2084	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1978557987846830937 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; PugT=1714073152; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63
2024-04-25 19:25:54 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-1978557987846830937; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:53 GMT; path=/ Set-Cookie: PugT=1714073153; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:53 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.5	50317	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:54 UTC	2112	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; PugT=1714073152; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63
2024-04-25 19:25:54 UTC	760	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:53 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:53 GMT; path=/ Set-Cookie: PugT=1714073153; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:53 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.5	50316	54.239.38.253	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:54 UTC	695	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:54 UTC	891	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Apr 2024 19:25:54 GMT Content-Length: 0 Connection: close x-amz-rid: 92322X68D1FN2GNEJ750 Set-Cookie: ad-id=A0XINyouQ0Udlc-zDfFfqMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 19:25:54 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 19:25:54 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=A26nT0C4R--lAWfXBsxAgQ&rk=usync-other Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.5	50319	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:54 UTC	673	OUT	GET /cookie-sync/rp?bee_sync_partners=rp HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABL7E7MVVwAABRpRLTzpA; bitoIsSecure=ok
2024-04-25 19:25:54 UTC	385	IN	HTTP/1.1 200 OK cache-control: no-cache, must-revalidate content-type: image/gif Date: Thu, 25 Apr 2024 19:25:54 GMT expires: Fri, 01 Jan 1990 00:00:00 GMT p3p: CP="This is not a P3P policy! See https://beeswax.com/privacy for more info." pragma: no-cache Server: gunicorn strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 43 Connection: Close
2024-04-25 19:25:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.5	50322	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:57 UTC	2684	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=a1bf1886-0339-11ef-b50c-0785ba3fe1f5 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; PugT=1714073154
2024-04-25 19:25:57 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:57 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:57 GMT; path=/ Set-Cookie: PugT=1714073157; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:57 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.5	50308	35.211.233.246	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:57 UTC	730	OUT	GET /sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic HTTP/1.1 Host: a.sportradarserving.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:58 UTC	732	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 25 Apr 2024 19:25:58 GMT Location: https://a.sportradarserving.com/ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic Set-Cookie: zuuid=8dbe2711-fe17-445b-af0c-abd3de628187; path=/; expires=Thu, 24-Apr-2025 19:25:58 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: c=1714073158; path=/; expires=Thu, 24-Apr-2025 19:25:58 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_lu=1714073158; path=/; expires=Thu, 24-Apr-2025 19:25:58 GMT; domain=sportradarserving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.5	50327	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	1058	OUT	GET /sync?dsp_id=16&user_id=CAESENA8ZoFCtGuGdCfh5676he0&google_cver=1&ssp=the33across&bsw_param=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr_consent=&gdpr= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:25:59 UTC	514	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ssc-cms.33across.com/ps/?xi=10&us_privacy=&xu=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.5	50323	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	858	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpp%2Cpm&bee_sync_current_partner=syn&bee_sync_initiator=adx&bee_sync_hop_count=2 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABL7E7MVVwAABRpRLTzpA; bitoIsSecure=ok
2024-04-25 19:25:58 UTC	629	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:25:58 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AABL7E7MVVwAABRpRLTzpA&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AABL7E7MVVwAABRpRLTzpA; Domain=bidr.io; expires=Sun, 25 May 2025 15:25:58 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.5	50324	18.160.83.122	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	2639	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&pid=eWu57J4Q2sVgL&cb=1&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%2C%7B%22sd%22%3A%22content_2_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:59 UTC	474	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 1258 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:58 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 556e27b2376aefcd1536a5e3e2ddd0d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: Bb0FPk8vP4Q-gX1WiUkDyZFgJn1J2Bdh6HnjZgFeZjVlwGxqPl7T3A==
2024-04-25 19:25:59 UTC	1258	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 45 4f 64 65 66 7a 79 6a 6c 69 71 51 6e 45 48 76 71 4c 32 79 51 34 41 41 41 47 50 46 72 6a 46 69 67 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 43 4a 36 78 70 6d 22 2c 22 73 69 7a 65 22 3a 22 33 30 30 78 32 35 30 22 2c 22 6d 65 74 61 22 3a 5b 22 73 6c 6f 74 49 44 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 73 69 7a Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JEOdefzyjliqQnEHvqL2yQ4AAAGPFrjFigEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCJ6xpm","size":"300x250","meta":["slotID","mediaType","siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.5	50325	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	2688	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:2MKo2Xc81S04Jb5&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; PugT=1714073154
2024-04-25 19:25:58 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:58 GMT; path=/ Set-Cookie: PugT=1714073158; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:58 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.5	50332	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	727	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 962 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sc_at=v2\|H4sIAAAAAAAAAE3GwQ3AIAwDwIki2ZgmwDaVQqZg+PbJ53Quz/dBGFmyPuA2E7JUtr0nG6sOOxbjN0SNcxUfu5uW6EAAAAA=
2024-04-25 19:25:58 UTC	962	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 65 30 34 37 63 65 39 39 2d 38 62 36 64 2d 34 30 30 66 2d 39 37 33 63 2d 37 34 36 33 35 36 63 37 34 64 37 37 22 2c 22 6c 63 22 3a 22 36 35 66 63 39 39 37 35 2d 62 62 33 62 2d 34 30 38 35 2d 61 35 34 65 2d 66 31 30 39 37 31 64 30 31 33 33 37 22 2c 22 6c 73 22 3a 22 32 33 36 34 32 65 65 34 2d 39 35 32 31 2d 34 66 38 39 2d 38 37 35 31 2d 33 66 34 66 33 61 61 39 36 33 61 39 22 2c 22 72 22 3a 22 65 35 30 66 61 34 66 64 2d 66 62 65 34 2d 34 63 34 39 2d 62 61 62 38 2d 36 30 62 32 62 35 30 38 30 65 30 30 22 2c 22 73 73 22 3a 22 62 63 32 64 63 31 65 31 2d 63 30 34 33 2d 34 31 31 35 2d 62 30 30 33 2d 31 30 38 36 33 62 61 66 64 62 36 39 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"e047ce99-8b6d-400f-973c-746356c74d77","lc":"65fc9975-bb3b-4085-a54e-f10971d01337","ls":"23642ee4-9521-4f89-8751-3f4f3aa963a9","r":"e50fa4fd-fbe4-4c49-bab8-60b2b5080e00","ss":"bc2dc1e1-c043-4115-b003-10863bafdb69","df":true,"s
2024-04-25 19:25:58 UTC	388	IN	HTTP/1.1 200 OK date: Thu, 25 Apr 2024 19:25:58 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.5	50333	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	710	OUT	POST /openrtb/pbjs?s=179872 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 3744 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; CMPS=957; CMPRO=957; receive-cookie-deprecation=1
2024-04-25 19:25:58 UTC	3744	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 38 62 30 63 33 39 37 31 64 30 35 39 64 39 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 45 61 72 6e 20 61 6e 64 20 45 78 63 65 6c 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 Data Ascii: {"id":"38b0c3971d059d9","site":{"page":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/","domain":"earnandexcel.com","publisher":{"domain":"earnandexcel.com"},"name":"Earn and Excel","cat":["IAB9"],"sectioncat":["IAB9"],"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.5	50328	216.22.16.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	898	OUT	GET /redir/?partnerid=141&partneruserid=fi18fRxtHfSS0OelCAGOe32Ow&gdpr=0&gdpr_consent=&redirurl=https%3A%2F%2Fa.audrte.com%2Fmatch%3Fuid%3DSMART_USER_ID%26p%3DM501991648%26r%3Dhttps%253A%252F%252Fa.audrte.com%252Fp%253F HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659; csync=117:f3b7d652e007eae21eec0dd71ae622c5\|135:TAM_OK
2024-04-25 19:25:58 UTC	529	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 19:25:58 GMT cache-control: no-cache,no-store location: https://a.audrte.com/match?uid=5382283141381983659&p=M501991648&r=https%3A%2F%2Fa.audrte.com%2Fp%3F&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=117:f3b7d652e007eae21eec0dd71ae622c5\|135:TAM_OK\|141:fi18fRxtHfSS0OelCAGOe32Ow; expires=Fri, 25 Apr 2025 19:25:58 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.5	50326	34.200.31.123	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	893	OUT	GET /pbmtc.gif?puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=4df7d229-f8a3-4c53-bb16-fd8aeed54a56; ss=jTJs01KclCE4W4cXxGyytvkK3AWkRc%2BQg42GR1GkXZdVKjDchTOGCV88GqqLLnIpizFIV5rtf3c%2FBnXDcvQstQ%3D%3D
2024-04-25 19:25:58 UTC	468	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 42 Connection: close Server: Kestrel Set-Cookie: UID=4df7d229-f8a3-4c53-bb16-fd8aeed54a56; expires=Fri, 25 Apr 2025 19:25:58 GMT; path=/; secure; samesite=none Set-Cookie: ss=o9badYl0nRhy23zrKCJ%2FqCeIdW8G1TS%2Bnx0iRnTHsnSlMSaaNyeF7nvQTgoyX71%2B0zir%2Bk5bVBjMkv0SXTx94%2BUKd6GzJnT37r9WFszw638%3D; expires=Fri, 25 Apr 2025 19:25:58 GMT; path=/; secure; samesite=none
2024-04-25 19:25:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.5	50331	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	817	OUT	GET /w/1.0/sd?id=537073026&val=ZiquQIPQzJS1XtQhuYTwyGhu HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:58 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.5	50329	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	864	OUT	GET /w/1.0/sd?id=537072977&val=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:58 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.5	50342	18.160.78.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	982	OUT	GET /b?c1=2&c2=27053452&cs_fpcu=da71df78ddbe405581bd0f39b44fe028&cs_it=b9&cv=4.6.0%2B2403270845&ns__t=1714073152689&ns_c=UTF-8&cs_cfg=110&gdpr=0&cs_ucc=1&cs_cmp_id=46&cs_cmp_rt=0&gpp_sid=2&cs_cmp_av=1.1&c7=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&c8=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:58 UTC	1170	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 25 Apr 2024 19:25:58 GMT Location: /b2?c1=2&c2=27053452&cs_fpcu=da71df78ddbe405581bd0f39b44fe028&cs_it=b9&cv=4.6.0%2B2403270845&ns__t=1714073152689&ns_c=UTF-8&cs_cfg=110&gdpr=0&cs_ucc=1&cs_cmp_id=46&cs_cmp_rt=0&gpp_sid=2&cs_cmp_av=1.1&c7=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&c8=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&c9= set-cookie: UID=13913180f767854795a6f3b1714073158; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=11F13180f782b54795a6d881714073158; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=13913180f767854795a6f3b1714073158; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 a52298b9a4983302c93091e39cb79af2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: 9oQrJqQeNKdcsoxNc0GMkB71VuWIawrE93pKyq4TcboaOTBXwXzUAA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.5	50336	35.186.253.211	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	792	OUT	GET /sync/dds?ox_sc=1&ox_init=1 HTTP/1.1 Host: rtb.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:58 UTC	309	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: image/gif P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.5	50341	34.120.135.53	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	682	OUT	GET /esp?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&rid=esp HTTP/1.1 Host: oajs.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8 If-None-Match: W/"55-v3VHThBbfrAc4tbonWnFMMiyvIs"
2024-04-25 19:25:58 UTC	278	IN	HTTP/1.1 304 Not Modified X-Powered-By: Express Vary: Origin Access-Control-Allow-Credentials: true ETag: W/"55-v3VHThBbfrAc4tbonWnFMMiyvIs" Date: Thu, 25 Apr 2024 19:25:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.5	50335	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	817	OUT	GET /w/1.0/sd?id=537073026&val=ZiquQXeRy6jM9IHPeZYNrP2I HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:58 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.5	50346	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	587	OUT	GET /w/1.0/sd?id=537148856&val=ZiquOwAASpL9rwAi&_test=ZiquOwAASpL9rwAi HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:58 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.5	50349	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	710	OUT	POST /openrtb/pbjs?s=179872 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 2650 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; CMPS=957; CMPRO=957; receive-cookie-deprecation=1
2024-04-25 19:25:58 UTC	2650	OUT	Data Raw: 7b 22 69 64 22 3a 22 33 38 62 30 63 33 39 37 31 64 30 35 39 64 39 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 7d 2c 22 6e 61 6d 65 22 3a 22 45 61 72 6e 20 61 6e 64 20 45 78 63 65 6c 22 2c 22 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 73 65 63 74 69 6f 6e 63 61 74 22 3a 5b 22 49 41 42 39 22 5d 2c 22 Data Ascii: {"id":"38b0c3971d059d9","site":{"page":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/","domain":"earnandexcel.com","publisher":{"domain":"earnandexcel.com"},"name":"Earn and Excel","cat":["IAB9"],"sectioncat":["IAB9"],"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.5	50340	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	848	OUT	GET /v3/pr?exlist=gg_an-db5&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:59 UTC	451	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 680 Connection: close x-amz-rid: TSJAWEDKJQ0E1SRB83E4 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:59 UTC	680	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 20 2f 3e 0a 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 63 32 66 35 36 31 35 65 2d 62 62 62 36 2d 34 39 31 66 2d 62 33 30 65 2d 39 38 65 36 61 64 38 66 35 62 34 30 22 3e 20 62 6f 64 79 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 7d 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 20 73 Data Ascii: <html><head><meta name="referrer" content="no-referrer" /><style nonce="c2f5615e-bbb6-491f-b30e-98e6ad8f5b40"> body { background-color:transparent } </style></head><body><iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.5	50345	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	697	OUT	GET /ecm3?id=LVFMWCG3-S-CYEQ&ex=d-rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:59 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 7F7XEY6DTPDYQ6P010R9 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.5	50337	34.204.109.177	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	702	OUT	GET /s/53233?bidder_id=183658&bidder_uuid=8019790904257964151 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgjSARDiFw; lidid=16375e6d-7183-43c9-8be0-eb3cedad6305
2024-04-25 19:25:58 UTC	628	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Length: 0 Connection: close Location: https://live.rezync.com/sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=16375e6d-7183-43c9-8be0-eb3cedad6305 Set-Cookie: _li_ss=ChAKBgjSARDiFwoGCKIBEOIX; Max-Age=2592000; Expires=Sat, 25 May 2024 19:25:58 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=16375e6d-7183-43c9-8be0-eb3cedad6305; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:25:58 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.5	50350	207.65.37.179	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	2621	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 3732 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; PugT=1714073157
2024-04-25 19:25:58 UTC	3732	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 34 30 37 33 31 35 32 36 36 39 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 34 38 62 38 37 30 64 36 30 34 31 32 39 62 33 22 2c 22 74 61 67 69 64 22 3a 22 73 69 64 65 62 61 72 5f 62 74 66 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 33 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 32 32 39 35 32 31 32 32 39 36 31 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2f 73 74 69 63 6b 79 5f 73 69 64 65 62 61 72 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 32 32 39 35 32 31 32 32 39 36 31 2f Data Ascii: {"id":"1714073152669","at":1,"cur":["USD"],"imp":[{"id":"48b870d604129b3","tagid":"sidebar_btf","bidfloor":0.3,"secure":1,"ext":{"data":{"pbadslot":"/1030006,22952122961/earnandexcel/sticky_sidebar","adserver":{"name":"gam","adslot":"/1030006,22952122961/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.5	50334	74.119.117.16	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	924	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145
2024-04-25 19:25:58 UTC	531	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 19:25:58 GMT server: Kestrel cache-control: no-cache expires: Thu, 25 Apr 2024 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 823473 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.5	50348	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	480	OUT	GET /usersync?b=bsw&i=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:58 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:58 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.5	50347	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	431	OUT	GET /usersync?b=sad&i=5382283141381983659 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:59 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.5	50339	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	787	OUT	GET /usersync?b=pbm&i=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:58 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:58 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.5	50338	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	669	OUT	GET /usersync?b=mag&i=LVFMWCG3-S-CYEQ HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:58 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:58 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.5	50351	3.226.121.246	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	854	OUT	POST /header/auction?lib=prebid&v=8.44.0&referrer=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 4970 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:25:58 UTC	4970	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 4d 65 64 69 61 76 69 6e 65 5f 72 6f 6e 5f 73 69 64 65 62 61 72 5f 62 74 66 5f 33 30 30 78 36 30 30 5f 50 72 65 62 69 64 22 2c 22 66 6c 6f 6f 72 22 3a 30 2e 32 39 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 32 35 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 62 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 32 32 39 35 32 31 32 32 39 36 31 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2f 73 74 69 63 6b 79 5f 73 69 64 65 62 61 72 22 2c 22 61 64 73 65 72 76 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 67 61 6d 22 2c 22 61 64 73 6c 6f 74 22 3a 22 2f 31 30 33 30 30 30 36 2c 32 32 39 Data Ascii: {"imp":[{"id":0,"tagid":"Mediavine_ron_sidebar_btf_300x600_Prebid","floor":0.29,"banner":{"format":[{"w":300,"h":250}]},"fpd":{"context":{"data":{"pbadslot":"/1030006,22952122961/earnandexcel/sticky_sidebar","adserver":{"name":"gam","adslot":"/1030006,229

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.5	50355	34.36.216.150	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	724	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=20d6f965-a0e4-4486-bb52-f6976948d853#1714073151634; _ssuma=eyIxNyI6MTcxNDA3MzE1MzIxMH0
2024-04-25 19:25:59 UTC	865	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=20d6f965-a0e4-4486-bb52-f6976948d853#1714073151634; Domain=.sitescout.com; Expires=Fri, 25-Apr-2025 19:25:59 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxNDA3MzE1OTEyMSwiMTciOjE3MTQwNzMxNTMyMTB9; Domain=.sitescout.com; Expires=Sat, 25-May-2024 19:25:59 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 25 Apr 2024 19:25:58 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.5	50353	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	829	OUT	GET /w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:59 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.5	50356	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:58 UTC	783	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:25:59 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:59 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:25:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:25:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:25:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.5	50385	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	741	OUT	GET /pixel?google_nid=open&google_hm=yyw-G_1xjP2o2k9GuzN3_Q==&ox_sc=1&ox_init=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:59 UTC	618	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1 Date: Thu, 25 Apr 2024 19:25:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 249 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	249	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2e 6f 70 65 6e 78 2e 6e 65 74 2f 73 79 6e 63 2f 64 64 73 3f 6f 78 5f 73 63 3d 31 26 61 6d 70 3b 6f 78 5f 69 6e 69 74 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.5	50362	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	1394	OUT	GET /usersync/redirect?partner=pubmatic&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:25:59 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.5	50393	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2282	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; PugT=1714073154
2024-04-25 19:25:59 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:57 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.5	50371	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2314	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTgwNiZ0bD01MTg0MDA=&piggybackCookie=uid:BB7435D573F24117990D5894FB5D3774 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; PugT=1714073154
2024-04-25 19:25:59 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:58 GMT; path=/ Set-Cookie: PugT=1714073158; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:58 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.5	50400	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	691	OUT	GET /ecm3?ex=rubiconprojectHMT&id=aabZheBiTA-2vl2B5W91eQ HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:59 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2NRKKDS2NE93KRN71E66 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.5	50388	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	864	OUT	GET /w/1.0/sd?id=537072977&val=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:59 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.5	50352	3.218.216.11	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	756	OUT	POST /ingest/topics?fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f HTTP/1.1 Host: pdmp.dcapi.dmp.3lift.com Connection: keep-alive Content-Length: 244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://earnandexcel.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:25:59 UTC	244	OUT	Data Raw: 7b 22 6f 70 65 5f 63 68 61 6e 6e 65 6c 22 3a 22 70 64 6d 70 2d 67 6f 6f 67 6c 65 2d 74 6f 70 69 63 73 2d 74 61 67 67 65 64 22 2c 22 6f 70 65 5f 65 76 65 6e 74 5f 74 79 70 65 22 3a 22 74 6f 70 69 63 73 22 2c 22 6f 70 65 5f 69 74 65 6d 5f 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 2f 62 6c 6f 67 2f 68 6f 77 2d 74 6f 2d 61 64 64 2d 61 2d 6c 65 67 65 6e 64 2d 69 6e 2d 65 78 63 65 6c 2d 61 2d 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 2d 67 75 69 64 65 2f 22 2c 22 6f 70 65 5f 74 65 6e 61 6e 74 22 3a 22 62 34 22 2c 22 6f 70 65 5f 75 73 65 72 5f 69 64 22 3a 22 66 70 69 64 3a 65 32 63 64 62 63 32 35 2d 65 65 64 63 2d 34 65 39 39 2d 38 66 62 66 2d 63 64 63 34 64 33 35 30 36 35 30 66 22 7d Data Ascii: {"ope_channel":"pdmp-google-topics-tagged","ope_event_type":"topics","ope_item_uri":"https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/","ope_tenant":"b4","ope_user_id":"fpid:e2cdbc25-eedc-4e99-8fbf-cdc4d350650f"}
2024-04-25 19:25:59 UTC	256	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close Access-Control-Allow-Origin: https://earnandexcel.com Access-Control-Allow-Credentials: true Server: akka-http/10.2.8
2024-04-25 19:25:59 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.5	50375	207.65.37.184	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2336	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=500c5aec-af13-42d6-a7ea-250f9438d1fe&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; PugT=1714073154
2024-04-25 19:25:59 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:59 GMT; path=/ Set-Cookie: PugT=1714073159; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.5	50372	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2340	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEM-j6CSoDg41BAFzi37WM4U&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; PugT=1714073154
2024-04-25 19:25:59 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:58 GMT; path=/ Set-Cookie: PugT=1714073158; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:58 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.5	50396	207.65.37.181	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2679	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=38137443&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; PugT=1714073157; KTPCACOOKIE=YES
2024-04-25 19:25:59 UTC	1136	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156423:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 25 Apr 2024 19:25:59 GMT Transfer-Encoding: chunked Connection: close
2024-04-25 19:25:59 UTC	2290	IN	Data Raw: 38 65 36 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 62 70 69 2e 72 74 61 63 74 69 76 61 74 65 2e 63 6f 6d 2f 74 61 67 2f 3f 69 64 3d 32 30 39 30 39 26 75 73 65 72 5f 69 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 35 31 45 41 44 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 33 33 37 31 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 30 46 37 42 35 Data Ascii: 8e6PubMatic.loadAsyncImagePixel('https://bpi.rtactivate.com/tag/?id=20909&user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.tapad.com/idsync/ex/receive?partner_id=3371&partner_device_id=0F7B5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.5	50399	207.65.37.182	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2566	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; PugT=1714073157
2024-04-25 19:25:59 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:59 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1714073159; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.5	50401	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	747	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LVFMWCG3-S-CYEQ HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:25:59 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:59 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:25:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:25:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:25:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.5	50391	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	824	OUT	GET /sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA& HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:25:59 UTC	914	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1210 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:59 GMT; Secure; SameSite=None; Partitioned; Cache-Control: no-cache, no-store, must-revalidate set-cookie: sync=CgoIoQEQuYzjtfExCgoI5gEQuYzjtfExCgoIhwIQuYzjtfExCgoItwIQuYzjtfExCgkIOhC5jOO18TEKCQgbELmM47XxMQoKCIwCELmM47XxMQoKCKwCELmM47XxMQoKCK0CELmM47XxMQoJCF8QuYzjtfEx; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:59 GMT; Path=/sync; Domain=.3lift.com; Secure; SameSite=None set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:25:59 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:25:59 UTC	1210	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 35 38 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 42 7a 77 7e 31 2d 2d 2d 7e 42 71 67 41 41 41 41 41 41 67 41 26 67 70 70 5f 73 69 64 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 31 36 31 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 73 79 6e 63 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 Data Ascii: <!DOCTYPE html><html><body><img id=58 src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid="><img id=161 src="https://eb2.3lift.com/ebda?sync=1&gdpr=0&gdpr_consent="><img id

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.5	50357	185.184.8.90	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	678	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=c0dNMeS67bcZWfBa7Ddv_1714073147813; ts=1714073147
2024-04-25 19:25:59 UTC	482	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:25:59 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=pubmatic&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 25 Apr 2024 19:25:59 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.5	50414	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	841	OUT	GET /w/1.0/sd?id=540245193&val=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:25:59 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.5	50363	104.18.25.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	931	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 2252 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aSnoeUN3IdqSIdwDTjD97joEMETVq3wsDU9b6MIY; path=/; domain=.tribalfusion.com; expires=Wed, 24-Jul-2024 19:25:59 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aSnoeUN3IdqSIdwDTjD97joEMETVq3wsDU9b6MIY; path=/; domain=.tribalfusion.com; expires=Wed, 24-Jul-2024 19:25:59 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a0b8dd6d1a44d2-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:59 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-04-25 19:25:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.5	50403	34.199.195.87	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	707	OUT	GET /api/v1/dsync/Martin?exid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=7c5a292e-89b9-0bf7-5209-01cf0fa3be45
2024-04-25 19:25:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=7c5a292e-89b9-0bf7-5209-01cf0fa3be45; Path=/; Domain=kargo.com; Expires=Fri, 25 Apr 2025 19:25:59 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-25 19:25:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.5	50416	52.7.87.144	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	760	OUT	GET /d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=${ADELPHIC_CUID}&expires=30 HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649
2024-04-25 19:25:59 UTC	488	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:25:59 GMT Location: https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=5b5548e1-f48f-42a5-987f-5a866f7c8916&expires=30 Set-Cookie: cu=5b5548e1-f48f-42a5-987f-5a866f7c8916\|1714073147649; Path=/; Domain=ipredictive.com; Expires=Fri, 25 Apr 2025 19:25:59 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 67b2036e-697d-4088-946f-3c814d59a906 Content-Length: 144 Connection: Close
2024-04-25 19:25:59 UTC	144	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 31 37 31 34 39 26 61 6d 70 3b 6e 69 64 3d 32 38 36 31 26 61 6d 70 3b 70 75 74 3d 35 62 35 35 34 38 65 31 2d 66 34 38 66 2d 34 32 61 35 2d 39 38 37 66 2d 35 61 38 36 36 66 37 63 38 39 31 36 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://pixel.rubiconproject.com/tap.php?v=17149&nid=2861&put=5b5548e1-f48f-42a5-987f-5a866f7c8916&expires=30">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.5	50377	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	1040	OUT	GET /match?bidder_id=33&external_user_id=1072080661979746722290&ts=1714073152&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:59 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:25:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.5	50398	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	999	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=3473854422107831099 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:59 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:25:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.5	50378	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	1052	OUT	GET /match?bidder_id=99&external_user_id=y-sbgedPRE2uGCHaiyczZu1yO_Tokoo8Hh%7EA&ts=1714073153&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:25:59 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:25:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.5	50415	35.211.233.246	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	823	OUT	GET /ul_cb/sync?ssp=bidswitch&bidswitch_ssp_id=pubmatic HTTP/1.1 Host: a.sportradarserving.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuuid=8dbe2711-fe17-445b-af0c-abd3de628187; c=1714073158; zuuid_lu=1714073158
2024-04-25 19:25:59 UTC	903	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 25 Apr 2024 19:25:59 GMT Location: https://x.bidswitch.net/sync?dsp_id=409&expires=14&user_group=1&user_id=8dbe2711-fe17-445b-af0c-abd3de628187&ssp=pubmatic Set-Cookie: zuuid=8dbe2711-fe17-445b-af0c-abd3de628187; path=/; expires=Thu, 24-Apr-2025 19:25:59 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_lu=1714073159; path=/; expires=Thu, 24-Apr-2025 19:25:59 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_k=1; path=/; expires=Thu, 24-Apr-2025 19:25:59 GMT; domain=sportradarserving.com; samesite=none; secure Set-Cookie: zuuid_k_lu=1714073159; path=/; expires=Thu, 24-Apr-2025 19:25:59 GMT; domain=sportradarserving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.5	50419	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	727	OUT	GET /pixel?google_nid=rp&google_hm=TFZGTVdDRzMtUy1DWUVR&google_push= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:25:59 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:25:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.5	50370	8.28.7.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2280	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-_lSRfHxE2uVwioFwy1BptKe04y_kGWo-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; pi=0:4; SPugT=1714073152; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; PugT=1714073154
2024-04-25 19:25:59 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:58 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1714073158; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:58 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.5	50410	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	751	OUT	GET /712188.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=XeU/dIO6VQPmZz936F67MWTAMJYkoJy+u/LHJPhouew=; pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAA=
2024-04-25 19:25:59 UTC	792	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=YRTeF56YygIqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=; Path=/; Domain=rlcdn.com; Expires=Fri, 25 Apr 2025 19:25:59 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi46wEQCw==; Path=/; Domain=rlcdn.com; Expires=Mon, 24 Jun 2024 19:25:59 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.5	50411	34.102.243.38	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	1680	OUT	GET /tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Hobbies%20%26%20Interests%22%2C%22subcategory%22%3A%22Hobbies%20%26%20Interests%22%2C%22liveramp_idl%22%3Anull%7D HTTP/1.1 Host: feed.pghub.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	1305	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:59 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Location: https://pandg.tapad.com/tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Hobbies%20%26%20Interests%22%2C%22subcategory%22%3A%22Hobbies%20%26%20Interests%22%2C%22liveramp_idl%22%3Anull%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.5	50407	18.160.10.47	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	718	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 53b70ac9dc46d1c13992b291cf22a9aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: evlRfwgkawmDzIVQRZu_VbOX1gmHGz3mbMirWMGvAAi3IERPLQxDvQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.5	50409	38.68.201.140	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	604	OUT	GET /sn.ashx?&gdpr=0&gdpr_consent= HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	720	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CAB_1148B1422_6EA26C92&r=https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R35CAB_1148B1422_6EA26C92.1.0000000000000000662AAE47; domain=mxptint.net; expires=Sat, 25-Apr-2026 19:25:59 GMT; path=/; secure; SameSite=None Date: Thu, 25 Apr 2024 19:25:58 GMT Connection: close Content-Length: 302 Strict-Transport-Security: max-age=-397077959; includeSubDomains
2024-04-25 19:25:59 UTC	302	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 71 63 7a 30 78 4a 6d 4e 76 5a 47 55 39 4d 6a 63 30 4e 43 5a 30 62 44 30 78 4e 54 63 32 4f 44 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 52 33 35 43 41 42 5f 31 31 34 38 42 31 34 32 32 5f 36 45 41 32 36 43 39 32 26 61 6d 70 3b 72 3d 68 74 74 70 73 3a 2f 2f 70 6d 70 2e 6d 78 70 74 69 6e 74 2e 6e 65 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CAB_1148B1422_6EA26C92&r=https://pmp.mxptint.net

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.5	50420	74.119.117.16	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	924	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145
2024-04-25 19:25:59 UTC	531	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 19:25:59 GMT server: Kestrel cache-control: no-cache expires: Thu, 25 Apr 2024 00:00:00 GMT location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 795528 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.5	50383	74.121.140.211	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	872	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	708	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master iad iad-pixel-x4 config_version:"2876" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=dcc8662a-ae47-4c00-aeb9-bcbf2ebffa3f; domain=.mathtag.com; path=/; expires=Fri, 23-May-2025 19:25:59 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:dcc8662a-ae47-4c00-aeb9-bcbf2ebffa3f&gdpr=0&gdpr_consent= Expires: Thu, 25 Apr 2024 19:25:58 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.5	50412	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	656	OUT	GET /merge?pid=80&3pid=LVFMWCG3-S-CYEQ HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl
2024-04-25 19:25:59 UTC	614	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LVFMWCG3-S-CYEQ; Path=/; Domain=.lijit.com; Expires=Fri, 25-Apr-2025 19:25:59 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl; Path=/; Domain=.lijit.com; Expires=Fri, 25-Apr-2025 19:25:59 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-25 19:25:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.5	50369	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	713	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	632	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:26:00 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-58d18be8-46c4-4198-8cc8-c357e4185e1b-005%22%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Fri, 25 Apr 2025 19:26:00 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/pubmatic?zcc=1&cb=1714073160082 etag: RX58d18be846c441988cc8c357e4185e1b005 connection: close
2024-04-25 19:25:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.5	50384	69.90.254.78	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	27	IN	HTTP/1.1 204 No Content
2024-04-25 19:25:59 UTC	695	OUT	GET /tum?umid=6 HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	27	IN	HTTP/1.1 204 No Content
2024-04-25 19:26:02 UTC	763	OUT	GET /tum?umid=4&uid=CAESEK4mJjuwxR52UqdS6iFW38Q&google_cver=1&google_push=AXcoOmSducI3Q_G57pmt5HZHSaqRu1Ry0TqJRYRi0M6YMbvITilq9CknEDRzzYGw71Ec90jrPyT1dCQtsAYZo__1UCS-xa53UCU HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	27	IN	HTTP/1.1 204 No Content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.5	50404	52.21.82.215	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	648	OUT	GET /sync?pid=187&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.bfmio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	73	IN	HTTP/1.1 204 Date: Thu, 25 Apr 2024 19:25:58 GMT Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.5	50406	3.214.176.164	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	615	OUT	GET /CookieSyncPubMatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	472	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/plain Content-Length: 0 Connection: close Set-Cookie: adtheorent[cuid]=cuid_a56566c3-0339-11ef-8c8e-128f70269da3; path=/; domain=.adentifi.com; expires=25 Apr 2026 19:25:59 Z; SameSite=None; Secure; version=1; path=/ Set-Cookie: adtheorent-legacy[cuid]=cuid_a56566c3-0339-11ef-8c8e-128f70269da3; path=/; domain=.adentifi.com; expires=25 Apr 2026 19:25:59 Z; Secure; version=1; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.5	50408	52.20.151.97	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	659	OUT	GET /map/c=14701/tp=MTAI/tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	457	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.2.97 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://bcp.crwdcntrl.net/map/ct=y/c=14701/tp=MTAI/tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7/gdpr=0/gdpr_consent= Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.5	50402	34.225.69.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	659	OUT	GET /insync?vxii_pid=10067&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	570	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 211 Connection: close Location: https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=fd088d8c-f63e-4f27-85bc-7c0a8a324fab P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImZkMDg4ZDhjLWY2M2UtNGYyNy04NWJjLTdjMGE4YTMyNGZhYiIsImwiOjE3MTQwNzMxNTk0NzIsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Thu, 25 Apr 2024 19:25:59 GMT; Max-Age=17280000; Secure; SameSite=None
2024-04-25 19:25:59 UTC	211	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 69 6e 73 79 6e 63 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 35 31 45 41 44 37 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 31 30 30 36 37 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 66 64 30 38 38 64 38 63 2d 66 36 33 65 2d 34 66 32 37 2d 38 35 62 63 2d 37 63 30 61 38 61 33 32 34 66 61 62 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/insync?gdpr=0&gdpr_consent=&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=fd088d8c-f63e-4f27-85bc-7c0a8a324fab">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.5	50386	35.214.250.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	840	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	403	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=da4307ac-d416-4756-a7a8-059d375d6184; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Thu, 25-Jul-2024 19:25:59 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 content-length: 0 date: Thu, 25 Apr 2024 19:25:59 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.5	50421	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	787	OUT	GET /usersync?b=pbm&i=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:25:59 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:25:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.5	50418	54.239.38.253	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	698	OUT	GET /s/ecm3?ex=rubiconprojectHMT&id=A26nT0C4R--lAWfXBsxAgQ HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:25:59 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: PW5A7WEEXX8V7KWYK722 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:25:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.5	50422	216.22.16.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	1080	OUT	GET /redir?partneruserid=AABL7E7MVVwAABRpRLTzpA&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dpp%252Cpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659; csync=117:f3b7d652e007eae21eec0dd71ae622c5\|135:TAM_OK\|141:fi18fRxtHfSS0OelCAGOe32Ow
2024-04-25 19:25:59 UTC	628	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 19:25:59 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=pp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=5382283141381983659&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=117:f3b7d652e007eae21eec0dd71ae622c5\|127:AABL7E7MVVwAABRpRLTzpA\|135:TAM_OK\|141:fi18fRxtHfSS0OelCAGOe32Ow; expires=Fri, 25 Apr 2025 19:25:59 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
539	192.168.2.5	50387	69.194.240.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	713	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	632	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:26:01 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%2C%22zdxidn%22%3A%221508%22%7D; path=/; expires=Fri, 25 Apr 2025 19:26:01 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/pubmatic?zcc=1&cb=1714073161659 etag: RX01b099a217ee411887d581f28ff0ec22005 connection: close
2024-04-25 19:25:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.5	50380	104.18.25.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	933	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 1443 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aHnoeUolXVyQuWxdIZcl6XDVHQdUGI0sadk9b69Aq; path=/; domain=.tribalfusion.com; expires=Wed, 24-Jul-2024 19:25:59 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aHnoeUolXVyQuWxdIZcl6XDVHQdUGI0sadk9b69Aq; path=/; domain=.tribalfusion.com; expires=Wed, 24-Jul-2024 19:25:59 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a0b8df5f3cadac-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:25:59 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-04-25 19:25:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.5	50366	74.121.140.211	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	872	OUT	GET /sync/img?mt_exid=3&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA%3D%3D%26piggybackCookie%3Duid%3A%5BMM_UUID%5D HTTP/1.1 Host: sync.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	708	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master iad iad-pixel-x2 config_version:"2876" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=da06662a-ae47-4d00-8ee1-89aafbf1cebe; domain=.mathtag.com; path=/; expires=Fri, 23-May-2025 19:25:59 GMT; SameSite=None; Secure location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe&gdpr=0&gdpr_consent= Expires: Thu, 25 Apr 2024 19:25:58 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.5	50382	82.145.213.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUdae9af279efa464e903ac100c91bf658 Pragma: no-cache Set-Cookie: UID=OPUdae9af279efa464e903ac100c91bf658; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-04-25 19:25:59 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 64 61 65 39 61 66 32 37 39 65 66 61 34 36 34 65 39 30 33 61 63 31 30 30 63 39 31 62 66 36 35 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUdae9af279efa464e903ac100c91bf658">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.5	50427	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	4163	OUT	GET /gampad/ads?pvsid=855858948973280&correlator=2238754748989985&eid=95331444%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404220101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Cadhesion&enc_prev_ius=%2F0%2F1%2F2&prev_iu_szs=728x90%7C970x90%7C468x60%7C320x100&ifi=1&sfv=1-0-40&fsbs=1&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1714073158305&lmt=1714073114&adxs=-12245933&adys=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=-1&ucis=1&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&vis=1&psz=728x-1&msz=0x-1&fws=640&ohw=0&ga_vid=1040263935.1714073125&ga_sid=1714073158&ga_hid=1167203519&ga_fc=true&td=1&topics=1&tps=1&htps=10&a3p=EhkKCnVpZGFwaS5jb20YwpzitfExSABSAghkEocBCgphbWF6b24uY29tEnA3Ym9EUmdpSkZEeUFiMHpuSVBKOTZQNm91U2RhRGNqQ3lMRWR0ak8vd3dRMkdybi83RnBiVnRyRTk2alZEN1ZDZU5HNVZmL2YwZTdXZ0x3NnV1RFMwOTdqNGVVSWtZTGNhU2hyWm0zWTZEWjd3N20zGJbR4rXxMUgAEt4BCg5lc3AuY3JpdGVvLmNvbRLCAW9fYmR6Vjh3YlNVeVFrSjZhRGgyVUVoSmVYSndlblEwVmxGUVVHY2xNa0pZY0V0UmIzSkljelUyVmpkRmNFdHFUREpyVEhaeU9ISkJOVFJqWXpSRVozSjFXa3BMWWtkcU5ITTNhRmRNYldaSE5VOW5ZamRMVm5wUFNrWTBNeVV5UW5KVmIwZFJObHB2VW1OdmNqTk5XVVppSlRKQ2NHa3pValZyUVZJbE1rSlJKVEpDWW1SM2NFVTJPV0ZMUnpSeFNnGJW74rXxMUgAEoICCghydGJob3VzZRLsAWFsYkE3d3FqMFZDaG5VU1ZsdTRRWGxuOHkyaEFOWUNBZHdvSUZIb3l3SDllUTNRTi93c3dab1c2Q2hwNGRJelA2Tm4wN1dBUkRISmNSMzlqcWM2S1pOdHJFM0U4akFZa1NkTTkzMVFCVVpDNTBmNzVDNGw1Q2hDVGpPQWVWTmNXbjQ0aURZdHJIS2Jxckl6VGR0YU1rWkx5QkVhN0p3MWZxZ1lISk9IcDNpZWxwNVhvOEtvbzVNU3dYZHF0bjc0MkxnV0FKOWhjWkc5dENkR0JuRUU2eGpVbVZQclF2ekF6czVNVVpOK3lacW89GIe84rXxMUgAEj4KBW9wZW54EixleUpwSWpvaWVEbGhUR1oyTVhkRGFWRlZaVTF6V2tSQk1TdDFaejA5SW4wPRj7weK18TFIAA..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1714073113777&idt=31084&ppid=b03b0fd7e0e41bad0667f61a661b1707fd854efb12a02011e91d89500d81a2d6&prev_scp=sizeLift%3Dadhesion_desktop_970x90_c%26partnerLift%3DamazonE6M2%26hb_bid%3Dno_bid%26slot_id%3Dadhesion_desktop%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dadhesion_desktop%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dadhesion_atf_d_2801%26gid%3D0%26inview%3D0%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=site%3Dearn-and-excel%26path%3D%252Fblog%252Fhow-to-add-a-legend-in-excel-a-com%26page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%252F%26secure%3D1%26sessiondepth%3D1%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D93%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D25%26month%3D4%26hour%3D19%26wrapper_group%3D3.1.15-1450-SwapCMP.5-beta-control%26wswy%3D0%26sessionId%3D1040263935%26page_view_id%3D0e0d1c1c0a0l170s0x0i1n0u140x0h03%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=1212450974&frm=20&eoidce=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://earnandexcel.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:00 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://earnandexcel.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: 5675949035 Google-Creative-Id: 138432583144 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Thu, 25 Apr 2024 19:26:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 19:26:00 UTC	360	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 31 30 33 30 30 30 36 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2f 61 64 68 65 73 69 6f 6e 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 39 30 2c 37 32 38 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 5b 5b 22 49 44 3d 63 36 62 64 64 61 61 64 33 38 30 36 62 36 35 33 3a 54 3d 31 37 31 34 30 37 33 31 35 39 3a 52 54 3d 31 37 31 34 30 37 33 31 35 39 3a 53 3d 41 4c 4e 49 5f 4d 59 7a 62 69 52 46 32 70 50 45 30 6c 70 53 57 42 59 46 67 63 6d 7a 54 68 4e 56 56 41 22 2c 31 37 34 37 37 36 39 31 35 39 2c 22 2f 22 2c 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 66 36 36 38 32 32 66 34 31 37 3a 54 3d 31 37 31 34 30 37 33 31 35 39 3a 52 54 3d 31 Data Ascii: 8000{"/1030006/earnandexcel/adhesion":["html",0,null,null,0,90,728,0,0,null,null,null,1,[["ID=c6bddaad3806b653:T=1714073159:RT=1714073159:S=ALNI_MYzbiRF2pPE0lpSWBYFgcmzThNVVA",1747769159,"/","earnandexcel.com",1],["UID=00000df66822f417:T=1714073159:RT=1
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 35 39 34 39 30 33 35 5d 2c 5b 34 38 36 31 35 30 31 36 34 31 5d 2c 5b 32 38 34 38 30 39 30 33 30 33 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6e 74 4e 4b 44 31 73 46 34 69 70 42 75 66 47 41 43 42 32 38 6b 71 4d 33 68 6e 77 78 34 75 49 53 46 35 75 6d 70 6d 67 74 38 78 34 64 66 44 4f 4b 37 36 32 56 4e 65 59 31 6c 70 65 44 79 58 71 68 61 6c 52 73 50 47 5f 76 34 4a 32 45 66 49 41 67 45 44 43 75 55 22 2c 22 43 4f 7a 45 74 34 36 4d 33 6f 55 44 46 62 5f 7a 4b 41 55 64 51 4d 63 42 58 67 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: 5949035],[4861501641],[2848090303],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsntNKD1sF4ipBufGACB28kqM3hnwx4uISF5umpmgt8x4dfDOK762VNeY1lpeDyXqhalRsPG_v4J2EfIAgEDCuU","COzEt46M3oUDFb_zKAUdQMcBXg",null,null,null,null,null,null,
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 34 32 34 22 20 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 3d 22 5b 26 71 75 6f 74 3b 78 25 32 37 38 34 34 36 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 32 30 30 36 37 3b 26 67 74 3b 38 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 2f 25 26 6c 74 3b 31 37 33 32 32 36 31 21 3d 7c 76 71 63 29 21 37 32 30 31 30 36 31 3f 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 32 30 37 32 33 3b 26 67 74 3b 3a 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 2f 25 26 6c 74 3b 31 32 34 35 3b 30 35 21 3d 6e 65 68 75 60 2f 21 33 36 31 3a 26 6c 74 3b 33 32 Data Ascii: ipt>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240424" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<32
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 70 65 6f 66 20 61 7c 7c 61 2e 67 21 3d 3d 68 61 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 6c 65 74 20 4a 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 64 3d 61 5b 47 5d 7c 30 3b 69 66 28 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 Data Ascii: peof a\|\|a.g!==ha)}function H(a){return null!==a&&"object"===typeof a&&!Array.isArray(a)&&a.constructor===Object}let J;function K(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;const d=a[G]\|0;if(d&1)return!0;if(!(b&&(Array.isArray(b)?b.includes(c):b.has(c)
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 61 5b 67 5d 3d 72 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 29 3b 63 26 26 63 28 66 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 41 3d 3d 3d 66 61 3f 61 2e 74 6f 4a 53 4f 4e 28 29 3a 71 61 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 61 2e 6c 3b 6c 65 74 20 65 3d 64 5b 47 5d 3b 69 66 28 65 26 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 4d 28 64 2c 65 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 3e 3e 31 34 26 31 30 32 33 3b 65 3d 30 3d 3d 3d 65 3f 35 33 36 38 37 30 39 31 32 3a 65 3b 69 66 28 63 3e Data Ascii: t g=0;g<a.length;g++)a[g]=ra(a[g],b,c,d,e);c&&c(f,a);return a}function ta(a){return a.A===fa?a.toJSON():qa(a)};function L(a,b,c){const d=a.l;let e=d[G];if(e&2)throw Error();M(d,e,b,c);return a}function M(a,b,c,d){var e=b>>14&1023;e=0===e?536870912:e;if(c>
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 7b 6c 65 74 20 71 3d 6e 3b 69 66 28 4b 28 6e 2c 64 2c 2b 6b 29 7c 7c 6b 61 28 6e 29 26 26 30 3d 3d 3d 6e 2e 73 69 7a 65 29 6e 3d 6e 75 6c 6c 3b 6e 21 3d 71 26 26 28 6c 3d 21 30 29 7d 6e 75 6c 6c 21 3d 6e 3f 6d 5b 6b 5d 3d 6e 3a 6c 3d 21 30 7d 69 66 28 6c 29 7b 66 6f 72 28 76 61 72 20 68 20 69 6e 20 6d 29 7b 70 3d 6d 3b 62 72 65 61 6b 20 61 7d 70 3d 6e 75 6c 6c 7d 7d 70 21 3d 63 26 26 28 66 3d 21 30 29 3b 61 2d 2d 7d 66 6f 72 28 6b 3d 2b 21 21 28 65 26 35 31 32 29 2d 31 3b 30 3c 61 3b 61 2d 2d 29 7b 68 3d 61 2d 31 3b 63 3d 62 5b 68 5d 3b 68 2d 3d 6b 3b 69 66 28 21 28 6e 75 6c 6c 3d 3d 63 7c 7c 4b 28 63 2c 64 2c 68 29 7c 7c 6b 61 28 63 29 26 26 30 3d 3d 3d 63 2e 73 69 7a 65 29 29 62 72 65 61 6b 3b 67 3d 21 Data Ascii: Array.isArray(n)){let q=n;if(K(n,d,+k)\|\|ka(n)&&0===n.size)n=null;n!=q&&(l=!0)}null!=n?m[k]=n:l=!0}if(l){for(var h in m){p=m;break a}p=null}}p!=c&&(f=!0);a--}for(k=+!!(e&512)-1;0<a;a--){h=a-1;c=b[h];h-=k;if(!(null==c\|\|K(c,d,h)\|\|ka(c)&&0===c.size))break;g=!
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 70 6c 61 63 65 28 2f 5c 5c 2b 2f 67 2c 22 20 22 29 29 7d 76 61 72 20 46 61 3d 2f 5b 3f 26 5d 28 24 7c 23 29 2f 3b 20 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 73 65 61 72 63 68 28 44 61 29 2c 64 3d 30 2c 65 2c 66 3d 5b 5d 3b 30 3c 3d 28 65 3d 43 61 28 61 2c 64 2c 22 6e 69 73 22 2c 63 29 29 3b 29 66 2e 70 75 73 68 28 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2c 65 29 29 2c 64 3d 4d 61 74 68 2e 6d 69 6e 28 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 2c 65 29 2b 31 7c 7c 63 2c 63 29 3b 66 2e 70 75 73 68 28 61 2e 73 6c 69 63 65 28 64 29 29 3b 61 3d 66 2e 6a 6f 69 6e 28 22 22 29 2e 72 65 70 6c 61 63 65 28 46 61 2c 22 24 31 22 29 3b 28 62 3d 22 6e 69 73 22 2b 28 6e 75 6c 6c 21 3d 62 3f 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 Data Ascii: place(/\\+/g," "))}var Fa=/[?&]($\|#)/; function Ga(a,b){for(var c=a.search(Da),d=0,e,f=[];0<=(e=Ca(a,d,"nis",c));)f.push(a.substring(d,e)),d=Math.min(a.indexOf("&",e)+1\|\|c,c);f.push(a.slice(d));a=f.join("").replace(Fa,"$1");(b="nis"+(null!=b?"="+encodeURI
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 61 74 61 2d 6a 63 22 7d 3d 22 24 7b 61 7d 22 5d 60 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 53 61 7c 7c 28 53 61 3d 6e 65 77 20 54 61 29 3b 63 6f 6e 73 74 20 62 3d 53 61 2e 67 5b 61 2e 6b 65 79 5d 3b 69 66 28 22 70 72 6f 74 6f 22 3d 3d 3d 61 2e 76 61 6c 75 65 54 79 70 65 29 7b 74 72 79 7b 63 6f 6e 73 74 20 63 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 62 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 29 72 65 74 75 72 6e 20 63 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3f 62 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 76 61 72 20 55 61 3d 63 6c 61 73 73 7b 63 6f Data Ascii: ata-jc"}="${a}"]`)};function R(a){Sa\|\|(Sa=new Ta);const b=Sa.g[a.key];if("proto"===a.valueType){try{const c=JSON.parse(b);if(Array.isArray(c))return c}catch(c){}return a.defaultValue}return typeof b===typeof a.defaultValue?b:a.defaultValue}var Ua=class{co
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 74 61 73 6b 49 64 3d 74 68 69 73 2e 73 6c 6f 74 49 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 75 6e 69 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 55 3d 75 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 62 62 3d 21 21 28 55 26 26 55 2e 6d 61 72 6b 26 26 55 2e 6d 65 61 73 75 72 65 26 26 55 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 62 62 29 7b 76 61 72 20 62 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 54 29 7b 54 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 75 2e 74 6f 70 2e Data Ascii: taskId=this.slotId=void 0;this.uniqueId=Math.random()}};const U=u.performance,bb=!!(U&&U.mark&&U.measure&&U.clearMarks),V=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=bb){var b;if(null===T){T="";try{a="";try{a=u.top.
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 3d 64 7c 7c 30 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 66 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 Data Ascii: ll==a)return"";b=b\|\|"&";c=c\|\|",$";"string"==typeof c&&(c=c.split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){const f=[];for(let g=0;g<a.length;g++)f.push(fb(a[g],b,c,d+1,e));return f.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.5	50429	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	5423	OUT	GET /gampad/ads?pvsid=855858948973280&correlator=2166323553846027&eid=95331444%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202404220101&ptt=17&impl=fifs&us_privacy=1---&gpp=GPP_ERROR_STRING_EXPECTED_APPLICATION_SECTION_ARRAY&iu_parts=1030006%3A22952122961%2Cearnandexcel%2Csticky_sidebar%2Ccontent&enc_prev_ius=%2F0%2F1%2F2%2C%2F0%2F1%2F3%2C%2F0%2F1%2F3&prev_iu_szs=300x250%2C320x50%7C300x250%7C728x90%7C336x280%7C468x60%7C250x250%7C320x50%2C320x50%7C300x250%7C728x90%7C336x280%7C468x60%7C250x250%7C320x50&fluid=0%2Cheight%2Cheight&ifi=2&sfv=1-0-40&fsbs=1%2C1%2C1&eri=1&sc=1&cookie_enabled=1&abxe=1&dt=1714073158326&lmt=1714073114&adxs=877%2C272%2C272&adys=1740%2C1191%2C2964&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1%7C2%7C3&ucis=2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=120&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&vis=1&psz=300x0%7C300x-1%7C300x-1&msz=300x0%7C300x-1%7C300x-1&fws=0%2C4%2C4&ohw=0%2C300%2C300&ga_vid=1040263935.1714073125&ga_sid=1714073158&ga_hid=1167203519&ga_fc=true&td=1&topics=1&tps=1&htps=10&a3p=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..&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1714073113777&idt=31084&ppid=b03b0fd7e0e41bad0667f61a661b1707fd854efb12a02011e91d89500d81a2d6&prev_scp=maxVelocity%3D801%26partnerLift%3DamazonE6M2%26hb_bid%3Dno_bid%26slot_id%3Dsidebar_btf%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dsidebar_btf%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dsticky_sidebar_lazy_d_1701%26gid%3D0%26inview%3D0%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna%7CmaxVelocity%3D801%26partnerLift%3DamazonE6M2%26hb_bid%3Dno_bid%26slot_id%3Dcontent_btf%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D1%26slot%3Dcontent_btf%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dcontent_lazy_d_2801%26gid%3D0%26inview%3D1%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna%7CmaxVelocity%3D801%26partnerLift%3DamazonE6M2%26hb_bid%3Dno_bid%26slot_id%3Dcontent_2_btf%26hb_bidder%3Dno_bidder%26hb_count%3D0%26hb_pmp%3D0%26UR%3D28%26URP%3D138%26OE%3D0%26google%3D1%26native%3D1%26slot_number%3D2%26slot%3Dcontent_btf%26arrival%3D0%26refresh%3D0%26bidFloor%3D0.28%26ccpa%3D1---%26psa%3D6%2C12%2C3%26timeout%3Dcontent_lazy_d_2700%26gid%3D0%26inview%3D1%26grow_state%3D4%26grow_version%3D7.244.0%263pc%3DtimedOut%26illr%3D0%26gpp%3D0-0-0%26pair_id%3D0%26deprecationLabel%3Dna&cust_params=site%3Dearn-and-excel%26path%3D%252Fblog%252Fhow-to-add-a-legend-in-excel-a-com%26page_url%3Dhttps%253A%252F%252Fearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%252F%26secure%3D1%26sessiondepth%3D1%26optout%3D%26categories%3Dhobbies-and-interests%26generator%3Dweb%26bucket%3D93%26referrer_url%3DDIRECT%26utm_source%3D%26utm_campaign%3D%26dow%3D4%26day%3D25%26month%3D4%26hour%3D19%26wrapper_group%3D3.1.15-1450-SwapCMP.5-beta-control%26wswy%3D0%26sessionId%3D1040263935%26page_view_id%3D0e0d1c1c0a0l170s0x0i1n0u140x0h03%26groupm%3D1%26browser%3DChrome%26os%3DWindows%26lang%3Den-US%26s2sVersion%3Dproduction&adks=1349499422%2C2679092603%2C531153210&frm=20&eoidce=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Ad-Auction-Fetch: ?1 Origin: https://earnandexcel.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:00 UTC	928	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://earnandexcel.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: 5520407722,-1,5520407722 Google-Creative-Id: 138330667671,-1,138326621968 Google-MediationGroup-Id: -2,-2 Google-MediationTag-Id: -2 Date: Thu, 25 Apr 2024 19:26:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 19:26:00 UTC	327	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 31 30 33 30 30 30 36 2f 65 61 72 6e 61 6e 64 65 78 63 65 6c 2f 73 74 69 63 6b 79 5f 73 69 64 65 62 61 72 22 3a 5b 22 68 74 6d 6c 22 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 32 35 30 2c 33 30 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 49 44 3d 64 30 37 33 32 32 39 30 33 37 35 63 38 33 63 30 3a 54 3d 31 37 31 34 30 37 33 31 35 39 3a 52 54 3d 31 37 31 34 30 37 33 31 35 39 3a 53 3d 41 4c 4e 49 5f 4d 5a 62 61 4d 70 4d 6f 56 73 64 46 58 4f 48 37 79 2d 55 30 62 78 59 73 78 58 4f 39 51 22 2c 31 37 34 37 37 36 39 31 35 39 2c 22 2f 22 2c 22 65 61 72 6e 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 66 36 36 39 36 32 34 38 35 32 3a 54 3d 31 37 31 34 30 37 33 31 35 39 3a Data Ascii: 8000{"/1030006/earnandexcel/sticky_sidebar":["html",1,null,null,1,250,300,0,0,null,null,1,1,[["ID=d0732290375c83c0:T=1714073159:RT=1714073159:S=ALNI_MZbaMpMoVsdFXOH7y-U0bxYsxXO9Q",1747769159,"/","earnandexcel.com",1],["UID=00000df669624852:T=1714073159:
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 61 6e 64 65 78 63 65 6c 2e 63 6f 6d 22 2c 32 5d 5d 2c 5b 31 33 38 33 33 30 36 36 37 36 37 31 5d 2c 5b 35 35 32 30 34 30 37 37 32 32 5d 2c 5b 34 38 36 31 35 30 31 36 34 31 5d 2c 5b 32 37 36 38 38 32 35 39 34 33 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 69 55 57 37 4b 37 36 35 32 72 4d 6b 48 6b 67 76 78 67 41 47 48 4f 5f 57 37 69 65 73 64 35 55 6d 4c 4f 67 76 62 67 32 54 7a 48 61 4a 77 7a 5a 63 52 6f 31 4a 44 53 6c 48 34 59 56 6b 63 39 6d 4d 39 63 33 74 41 6e 35 75 76 6d 48 74 2d 30 51 6d 76 42 6b 6f 22 2c 22 43 50 72 42 75 49 36 4d 33 6f 55 44 46 53 55 46 69 67 4d 64 6b Data Ascii: andexcel.com",2]],[138330667671],[5520407722],[4861501641],[2768825943],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsliUW7K7652rMkHkgvxgAGHO_W7iesd5UmLOgvbg2TzHaJwzZcRo1JDSlH4YVkc9mM9c3tAn5uvmHt-0QmvBko","CPrBuI6M3oUDFSUFigMdk
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 35 70 78 3b 73 74 72 6f 6b 65 3a 23 30 30 61 65 63 64 3b 66 69 6c 6c 3a 23 30 30 61 65 63 64 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 2e 32 35 3b 7d 2e 63 62 62 3a 68 6f 76 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 63 62 62 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 38 35 38 35 61 3b 7d 2e 63 62 62 3a 68 6f 76 65 72 20 73 76 67 7b 73 74 72 6f 6b 65 3a 23 66 66 66 66 66 66 3b 7d 2e 61 62 67 62 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 70 78 3b 74 6f 70 3a 30 70 78 3b 7d 2e 63 62 62 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b Data Ascii: :absolute;top:0;right:0;height:15px;width:15px;stroke:#00aecd;fill:#00aecd;stroke-width:1.25;}.cbb:hover{cursor:pointer;}.cbb:hover{background-color:#58585a;}.cbb:hover svg{stroke:#ffffff;}.abgb{position:absolute;right:0px;top:0px;}.cbb{position:absolute;
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 2e 32 2c 31 33 2e 39 2c 33 2e 33 2c 31 33 2e 33 4c 34 2e 38 2c 31 32 2e 35 41 30 2e 33 2c 30 2e 33 2c 30 2c 31 2c 30 2c 34 2e 32 2c 31 31 2e 33 5a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 61 62 67 73 22 20 63 6c 61 73 73 3d 22 61 62 67 73 22 3e 3c 61 20 69 64 3d 22 61 62 67 6c 22 20 63 6c 61 73 73 3d 22 61 62 67 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 73 65 74 74 69 6e 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 77 68 79 74 68 69 73 61 64 3f 73 6f 75 72 63 65 3d 64 69 73 70 6c 61 79 26 61 6d 70 3b 72 65 61 73 6f 6e 73 3d 41 52 71 75 56 35 36 65 34 4f 7a 55 33 48 63 50 43 70 68 64 38 67 70 4b 6f 45 4d 34 43 78 5f 6f 43 59 2d 6b 78 5f 69 58 32 62 6f 70 72 Data Ascii: .2,13.9,3.3,13.3L4.8,12.5A0.3,0.3,0,1,0,4.2,11.3Z"></path></svg></div></div></div><div id="abgs" class="abgs"><a id="abgl" class="abgl" href="https://adssettings.google.com/whythisad?source=display&reasons=ARquV56e4OzU3HcPCphd8gpKoEM4Cx_oCY-kx_iX2bopr
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 71 30 6c 31 59 6e 76 49 62 6f 35 73 39 72 4f 6a 5f 61 38 59 41 55 4f 78 6d 58 4c 69 71 4e 65 72 31 62 6c 39 67 51 70 6a 4f 69 54 51 33 32 7a 39 49 59 39 38 58 66 45 43 4f 63 76 71 4f 46 36 64 33 52 47 4b 62 79 6c 51 4f 38 77 53 70 78 4b 6c 4e 49 67 58 73 2d 52 71 53 56 46 78 7a 56 6c 51 35 49 61 78 6b 76 44 36 2d 31 4c 6b 66 54 39 75 37 68 65 2d 69 43 51 39 62 35 53 4a 42 78 71 47 47 4c 52 50 63 37 42 4b 4c 70 58 6d 55 59 6c 57 69 61 6e 4d 6f 47 59 5a 70 59 63 55 75 77 35 35 31 73 58 4e 5f 46 44 44 66 70 34 4e 59 77 4f 73 69 74 65 68 68 5f 48 31 58 33 43 58 63 58 4f 57 6b 6a 4a 52 55 6b 78 6a 78 30 39 66 58 73 53 78 77 6c 73 69 75 59 77 66 52 30 79 35 41 72 72 72 4c 36 43 59 64 46 4b 73 34 77 4f 74 58 57 73 6a 48 30 34 68 6c 45 4e 4a 33 36 38 72 46 35 38 Data Ascii: q0l1YnvIbo5s9rOj_a8YAUOxmXLiqNer1bl9gQpjOiTQ32z9IY98XfECOcvqOF6d3RGKbylQO8wSpxKlNIgXs-RqSVFxzVlQ5IaxkvD6-1LkfT9u7he-iCQ9b5SJBxqGGLRPc7BKLpXmUYlWianMoGYZpYcUuw551sXN_FDDfp4NYwOsitehh_H1X3CXcXOWkjJRUkxjx09fXsSxwlsiuYwfR0y5ArrrL6CYdFKs4wOtXWsjH04hlENJ368rF58
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 32 32 20 31 32 2e 31 31 4c 31 31 2e 32 32 20 31 32 2e 31 31 4c 31 31 2e 32 32 20 31 32 2e 31 31 51 31 31 2e 39 31 20 31 32 2e 31 31 20 31 32 2e 33 39 20 31 31 2e 35 34 4c 31 32 2e 33 39 20 31 31 2e 35 34 4c 31 32 2e 33 39 20 31 31 2e 35 34 51 31 32 2e 38 37 20 31 30 2e 39 37 20 31 32 2e 38 37 20 39 2e 38 31 4c 31 32 2e 38 37 20 39 2e 38 31 4c 31 32 2e 38 37 20 39 2e 38 31 51 31 32 2e 38 37 20 38 2e 36 38 20 31 32 2e 34 33 20 38 2e 30 30 4c 31 32 2e 34 33 20 38 2e 30 30 4c 31 32 2e 34 33 20 38 2e 30 30 51 31 31 2e 39 39 20 37 2e 33 33 20 31 31 2e 31 37 20 37 2e 33 33 4c 31 31 2e 31 37 20 37 2e 33 33 4c 31 31 2e 31 37 20 37 2e 33 33 51 31 30 2e 33 35 20 37 2e 33 33 20 39 2e 39 33 20 37 2e 39 39 4c 39 2e 39 33 20 37 2e 39 39 4c 39 2e 39 33 20 37 2e 39 39 51 Data Ascii: 22 12.11L11.22 12.11L11.22 12.11Q11.91 12.11 12.39 11.54L12.39 11.54L12.39 11.54Q12.87 10.97 12.87 9.81L12.87 9.81L12.87 9.81Q12.87 8.68 12.43 8.00L12.43 8.00L12.43 8.00Q11.99 7.33 11.17 7.33L11.17 7.33L11.17 7.33Q10.35 7.33 9.93 7.99L9.93 7.99L9.93 7.99Q
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 38 34 20 37 2e 37 36 51 32 37 2e 35 31 20 37 2e 33 38 20 32 36 2e 38 36 20 37 2e 33 38 4c 32 36 2e 38 36 20 37 2e 33 38 4c 32 36 2e 38 36 20 37 2e 33 38 51 32 36 2e 32 31 20 37 2e 33 38 20 32 35 2e 37 31 20 37 2e 38 33 4c 32 35 2e 37 31 20 37 2e 38 33 4c 32 35 2e 37 31 20 37 2e 38 33 51 32 35 2e 32 30 20 38 2e 32 37 20 32 35 2e 32 30 20 39 2e 34 33 4c 32 35 2e 32 30 20 39 2e 34 33 4c 32 35 2e 32 30 20 31 32 2e 38 33 4c 32 34 2e 31 35 20 31 32 2e 38 33 4c 32 34 2e 31 35 20 34 2e 32 34 4c 32 35 2e 32 30 20 34 2e 32 34 4c 32 35 2e 32 30 20 37 2e 33 32 4c 32 35 2e 32 30 20 37 2e 33 32 51 32 35 2e 39 35 20 36 2e 34 37 20 32 37 2e 30 38 20 36 2e 34 37 4c 32 37 2e 30 38 20 36 2e 34 37 4c 32 37 2e 30 38 20 36 2e 34 37 51 32 37 2e 36 38 20 36 2e 34 37 20 32 38 2e Data Ascii: 84 7.76Q27.51 7.38 26.86 7.38L26.86 7.38L26.86 7.38Q26.21 7.38 25.71 7.83L25.71 7.83L25.71 7.83Q25.20 8.27 25.20 9.43L25.20 9.43L25.20 12.83L24.15 12.83L24.15 4.24L25.20 4.24L25.20 7.32L25.20 7.32Q25.95 6.47 27.08 6.47L27.08 6.47L27.08 6.47Q27.68 6.47 28.
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 4c 34 35 2e 32 35 20 31 30 2e 36 38 51 34 35 2e 30 35 20 31 31 2e 38 37 20 34 34 2e 33 31 20 31 32 2e 34 32 4c 34 34 2e 33 31 20 31 32 2e 34 32 4c 34 34 2e 33 31 20 31 32 2e 34 32 51 34 33 2e 35 38 20 31 32 2e 39 37 20 34 32 2e 36 36 20 31 32 2e 39 37 4c 34 32 2e 36 36 20 31 32 2e 39 37 4c 34 32 2e 36 36 20 31 32 2e 39 37 51 34 31 2e 33 30 20 31 32 2e 39 37 20 34 30 2e 35 36 20 31 32 2e 30 38 4c 34 30 2e 35 36 20 31 32 2e 30 38 4c 34 30 2e 35 36 20 31 32 2e 30 38 51 33 39 2e 38 33 20 31 31 2e 32 30 20 33 39 2e 38 33 20 39 2e 37 33 4c 33 39 2e 38 33 20 39 2e 37 33 4c 33 39 2e 38 33 20 39 2e 37 33 51 33 39 2e 38 33 20 38 2e 35 32 20 34 30 2e 32 35 20 37 2e 37 39 4c 34 30 2e 32 35 20 37 2e 37 39 4c 34 30 2e 32 35 20 37 2e 37 39 51 34 30 2e 36 38 20 37 2e 30 Data Ascii: L45.25 10.68Q45.05 11.87 44.31 12.42L44.31 12.42L44.31 12.42Q43.58 12.97 42.66 12.97L42.66 12.97L42.66 12.97Q41.30 12.97 40.56 12.08L40.56 12.08L40.56 12.08Q39.83 11.20 39.83 9.73L39.83 9.73L39.83 9.73Q39.83 8.52 40.25 7.79L40.25 7.79L40.25 7.79Q40.68 7.0
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 37 2e 33 38 4c 34 36 2e 35 39 20 37 2e 33 38 51 34 37 2e 33 36 20 36 2e 34 37 20 34 38 2e 37 34 20 36 2e 34 37 4c 34 38 2e 37 34 20 36 2e 34 37 4c 34 38 2e 37 34 20 36 2e 34 37 51 34 39 2e 34 32 20 36 2e 34 37 20 35 30 2e 30 35 20 36 2e 37 37 4c 35 30 2e 30 35 20 36 2e 37 37 4c 35 30 2e 30 35 20 36 2e 37 37 51 35 30 2e 36 38 20 37 2e 30 37 20 35 31 2e 31 32 20 37 2e 37 38 4c 35 31 2e 31 32 20 37 2e 37 38 4c 35 31 2e 31 32 20 37 2e 37 38 51 35 31 2e 35 36 20 38 2e 35 30 20 35 31 2e 35 36 20 39 2e 39 38 5a 4d 34 36 2e 39 36 20 39 2e 31 32 4c 35 30 2e 34 38 20 39 2e 31 32 4c 35 30 2e 34 38 20 39 2e 31 32 51 35 30 2e 34 31 20 38 2e 31 37 20 34 39 2e 38 39 20 37 2e 37 35 4c 34 39 2e 38 39 20 37 2e 37 35 4c 34 39 2e 38 39 20 37 2e 37 35 51 34 39 2e 33 37 20 37 Data Ascii: 7.38L46.59 7.38Q47.36 6.47 48.74 6.47L48.74 6.47L48.74 6.47Q49.42 6.47 50.05 6.77L50.05 6.77L50.05 6.77Q50.68 7.07 51.12 7.78L51.12 7.78L51.12 7.78Q51.56 8.50 51.56 9.98ZM46.96 9.12L50.48 9.12L50.48 9.12Q50.41 8.17 49.89 7.75L49.89 7.75L49.89 7.75Q49.37 7
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 2e 34 39 20 35 35 2e 38 39 20 31 30 2e 34 30 4c 35 35 2e 38 39 20 31 30 2e 34 30 4c 35 35 2e 38 39 20 31 30 2e 34 30 51 35 35 2e 36 33 20 31 30 2e 33 32 20 35 34 2e 37 34 20 31 30 2e 31 30 4c 35 34 2e 37 34 20 31 30 2e 31 30 4c 35 34 2e 37 34 20 31 30 2e 31 30 51 35 33 2e 34 32 20 39 2e 37 39 20 35 33 2e 30 30 20 39 2e 33 33 4c 35 33 2e 30 30 20 39 2e 33 33 4c 35 33 2e 30 30 20 39 2e 33 33 51 35 32 2e 35 37 20 38 2e 38 38 20 35 32 2e 35 37 20 38 2e 32 36 4c 35 32 2e 35 37 20 38 2e 32 36 4c 35 32 2e 35 37 20 38 2e 32 36 51 35 32 2e 35 37 20 37 2e 34 38 20 35 33 2e 31 39 20 36 2e 39 37 4c 35 33 2e 31 39 20 36 2e 39 37 4c 35 33 2e 31 39 20 36 2e 39 37 51 35 33 2e 38 31 20 36 2e 34 37 20 35 34 2e 38 36 20 36 2e 34 37 4c 35 34 2e 38 36 20 36 2e 34 37 4c 35 34 Data Ascii: .49 55.89 10.40L55.89 10.40L55.89 10.40Q55.63 10.32 54.74 10.10L54.74 10.10L54.74 10.10Q53.42 9.79 53.00 9.33L53.00 9.33L53.00 9.33Q52.57 8.88 52.57 8.26L52.57 8.26L52.57 8.26Q52.57 7.48 53.19 6.97L53.19 6.97L53.19 6.97Q53.81 6.47 54.86 6.47L54.86 6.47L54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.5	50426	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2824	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; chkChromeAb67Sec=3; SPugT=1714073152; receive-cookie-deprecation=1; DPSync3=1715212800%3A259_263_261_258_256_201_262_260%7C1715040000%3A257%7C1714608000%3A265_252%7C1714089600%3A255; SyncRTB3=1714608000%3A2_15_223%7C1715212800%3A71_266_264_99_104_7_233_240_21_220_249_56_54_165_55_176_48_178_3_5_250_46_13_166_234_231_22_8%7C1716595200%3A224%7C1715299200%3A35%7C1714867200%3A63; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158
2024-04-25 19:25:59 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.5	50430	18.160.78.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	1108	OUT	GET /b2?c1=2&c2=27053452&cs_fpcu=da71df78ddbe405581bd0f39b44fe028&cs_it=b9&cv=4.6.0%2B2403270845&ns__t=1714073152689&ns_c=UTF-8&cs_cfg=110&gdpr=0&cs_ucc=1&cs_cmp_id=46&cs_cmp_rt=0&gpp_sid=2&cs_cmp_av=1.1&c7=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&c8=How%20to%20Add%20a%20Legend%20in%20Excel%3A%20A%20Comprehensive%20Guide%20-%20Earn%20%26%20Excel&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=13913180f767854795a6f3b1714073158; PID=11F13180f782b54795a6d881714073158; XID=13913180f767854795a6f3b1714073158
2024-04-25 19:25:59 UTC	326	IN	HTTP/1.1 204 No Content Connection: close Date: Thu, 25 Apr 2024 19:25:59 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 1a79a3451f9ac1ad8bb14243b31b7204.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: mnCp9k27oHCcltl_9a6FEPN0IfyCwCjJb_Go8L83m2ZeqD3MHzdMwg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.5	50428	147.75.198.144	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	615	OUT	GET /setuid/magnite?uid=LVFMWCG3-S-CYEQ HTTP/1.1 Host: prebid.a-mo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	719	IN	HTTP/1.1 204 No Content cache-control: max-age=0, private, must-revalidate date: Thu, 25 Apr 2024 19:25:59 GMT server: envoy vary: accept-encoding, Accept-Encoding set-cookie: _sv3_7=1; path=/; domain=prebid.a-mo.net; expires=Fri, 26 Apr 2024 19:25:59 GMT; max-age=86400; secure; HttpOnly; SameSite=None set-cookie: amuid2=4508e24d-98ba-438a-9a4e-2742917722eb; path=/; domain=a-mo.net; expires=Fri, 25 Apr 2025 19:25:59 GMT; max-age=31536000; secure; HttpOnly; SameSite=None set-cookie: sd_amuid2=4508e24d-98ba-438a-9a4e-2742917722eb; path=/; domain=prebid.a-mo.net; expires=Fri, 25 Apr 2025 19:25:59 GMT; max-age=31536000; secure; HttpOnly; SameSite=None x-envoy-upstream-service-time: 1 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.5	50431	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2863	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SPugT=1714073159; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224
2024-04-25 19:25:59 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:25:59 GMT; path=/ Set-Cookie: PugT=1714073159; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:25:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.5	50368	35.214.250.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	840	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.5	50434	3.161.136.103	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	690	OUT	GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=16375e6d-7183-43c9-8be0-eb3cedad6305 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:00 UTC	1194	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 971 Connection: close Date: Thu, 25 Apr 2024 19:25:59 GMT Location: https://p.rfihub.com/cm?pub=39342&in=1&userid=b0185c5d-64c1-46f7-941a-e05dbec13e5b%3A1714073159.9130583&forward=https%3A//i.liadm.com/s/56409%3Fbidder_id%3D200442%26bidder_uuid%3Db0185c5d-64c1-46f7-941a-e05dbec13e5b%253A1714073159.9130583%26pid%3D500040%26it%3D1%26iv%3Db0185c5d-64c1-46f7-941a-e05dbec13e5b%253A1714073159.9130583%26_%3D1714073159.9148479&cb=1714073159.9148889 Set-Cookie: zync-uuid=b0185c5d-64c1-46f7-941a-e05dbec13e5b:1714073159.9130583; Domain=rezync.com; Expires=Tue, 20 May 2025 19:25:59 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiYjAxODVjNWQtNjRjMS00NmY3LTk0MWEtZTA1ZGJlYzEzZTViOjE3MTQwNzMxNTkuOTEzMDU4MyJ9.ZiquRw.qw9kjvNo5DmKk0ysUcM5RjcfW_4; Expires=Tue, 20 May 2025 19:25:59 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 8f7f25a8ec7b36657c310241b9ad397e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 X-Amz-Cf-Id: ALVvhaj2BKvu3gkl2CzIe1XO8ubxYJXS51grXIM0trhV8RpN0S1KNQ==
2024-04-25 19:26:00 UTC	971	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 2e 72 66 69 68 75 62 2e 63 6f 6d 2f 63 6d 3f 70 75 62 3d 33 39 33 34 32 26 61 6d 70 3b 69 6e 3d 31 26 61 6d 70 3b 75 73 65 72 69 64 3d 62 30 31 38 35 63 35 64 2d 36 34 63 31 2d 34 36 66 37 2d 39 34 31 61 2d 65 30 35 64 62 65 63 31 33 65 35 62 25 33 41 31 37 31 34 30 37 33 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://p.rfihub.com/cm?pub=39342&in=1&userid=b0185c5d-64c1-46f7-941a-e05dbec13e5b%3A1714073

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.5	50433	173.194.219.132	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	860	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: 5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Thu, 25 Apr 2024 19:25:59 GMT Expires: Fri, 25 Apr 2025 19:25:59 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:25:59 UTC	548	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-04-25 19:25:59 UTC	1255	IN	Data Raw: 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 68 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 68 7d 29 7d 63 61 74 63 68 28 63 29 7b 66 2e 63 6f 6e 73 6f 6c 65 26 26 66 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 74 3d 61 7d 65 6c 73 65 20 74 3d 61 7d 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: eatePolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(
2024-04-25 19:25:59 UTC	1255	IN	Data Raw: 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 61 5d 3d 62 3b 72 65 74 75 72 6e 5b 63 5d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 6b 3d 5b 5d 3b 6a 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 41 29 7b 28 67 3d 70 61 28 67 2c 62 2c 63 2c 64 2c 65 29 29 26 26 6b 2e 70 75 73 68 28 41 2b 22 3d 22 2b 67 29 7d 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 62 29 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 22 73 74 72 69 6e 67 22 3d Data Ascii: ="&";this.h={};this.o=0;this.g=[]},z=function(a,b){var c={};c[a]=b;return[c]},qa=function(a,b,c,d,e){var k=[];ja(a,function(g,A){(g=pa(g,b,c,d,e))&&k.push(A+"="+g)});return k.join(b)},pa=function(a,b,c,d,e){if(null==a)return"";b=b\|\|"&";c=c\|\|",$";"string"=
2024-04-25 19:25:59 UTC	1255	IN	Data Raw: 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 Data Ascii: &&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack){a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\n"+a);for(var d;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n)*)\\2"),"$1");b=a
2024-04-25 19:25:59 UTC	1255	IN	Data Raw: 66 28 44 3e 45 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 50 61 72 73 65 64 20 63 6f 6e 74 65 6e 74 20 73 69 7a 65 20 64 6f 65 73 6e 27 74 20 6d 61 74 63 68 2e 20 22 2b 44 2b 22 3a 22 2b 45 2e 6c 65 6e 67 74 68 29 3b 42 3d 7b 6d 3a 43 5b 31 5d 2c 63 6f 6e 74 65 6e 74 3a 45 2e 73 75 62 73 74 72 28 30 2c 44 29 2c 6c 3a 45 2e 73 75 62 73 74 72 28 44 29 7d 3b 76 61 72 20 46 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 42 2e 6c 29 3b 77 69 6e 64 6f 77 2e 6e 61 6d 65 3d 22 22 3b 76 61 72 20 42 61 3d 42 2e 63 6f 6e 74 65 6e 74 3b 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 26 26 28 66 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 3d 46 2e 67 6f 6f 67 5f 73 61 66 65 66 72 61 6d 65 5f 68 6c 74 29 3b 46 2e 5f 63 6f 6e 74 65 78 Data Ascii: f(D>E.length)throw Error("Parsed content size doesn't match. "+D+":"+E.length);B={m:C[1],content:E.substr(0,D),l:E.substr(D)};var F=JSON.parse(B.l);window.name="";var Ba=B.content;F.goog_safeframe_hlt&&(f.goog_safeframe_hlt=F.goog_safeframe_hlt);F._contex
2024-04-25 19:25:59 UTC	594	IN	Data Raw: 21 31 29 2c 46 61 3d 6e 75 6c 6c 2c 55 3d 4b 2e 6c 65 6e 67 74 68 2d 31 2c 56 3d 55 3b 30 3c 3d 56 3b 2d 2d 56 29 7b 76 61 72 20 57 3d 4b 5b 56 5d 3b 21 46 61 26 26 6b 61 2e 74 65 73 74 28 57 2e 75 72 6c 29 26 26 28 46 61 3d 57 29 3b 69 66 28 57 2e 75 72 6c 26 26 21 57 2e 6a 29 7b 78 3d 57 3b 62 72 65 61 6b 7d 7d 76 61 72 20 6c 61 3d 6e 75 6c 6c 2c 47 61 3d 4b 2e 6c 65 6e 67 74 68 26 26 4b 5b 55 5d 2e 75 72 6c 3b 30 21 3d 78 2e 64 65 70 74 68 26 26 47 61 26 26 28 6c 61 3d 4b 5b 55 5d 29 3b 48 3d 6e 65 77 20 6d 61 3b 69 66 28 48 2e 68 29 7b 76 61 72 20 48 61 3d 48 2e 68 2e 75 72 6c 7c 7c 22 22 3b 49 2e 67 2e 70 75 73 68 28 34 29 3b 49 2e 68 5b 34 5d 3d 7a 28 22 74 6f 70 22 2c 48 61 29 7d 76 61 72 20 49 61 3d 7b 75 72 6c 3a 48 2e 67 2e 75 72 6c 7c 7c 22 22 Data Ascii: !1),Fa=null,U=K.length-1,V=U;0<=V;--V){var W=K[V];!Fa&&ka.test(W.url)&&(Fa=W);if(W.url&&!W.j){x=W;break}}var la=null,Ga=K.length&&K[U].url;0!=x.depth&&Ga&&(la=K[U]);H=new ma;if(H.h){var Ha=H.h.url\|\|"";I.g.push(4);I.h[4]=z("top",Ha)}var Ia={url:H.g.url\|\|""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.5	50365	82.145.213.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	809	IN	HTTP/1.1 302 Found Server: Tengine Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUad9a36a3dee7490d8b3d28e53f985deb Pragma: no-cache Set-Cookie: UID=OPUad9a36a3dee7490d8b3d28e53f985deb; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-04-25 19:25:59 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 61 64 39 61 33 36 61 33 64 65 65 37 34 39 30 64 38 62 33 64 32 38 65 35 33 66 39 38 35 64 65 62 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUad9a36a3dee7490d8b3d28e53f985deb">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.5	50437	207.65.37.182	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2723	OUT	GET /AdServer/SPug?partnerID=157108&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:59 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1714073159; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.5	50438	67.202.105.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	719	OUT	GET /ps/?xi=1&xu=LVFMWCG3-S-CYEQ&us_privacy=1--- HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:00 UTC	675	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374; Domain=.33across.com; Expires=Fri, 25-Apr-2025 19:25:59 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP003 location: https://events-ssc.33across.com/match?bidder_id=30&external_user_id=LVFMWCG3-S-CYEQ&ts=1714073159&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- content-length: 0 date: Thu, 25 Apr 2024 19:25:59 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.5	50432	44.209.20.160	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	661	OUT	GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LVFMWCG3-S-CYEQ HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:25:59 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=28d9228a-b1cb-43ea-a245-18ac678f2a55; Max-Age=2592000; Expires=Sat, 25 May 2024 19:25:59 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-04-25 19:25:59 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.5	50435	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2958	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:dcc8662a-ae47-4c00-aeb9-bcbf2ebffa3f&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:dcc8662a-ae47-4c00-aeb9-bcbf2ebffa3f; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:00 GMT; path=/ Set-Cookie: PugT=1714073160; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.5	50444	35.186.253.211	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	792	OUT	GET /sync/dds?ox_sc=1&ox_init=1 HTTP/1.1 Host: rtb.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:26:00 UTC	309	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: image/gif P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.5	50436	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2958	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	604	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:00 GMT; path=/ Set-Cookie: PugT=1714073160; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.5	50447	34.102.243.38	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	1781	OUT	GET /tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Hobbies%20%26%20Interests%22%2C%22subcategory%22%3A%22Hobbies%20%26%20Interests%22%2C%22liveramp_idl%22%3Anull%7D HTTP/1.1 Host: pandg.tapad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:26:00 UTC	1154	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:00 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Content-Security-Policy: default-src 'none';img-src https://.tapad.com https://match.adsrvr.org Access-Control-Max-Age: 300 Access-Control-Allow-Origin: Content-Type: text/html;charset=utf-8 Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:26:00 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:26:00 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-25 19:26:00 UTC	101	IN	Data Raw: 35 37 32 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 74 61 70 61 64 26 74 74 64 5f 74 70 69 3d 31 26 74 74 64 5f 70 75 Data Ascii: 572<html><body><img src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_pu
2024-04-25 19:26:00 UTC	1255	IN	Data Raw: 69 64 3d 66 32 65 35 30 62 64 64 2d 34 34 31 62 2d 34 37 31 31 2d 38 61 63 33 2d 32 65 66 61 34 30 35 63 37 61 64 32 25 32 35 32 43 25 32 35 32 43 25 32 35 32 35 37 42 25 32 35 32 35 32 32 61 72 63 68 69 74 65 63 74 75 72 65 25 32 35 32 35 32 32 25 32 35 32 35 33 41 25 32 35 32 35 32 32 78 38 36 25 32 35 32 35 32 32 25 32 35 32 35 32 43 25 32 35 32 35 32 32 62 69 74 6e 65 73 73 25 32 35 32 35 32 32 25 32 35 32 35 33 41 25 32 35 32 35 32 32 36 34 25 32 35 32 35 32 32 25 32 35 32 35 32 43 25 32 35 32 35 32 32 62 72 61 6e 64 73 25 32 35 32 35 32 32 25 32 35 32 35 33 41 25 32 35 32 35 35 42 25 32 35 32 35 37 42 25 32 35 32 35 32 32 62 72 61 6e 64 25 32 35 32 35 32 32 25 32 35 32 35 33 41 25 32 35 32 35 32 32 47 6f 6f 67 6c 65 25 32 35 32 42 43 68 72 6f 6d 65 Data Ascii: id=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%252C%252C%25257B%252522architecture%252522%25253A%252522x86%252522%25252C%252522bitness%252522%25253A%25252264%252522%25252C%252522brands%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252BChrome
2024-04-25 19:26:00 UTC	50	IN	Data Raw: 32 35 37 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 2f 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 257D&gdpr=0&gdpr_consent="/></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.5	50445	67.202.105.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	980	OUT	GET /ps/?xi=10&us_privacy=&xu=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 HTTP/1.1 Host: ssc-cms.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:00 UTC	692	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374; Domain=.33across.com; Expires=Fri, 25-Apr-2025 19:26:00 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 8000000008200000A server: 33XP011 location: https://events-ssc.33across.com/match?bidder_id=10&external_user_id=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&ts=1714073160&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= content-length: 0 date: Thu, 25 Apr 2024 19:25:59 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.5	50448	104.18.24.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	917	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aSnoeUN3IdqSIdwDTjD97joEMETVq3wsDU9b6MIY
2024-04-25 19:26:00 UTC	811	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=a0nt6ZaS3n0gryoxDmDmSTcylZdylxYZb6QVIVePfTZcABwWYE1pvr2tv42JFfXRFUaSHMtYpBbTul4r2ZaTHsM1TgQ6PaS3l; path=/; domain=.tribalfusion.com; expires=Wed, 24-Jul-2024 19:26:00 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=a0nt6ZaS3n0gryoxDmDmSTcylZdylxYZb6QVIVePfTZcABwWYE1pvr2tv42JFfXRFUaSHMtYpBbTul4r2ZaTHsM1TgQ6PaS3l; path=/; domain=.tribalfusion.com; expires=Wed, 24-Jul-2024 19:26:00 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a0b8e288c06777-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:26:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.5	50442	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	2894	OUT	GET /AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.5	50441	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	832	OUT	GET /usersync2/pubmatic?zcc=1&cb=1714073160082 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-58d18be8-46c4-4198-8cc8-c357e4185e1b-005%22%2C%22zdxidn%22%3A%221508%22%7D
2024-04-25 19:26:00 UTC	642	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:25:58 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-58d18be8-46c4-4198-8cc8-c357e4185e1b-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 25 Apr 2025 19:25:58 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=4106281128 etag: RX58d18be846c441988cc8c357e4185e1b005 connection: close
2024-04-25 19:26:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.5	50450	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	900	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=pp%2Cpm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=5382283141381983659&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABL7E7MVVwAABRpRLTzpA; bitoIsSecure=ok
2024-04-25 19:26:00 UTC	638	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:26:00 GMT location: https://bh.contextweb.com/bh/rtset?ev=AABL7E7MVVwAABRpRLTzpA&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D5382283141381983659%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 Server: gunicorn set-cookie: bito=AABL7E7MVVwAABRpRLTzpA; Domain=bidr.io; expires=Sun, 25 May 2025 15:26:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.5	50440	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	862	OUT	GET /sync?dsp_id=409&expires=14&user_group=1&user_id=8dbe2711-fe17-445b-af0c-abd3de628187&ssp=pubmatic HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:26:00 UTC	614	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.5	50454	3.212.57.127	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:25:59 UTC	780	OUT	GET /usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:00 UTC	216	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 1498 Connection: close Server: nginx ETag: "0781a05e1950f9904fa89917b24a29631" Timing-Allow-Origin: *
2024-04-25 19:26:00 UTC	1498	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 67 2e 73 6f 63 64 6d 2e 63 6f 6d 2f 61 75 78 2f 69 64 73 79 6e 63 3f 70 72 6f 74 6f 3d 67 75 6d 67 75 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 3c 69 6d 67 20 73 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><iframe src="https://tg.socdm.com/aux/idsync?proto=gumgum" style="display:none;"></iframe><img s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.5	50456	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	2930	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUdae9af279efa464e903ac100c91bf658 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPUdae9af279efa464e903ac100c91bf658&KRTB&23485-OPUdae9af279efa464e903ac100c91bf658&KRTB&23575-OPUdae9af279efa464e903ac100c91bf658; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 09-May-2024 19:25:59 GMT; path=/ Set-Cookie: PugT=1714073159; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.5	50455	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	910	OUT	GET /getuid?https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fid=%24UID&ex=appnexus.com&gdpr=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:26:00 UTC	1449	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://s.amazon-adsystem.com/ecm3?id=3473854422107831099&ex=appnexus.com&gdpr=0 AN-X-Request-Uuid: a012e9f4-9b7b-4476-bcff-a66f45d4cfd4 Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:26:00 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:26:00 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:26:00 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.5	50451	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	2900	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.5	50452	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	2865	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8019790904257964151&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SPugT=1714073159; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224
2024-04-25 19:26:00 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:58 GMT; path=/ Set-Cookie: PugT=1714073158; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:58 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.5	50449	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	832	OUT	GET /usersync2/pubmatic?zcc=1&cb=1714073161659 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%2C%22zdxidn%22%3A%221508%22%7D
2024-04-25 19:26:00 UTC	642	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:26:02 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 25 Apr 2025 19:26:02 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=2039589519 etag: RX01b099a217ee411887d581f28ff0ec22005 connection: close
2024-04-25 19:26:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.5	50467	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	893	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:26:00 UTC	579	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; Version=1; Expires=Fri, 25-Apr-2025 19:26:00 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=41bccb41-99b0-03b3-11d7-830251b12c9f Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.5	50459	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	820	OUT	GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:00 UTC	685	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEKK4GKo1jrHm98VnRwrke5w&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 Date: Thu, 25 Apr 2024 19:26:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 332 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:00 UTC	332	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 35 39 38 39 26 61 6d 70 3b 78 75 69 64 3d 43 41 45 53 45 4b 4b 34 47 4b 6f 31 6a 72 48 6d 39 38 56 6e 52 77 72 6b 65 35 77 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 63 36 32 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEKK4GKo1jrHm98VnRwrke5w&dongle=c62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.5	50443	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	883	OUT	GET /match?uid=5382283141381983659&p=M501991648&r=https%3A%2F%2Fa.audrte.com%2Fp%3F&gdpr=0&gdpr_consent= HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; arcki2_ddp2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073149686; arcki2_adform=4033174624989640038!20220908!1714073153104
2024-04-25 19:26:00 UTC	746	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Thu, 25 Apr 2024 19:26:00 GMT Location: https://a.audrte.com/p? Server: nginx/1.22.1 Set-Cookie: arcki2_smart=5382283141381983659!20220908!1714073160420; Max-Age=1296000; Expires=Fri, 10 May 2024 19:26:00 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Set-Cookie: arcki2_smart=5382283141381983659!20220908!1714073160420; Max-Age=1296000; Expires=Fri, 10 May 2024 19:26:00 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.5	50466	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	1337	OUT	GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis
2024-04-25 19:26:00 UTC	260	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:26:00 GMT Location: https://eb2.3lift.com/xuid?mid=2319&xuid=0-301aa7bd-c380-5476-64d7-fd91d206f9b9$ip$185.152.66.230&dongle=4430 Content-Length: 140 Connection: Close
2024-04-25 19:26:00 UTC	140	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 32 33 31 39 26 61 6d 70 3b 78 75 69 64 3d 30 2d 33 30 31 61 61 37 62 64 2d 63 33 38 30 2d 35 34 37 36 2d 36 34 64 37 2d 66 64 39 31 64 32 30 36 66 39 62 39 24 69 70 24 31 38 35 2e 31 35 32 2e 36 36 2e 32 33 30 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 34 34 33 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=2319&xuid=0-301aa7bd-c380-5476-64d7-fd91d206f9b9$ip$185.152.66.230&dongle=4430">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.5	50458	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	751	OUT	GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:00 UTC	729	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MTA3MjA4MDY2MTk3OTc0NjcyMjI5MA%3D%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:00 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:00 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.5	50470	34.225.69.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	824	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=fd088d8c-f63e-4f27-85bc-7c0a8a324fab HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImZkMDg4ZDhjLWY2M2UtNGYyNy04NWJjLTdjMGE4YTMyNGZhYiIsImwiOjE3MTQwNzMxNTk0NzIsInQiOjF9
2024-04-25 19:26:00 UTC	353	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImZkMDg4ZDhjLWY2M2UtNGYyNy04NWJjLTdjMGE4YTMyNGZhYiIsImwiOjE3MTQwNzMxNjAzMDEsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Mon, 11 Nov 2024 19:26:00 GMT; Secure; SameSite=None
2024-04-25 19:26:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.5	50460	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	928	OUT	GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA& Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQuYzjtfExCgoI5gEQuYzjtfExCgoIhwIQuYzjtfExCgoItwIQuYzjtfExCgkIOhC5jOO18TEKCQgbELmM47XxMQoKCIwCELmM47XxMQoKCKwCELmM47XxMQoKCK0CELmM47XxMQoJCF8QuYzjtfEx; tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:00 UTC	737	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MTA3MjA4MDY2MTk3OTc0NjcyMjI5MA%3D%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:00 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:00 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.5	50464	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	1337	OUT	GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis
2024-04-25 19:26:00 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 43 Connection: Close
2024-04-25 19:26:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.5	50465	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	1338	OUT	GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis
2024-04-25 19:26:00 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 43 Connection: Close
2024-04-25 19:26:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.5	50462	34.236.60.188	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	742	OUT	GET /sync/triplelift/1072080661979746722290?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:26:00 UTC	868	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 0 Connection: close Location: https://eb2.3lift.com/xuid?mid=2662&xuid=y-TgsrWNpE2oTazxz5yrMaadmBl26dNhqiG4IVkrS0sw--~A&dongle=0883 Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:26:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.5	50469	52.20.151.97	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	685	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-04-25 19:26:00 UTC	693	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.57.43 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Mon, 20-Jan-2025 19:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=6efb576f370522a24883b5b8d45a1e39;Path=/;Domain=crwdcntrl.net;Expires=Mon, 20-Jan-2025 19:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-04-25 19:26:00 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.5	50453	35.214.250.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	840	OUT	GET /?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent= HTTP/1.1 Host: csync.loopme.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:00 UTC	403	IN	HTTP/1.1 307 Temporary Redirect set-cookie: viewer_token=4059022b-4af1-47a5-a543-458ef575345e; path=/; domain=csync.loopme.me; secure; HttpOnly; Expires=Thu, 25-Jul-2024 19:26:00 GMT; SameSite=None location: https://simage2.pubmatic.com/AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 content-length: 0 date: Thu, 25 Apr 2024 19:26:00 GMT server: _ connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.5	50472	207.65.37.181	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	2810	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=27194692&p=157108&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	820	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=157108:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 625 Connection: close
2024-04-25 19:26:00 UTC	625	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 2e 61 75 64 72 74 65 2e 63 6f 6d 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 70 3d 4d 31 37 31 37 30 35 34 39 30 31 26 75 69 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 35 31 45 41 44 37 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f 73 69 64 3d 39 32 31 32 33 30 38 32 37 38 26 70 75 69 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 35 31 45 Data Ascii: PubMatic.loadAsyncImagePixel('https://a.audrte.com/match?gdpr=0&gdpr_consent=&p=M1717054901&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7');PubMatic.loadAsyncImagePixel('https://aa.agkn.com/adscores/g.pixel?sid=9212308278&puid=0F7B5FEF-69AD-46C6-81F2-A260D651E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.5	50457	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	845	OUT	GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFGAEgAigCMgsI4uCk6Ifa8jwQBTgBWghwdWJtYXRpY2AC
2024-04-25 19:26:00 UTC	637	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 251 Connection: close server: Kestrel location: https://eb2.3lift.com/xuid?mid=3658&xuid=500c5aec-af13-42d6-a7ea-250f9438d1fe&dongle=0cfd&gdpr=0&gdpr_consent= set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:26:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFEhYKB3N2eDl0NTASCwjA5f2l8tnyPBAFGAEgASgCMgsI3tuA04ja8jwQBTgBWgdzdng5dDUwYAI.; expires=Fri, 25 Apr 2025 19:26:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:26:00 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://eb2.3lift.com/xuid?mid=3658&xuid=500c5aec-af13-42d6-a7ea-250f9438d1fe&dongle=0cfd&gdpr=0&gdpr_consent=">https://eb2.3lift.com/xuid?mid=3658&xuid=500c5aec-af13-42d6-a7ea-250f9438d1fe&dongle=0cfd&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.5	50471	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	3115	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=&gdpr_consent=&gdpr_pd=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; PugT=1714073159; SPugT=1714073159
2024-04-25 19:26:00 UTC	600	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:00 GMT; path=/ Set-Cookie: PugT=1714073160; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.5	50473	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	3064	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUad9a36a3dee7490d8b3d28e53f985deb HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; PugT=1714073159
2024-04-25 19:26:00 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 09-May-2024 19:25:59 GMT; path=/ Set-Cookie: PugT=1714073159; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:25:59 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.5	50463	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	745	OUT	GET /sync?ssp=triplelift&user_id=1072080661979746722290&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:26:00 UTC	262	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //c1.adform.net/serving/cookie/match/?party=24&bidswitch_ssp_id=triplelift

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.5	50475	8.2.111.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	917	OUT	GET /e6130557b1b000792deef390abb43b4f.gif?puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&redir=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MTgmdGw9MjAxNjA=&piggybackCookie=[UID]&gdpr=0&gdpr_consent=&ccpa=[CCPA]&coppa=[COPPA] HTTP/1.1 Host: cs.iqzone.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:00 UTC	98	IN	HTTP/1.1 204 No Content Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.5	50482	104.18.24.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	918	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aHnoeUolXVyQuWxdIZcl6XDVHQdUGI0sadk9b69Aq
2024-04-25 19:26:00 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aCnt6ZaO5nP87PRo7TGr72Zcu592j4aG3gderXh7YsyFlTXIWZdZa0ST7a1jIs1LGoKLmp72jLK8vhBr3uVWh82sAqfbwLuJ; path=/; domain=.tribalfusion.com; expires=Wed, 24-Jul-2024 19:26:00 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aCnt6ZaO5nP87PRo7TGr72Zcu592j4aG3gderXh7YsyFlTXIWZdZa0ST7a1jIs1LGoKLmp72jLK8vhBr3uVWh82sAqfbwLuJ; path=/; domain=.tribalfusion.com; expires=Wed, 24-Jul-2024 19:26:00 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a0b8e62e85672e-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 19:26:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.5	50479	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	2833	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=4033174624989640038 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SPugT=1714073159; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224
2024-04-25 19:26:00 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ Set-Cookie: PugT=1714073160; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.5	50484	198.148.27.131	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	1192	OUT	GET /bh/rtset?ev=AABL7E7MVVwAABRpRLTzpA&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26userid%3D5382283141381983659%26gdpr%3D0%26gdpr_consent%3D%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D4&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=UQf1GlI5tayx; VP=part_UQf1GlI5tayx; INGRESSCOOKIE=bc4a2eed7198485a; pb_rtb_ev=3-1r0e\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc\|7bq.0.1; pb_rtb_ev_part=3-1r0e\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc\|7bq.0.1
2024-04-25 19:26:00 UTC	1522	IN	HTTP/1.1 302 Found Connection: close P3P: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" Accept-CH: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version CW-Server: bh-deployment-777b7bb56-qpdt7 Cache-Control: private, max-age=0, no-cache, no-store Expires: -1 Content-Language: en-US Set-Cookie: V=UQf1GlI5tayx;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 20-Apr-2025 19:26:00 GMT;Max-Age=31104000;SameSite=None Set-Cookie: VP=part_UQf1GlI5tayx;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 20-Apr-2025 19:26:00 GMT;SameSite=None;Partitioned Set-Cookie: pb_rtb_ev=3-1r0e\|7bq.0.1\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc\|7dN.0.AABL7E7MVVwAABRpRLTzpA;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 25-Apr-2025 19:26:00 GMT;Max-Age=31536000;SameSite=None Set-Cookie: pb_rtb_ev_part=3-1r0e\|7bq.0.1\|88N.0.9c050a90-0339-11ef-8f5d-8719b2ab76bc\|7dN.0.AABL7E7MVVwAABRpRLTzpA;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 25-Apr-2025 19:26:00 GMT;SameSite=None;Partitioned Location: https://match.prod.bidr.io/cookie-sync?gdpr=0&userid=5382283141381983659&gdpr=0&gdpr_consent=&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AABL7E7MVVwAABRpRLTzpA&pid=558502&do=add&gdpr=0 Server: Jetty(10.0.14) Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.5	50480	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	2865	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjc0NCZ0bD0xNTc2ODAw&piggybackCookie=R35CAB_1148B1422_6EA26C92&r=https://pmp.mxptint.net/sn.ashx?ak=1 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	657	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ Set-Cookie: PugT=1714073160; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ Location: https://pmp.mxptint.net/sn.ashx?ak=1 P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.5	50483	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	2871	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; PugT=1714073158; chkChromeAb67Sec=4; pi=156423:4; DPSync3=1715212800%3A259_261_245_236_263_201_258_256_262_260%7C1714608000%3A265_253_252%7C1715040000%3A257%7C1714089600%3A255_248; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; SPugT=1714073158
2024-04-25 19:26:00 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ Set-Cookie: PugT=1714073160; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:00 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.5	50485	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	751	OUT	GET /ecm3?id=3473854422107831099&ex=appnexus.com&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:26:00 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:26:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 7QDG81YC6J907HWDN627 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:26:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.5	50490	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	1324	OUT	GET /pcs/view?xai=AKAOjssOTNBAZwW5dFCSkoHtD6dgPRxBChMIkNHbZYfIQCeu5-9HL3dy8vVTC-BKduBC5CSe8cIocTkT5qS1cn2aZY5-VtkhUuEefiwUDb_PFFZurPE7Tk7MInMOevmH5TJ8hQDR8aE5OjStaaAyvuS0Zk9yDoO8f-ZMRlHnVlz8-1k7xFLdeW-ssLeZXPMrv1txceEMKKgAJiDeHusc5wcazAn-Ld91S28WjIAtEPuBkAD-xQvl0EC4BZs72yqLTp8le-EL_p0fMMYMRrYZK66421E5gJCHPY62ObEJZv0--pvO_hfesLgUHjUnz26sR405BMcJdoLA_eh8zhFVfFPU4fe9hiQqGkQqkVtFPscQe0R0C8xzNLCjTHM-evcwPBufSNXqcw&sai=AMfl-YTXXbQv3dFUdq9UkT3RCxp05ydmp6m0mO2_nr6rhkfEoB6oB0SpWi8mUZPpqaeScelKRW3VR9lx6MhBGKtTXqUOakAij9QMEViS0hZl-fceyKKtPjihZxv-J9diTq5yJDnF8DeQwttvvLGuVjM5Hyw&sig=Cg0ArKJSzLbpJ9PWUj9eEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:01 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:00 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.5	50491	142.250.105.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	793	OUT	GET /ads/measurement/l?ebcid=ALh7CaRW5rO6pcbYl5-FLVWx202_AIS9VWMzxoxmmIvV1HzvfebEnRWh29m8-PejgN-j07xqAfA1d4oMpwYExz6PGfxEestRUw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:01 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:00 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.5	50487	35.186.193.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	813	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:01 UTC	477	IN	HTTP/1.1 200 OK P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_dc2ad0c5b8db4b388c0989847703cad3=1; path=/; domain=.ctnsnet.com; expires=Fri, 25 Apr 2025 19:26:00 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Thu, 25 Apr 2024 19:26:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.5	50489	174.137.133.32	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:00 UTC	854	OUT	GET /user-sync?zone=218872&t=image&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MjgmdGw9MjE2MDA=&piggybackCookie={UID}&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.adkernel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:01 UTC	144	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 25 Apr 2024 19:26:01 GMT Content-Length: 21 Connection: close Cache-Control: no-store
2024-04-25 19:26:01 UTC	21	IN	Data Raw: 7b 55 49 44 7d 20 6d 61 63 72 6f 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: {UID} macro not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.5	50493	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	3421	OUT	GET /AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie={viewer_token}&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; PugT=1714073160
2024-04-25 19:26:01 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:25:59 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.5	50379	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	1050	OUT	GET /match?bidder_id=10&external_user_id=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&ts=1714073160&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:01 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:01 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.5	50499	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	1322	OUT	GET /pcs/view?xai=AKAOjsvKkC1i9ODo4rE8vE0M2J4IgU0dUOEqf8PFkb2T9Iz-kX-1T6-0YLqvmp8fNMYbM0u-nNeDiEQwViCKHSrFKWLDoemqDReYN4tqvJbO1qBWCr9EsPx1jaAIPYbF-2LlxFCIqpeOpko1GbMjmP2Q7qRMqHoOaRzsw7GX3BMGM8EjGdwGueRAW6MnOK0LmK38Z1akd8LQje8-vzhEKKNPDhlsObOlej3p4wKCOYyut9G17iPV58wFNp79jKaLmkpWouRemF3xu12LKlFfB4IaXBhKQ0wb2-eCAFjoozpM-47P4A4Yz8WISXZjhih19iWFWpgm0y44nlSyk7r0A2ikL80uwAbvgsXn_NTyNd1oRcrH_ZBrmEAheIYK8yxvLO7FKEVH&sai=AMfl-YR6PK3V2JUfesPPmYXHRheE_1l5NzV3eX61Bk2_4FlJScLKvaWwzFsxv-FMXMysJ30Hf9UwmYs2MqgxCU4ZTapTFBHq2ZbEtqtr8FMw0_fY4EIwwl9l75ZKCKoeZnMVrNy-bogcVrJuGpeUyJAcSss&sig=Cg0ArKJSzO_-D8UQQCrEEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:01 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.5	50501	142.250.105.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	793	OUT	GET /ads/measurement/l?ebcid=ALh7CaQC_m8yRZYivYdwg8nldFxEksPmLeOJVIj2eDL98-6-9D4JIJRf2ebNghzilSdkLi51-OCPdII0aWEJmd2iSjRMKbdpJw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:01 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:01 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.5	50505	142.250.105.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	692	OUT	GET /879366/dfa7banner_html_inpage_rendering_lib_200_268.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:01 UTC	763	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 111171 Date: Thu, 25 Apr 2024 19:26:01 GMT Expires: Fri, 26 Apr 2024 19:26:01 GMT Cache-Control: public, max-age=86400 Last-Modified: Tue, 14 Jan 2020 17:35:50 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:01 UTC	492	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 68 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=function(a){var b="undefined"!=typeof Symbol&&Symbol.ite
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 65 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 65 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 66 61 3b 61 3a 7b 76 61 72 20 68 61 3d 7b 6d 62 3a 21 30 7d 2c 69 61 3d 7b 7d 3b 74 72 79 7b 69 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 61 3b 66 61 3d 69 61 2e 6d 62 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 66 61 3d 21 31 7d 65 61 3d 66 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f Data Ascii: r b=function(){};b.prototype=a;return new b},ea;if("function"==typeof Object.setPrototypeOf)ea=Object.setPrototypeOf;else{var fa;a:{var ha={mb:!0},ia={};try{ia.__proto__=ha;fa=ia.mb;break a}catch(a){}fa=!1}ea=fa?function(a,b){a.__proto__=b;if(a.__proto__
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 7d 74 68 69 73 2e 61 2e 70 75 73 68 28 67 29 7d 3b 76 61 72 20 64 3d 6c 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 64 28 67 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 61 26 26 74 68 69 73 2e 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 61 3b 74 68 69 73 2e 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 67 5b 6b 5d 3b 67 5b 6b 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6c 28 29 7d 63 61 74 63 68 28 6d 29 7b 74 68 69 73 2e 6a 28 6d 29 7d 7d 7d 74 68 69 73 2e 61 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 Data Ascii: }this.a.push(g)};var d=la.setTimeout;b.prototype.g=function(g){d(g,0)};b.prototype.v=function(){for(;this.a&&this.a.length;){var g=this.a;this.a=[];for(var k=0;k<g.length;++k){var l=g[k];g[k]=null;try{l()}catch(m){this.j(m)}}}this.a=null};b.prototype.j=fu
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 73 2e 61 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 6b 3d 0a 74 68 69 73 2e 6a 28 29 3b 67 2e 76 61 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c 6c 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 51 2c 76 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d Data Ascii: s.a=null}};var f=new b;e.prototype.D=function(g){var k=this.j();g.va(k.resolve,k.reject)};e.prototype.F=function(g,k){var l=this.j();try{g.call(k,l.resolve,l.reject)}catch(m){l.reject(m)}};e.prototype.then=function(g,k){function l(Q,va){return"function"=
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 6e 28 61 29 7b 61 2e 4b 61 3d 76 6f 69 64 20 30 3b 61 2e 67 65 74 49 6e 73 74 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 4b 61 3f 61 2e 4b 61 3a 61 2e 4b 61 3d 6e 65 77 20 61 7d 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 62 29 69 66 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 63 29 Data Ascii: n(a){a.Ka=void 0;a.getInstance=function(){return a.Ka?a.Ka:a.Ka=new a}},qa=function(a){var b=typeof a;if("object"==b)if(a){if(a instanceof Array)return"array";if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if("[object Window]"==c)
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 0a 2d 31 21 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 6e 61 74 69 76 65 20 63 6f 64 65 22 29 3f 75 3d 78 61 3a 75 3d 79 61 3b 72 65 74 75 72 6e 20 75 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 3b Data Ascii: rn function(){return a.apply(b,arguments)}},u=function(a,b,c){Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?u=xa:u=ya;return u.apply(null,arguments)},za=function(a,b){var c=Array.prototype.slice.call(arguments,1);
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 62 2e 63 61 6c 6c 28 63 2c 65 5b 66 5d 2c 66 2c 61 29 7d 2c 44 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 67 3d 30 3b 67 3c 63 3b 67 2b 2b 29 69 66 28 67 20 69 6e 20 66 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 6b 2c 67 2c 61 29 26 26 28 64 5b 65 2b 2b 5d 3d 6b 29 7d 72 65 74 75 72 Data Ascii: a,b,c){for(var d=a.length,e="string"===typeof a?a.split(""):a,f=0;f<d;f++)f in e&&b.call(c,e[f],f,a)},Da=function(a,b){for(var c=a.length,d=[],e=0,f="string"===typeof a?a.split(""):a,g=0;g<c;g++)if(g in f){var k=f[g];b.call(void 0,k,g,a)&&(d[e++]=k)}retur
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 3b 76 61 72 20 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 63 2c 61 5b 64 5d 2c 64 2c 61 29 7d 2c 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 21 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 2c 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 Data Ascii: b\|\|(c=a(),b=!0);return c}};var Ma=function(a,b,c){for(var d in a)b.call(c,a[d],d,a)},Na=function(a,b){for(var c in a)if(!b.call(void 0,a[c],c,a))return!1;return!0},Oa=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b},Pa=function(a,b){for(var c i
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 61 28 61 29 3b 72 65 74 75 72 6e 22 74 79 70 65 5f 65 72 72 6f 72 3a 54 72 75 73 74 65 64 52 65 73 6f 75 72 63 65 55 72 6c 22 7d 2c 24 61 3d 7b 7d 2c 63 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 62 28 5a 61 2c 61 29 7d 2c 5a 61 3d 7b 7d 3b 76 61 72 20 43 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2f 5e 5b 5c 73 5c 78 61 30 5d 2a 24 2f 2e 74 65 73 74 28 61 29 7d 2c 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2f 5e 5b 5c 73 5c 78 61 30 5d 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 5b 5c 73 5c 78 61 30 5d 2a 24 2f 2e 65 78 65 63 28 61 29 5b 31 5d 7d 2c 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 65 62 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 3b 2d 31 21 3d 61 2e 69 6e 64 65 78 Data Ascii: a(a);return"type_error:TrustedResourceUrl"},$a={},cb=function(a){return new ab(Za,a)},Za={};var C=function(a){return/^[\s\xa0]$/.test(a)},db=function(a){return/^[\s\xa0]([\s\S]?)[\s\xa0]$/.exec(a)[1]},lb=function(a){if(!eb.test(a))return a;-1!=a.index
2024-04-25 19:26:01 UTC	1255	IN	Data Raw: 7b 72 65 74 75 72 6e 20 31 7d 3b 76 61 72 20 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 44 26 26 61 2e 67 3d 3d 3d 70 62 29 72 65 74 75 72 6e 20 61 2e 66 3b 71 61 28 61 29 3b 72 65 74 75 72 6e 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 55 72 6c 22 7d 2c 72 62 3d 2f 5e 28 3f 3a 28 3f 3a 68 74 74 70 73 3f 7c 6d 61 69 6c 74 6f 7c 66 74 70 29 3a 7c 5b 5e 3a 2f 3f 23 5d 2a 28 3f 3a 5b 2f 3f 23 5d 7c 24 29 29 2f 69 2c 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 29 72 65 74 75 72 6e 20 61 3b 61 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 61 2e 68 61 3f 61 2e 62 61 28 29 3a 53 74 72 Data Ascii: {return 1};var qb=function(a){if(a instanceof D&&a.constructor===D&&a.g===pb)return a.f;qa(a);return"type_error:SafeUrl"},rb=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i,sb=function(a){if(a instanceof D)return a;a="object"==typeof a&&a.ha?a.ba():Str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.5	50509	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	945	OUT	GET /cookie-sync?gdpr=0&userid=5382283141381983659&gdpr=0&gdpr_consent=&bee_sync_partners=pm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=4&ev=AABL7E7MVVwAABRpRLTzpA&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABL7E7MVVwAABRpRLTzpA; bitoIsSecure=ok
2024-04-25 19:26:01 UTC	468	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:26:01 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AABL7E7MVVwAABRpRLTzpA&gdpr=0&gdpr_consent= Server: gunicorn set-cookie: bito=AABL7E7MVVwAABRpRLTzpA; Domain=bidr.io; expires=Sun, 25 May 2025 15:26:01 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.5	50511	64.233.177.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	841	OUT	GET /ads/measurement/l?ebcid=ALh7CaSXfIfbO2v4Ay-n4x9ikyHbW-ZrJp1h9F45YT8EKwW7OMpYGFKs7_G92GEaG9SJBfZGnHBmWtDLVXEOsgEmzay7_yQx0g HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:01 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:01 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.5	50502	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	889	OUT	GET /usersync/turn/8019790904257964151?dspret=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D
2024-04-25 19:26:01 UTC	784	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:26:01 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 25 Apr 2025 19:26:01 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005 connection: close
2024-04-25 19:26:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.5	50514	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	790	OUT	GET /match?bidder_id=30&external_user_id=LVFMWCG3-S-CYEQ&ts=1714073159&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:01 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:01 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.5	50510	3.162.125.35	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	696	OUT	GET /js/template/style/style_banner_4c0a52.css HTTP/1.1 Host: cdn.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:01 UTC	579	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 3175 Connection: close Date: Wed, 24 Apr 2024 20:15:07 GMT Last-Modified: Wed, 24 Apr 2024 09:26:09 GMT ETag: "420bd813080d140238b2dea2d1dc304c" x-amz-server-side-encryption: AES256 x-amz-version-id: yb2847JWkX7aKqU_Vgxqub6gWAnzxLla Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 c49971ad4f76a00082eb4f604c635cba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: j1VAIyV8t3dK24xN_RrUI63WQPywuDyQcoolqRF5Y5blcVdlNN9o8A== Age: 83454 Access-Control-Allow-Origin: *
2024-04-25 19:26:01 UTC	3175	IN	Data Raw: 2f 2a 0a 2a 20 40 41 75 74 68 6f 72 3a 20 66 61 6e 67 73 69 6d 69 6e 0a 2a 20 40 44 61 74 65 3a 20 20 20 32 30 32 30 2d 30 36 2d 30 31 20 31 35 3a 33 31 3a 35 34 0a 2a 20 40 4c 61 73 74 20 4d 6f 64 69 66 69 65 64 20 62 79 3a 20 20 20 66 61 6e 67 73 69 6d 69 6e 0a 2a 20 40 4c 61 73 74 20 4d 6f 64 69 66 69 65 64 20 74 69 6d 65 3a 20 32 30 32 30 2d 30 36 2d 30 31 20 31 35 3a 33 31 3a 35 34 0a 2a 2f 0a 2e 6d 65 64 69 61 67 6f 2d 70 6c 61 63 65 6d 65 6e 74 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 65 67 6f 65 20 55 49 20 53 65 6d 69 6c 69 67 68 74 22 2c 20 22 53 65 67 6f 65 20 57 50 20 53 65 6d 69 6c 69 67 68 74 22 2c 20 22 53 65 67 6f 65 20 57 50 22 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 41 72 69 61 6c 2c 20 53 61 6e 73 2d 53 65 72 69 66 Data Ascii: /** @Author: fangsimin* @Date: 2020-06-01 15:31:54* @Last Modified by: fangsimin* @Last Modified time: 2020-06-01 15:31:54*/.mediago-placement { font-family: "Segoe UI Semilight", "Segoe WP Semilight", "Segoe WP", "Segoe UI", Arial, Sans-Serif

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.5	50513	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	843	OUT	GET /p? HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssbsync.smartadserver.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; arcki2_ddp2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073149686; arcki2_adform=4033174624989640038!20220908!1714073153104; arcki2_smart=5382283141381983659!20220908!1714073160420
2024-04-25 19:26:01 UTC	351	IN	HTTP/1.1 200 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Content-Type: image/png Date: Thu, 25 Apr 2024 19:26:01 GMT Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 68 Connection: Close
2024-04-25 19:26:01 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.5	50516	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	3863	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=NSqZaeSECB6dsksASa4qZg HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; PugT=1714073160; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8
2024-04-25 19:26:01 UTC	655	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:01 GMT; path=/ Set-Cookie: PugT=1714073161; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.5	50520	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	3884	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AABL7E7MVVwAABRpRLTzpA&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; PugT=1714073160; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8
2024-04-25 19:26:01 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:01 GMT; path=/ Set-Cookie: PugT=1714073161; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:01 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.5	50519	34.150.170.96	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:01 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=BB7435D573F24117990D5894FB5D3774
2024-04-25 19:26:01 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 25 Apr 2024 19:26:01 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:BB7435D573F24117990D5894FB5D3774&gdpr=0&gdpr_consent= Expires: Wed, 24 Apr 2024 19:26:01 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-04-25 19:26:01 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.5	50521	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	917	OUT	GET /csync/RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	628	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:26:01 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%7D; path=/; expires=Fri, 25 Apr 2025 19:26:01 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005 etag: RX01b099a217ee411887d581f28ff0ec22005 connection: close
2024-04-25 19:26:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.5	50517	23.88.86.2	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.1 Date: Thu, 25 Apr 2024 19:26:02 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.5	50515	195.5.165.20	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	234	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: komodo-3950a029b58c@version_1.7.2 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 1ms Date: Thu, 25 Apr 2024 19:26:02 GMT
2024-04-25 19:26:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.5	50524	3.162.125.35	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	747	OUT	GET /js/interest_group.html HTTP/1.1 Host: cdn.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	562	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 9757 Connection: close Last-Modified: Thu, 13 Jul 2023 12:49:51 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: J6bmqS9GXoyTTWcaLJqounG900T8RY2j Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 13:01:09 GMT ETag: "c9b1909fa492efd7f0135e97a4a94985" X-Cache: Hit from cloudfront Via: 1.1 1e54a46a2c47322a41a5f070c060e878.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: 9l3_fr2n1d1EVPp1rt20K5wSuie5yBK0pHI_vhb_3YbiL1czLbUVDg== Age: 23094 Vary: Origin
2024-04-25 19:26:02 UTC	9757	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 43 68 72 6f 6d 65 20 6f 72 69 67 69 6e 20 74 72 69 61 6c 20 74 6f 6b 65 6e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 e9 80 9a e8 bf 87 e7 9b b4 e6 8e a5 e8 ae be e7 bd ae 6d 65 74 61 e4 b8 8d e7 94 9f e6 95 88 ef bc 8c e5 8e 9f e5 9b a0 e6 9c aa e7 9f a5 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 37 4a 2f 7a 4b 74 53 37 48 73 70 68 36 69 74 51 61 41 32 72 35 53 42 54 74 43 33 75 63 34 6f 53 63 41 42 51 4c 75 66 69 4c 6c 71 45 51 57 Data Ascii: <html lang="en"> <head> ... Chrome origin trial token --> ... meta --> <meta http-equiv="origin-trial" content="A7J/zKtS7Hsph6itQaA2r5SBTtC3uc4oScABQLufiLlqEQW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.5	50523	3.162.125.35	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	779	OUT	GET /js/cookieSync.html?tn=41b6e88a2b85b0e731ef8e73e5558712 HTTP/1.1 Host: cdn.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	563	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 21172 Connection: close Last-Modified: Thu, 11 Jan 2024 08:42:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: EpRYFuQkhW0dw.Fy4ocZ5p9WkDxnjHRY Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Apr 2024 13:48:13 GMT ETag: "8dc2756f85fccea2e456061d06bdea5e" X-Cache: Hit from cloudfront Via: 1.1 e694c28f3f4b3c78628be967383db56e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD61-P3 X-Amz-Cf-Id: U2yWsS-Lw875IIeQK8yQCQgtVQZW_hM0ZIJCMLsNUuoJIlVN4jsBJQ== Age: 20270 Vary: Origin
2024-04-25 19:26:02 UTC	16384	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3d 73 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 74 3d 73 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 64 5b 65 5d 28 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 2c 65 2c 69 2c 61 2c 72 2c 63 2c 64 3d 7b 38 32 34 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: <!doctype html><html><head><meta charset="UTF-8"><title></title></head><body><script>!function(){"use strict";function o(e){var t=s[e];if(void 0!==t)return t.exports;t=s[e]={exports:{}};return d[e](t,t.exports,o),t.exports}var n,e,i,a,r,c,d={824:function(
2024-04-25 19:26:02 UTC	4788	IN	Data Raw: 29 3f 65 2e 73 70 6c 69 74 28 22 23 22 29 5b 30 5d 3a 65 29 2e 73 70 6c 69 74 28 22 26 22 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 2c 6e 2c 74 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 69 66 28 74 26 26 74 5b 30 5d 26 26 74 5b 31 5d 26 26 28 6f 3d 74 5b 30 5d 2c 6e 3d 74 5b 31 5d 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 5b 6f 5d 29 7b 69 66 28 22 6e 75 6c 6c 22 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 30 3c 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 29 72 65 74 75 72 6e 20 65 3b 65 5b 6f 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 7d 72 65 74 75 72 6e 20 65 7d 2c 7b 7d 29 7d 72 65 74 75 72 6e 7b 7d Data Ascii: )?e.split("#")[0]:e).split("&").reduce(function(e,t){var o,n,t=t.split("=");if(t&&t[0]&&t[1]&&(o=t[0],n=t[1]),void 0===e[o]){if("null"==n\|\|null==n)return e;if("string"==typeof n&&0<=n.indexOf("%"))return e;e[o]=decodeURIComponent(n)}return e},{})}return{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.5	50526	34.111.60.239	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	679	OUT	GET /ML/1dc59ba9d9073497010293a464f4ba32__scv1__300x175.png HTTP/1.1 Host: images.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	721	IN	HTTP/1.1 200 OK x-guploader-uploadid: ABPtcPpfx7ORfAZH3ohGPTEpCr3nqTzoZAJ2J4lzH5Pt9n0ezIaKO1lUJ4aK1TEtZ9QrncQv1Q x-goog-generation: 1712258659075183 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 34711 x-goog-hash: crc32c=HnmQTA== x-goog-hash: md5=FxfH7JOpDOUJDOEv3AY7Lg== x-goog-storage-class: STANDARD accept-ranges: bytes Content-Length: 34711 server: UploadServer via: 1.1 google Date: Thu, 25 Apr 2024 19:05:03 GMT Age: 1259 Last-Modified: Thu, 04 Apr 2024 19:24:19 GMT ETag: "1717c7ec93a90ce5090ce12fdc063b2e" Content-Type: image/png Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:02 UTC	534	IN	Data Raw: ff d8 ff db 00 84 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 af 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a Data Ascii: ,"}!1AQa"q2#BR$3br%&'()*
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fc 50 f0 d4 96 5a 86 99 0d fd 9d ac 48 24 5f 98 22 f4 6e e2 b3 b5 3d 5e db c3 5e 2c 8f 51 bd 59 04 0f 11 12 18 14 16 c1 52 38 07 dc 0a cc f8 67 ad bc 37 72 68 53 4b 85 9b e7 84 13 d1 87 51 f8 8f e5 57 3e 24 da e6 18 ae 08 e4 29 53 fc eb 81 53 50 ad 66 7c dd 1a 72 c2 66 fc 8d e8 ef 6f 4f eb 43 da 3e 18 f8 e3 54 f8 85 a0 8b 69 ec b3 25 e4 92 19 9a 23 88 d3 2b f3 00 39 62 7b fa 73 ce 2b 84 92 51 71 e1 49 6d 89 c3 db 38 18 3f ec 48 53 f9 56 c7 ec a9 7f 2a 88 59 2f e6 81 92 77 42 d0 b1 01 90 c6 db 91 b1 d5 4e d5 fc 85 61 c3 30 9a 5d 4e 0c fc ac d3 32 60 71 86 0b 20 fe b5 e5 ce 73 fa e5 5a 3d 12 4f Data Ascii: ?PZH$_"n=^^,QYR8g7rhSKQW>$)SSPf\|rfoOC>Ti%#+9b{s+QqIm8?HSV*Y/wBNa0]N2`q sZ=O
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: e0 ff 00 00 78 f2 2f 17 6a 2d 78 a9 22 ea 1e 5a c0 b2 20 c9 78 a0 8c 08 95 17 ae 64 32 64 e3 9e 05 7e 7f 7c 70 fd a9 3e 34 fc 71 d4 67 d4 be 21 f8 e2 ee ea 36 73 b6 ce 32 56 05 f6 08 3e f7 d4 e4 fb d7 23 fb 3d e9 9f 10 f5 1f 1c df bf 82 20 bc 49 62 80 9b cb d8 db cb 8a d0 6e fb d2 ca e4 24 4b 81 d5 88 af 1e b6 67 89 c4 46 4a 1e ea fc 4e da 78 4a 54 a7 1e 6d 5b 67 e8 c7 c6 1f 82 5f 0c ff 00 69 3b 2b 33 f1 4b f6 fe ba d3 35 1b a5 df 77 61 a5 f8 66 ea ee c6 3e 7e 54 95 c0 42 d8 ee 76 ed 18 f4 af 99 7e 2e fe c3 1e 1a f0 4e a5 3e b1 a1 fe d1 3a 1d e7 86 6d 07 95 27 89 35 5d 16 e2 c9 24 20 90 56 18 d9 99 a7 6c f4 0b c9 cf 6a cb ff 00 85 d3 6d f0 e6 71 24 fe 23 4f 18 eb 64 6f 33 cd 0e cd 32 d5 87 e0 b2 5d b0 f5 f9 23 e3 f8 85 79 17 8e 7e 27 f8 ff 00 e2 97 8d 24 Data Ascii: x/j-x"Z xd2d~\|p>4qg!6s2V>#= Ibn$KgFJNxJTm[g_i;+3K5waf>~TBv~.N>:m'5]$ Vljmq$#Odo32]#y~'$
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: 49 e9 92 3f 1a e1 2c ce 75 a8 d4 30 c3 5b 48 84 7d 0a 9f ea 6b e7 b0 b2 ad 57 1d 56 55 1d db 49 6d 6d 95 ff 00 53 eb f1 34 e1 0c b6 0e 0a c9 36 f7 be fa 7e 81 a3 a3 25 be 18 77 e4 d7 49 a6 69 6d ad e9 b7 1a 73 10 be 74 25 03 11 c0 27 a1 ac 3d 21 15 48 81 9b 25 4e 08 fa 64 7f 4a ea fc 36 a5 6e 51 53 81 b8 0a e0 c6 d4 94 6e d6 e7 b9 84 82 9d 34 9e cc b9 a1 fc 2b bf b9 8d b7 df c3 95 88 f9 7b 32 3e 6e d9 ce 38 af 7d f0 c5 9e b1 e2 cf 83 3f d8 37 46 36 d5 ec ed d4 c2 ea db 81 b8 88 86 8c e7 dd 91 33 f5 35 e7 7a 1c 6e 1c 6c 18 04 71 5d ff 00 c2 cd 65 ac 75 93 a7 c8 c4 2c e0 11 ec df e7 1f 95 7c 26 7f 8f c5 62 e8 c5 bb 37 4d a9 2d 3b 1f 41 95 e5 b8 4c 1d 49 46 9d d7 3a b3 d4 e0 34 4f 11 8d 0f c6 d7 97 d6 ba ac 71 c4 25 83 5a b3 b7 d4 63 02 ea ed b6 87 31 c2 c9 Data Ascii: I?,u0[H}kWVUImmS46~%wIimst%'=!H%NdJ6nQSn4+{2>n8}?7F635znlq]eu,\|&b7M-;ALIF:4Oq%Zc1
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: 46 3b 87 3e 63 79 26 e3 69 c2 7a 2a b4 60 05 cf 18 15 ee ce a3 a4 b9 e1 53 57 dd ab 5b e7 14 70 f3 ca 7e eb 47 c3 5a 3f fc 12 7f e3 65 95 98 d5 6f 93 4d bb 96 64 53 19 bb bf f2 e4 9c 92 30 82 3c 33 06 24 8f 94 80 3a 73 9e 2b ce bf 69 0f d9 23 f6 83 f8 05 e1 0b bf 18 ea ff 00 0b 20 b2 d2 ed 75 04 b3 b8 d5 a5 d5 6d 0c 56 d3 37 02 35 88 49 e6 cc d8 19 21 41 0b 9c b6 01 15 f6 57 c4 2f 8d 11 db 06 d7 3e 12 4f a9 ea 73 1b 58 6d ae 6c 99 a6 9a d6 da 50 d9 f3 6d d5 86 f9 67 60 40 60 db 63 0d 8c 23 64 b5 60 69 7f b2 67 c5 8f 8a fe 3c f0 a7 c5 df da 53 c1 5a ee b3 e1 ad 2e 62 fa 66 88 61 8e 25 8e 15 72 ef 34 b1 95 28 ec e4 1d a8 80 a9 c2 97 62 08 15 c5 47 36 9d 6c 4f 2a 9f 33 8e fa 69 7b 5e da 3f f8 07 4c b0 8a 95 0e 67 1b 27 b7 77 e6 7c 47 a5 7e c2 5f b6 4f c4 cf Data Ascii: F;>cy&iz`SW[p~GZ?eoMdS0<3$:s+i# umV75I!AW/>OsXmlPmg`@`c#d`ig<SZ.bfa%r4(bG6lO3i{^?Lg'w\|G~_O
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: e7 53 b0 de 2d 25 91 18 c8 08 2a cc 00 c7 7c e6 b8 1b c6 87 44 d7 cb d8 4c b2 88 26 0c 99 52 07 ae d3 9e 7d aa 07 d4 e4 76 f9 50 73 d7 77 39 ab 1a a4 2f 7b 7e 6e 61 59 1f ed 48 25 4d f2 17 62 71 c8 24 f2 4e 41 ae da 54 b9 2f 7e a7 9f 83 c1 c3 06 9f 2b 7a 9e b1 e0 ed 4e da ff 00 c1 9a e6 ab 6d 07 94 1e de da 28 c0 39 18 69 4b 1c 67 be 57 f4 ac 3b 5b ac 6b 76 c4 9e 4c ec 9d 7f bc 8c 3f 9e 2b 2f e1 9f 8a 2d 6d 7c 33 aa 78 56 72 e2 5b 9b 88 27 80 e7 82 a9 bf 72 ff 00 e3 c0 fe 75 6a d6 0b bb dd 66 ce c3 4d b6 b8 9e ee 6b c8 fe cb 6d 6f 6e f2 49 33 06 ce d5 54 04 93 80 78 02 bc 3a 74 1d 0c 75 4b ed 7d 3d 39 57 fc 13 e9 ea 4e 33 cb 12 5d 17 e3 cc cd ed 2f 22 ea 52 5b fe 5a b0 c7 eb fd 6b ae f0 ca 16 bc 88 74 f9 c7 e3 fe 35 ec 7f 06 ff 00 e0 96 5f b4 cf 89 f4 37 Data Ascii: S-%*\|DL&R}vPsw9/{~naYH%Mbq$NAT/~+zNm(9iKgW;[kvL?+/-m\|3xVr['rujfMkmonI3Tx:tuK}=9WN3]/"R[Zkt5_7
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: d7 82 7e 20 68 37 d7 1e 2c f1 de 87 e1 5d 44 78 6f 4d 03 58 b1 d5 ec a2 9a 68 d0 6d 59 25 95 6d a5 95 b0 14 be 23 2a a9 12 46 c5 50 1c 57 9a b7 87 ac b4 df 0a 78 a6 f3 47 f8 c7 0c c7 49 bc 75 d0 62 d5 74 f0 92 eb 6d 19 6f 92 08 2c 26 9a e6 20 c3 1f 3c 85 79 c0 29 b4 9c 6a f8 fb e3 ef 8d bc 13 f0 95 bc 31 f1 86 cb 41 9f 51 d4 e1 5b 8d 4f c1 93 78 ae e8 fd 82 39 5f 25 ef 76 ce 89 1b 90 db 8c 44 c8 f9 38 70 09 c1 f4 96 32 8d 18 39 4a 69 5b 6d 5b d5 ec ad ae bf 7d fd 35 39 23 86 ab 5a 6a 31 5a bf 24 3f e2 df 8b 3e 1e 69 ba 3e ad ab 68 da 56 97 a4 58 78 8a ce 29 7c 37 af ad cc f6 f0 69 bb a7 52 3c b6 71 2b dc ba 85 04 a2 a8 18 1f 30 07 00 7c fb f1 8f c7 3a 87 89 bc 47 6d f0 bf c1 5a 85 dd d4 11 c6 6d 6e af ef ad ed 9a ef 50 97 7f 00 46 00 68 10 9d a5 63 4f 9d Data Ascii: ~ h7,]DxoMXhmY%m#*FPWxGIubtmo,& <y)j1AQ[Ox9_%vD8p29Ji[m[}59#Zj1Z$?>i>hVXx)\|7iR<q+0\|:GmZmnPFhcO
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: 16 f3 23 0f 6c ca a0 e0 8e 1b 93 c7 6f 49 f8 d6 fe 02 d6 2e ad bc 3d 63 e2 9d 3f c3 7f 69 33 98 e1 bc d6 ef a3 84 95 52 ed 18 90 49 b5 9d 93 6a a0 c0 0e 49 f6 af 3f d6 4c 3e 1d d0 35 3f 16 eb de 39 b8 b7 6b 9b 39 6d 6e 2c ee 3c 4b f6 5d 4a f6 30 ac 89 bb 64 73 34 a8 72 9f 29 93 25 30 06 01 24 77 4b 15 41 45 3b a5 ea a4 bf 26 44 69 4c f9 6b fe 0a 09 e2 1f 13 dd fc 14 f1 85 be 8f ac e8 f3 69 d1 dd b5 ac 2d a5 5d c1 70 a2 c7 ed 31 3b 8f b4 79 68 d3 6e 76 8d 43 8f 98 85 da 38 24 57 92 ff 00 c1 3d 74 8d 6a 03 63 ab e8 9e 16 8f 58 9a d5 35 2d 46 4d 3a 48 d9 bc e8 a2 b7 97 70 01 08 6d dd 30 57 90 48 3d aa ff 00 fc 14 5b 5d b3 f0 ff 00 c3 dd 1b e1 cd 95 a1 b5 0f 7e 8f 2a a5 f8 97 cc 31 c5 b9 8b 92 a1 b9 91 99 b0 7a 6e ef c1 ae db f6 1f f8 65 61 0f c0 8b 2b cd 63 Data Ascii: #loI.=c?i3RIjI?L>5?9k9mn,<K]J0ds4r)%0$wKAE;&DiLki-]p1;yhnvC8$W=tjcX5-FM:Hpm0WH=[]~*1znea+c
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: fc 2b f1 8f c7 2d 53 54 5d 26 d2 3b 8b 3b 6d 40 ea 1a a5 95 9a b3 ba 3b 8b 88 24 13 c7 b5 14 0f 93 78 60 02 79 60 d7 6b 61 07 c7 5b 9b fb 5b df 0e 6b 70 6b d6 9a a5 a4 96 36 56 de 11 d5 ad ad bc e8 e3 60 f2 08 ed af ed 61 90 39 0a 77 af 9a ae 54 30 07 1b ab ca 7f 67 3f 05 7c 61 d6 3c 7d ff 00 0a 6a d7 c4 fa 7d b6 95 75 27 d8 6e 6e 35 dd 4e 48 2d ed be cd 19 9a 51 1c 53 c4 f2 48 f1 a4 67 72 db b9 61 8d b8 c1 e6 7f 89 bf 17 3c 69 e1 9f 10 3f 84 3c 3d e3 0b 45 5b 5b 75 37 53 78 7d cb 3c 4e b2 37 92 7c c7 82 38 e2 60 a1 59 64 0b 29 55 7c 02 af b8 d7 95 89 ad 52 12 f7 a4 9a 7b 37 bf ad 92 e6 ed fe 67 56 1f 0b 3a ee d4 e2 ef f8 7f 91 f5 77 8d ef be 1e fc 45 f0 7e 9b a3 78 cf e0 77 89 fc 3d 36 93 6e 46 b7 73 e2 ff 00 87 4b 7d 65 7f e5 95 55 82 14 b1 9c b4 80 00 Data Ascii: +-ST]&;;m@;$x`y`ka[[kpk6V`a9wT0g?\|a<}j}u'nn5NH-QSHgra<i?<=E[[u7Sx}<N7\|8`Yd)U\|R{7gV:wE~xw=6nFsK}eU
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: 1f 89 b7 ba 95 a5 f4 73 4e fa 7a 4d e2 2b 76 9e fe 35 cc 7e 7d cb 6e 77 99 b6 e4 aa 8f 2d 63 0c 02 83 f7 8f b8 ea 9f b2 ff 00 c2 bf 88 da 3f d8 34 ef 8c d1 4d a5 9b b6 b0 36 fe 20 f0 de 49 91 18 7c 8b 25 b1 8d 99 73 8c ba c9 c1 38 38 3b 80 e9 c0 e5 18 fc cb d9 e2 b1 ad 5e cf dd 72 51 be d7 49 5d b8 a5 e5 77 af c5 7b 99 57 cc a8 61 d3 a5 85 ba b6 f2 b5 dd fe ed 7f ad 8f 33 f1 5f fc 13 ef c3 8d 68 f6 fe 1b f8 a3 a2 6a 57 16 36 ea a8 d0 6b 17 16 17 72 46 41 50 62 f3 58 c2 54 90 fb 36 20 51 b7 01 b8 26 bc 97 c5 1f 0c 3c 7f f0 47 42 b6 b4 ff 00 84 6a 0b ef 07 e8 fa 83 4f 71 a7 6a 76 50 ca bf 6d 20 b2 5d 4d 35 a2 b4 77 4c b8 24 3c c1 a2 05 14 91 b8 03 5f 46 78 63 f6 35 f1 d6 97 e2 3b ef 17 fc 1f f1 f4 5a ba dd 6a 70 a5 e4 6b e2 eb e8 5f 51 fb 32 b7 96 a1 af 44 Data Ascii: sNzM+v5~}nw-c?4M6 I\|%s88;^rQI]w{Wa3_hjW6krFAPbXT6 Q&<GBjOqjvPm ]M5wL$<_Fxc5;Zjpk_Q2D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.5	50527	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	1274	OUT	GET /pcs/view?xai=AKAOjstglYZ5r5qFwZ6Vb65mGtKCQuy8qgQypyPFjkwW6ZOCKegBpk0tvttQSRYY-l5jYejmP17xdBMlSZyE8WiVSLvgqxm3pMcuVIRAU6EbIJ8ffYIVHFJjm5WC8vGV3TpFwzY-yElNMjugmnnsPE7_vXLDn1ST4BIPfW3sVFe5gc90be9Um_kOp0RoiRj5ycET7_qZnSWG86YLrC3z-UfgNagSKfFt__svVBgipjx2-XJfixtHUXQnrPQpdjHvb-Dg18Waeb52HsG40Zus2Xckmm8dJ4u_kRbwYuetNEqfZ9FmF4ImGfVJLJUa3BM5XCVHUilJHEWlxbgz8RZTq7EuRj1bHegBMLIMz-2wZRCMS1IoHWCCh2ujWXyuyWxHJmcH43y1ip2O&sai=AMfl-YQ3BFI9ZRksXmZnq2_FEz6VeYohu-IdOPQCvmX5U5j1wcnBzq_NgX03wYSQYrP1ZYdkV3-1xzztIhpsovVvWm9CBmczzSzEfsZ3GUG_i3DWNOOr6JmN2Qe-9_dKb3DhF6s5xYWvkHPY3zoxFzXTuaw&sig=Cg0ArKJSzDtrHqMrxkXzEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:02 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Apr-2024 19:41:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 25 Apr 2024 19:26:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.5	50530	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	1273	OUT	GET /pcs/view?xai=AKAOjsuEZU7HIJHmckRRUQuTkzGxp3yezrJRRcBptq-cTE0TMkkYvNFWDeqEb7I4JgcRF4ZVK2RUbxnnx5Xd6WGqpFd2frhZvUK_RDNWrHlGduz9y0xxVQFUYHIPROkx1065UMOIVjUtyNwxeNVdCWxzzzNcWfr52rBF9r1uvQiZrrNoKGuVBONfQ0stAiIJPqBRymyPwZQA9Gcn0akb0AySe1aPhji7dhLKx6E62lo8aMnvnnrjhDNNlpbbqNRR1i-HdpoVH7O7cNY7tLPaTe_QI1ptveW0Cfnu4U7zC40TpZQAIGEClb1PhYebp11a_5QLyiTHOJxRiwFEIlTVRysWSiQ99JzRBeEoQvtEH2cEWBkHxzBpHMw53QKImqxh5L76q-jttmw&sai=AMfl-YT26rdbzy0j44ak87NRV_sujFCcewIo3qZH668sBqnJQReIjyHQ4GK-ZJDPnt3TF0gR8PB08RcW7HTAneVnU16vZWAoBdps6kVJ6B0-aNOUj8fMa9BaF5CjztioAhdfS8qWShacFF1yBHuIL7n-LrY&sig=Cg0ArKJSzMkOYXyrMx0sEAE&uach_m=%5BUACH%5D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://earnandexcel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:02 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Apr-2024 19:41:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 25 Apr 2024 19:26:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.5	50518	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	889	OUT	GET /usersync/turn/8019790904257964151?dspret=1&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D
2024-04-25 19:26:02 UTC	784	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:26:01 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 25 Apr 2025 19:26:01 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005 connection: close
2024-04-25 19:26:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.5	50531	142.250.105.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	768	OUT	GET /dfp/120006/4861501641/1605545600158/index.html HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	731	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 6084 Date: Thu, 25 Apr 2024 19:26:02 GMT Expires: Fri, 26 Apr 2024 19:26:02 GMT Cache-Control: public, max-age=86400 Last-Modified: Mon, 16 Nov 2020 16:53:20 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:02 UTC	524	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 0a 09 4e 4f 54 45 53 3a 0a 09 31 2e 20 41 6c 6c 20 74 6f 6b 65 6e 73 20 61 72 65 20 72 65 70 72 65 73 65 6e 74 65 64 20 62 79 20 27 24 27 20 73 69 67 6e 20 69 6e 20 74 68 65 20 74 65 6d 70 6c 61 74 65 2e 0a 09 32 2e 20 59 6f 75 20 63 61 6e 20 77 72 69 74 65 20 79 6f 75 72 20 63 6f 64 65 20 6f 6e 6c 79 20 77 68 65 72 65 76 65 72 20 6d 65 6e 74 69 6f 6e 65 64 2e 0a 09 33 2e 20 41 6c 6c 20 6f 63 63 75 72 72 65 6e 63 65 73 20 6f 66 20 65 78 69 73 74 69 6e 67 20 74 6f 6b 65 6e 73 20 77 69 6c 6c 20 62 65 20 72 65 70 6c 61 63 65 64 20 62 79 20 74 68 65 69 72 20 61 70 70 72 6f 70 72 69 61 74 65 20 76 61 6c 75 65 73 2e 0a 09 34 2e 20 42 6c 61 6e 6b 20 6c 69 6e 65 73 20 77 69 6c 6c 20 62 65 20 72 65 6d 6f Data Ascii: <!DOCTYPE html>...NOTES:1. All tokens are represented by '$' sign in the template.2. You can write your code only wherever mentioned.3. All occurrences of existing tokens will be replaced by their appropriate values.4. Blank lines will be remo
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: 49 4d 45 4e 53 49 4f 4e 53 5f 4b 45 59 20 3d 20 27 64 69 6d 27 3b 0a 20 20 20 20 76 61 72 20 41 44 5f 55 52 4c 5f 50 41 52 41 4d 20 3d 20 27 26 61 64 75 72 6c 3d 27 3b 0a 0a 20 20 20 20 76 61 72 20 72 65 6c 65 67 61 74 65 4e 61 76 69 67 61 74 69 6f 6e 20 3d 20 27 27 3b 0a 20 20 20 20 76 61 72 20 75 72 6c 50 61 72 61 6d 4d 61 70 20 3d 20 7b 7d 3b 0a 0a 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 4c 49 43 4b 5f 58 5f 55 52 4c 5f 4b 45 59 5d 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 4c 49 43 4b 5f 59 5f 55 52 4c 5f 4b 45 59 5d 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 52 45 41 54 49 56 45 5f 44 49 4d 45 4e 53 49 4f 4e 53 5f 4b 45 59 5d 20 3d 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 76 Data Ascii: IMENSIONS_KEY = 'dim'; var AD_URL_PARAM = '&adurl='; var relegateNavigation = ''; var urlParamMap = {}; urlParamMap[CLICK_X_URL_KEY] = null; urlParamMap[CLICK_Y_URL_KEY] = null; urlParamMap[CREATIVE_DIMENSIONS_KEY] = null; v
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: 61 72 20 6b 65 79 20 69 6e 20 75 72 6c 50 61 72 61 6d 4d 61 70 29 20 7b 0a 20 20 20 20 20 20 20 20 65 78 69 74 50 61 72 61 6d 73 20 2b 3d 20 27 26 27 20 2b 20 6b 65 79 20 2b 20 27 3d 27 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 72 6c 50 61 72 61 6d 4d 61 70 5b 6b 65 79 5d 20 21 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 65 78 69 74 50 61 72 61 6d 73 20 2b 3d 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 6b 65 79 5d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 78 69 74 50 61 72 61 6d 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 61 70 70 65 6e 64 45 78 69 74 43 6c 69 63 6b 50 61 72 61 6d 73 20 3d 20 66 75 6e 63 74 69 6f 6e 28 75 72 6c 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 Data Ascii: ar key in urlParamMap) { exitParams += '&' + key + '='; if (urlParamMap[key] !== null) { exitParams += urlParamMap[key]; } } return exitParams; } var appendExitClickParams = function(url) { var
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 6f 75 73 65 64 6f 77 6e 27 2c 20 73 74 6f 72 65 43 6c 69 63 6b 43 6f 6f 72 64 69 6e 61 74 65 73 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 27 6f 6e 6d 65 73 73 61 67 65 27 2c 20 68 61 6e 64 6c 65 43 6c 69 63 6b 54 61 67 4d 65 73 73 61 67 65 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 29 28 29 3b 0a 20 20 20 20 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 69 6e 67 2d 74 6f 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 64 6f 62 65 5f 41 6e 69 6d 61 74 65 5f 43 43 22 3e 0a 3c 74 69 74 6c 65 3e 61 64 63 5f 73 74 6d 5f 73 Data Ascii: ntListener('mousedown', storeClickCoordinates, true); } else { window.attachEvent('onmessage', handleClickTagMessage); } })(); </script><meta charset="UTF-8"><meta name="authoring-tool" content="Adobe_Animate_CC"><title>adc_stm_s
2024-04-25 19:26:02 UTC	1255	IN	Data Raw: 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 46 69 6c 65 4c 6f 61 64 28 65 76 74 2c 20 63 6f 6d 70 29 20 7b 0a 09 76 61 72 20 69 6d 61 67 65 73 3d 63 6f 6d 70 2e 67 65 74 49 6d 61 67 65 73 28 29 3b 09 0a 09 69 66 20 28 65 76 74 20 26 26 20 28 65 76 74 2e 69 74 65 6d 2e 74 79 70 65 20 3d 3d 20 22 69 6d 61 67 65 22 29 29 20 7b 20 69 6d 61 67 65 73 5b 65 76 74 2e 69 74 65 6d 2e 69 64 5d 20 3d 20 65 76 74 2e 72 65 73 75 6c 74 3b 20 7d 09 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 43 6f 6d 70 6c 65 74 65 28 65 76 74 2c 63 6f 6d 70 29 20 7b 0a 09 2f 2f 54 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 69 73 20 61 6c 77 61 79 73 20 63 61 6c 6c 65 64 2c 20 69 72 72 65 73 70 65 63 74 69 76 65 20 6f 66 20 74 68 65 20 63 6f 6e 74 65 6e 74 2e 20 59 Data Ascii: );}function handleFileLoad(evt, comp) {var images=comp.getImages();if (evt && (evt.item.type == "image")) { images[evt.item.id] = evt.result; }}function handleComplete(evt,comp) {//This function is always called, irrespective of the content. Y
2024-04-25 19:26:02 UTC	540	IN	Data Raw: 6b 54 61 67 20 3d 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 6f 6e 6c 6f 61 64 3d 22 69 6e 69 74 28 29 3b 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 70 78 3b 22 3e 0a 09 3c 64 69 76 20 69 64 3d 22 61 6e 69 6d 61 74 69 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 37 2c 20 32 33 2c 20 33 35 2c 20 31 2e 30 30 29 3b 20 77 69 64 74 68 3a 33 30 30 70 78 3b 20 68 65 69 67 68 74 3a 32 35 30 70 78 22 3e 0a 09 09 3c 63 61 6e 76 61 73 20 69 64 3d 22 63 61 6e 76 61 73 22 20 77 69 64 74 68 3d 22 33 30 30 22 20 68 65 69 67 68 74 3d 22 32 35 30 22 20 73 74 79 6c 65 3d 22 Data Ascii: kTag = "http://www.google.com"; </script></head><body onload="init();" style="margin:0px;"><div id="animation_container" style="background-color:rgba(17, 23, 35, 1.00); width:300px; height:250px"><canvas id="canvas" width="300" height="250" style="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.5	50529	35.208.249.213	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	2391	OUT	GET /ju/ic?tn=41b6e88a2b85b0e731ef8e73e5558712&trackingid=8c58b1b530c5cb3796d4811c4fba22d0&acid=23522&data=8tt1X2scd18wOE9uwdbOMBYeTzQIqIAL_qcibhe0UQNPB13Di057I-pxB0QCVKuyl5wsv7StchN1B2EhRw-8ZITRBpVy1OUaOM3pSlrBLKA4edIpvwpf0Bw1bY57DrYZvXbkVoG70-_n_ARvdwq44jYsXOK1D8VR8dn6-W10wOp4aCdpc0NlimVops5l7596AkBmX-rrVfwuzxqp6ikzEUmpT6YnG0KcWvagHbAuswiWHMy48teuKSzuDMIo8i6h_CFrbjnymgCv0IuZjJ4820klracScaKkzPfPGfDbtSwWHooWVjKmxyZ8vBWw1vmc8fHayu0dJU3bBNDQn-n7UQmQmPaVBALxfdLtnJOtljbYlsv56BoKpzm43ZCMblk3qqhBQqiKd91iVyxGww5c326ijqawpePxvI3d5jBHqnKKkykkYvEdMt4DFMlpUclKXAWmbDWMvf-5INqrRWPb7AKu-sM39jJivOqHPQB5pwDFjuoCkfGO2VN0ffbtQ59SUkNn3BJGhRl9mWHAXi4-VRQKuzyKmnYPkPQO_GEx7q6Y4ONGjOMVmEyBYzjJ865NVgCSAgqonN9ZVUwl1TH27RpD4jnoWJfNctBqZvUte7sfHs0kg3fSbXd6ALq6exOyRqPbfwMqRiPT56Utzr0M1sbtauJkRPK61AqlhZUw-dXXa6bLth1FZYMLZd7x1I_ZHTEXmLAn-eeqnoB8q9QypFdrVui3WMrCIuTvbOuPC1FhPyQgpXQuWH0hF1HzrpAPmEIF6xf94lmkpD0xXhnYrY4O4G--RVCmelLEvV2T_t7GqMXDNuXHirRt3UyBGdRHrxZgLEF0t8nChscdxt0KezwePWyfhjZJoOaI_iFXKIBIyz0tvz4bNen4t3wn0j7z1wDdXTysjyzRmhxSmvpnnCbZihfgH8-axBwf7CePnEBeXBUx4-rWwBetSFK-PqIBTPbV-akVi_G9ln0kUO8ue-EJv4r0vxpUJb1k1WB9egpz0liFCIh8jYyuJ8FzE7zHqBIlYRnebbKzOFeJroOze7MwsPXzXjhzydFFJVUX0rJLvOSDTAHGu03Pkt4uvbvq8FcmBEwdZVZ9OM84XpNEEubig6Dglo5zDE7Zx8_PTbE9epIq1_lApP6PYHqXoxjp1eoLfHnZU1uR2bGMm8jV-5gKY5BYDiMofIZKKG-HVRc5xVUWPNe8MyPqyUcjZ9cPIVmkvYyT_yj4RgpcZ0_UKCp5JgKdkjFNaGBxrnR-XB-ka5Qr9unBz4iT06T8lO3Kld4QbuOhhmWO3Qi3d3iQhU3ia3GpydGMfD1ZrYbzjSyyxbZrnN64pOFx_uIPMV6-zBCXiq6gFG4-swwaDboepIrrUmaw0-sfIHdVpT74ubwqM5O8kuVgurExzL8M4hUbF-rVqZhB-TPGhxbrItcvl6LAOpW6l3FicRX2C__05N3UAgudkrOFuFWDUYbvwMlASMzbHbHkQ-UCt39GsxL2BzaCk6fwMka__7dqYi2Nc0XTPqg057Ia2c2ZAcdEnPKrVqVL-Am6-8V-JlHUvHv8CYrqLJfCyuD5HJvRIwcj321R9DRJvvocXdKr3u4ZEqDK&uid=CAESELEB6tvgS_U-JIlcBqlwKrk&mguid=&ap={AUCTION_PRICE}&tid=16 HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	320	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Set-Cookie: __mguid_=22210ca790f083ee2g42hg00lvfmwkrq; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Thu, 25 Apr 2024 19:26:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.5	50532	173.194.219.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	1450	OUT	GET /pcs/view?xai=AKAOjsskoIz6a2bQLm5F8tdBk5m0-jfOMPDZjrwnCxn16QbFM9I259deMMrl7NznNGVKE0MCJdfYQApsjtwEP-aGxYVQ5lYKgR1j6hbJWt-uENa6WdFY8f7wJcR0RPphNbRPCpkvKpPM6FM95LRwf-kGwbb-IKfUad2dBIiAnxSY1l_b7RuIaZlcBC0cgm_kJJoglhDsOyR4XS9BNnDe-Z68QxZR5nU8Hh0ln-pT0oUdFGcmcAGtO1X-ezExsFYbeJULZUR3Du23v74yC6Z8KNdFxsXRR9HFQDo3cd92QSekRhrhcRC4J2NPM85UUsJfd-Jl_IoOaPivUl2jmejNRXj77BAixgnteKuP_DL_QZ0WKpqL8TBeIvr_fBRqeI9kwv2FtkfkX7mbWCWj1Q&sai=AMfl-YSSoCnzKRiWkxji8_33sUmH9ZZwfDKHzTp2zVwUVKO3H7LBPVV1CXGRDTtT5UIVDoD9wxHwSK_bjRp2Z9QW8KE_aVFuVCmOD5GnYAJCKoZB_idpIqFTXWf12rrjik5oxz-eRNBj0v93_orGtcGXPbo&sig=Cg0ArKJSzOsPL9hPzENPEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:02 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:02 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.5	50533	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	4065	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:BB7435D573F24117990D5894FB5D3774&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; PugT=1714073161; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA
2024-04-25 19:26:02 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:02 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.5	50534	173.194.219.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	1339	OUT	GET /pcs/view?xai=AKAOjstIC7Lhbf09s_NKnw6LO_93hDN6_UvTQCBUqMTEQnG52_cB3TPtAkwi1ZzMTJPPE6P4qC7HNS2M7e7IwvzgrARm5StwYB38pe4Y83TKG7PAvnpv6obIL2EL6sLCbpdjIAlkqHawKHfvj0qh9SM2HtAX-9SvdI6O7Sfk1yyX2qiHIvcdSRWhsskvos9egGeD90JWwBOih1WBzHfYCac_I4RQeET1FkFyy_Dn4UIxrDQ7-DfjLpE4IAkiMPvGpYuGWmTKhEByclk6qAnSf6LR4YiMsZ4MDsf6P2iMZEEJPs_NxbleVnMOgAGbRZrHYi15JoikNeGafhTA8OHsIbq9LuHPWOon9coMtr943a5vM7lIjkAntDZTizYUic_j5Y1KVWYe1UmkTr_LeUsa&sai=AMfl-YTiVloiu3a_oKkvFelW2ODM8ofmRIlOO1a_xU6v3vwbbQATy2q_ev8OaaVjtLrnJS6d1ldax5UvLTrlUgMVNYlUxbj-Bwc0QbioLxzinICzPmAsK7gNuL56WPq_HEcfd1mGwh-72QE-VpRj7kcZQc4&sig=Cg0ArKJSzMAGZM0THsbVEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:02 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:02 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Apr-2024 19:41:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 25 Apr 2024 19:26:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.5	50536	173.194.219.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	1782	OUT	GET /pagead/adview?ai=CFb4LR64qZt_aLqWKqMwPkZmJ0AmjprHLbIXIn6mtEMCNtwEQASAAYMm-uYfgo7QQggEXY2EtcHViLTE2MDE0NzcwMzQyNjY0ODLIAQngAgCoAwHIAwKqBMsCT9D2A7OE4iw8cIstise86zjHxBMSB78pA9otgrJUiCerPrvifYhMDd-TE_bEChuwPWH1fhnm2eMYV6I-jUauVKzUL1l-Ncth5wdIgM-JuQWCL2gil2CrUfvdq3l1Q2x9qfaU29lD8qyD-8EtnIn7mbT_D9RGkh8ErYj8AY1kkC0EOIEeL2kFThshtkY-SKQFbhv06R3HRfra-vr-s9w9EdmoEyc1veBdiNHZGk-zuJzJJRBjjnUXHM9AQQbfUWmqpJ4hZ6nOd-Gk2DkifVtu7xW1wr9kT3-0QDZRGkhGk44GMIwXY9e-E5wOjAky7_H4UjXO5HE-vUR8kR9S9FZdtzuirSLHPyTq_QHzQQ-mQt6xKWsIZs725MPmBLj9ClxLf9gQDJUpDEVrlWSvqN8cJ0D-DNRLWdz3bXPa-NnDvK5Pkl3usYH94hmfOuAEAYAGz47m6NnE_9zqAaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCIIgGEQATICigI6CYBAgMCAgICgKEi9_cE6WLyDuI6M3oUDgAoD-gsCCAGADAHiDRMI-8G4jozehQMVJQWKAx2RTAKa0BUBgBcBshccChoSFHB1Yi0xNjAxNDc3MDM0MjY2NDgyGMapBw&sigh=Haz2EZl3Koo&uach_m=%5BUACH%5D&cid=CAQSTgB7FLtqewXDOp9n9ihLvpXkhB61QmB7TdZofeHQmn1qbobrW9EEgKI6bVa3U5Od4ewjHpES-hLbSvhU5ISSJMoKzgXhfcx5wOPKrMaoNBgB&cbvp=2&vis=1 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:02 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 19:26:02 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.5	50537	35.208.249.213	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	1811	OUT	GET /api/log/winnotice?tn=41b6e88a2b85b0e731ef8e73e5558712&winloss=2&id=755fe0a11c7f84a63de907ec2c7b0ef4&seat_id=${AUCTION_SEAT_ID}&currency=${AUCTION_CURRENCY}&bid_id=${AUCTION_BID_ID}&ad_id=${AUCTION_AD_ID}&loss=${AUCTION_LOSS}&imp_id=1&price=${AUCTION_PRICE}&test=0&time=1714073160&dp=udvXexflVfCYdQPF3YbtcPD6yJDw0fhdKBw2X0o4o4Q&dsp_id=22&data=W76JtY2sQQuoaAv-Y6CDSSFuO8n5wmAP7UYkccAlvUNuKMzZhBSG0pQ-Tu2Xq6EEHlHRnk2RbbaDkmMDjPhdRUCn-je7V6rX8iPTvWOhVI_mJJcgY8ln3y6rPY9XbYjO5DLF7fXKFfsXyydYG2uklcjMgsKrjGwiGrz9t8Rmi7LjVTRoi_apchm48mkO-xQl9vz8pqFDFwxjGn8KGiDdq_CvN6PCy_8W_i3NOSmLDGtHlkvkJSM2Gr0Y_hRRBP8WXOhycAPQn9tp3mAaiIeK2t_l0nvVKJo8MLJt8tL4j6L9oi04_Kr33oUt_yH3XUGYZaJGYziLeFSO8lZUtISdMuR3YOpoja5DwEuYJXZSALcyapFYA87pQIZRexm5Mez6D5c2uj0o42YXaJbpQlzcvfQprfHN5uRnBGUsP4qzdpmvQWZV-3dlk2ClyLrJ6IYRYQYmHOvew59U1wtWy277Iz6_sv4nN3TszHDPzGOjSrTFCKvFnBvuKg7WdJwrL6ur0sKVf9MGXsrUQJuowYNmBY4XtZCsOzKKhM3qoT-k7LfLiG2Mc49J6I88oK-paTeMINKM9WaFyKarFGXP_1VZEK3w2R0Ks3lExWU2IppsaYPlhDBuuzfk-YbU7fahH2tLXqk2gi8yX8DUDqRJpqeHV5fdcf3TRRUccRwxj8moKaASJsTCvRVM0MFTQYFuyrdIKWL_WBgKmXv37u8oLFY_FvbpT9y2z_ITX75eZynpwlg&trackingid=8c58b1b530c5cb3796d4811c4fba22d0&sp=udvXexflVfCYdQPF3YbtcPD6yJDw0fhdKBw2X0o4o4Q&cbvp=2 HTTP/1.1 Host: trace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:03 UTC	209	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Date: Thu, 25 Apr 2024 19:26:02 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.5	50541	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	984	OUT	GET /w/1.0/pd?ph=bbb82fae-1d27-4d90-bb10-e24164ecd7bc&google_gid=CAESEB4i_j4ULbm2mcmEpduaZ2g&google_cver=1&google_push=AXcoOmShu3BGi1KS6I3F4rRSYcjTgIKwOzlgoykI3viBqOYXgLfk7NH84OrpSrqQ4WO0A3ideG3SLwp8hHC_Pkar3L74NMX8gtc HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8
2024-04-25 19:26:02 UTC	706	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; Version=1; Expires=Fri, 25-Apr-2025 19:26:02 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI; Version=1; Expires=Fri, 10-May-2024 19:26:02 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://sync.srv.stackadapt.com/sync?nid=268 Date: Thu, 25 Apr 2024 19:26:02 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.5	50542	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	859	OUT	GET /pixel/attr?d=AHNF13Iu-faKQ4meHnlSeJnZ5BDYHVXFUi27jzsANY7HJGYPnHq6R4fS8mq_lMAsTE1bPyx0hs8RzQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:02 UTC	236	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 19:26:02 GMT Content-Type: text/html Server: HTTP server (unknown) Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.5	50538	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	4043	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; PugT=1714073161; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA
2024-04-25 19:26:03 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:02 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:02 GMT; path=/ Set-Cookie: PugT=1714073162; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:02 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.5	50540	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	1006	OUT	GET /csync/RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%7D
2024-04-25 19:26:03 UTC	628	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:26:04 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005%22%7D; path=/; expires=Fri, 25 Apr 2025 19:26:04 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005 etag: RX01b099a217ee411887d581f28ff0ec22005 connection: close
2024-04-25 19:26:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.5	50547	3.163.80.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	772	OUT	GET /c/n///-?adNetInit=g&google_gid=CAESEL1cbr-GrVY7-7cxHEmRtyQ&google_cver=1&google_push=AXcoOmSI2kqgaqv2En51D506l7bVX39bWMD2H8AHcFmkAwVT5Lkj9ERVVQJy3qKGAEwdz-9RyQ7zt_amh2zgjip1BO2Kg-UF_Qo HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:03 UTC	655	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Thu, 25 Apr 2024 19:26:03 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=fdca454d4b; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMinf=fdca454d4b; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://router.infolinks.com/dyn/smat-us?user_id=fdca454d4b&gdpr=0&gdpr_consent= X-Cache: Miss from cloudfront Via: 1.1 b5c159ab1e3d68034f359064c18c720a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: OH8FfJBEH8wHpGA1Noa0RqQBULbhEB5GBnk6j8tXR8CjfBV770A9aQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.5	50550	142.250.105.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	602	OUT	GET /ads/studio/cached_libs/createjs_2019.11.15_min.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/dfp/120006/4861501641/1605545600158/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:03 UTC	767	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 242058 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 19:26:03 GMT Expires: Thu, 25 Apr 2024 19:26:03 GMT Cache-Control: public, max-age=0 Last-Modified: Fri, 15 Nov 2019 19:16:20 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:03 UTC	488	IN	Data Raw: 2f 2a 21 0a 2a 20 40 6c 69 63 65 6e 73 65 20 63 72 65 61 74 65 6a 73 0a 2a 20 56 69 73 69 74 20 68 74 74 70 3a 2f 2f 63 72 65 61 74 65 6a 73 2e 63 6f 6d 2f 20 66 6f 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2c 20 75 70 64 61 74 65 73 20 61 6e 64 20 65 78 61 6d 70 6c 65 73 2e 0a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 2d 32 30 31 35 20 67 73 6b 69 6e 6e 65 72 2e 63 6f 6d 2c 20 69 6e 63 2e 0a 2a 0a 2a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 68 74 6d 6c 0a 2a 0a 2a 20 54 68 69 73 Data Ascii: /! @license createjs* Visit http://createjs.com/ for documentation, updates and examples. Copyright (c) 2011-2015 gskinner.com, inc. Distributed under the terms of the MIT license.* http://www.opensource.org/licenses/mit-license.html** This
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 3d 6e 65 77 20 63 7d 2c 74 68 69 73 2e 63 72 65 61 74 65 6a 73 3d 74 68 69 73 2e 63 72 65 61 74 65 6a 73 7c 7c 7b 7d 2c 63 72 65 61 74 65 6a 73 2e 70 72 6f 6d 6f 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 61 2e 70 72 6f 74 6f 74 79 70 65 2c 64 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 26 26 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 63 29 7c 7c 63 2e 5f 5f 70 72 6f 74 6f 5f 5f 3b 69 66 28 64 29 7b 63 5b 28 62 2b 3d 22 5f 22 29 2b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 5d 3d 64 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 26 26 22 66 75 6e 63 74 69 6f Data Ascii: =new c},this.createjs=this.createjs\|\|{},createjs.promote=function(a,b){"use strict";var c=a.prototype,d=Object.getPrototypeOf&&Object.getPrototypeOf(c)\|\|c.__proto__;if(d){c[(b+="_")+"constructor"]=d.constructor;for(var e in d)c.hasOwnProperty(e)&&"functio
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 63 65 6c 61 62 6c 65 26 26 21 30 7d 2c 62 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 21 30 7d 2c 62 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 74 68 69 73 2e 70 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 21 30 7d 2c 62 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 64 3d 21 30 7d 2c 62 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 28 74 68 69 73 2e 74 79 70 65 2c 74 68 69 73 2e 62 75 Data Ascii: celable&&!0},b.stopPropagation=function(){this.propagationStopped=!0},b.stopImmediatePropagation=function(){this.immediatePropagationStopped=this.propagationStopped=!0},b.remove=function(){this.removed=!0},b.clone=function(){return new a(this.type,this.bu
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 3f 74 68 69 73 2e 5f 63 61 70 74 75 72 65 4c 69 73 74 65 6e 65 72 73 3a 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 3b 69 66 28 64 29 7b 76 61 72 20 65 3d 64 5b 61 5d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 66 3d 30 2c 67 3d 65 2e 6c 65 6e 67 74 68 3b 67 3e 66 3b 66 2b 2b 29 69 66 28 65 5b 66 5d 3d 3d 62 29 7b 31 3d 3d 67 3f 64 65 6c 65 74 65 20 64 5b 61 5d 3a 65 2e 73 70 6c 69 63 65 28 66 2c 31 29 3b 62 72 65 61 6b 7d 7d 7d 2c 62 2e 6f 66 66 3d 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 62 2e 72 65 6d 6f 76 65 41 6c 6c 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3f 28 74 68 69 73 2e 5f 6c 69 73 74 65 6e 65 72 73 26 26 64 65 6c 65 Data Ascii: ction(a,b,c){var d=c?this._captureListeners:this._listeners;if(d){var e=d[a];if(e)for(var f=0,g=e.length;g>f;f++)if(e[f]==b){1==g?delete d[a]:e.splice(f,1);break}}},b.off=b.removeEventListener,b.removeAllEventListeners=function(a){a?(this._listeners&&dele
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 6e 74 54 61 72 67 65 74 3d 74 68 69 73 7d 63 61 74 63 68 28 66 29 7b 7d 74 72 79 7b 61 2e 65 76 65 6e 74 50 68 61 73 65 3d 30 7c 62 7d 63 61 74 63 68 28 66 29 7b 7d 61 2e 72 65 6d 6f 76 65 64 3d 21 31 2c 64 3d 64 2e 73 6c 69 63 65 28 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 63 3e 67 26 26 21 61 2e 69 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3b 67 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 67 5d 3b 68 2e 68 61 6e 64 6c 65 45 76 65 6e 74 3f 68 2e 68 61 6e 64 6c 65 45 76 65 6e 74 28 61 29 3a 68 28 61 29 2c 61 2e 72 65 6d 6f 76 65 64 26 26 28 74 68 69 73 2e 6f 66 66 28 61 2e 74 79 70 65 2c 68 2c 31 3d 3d 62 29 2c 61 2e 72 65 6d 6f 76 65 64 3d 21 31 29 7d 7d 32 3d 3d 3d 62 26 26 74 68 69 73 2e 5f 64 69 73 70 61 74 63 68 45 76 65 Data Ascii: ntTarget=this}catch(f){}try{a.eventPhase=0\|b}catch(f){}a.removed=!1,d=d.slice();for(var g=0;c>g&&!a.immediatePropagationStopped;g++){var h=d[g];h.handleEvent?h.handleEvent(a):h(a),a.removed&&(this.off(a.type,h,1==b),a.removed=!1)}}2===b&&this._dispatchEve
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 2c 61 2e 73 65 74 46 50 53 3d 63 72 65 61 74 65 6a 73 2e 64 65 70 72 65 63 61 74 65 28 61 2e 5f 73 65 74 46 50 53 2c 22 54 69 63 6b 65 72 2e 73 65 74 46 50 53 22 29 2c 61 2e 5f 67 65 74 46 50 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 65 33 2f 61 2e 5f 69 6e 74 65 72 76 61 6c 7d 2c 61 2e 67 65 74 46 50 53 3d 63 72 65 61 74 65 6a 73 2e 64 65 70 72 65 63 61 74 65 28 61 2e 5f 67 65 74 46 50 53 2c 22 54 69 63 6b 65 72 2e 67 65 74 46 50 53 22 29 3b 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 69 6e 74 65 72 76 61 6c 3a 7b 67 65 74 3a 61 2e 5f 67 65 74 49 6e 74 65 72 76 61 6c 2c 73 65 74 3a 61 2e 5f 73 65 74 49 6e 74 65 72 76 61 6c 7d 2c 66 72 61 6d 65 72 61 74 65 3a 7b 67 65 74 3a 61 2e 5f 67 Data Ascii: ,a.setFPS=createjs.deprecate(a._setFPS,"Ticker.setFPS"),a._getFPS=function(){return 1e3/a._interval},a.getFPS=createjs.deprecate(a._getFPS,"Ticker.getFPS");try{Object.defineProperties(a,{interval:{get:a._getInterval,set:a._setInterval},framerate:{get:a._g
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 54 69 6d 65 7c 7c 61 2e 5f 73 74 61 72 74 54 69 6d 65 29 2d 28 62 3f 61 2e 5f 70 61 75 73 65 64 54 69 6d 65 3a 30 29 3a 2d 31 7d 2c 61 2e 67 65 74 54 69 63 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 5f 74 69 63 6b 73 2d 28 62 3f 61 2e 5f 70 61 75 73 65 64 54 69 63 6b 73 3a 30 29 7d 2c 61 2e 5f 68 61 6e 64 6c 65 53 79 6e 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 5f 74 69 6d 65 72 49 64 3d 6e 75 6c 6c 2c 61 2e 5f 73 65 74 75 70 54 69 63 6b 28 29 2c 61 2e 5f 67 65 74 54 69 6d 65 28 29 2d 61 2e 5f 6c 61 73 74 54 69 6d 65 3e 3d 2e 39 37 2a 28 61 2e 5f 69 6e 74 65 72 76 61 6c 2d 31 29 26 26 61 2e 5f 74 69 63 6b 28 29 7d 2c 61 2e 5f 68 61 6e 64 6c 65 52 41 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 5f 74 69 6d 65 72 49 64 3d Data Ascii: Time\|\|a._startTime)-(b?a._pausedTime:0):-1},a.getTicks=function(b){return a._ticks-(b?a._pausedTicks:0)},a._handleSynch=function(){a._timerId=null,a._setupTick(),a._getTime()-a._lastTime>=.97*(a._interval-1)&&a._tick()},a._handleRAF=function(){a._timerId=
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 73 4e 6f 77 7c 7c 63 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 4e 6f 77 7c 7c 63 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 77 65 62 6b 69 74 4e 6f 77 3b 61 2e 5f 67 65 74 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 64 26 26 64 2e 63 61 6c 6c 28 63 2e 70 65 72 66 6f 72 6d 61 6e 63 65 29 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 29 2d 61 2e 5f 73 74 61 72 74 54 69 6d 65 7d 2c 63 72 65 61 74 65 6a 73 2e 54 69 63 6b 65 72 3d 61 7d 28 29 2c 74 68 69 73 2e 63 72 65 61 74 65 6a 73 3d 74 68 69 73 2e 63 72 65 61 74 65 6a 73 7c 7c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 74 68 69 73 2e 72 65 61 64 79 Data Ascii: performance.msNow\|\|c.performance.oNow\|\|c.performance.webkitNow;a._getTime=function(){return(d&&d.call(c.performance)\|\|(new Date).getTime())-a._startTime},createjs.Ticker=a}(),this.createjs=this.createjs\|\|{},function(){"use strict";function a(a){this.ready
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 74 54 61 72 67 65 74 2e 67 6c 6f 62 61 6c 54 6f 4c 6f 63 61 6c 28 74 68 69 73 2e 72 61 77 58 2c 74 68 69 73 2e 72 61 77 59 29 2e 78 7d 2c 62 2e 5f 67 65 74 5f 6c 6f 63 61 6c 59 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 67 6c 6f 62 61 6c 54 6f 4c 6f 63 61 6c 28 74 68 69 73 2e 72 61 77 58 2c 74 68 69 73 2e 72 61 77 59 29 2e 79 7d 2c 62 2e 5f 67 65 74 5f 69 73 54 6f 75 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 44 7d 3b 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 62 2c 7b 6c 6f 63 61 6c 58 3a 7b 67 65 74 3a 62 2e 5f 67 65 74 5f 6c 6f 63 61 6c 58 7d 2c 6c 6f 63 61 6c 59 3a 7b 67 Data Ascii: tTarget.globalToLocal(this.rawX,this.rawY).x},b._get_localY=function(){return this.currentTarget.globalToLocal(this.rawX,this.rawY).y},b._get_isTouch=function(){return-1!==this.pointerID};try{Object.defineProperties(b,{localX:{get:b._get_localX},localY:{g
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 62 3d 62 2a 67 2b 64 2a 74 68 69 73 2e 62 2c 74 68 69 73 2e 63 3d 61 2a 68 2b 63 2a 74 68 69 73 2e 64 2c 74 68 69 73 2e 64 3d 62 2a 68 2b 64 2a 74 68 69 73 2e 64 2c 74 68 69 73 2e 74 78 3d 61 2a 69 2b 63 2a 74 68 69 73 2e 74 79 2b 65 2c 74 68 69 73 2e 74 79 3d 62 2a 69 2b 64 2a 74 68 69 73 2e 74 79 2b 66 2c 74 68 69 73 7d 2c 62 2e 61 70 70 65 6e 64 4d 61 74 72 69 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 70 70 65 6e 64 28 61 2e 61 2c 61 2e 62 2c 61 2e 63 2c 61 2e 64 2c 61 2e 74 78 2c 61 2e 74 79 29 7d 2c 62 2e 70 72 65 70 65 6e 64 4d 61 74 72 69 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 70 65 6e 64 28 61 2e 61 2c 61 2e 62 2c 61 2e 63 2c 61 2e 64 2c 61 2e 74 78 2c 61 2e 74 Data Ascii: b=bg+dthis.b,this.c=ah+cthis.d,this.d=bh+dthis.d,this.tx=ai+cthis.ty+e,this.ty=bi+dthis.ty+f,this},b.appendMatrix=function(a){return this.append(a.a,a.b,a.c,a.d,a.tx,a.ty)},b.prependMatrix=function(a){return this.prepend(a.a,a.b,a.c,a.d,a.tx,a.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.5	50549	142.250.105.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	622	OUT	GET /dfp/120006/4861501641/1605545600158/adc_stm_space_300x250_animated.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/dfp/120006/4861501641/1605545600158/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:03 UTC	739	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 283828 Date: Thu, 25 Apr 2024 19:26:03 GMT Expires: Fri, 26 Apr 2024 19:26:03 GMT Cache-Control: public, max-age=86400 Last-Modified: Mon, 16 Nov 2020 16:53:20 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:03 UTC	516	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 63 6a 73 2c 20 61 6e 29 20 7b 0a 0a 76 61 72 20 70 3b 20 2f 2f 20 73 68 6f 72 74 63 75 74 20 74 6f 20 72 65 66 65 72 65 6e 63 65 20 70 72 6f 74 6f 74 79 70 65 73 0a 76 61 72 20 6c 69 62 3d 7b 7d 3b 76 61 72 20 73 73 3d 7b 7d 3b 76 61 72 20 69 6d 67 3d 7b 7d 3b 0a 6c 69 62 2e 73 73 4d 65 74 61 64 61 74 61 20 3d 20 5b 0a 09 09 7b 6e 61 6d 65 3a 22 61 64 63 5f 73 74 6d 5f 73 70 61 63 65 5f 33 30 30 78 32 35 30 5f 61 6e 69 6d 61 74 65 64 5f 61 74 6c 61 73 5f 31 22 2c 20 66 72 61 6d 65 73 3a 20 5b 5b 30 2c 35 30 32 2c 35 30 35 2c 34 39 34 5d 2c 5b 30 2c 30 2c 36 30 30 2c 35 30 30 5d 5d 7d 0a 5d 3b 0a 0a 0a 28 6c 69 62 2e 41 6e 4d 6f 76 69 65 43 6c 69 70 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 74 68 69 73 2e 63 75 72 72 Data Ascii: (function (cjs, an) {var p; // shortcut to reference prototypesvar lib={};var ss={};var img={};lib.ssMetadata = [{name:"adc_stm_space_300x250_animated_atlas_1", frames: [[0,502,505,494],[0,0,600,500]]}];(lib.AnMovieClip = function(){this.curr
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 09 74 68 69 73 2e 67 6f 74 6f 41 6e 64 50 6c 61 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 70 6f 73 69 74 69 6f 6e 4f 72 4c 61 62 65 6c 29 7b 0a 09 09 74 68 69 73 2e 63 6c 65 61 72 41 6c 6c 53 6f 75 6e 64 53 74 72 65 61 6d 73 28 29 3b 0a 09 09 74 68 69 73 2e 73 74 61 72 74 53 74 72 65 61 6d 53 6f 75 6e 64 73 46 6f 72 54 61 72 67 65 74 65 64 46 72 61 6d 65 28 70 6f 73 69 74 69 6f 6e 4f 72 4c 61 62 65 6c 29 3b 0a 09 09 63 6a 73 2e 4d 6f 76 69 65 43 6c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 67 6f 74 6f 41 6e 64 50 6c 61 79 2e 63 61 6c 6c 28 74 68 69 73 2c 70 6f 73 69 74 69 6f 6e 4f 72 4c 61 62 65 6c 29 3b 0a 09 7d 0a 09 74 68 69 73 2e 70 6c 61 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 74 68 69 73 2e 63 6c 65 61 72 41 6c 6c 53 6f 75 6e 64 53 74 72 65 Data Ascii: this.gotoAndPlay = function(positionOrLabel){this.clearAllSoundStreams();this.startStreamSoundsForTargetedFrame(positionOrLabel);cjs.MovieClip.prototype.gotoAndPlay.call(this,positionOrLabel);}this.play = function(){this.clearAllSoundStre
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 0a 09 09 09 09 09 09 65 6c 73 65 20 69 66 28 73 6f 75 6e 64 2e 6c 6f 6f 70 20 3e 20 31 29 7b 0a 09 09 09 09 09 09 09 76 61 72 20 6c 6f 6f 70 20 3d 20 74 61 72 67 65 74 50 6f 73 69 74 69 6f 6e 20 2f 69 6e 73 74 61 6e 63 65 2e 64 75 72 61 74 69 6f 6e 3b 0a 09 09 09 09 09 09 09 72 65 6d 61 69 6e 69 6e 67 4c 6f 6f 70 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 73 6f 75 6e 64 2e 6c 6f 6f 70 20 2d 20 6c 6f 6f 70 29 3b 0a 09 09 09 09 09 09 09 69 66 28 74 61 72 67 65 74 50 6f 73 69 74 69 6f 6e 20 3d 3d 20 30 29 7b 20 72 65 6d 61 69 6e 69 6e 67 4c 6f 6f 70 20 2d 3d 20 31 3b 20 7d 0a 09 09 09 09 09 09 09 74 61 72 67 65 74 50 6f 73 69 74 69 6f 6e 20 3d 20 74 61 72 67 65 74 50 6f 73 69 74 69 6f 6e 20 25 20 69 6e 73 74 61 6e 63 65 2e 64 75 72 61 74 69 6f 6e 3b 0a 09 09 Data Ascii: else if(sound.loop > 1){var loop = targetPosition /instance.duration;remainingLoop = Math.floor(sound.loop - loop);if(targetPosition == 0){ remainingLoop -= 1; }targetPosition = targetPosition % instance.duration;
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 76 61 6c 75 65 20 3d 20 74 68 69 73 2e 73 6f 75 6e 64 53 74 72 65 61 6d 44 75 72 61 74 69 6f 6e 2e 67 65 74 28 6b 65 79 29 3b 0a 09 09 09 09 69 66 28 28 76 61 6c 75 65 2e 65 6e 64 29 20 3d 3d 20 63 75 72 72 65 6e 74 46 72 61 6d 65 29 7b 0a 09 09 09 09 09 6b 65 79 2e 69 6e 73 74 61 6e 63 65 2e 73 74 6f 70 28 29 3b 0a 09 09 09 09 09 69 66 28 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6f 75 6e 64 53 74 72 65 61 6d 49 6e 4d 6f 76 69 65 63 6c 69 70 20 3d 3d 20 6b 65 79 29 20 7b 20 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6f 75 6e 64 53 74 72 65 61 6d 49 6e 4d 6f 76 69 65 63 6c 69 70 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 20 7d 0a 09 09 09 09 09 74 68 69 73 2e 73 6f 75 6e 64 53 74 72 65 61 6d 44 75 72 61 74 69 6f 6e 2e 64 65 6c 65 74 65 28 6b 65 79 29 3b 0a 09 09 09 Data Ascii: value = this.soundStreamDuration.get(key);if((value.end) == currentFrame){key.instance.stop();if(this.currentSoundStreamInMovieclip == key) { this.currentSoundStreamInMovieclip = undefined; }this.soundStreamDuration.delete(key);
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 64 49 6e 73 74 61 6e 63 65 20 3d 20 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6f 75 6e 64 53 74 72 65 61 6d 49 6e 4d 6f 76 69 65 63 6c 69 70 2e 69 6e 73 74 61 6e 63 65 3b 0a 09 09 09 69 66 28 73 6f 75 6e 64 49 6e 73 74 61 6e 63 65 2e 70 6f 73 69 74 69 6f 6e 20 21 3d 20 30 29 7b 0a 09 09 09 09 76 61 72 20 73 6f 75 6e 64 56 61 6c 75 65 20 3d 20 74 68 69 73 2e 73 6f 75 6e 64 53 74 72 65 61 6d 44 75 72 61 74 69 6f 6e 2e 67 65 74 28 74 68 69 73 2e 63 75 72 72 65 6e 74 53 6f 75 6e 64 53 74 72 65 61 6d 49 6e 4d 6f 76 69 65 63 6c 69 70 29 3b 0a 09 09 09 09 76 61 72 20 73 6f 75 6e 64 50 6f 73 69 74 69 6f 6e 20 3d 20 28 73 6f 75 6e 64 56 61 6c 75 65 2e 6f 66 66 73 65 74 3f 28 73 6f 75 6e 64 49 6e 73 74 61 6e 63 65 2e 70 6f 73 69 74 69 6f 6e 20 2d 20 73 6f 75 6e 64 56 Data Ascii: dInstance = this.currentSoundStreamInMovieclip.instance;if(soundInstance.position != 0){var soundValue = this.soundStreamDuration.get(this.currentSoundStreamInMovieclip);var soundPosition = (soundValue.offset?(soundInstance.position - soundV
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 68 69 73 2e 5f 63 6c 6f 6e 65 50 72 6f 70 73 28 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 68 69 73 2e 6d 6f 64 65 2c 20 74 68 69 73 2e 73 74 61 72 74 50 6f 73 69 74 69 6f 6e 2c 20 74 68 69 73 2e 6c 6f 6f 70 29 29 3b 0a 09 63 6c 6f 6e 65 2e 67 6f 74 6f 41 6e 64 53 74 6f 70 28 74 68 69 73 2e 63 75 72 72 65 6e 74 46 72 61 6d 65 29 3b 0a 09 63 6c 6f 6e 65 2e 70 61 75 73 65 64 20 3d 20 74 68 69 73 2e 70 61 75 73 65 64 3b 0a 09 63 6c 6f 6e 65 2e 66 72 61 6d 65 72 61 74 65 20 3d 20 74 68 69 73 2e 66 72 61 6d 65 72 61 74 65 3b 0a 09 72 65 74 75 72 6e 20 63 6c 6f 6e 65 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4d 43 53 79 6d 62 6f 6c 50 72 6f 74 6f 74 79 70 65 28 73 79 6d 62 6f 6c 2c 20 6e 6f 6d 69 6e 61 6c 42 6f 75 6e 64 73 2c 20 Data Ascii: his._cloneProps(new this.constructor(this.mode, this.startPosition, this.loop));clone.gotoAndStop(this.currentFrame);clone.paused = this.paused;clone.framerate = this.framerate;return clone;}function getMCSymbolPrototype(symbol, nominalBounds,
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 61 70 65 5f 33 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 32 33 2e 36 2c 2d 31 33 2e 32 32 39 32 2c 30 2e 35 2c 30 2e 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 34 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 34 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 46 46 46 46 46 46 22 29 2e 73 28 29 2e 70 28 22 41 41 41 41 41 49 41 41 41 41 51 41 41 41 41 41 41 41 41 51 41 41 41 41 41 41 41 41 51 41 41 41 41 41 41 41 41 51 41 42 41 41 41 41 41 41 49 41 41 41 41 49 67 42 41 42 49 41 41 67 42 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 34 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 31 2e 31 38 37 35 2c 2d 39 2e 32 35 2c 30 2e 35 2c 30 2e 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 35 20 3d 20 6e 65 Data Ascii: ape_3.setTransform(23.6,-13.2292,0.5,0.5);this.shape_4 = new cjs.Shape();this.shape_4.graphics.f("#FFFFFF").s().p("AAAAAIAAAAQAAAAAAAAQAAAAAAAAQAAAAAAAAQABAAAAAAIAAAAIgBABIAAgBg");this.shape_4.setTransform(1.1875,-9.25,0.5,0.5);this.shape_5 = ne
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 46 46 46 46 22 29 2e 73 28 29 2e 70 28 22 41 67 42 41 43 51 41 41 67 43 41 43 67 42 49 41 42 41 42 49 67 43 41 43 49 67 42 41 41 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 30 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 37 2e 32 35 2c 31 30 2e 36 32 35 2c 30 2e 35 2c 30 2e 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 31 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 31 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 46 46 46 46 46 46 22 29 2e 73 28 29 2e 70 28 22 41 41 41 41 41 49 41 41 41 41 49 41 42 41 41 49 67 42 41 42 49 41 41 41 41 49 41 41 67 42 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 31 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 33 2e 38 37 35 2c 38 2e 35 32 32 35 2c 30 2e Data Ascii: FFFF").s().p("AgBACQAAgCACgBIABABIgCACIgBAAg");this.shape_10.setTransform(7.25,10.625,0.5,0.5);this.shape_11 = new cjs.Shape();this.shape_11.graphics.f("#FFFFFF").s().p("AAAAAIAAAAIABAAIgBABIAAAAIAAgBg");this.shape_11.setTransform(3.875,8.5225,0.
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 65 74 54 72 61 6e 73 66 6f 72 6d 28 2d 30 2e 34 38 37 35 2c 2d 39 2e 34 33 37 35 2c 30 2e 35 2c 30 2e 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 38 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 38 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 46 46 46 46 46 46 22 29 2e 73 28 29 2e 70 28 22 41 67 42 41 42 49 41 41 41 41 49 41 44 67 42 49 67 43 41 42 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 38 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 33 2e 34 33 37 35 2c 2d 34 2e 36 31 32 35 2c 30 2e 35 2c 30 2e 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 39 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 31 39 2e 67 72 61 70 68 69 63 73 2e 66 Data Ascii: etTransform(-0.4875,-9.4375,0.5,0.5);this.shape_18 = new cjs.Shape();this.shape_18.graphics.f("#FFFFFF").s().p("AgBABIAAAAIADgBIgCABg");this.shape_18.setTransform(3.4375,-4.6125,0.5,0.5);this.shape_19 = new cjs.Shape();this.shape_19.graphics.f
2024-04-25 19:26:03 UTC	1255	IN	Data Raw: 65 74 54 72 61 6e 73 66 6f 72 6d 28 33 2e 31 35 36 33 2c 2d 31 2e 30 32 35 2c 30 2e 35 2c 30 2e 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 32 35 20 3d 20 6e 65 77 20 63 6a 73 2e 53 68 61 70 65 28 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 32 35 2e 67 72 61 70 68 69 63 73 2e 66 28 22 23 46 46 46 46 46 46 22 29 2e 73 28 29 2e 70 28 22 41 41 42 67 42 49 41 42 41 43 49 67 42 41 41 49 67 43 41 42 51 41 41 67 42 41 42 41 41 51 41 41 67 42 41 41 41 41 51 41 41 41 41 41 41 41 41 51 41 41 41 41 41 42 67 42 67 22 29 3b 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 32 35 2e 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 2d 30 2e 38 37 35 2c 2d 38 2e 33 37 35 2c 30 2e 35 2c 30 2e 35 29 3b 0a 0a 09 74 68 69 73 2e 73 68 61 70 65 5f 32 36 20 3d 20 6e 65 77 20 63 6a 73 2e 53 Data Ascii: etTransform(3.1563,-1.025,0.5,0.5);this.shape_25 = new cjs.Shape();this.shape_25.graphics.f("#FFFFFF").s().p("AABgBIABACIgBAAIgCABQAAgBABAAQAAgBAAAAQAAAAAAAAQAAAAABgBg");this.shape_25.setTransform(-0.875,-8.375,0.5,0.5);this.shape_26 = new cjs.S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.5	50546	107.22.223.223	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:02 UTC	845	OUT	GET /dsp/google/pixelmatch?google_gid=CAESEAGNrQOzXJIphjtqJABB8Yo&google_cver=1&google_push=AXcoOmTvB-Y6ooBCuGLQyIwoGRBnrtjjr9a9YK0a-0nGxteVWxN2PZI3_hVk2I1dR2Y25gvIVAAAjAqm9TzFYvEtGvP2nbWerUmK HTTP/1.1 Host: ap.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl; _ljtrtb_80=LVFMWCG3-S-CYEQ
2024-04-25 19:26:03 UTC	633	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 25 Apr 2024 19:26:03 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=sovrn&google_push=AXcoOmTvB-Y6ooBCuGLQyIwoGRBnrtjjr9a9YK0a-0nGxteVWxN2PZI3_hVk2I1dR2Y25gvIVAAAjAqm9TzFYvEtGvP2nbWerUmK&google_hm=IjUNALZH0EzpouOqQka7fQWl Set-Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl;Version=1;Domain=.lijit.com;Path=/;Max-Age=31536000;Secure; SameSite=None; Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, DELETE, PUT Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Requested-With, Content-Type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.5	50544	202.233.84.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:03 UTC	763	OUT	GET /g/asr?google_gid=CAESEO1iBBYLvdjKFw6_WiQGcDQ&google_cver=1&google_push=AXcoOmR4bvUILxb5EetjAo2FbE-XnoVlMmCTuBecI2oh0xPgQ1Tn0kUgtGMJFiV4GUAFP3beasgAfb7JWbPbg7cBwlwKxGSkeaUq HTTP/1.1 Host: aid.send.microad.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:03 UTC	598	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 19:26:03 GMT Server: Apache Set-Cookie: TR=cd2c1d96f8bb63efde485c5cd79a680aea3e9d0f30701320; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:26:03 GMT; Domain=.send.microad.jp; Path=/; Secure; SameSite=None Content-Type: image/gif Content-Length: 43 P3P: policyref="http://www.microad.jp/w3c/p3p.xml",CP="NOI DSP COR NID DEVo PSAo OUR STP STA PRE" Access-Control-Allow-Headers: origin, x-requested-with, If-Modified-Since, content-type, Pragma, Cache-Control Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=3600 Connection: close
2024-04-25 19:26:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.5	50554	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:03 UTC	1296	OUT	GET /sync?nid=268 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis
2024-04-25 19:26:03 UTC	227	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:26:03 GMT Location: https://us-u.openx.net/w/1.0/sd?id=537082476&val=MBqnvcOAVHZk1_2R0gb5ubmYQuY Content-Length: 103 Connection: Close
2024-04-25 19:26:03 UTC	103	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 38 32 34 37 36 26 61 6d 70 3b 76 61 6c 3d 4d 42 71 6e 76 63 4f 41 56 48 5a 6b 31 5f 32 52 30 67 62 35 75 62 6d 59 51 75 59 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://us-u.openx.net/w/1.0/sd?id=537082476&val=MBqnvcOAVHZk1_2R0gb5ubmYQuY">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.5	50553	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:03 UTC	4020	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7673595621579059178 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; PugT=1714073161; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA
2024-04-25 19:26:03 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.5	50555	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:03 UTC	841	OUT	GET /pixel?google_nid=sovrn&google_push=AXcoOmTvB-Y6ooBCuGLQyIwoGRBnrtjjr9a9YK0a-0nGxteVWxN2PZI3_hVk2I1dR2Y25gvIVAAAjAqm9TzFYvEtGvP2nbWerUmK&google_hm=IjUNALZH0EzpouOqQka7fQWl HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:26:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.5	50557	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:03 UTC	4164	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073162
2024-04-25 19:26:03 UTC	663	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:03 GMT; path=/ Set-Cookie: PugT=1714073163; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.5	50560	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:03 UTC	830	OUT	GET /w/1.0/sd?id=537082476&val=MBqnvcOAVHZk1_2R0gb5ubmYQuY HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:04 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:03 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.5	50559	172.66.41.9	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	644	OUT	GET /dyn/smat-us?user_id=fdca454d4b&gdpr=0&gdpr_consent= HTTP/1.1 Host: router.infolinks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:05 UTC	476	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: SAMUSERCOOKIE=fdca454d4b; Domain=infolinks.com; Expires=Wed, 24-Jul-2024 19:26:05 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Tue, 25 Apr 2023 19:26:05 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a0b9040a35b033-ATL
2024-04-25 19:26:05 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.5	50563	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	762	OUT	GET /396846.gif?served_by=evergreen&partner_uid=41bccb41-99b0-03b3-11d7-830251b12c9f HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=YRTeF56YygIqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=; pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi46wEQCw==
2024-04-25 19:26:05 UTC	632	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=OImDuRmhrkIqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=; Path=/; Domain=rlcdn.com; Expires=Fri, 25 Apr 2025 19:26:05 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi46wEQCw==; Path=/; Domain=rlcdn.com; Expires=Mon, 24 Jun 2024 19:26:05 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.5	50561	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	870	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=25&external_user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:05 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.5	50395	207.65.37.184	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	3817	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MzI1MCZ0bD0xMjk2MDA=&piggybackCookie=5b5548e1-f48f-42a5-987f-5a866f7c8916&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073163
2024-04-25 19:26:05 UTC	696	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:05 GMT; path=/ Set-Cookie: PugT=1714073165; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:05 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.5	50564	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	4145	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGGt2UjFe-2ANo84BRAAAAAAA&expiration=1714159560&nuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073163
2024-04-25 19:26:05 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:05 GMT; path=/ Set-Cookie: PugT=1714073165; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.5	50568	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	1035	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyNi1kMjU1YWM2NDM3ZDg=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:05 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:26:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.5	50575	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	754	OUT	GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MTA3MjA4MDY2MTk3OTc0NjcyMjI5MA%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:05 UTC	617	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent= Date: Thu, 25 Apr 2024 19:26:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 248 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	248	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.5	50566	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	762	OUT	GET /xuid?mid=5989&xuid=CAESEKK4GKo1jrHm98VnRwrke5w&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:05 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:05 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:05 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:05 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.5	50570	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	757	OUT	GET /xuid?mid=3658&xuid=500c5aec-af13-42d6-a7ea-250f9438d1fe&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:05 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:05 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:05 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:05 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.5	50571	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	748	OUT	GET /xuid?mid=2662&xuid=y-TgsrWNpE2oTazxz5yrMaadmBl26dNhqiG4IVkrS0sw--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:05 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:05 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:05 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:05 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.5	50578	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	762	OUT	GET /idsync/ex/receive?partner_id=3371&partner_device_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:26:05 UTC	1227	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:05 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:26:05 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:26:05 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:26:05 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.5	50572	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	756	OUT	GET /xuid?mid=2319&xuid=0-301aa7bd-c380-5476-64d7-fd91d206f9b9$ip$185.152.66.230&dongle=4430 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:05 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:05 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:05 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:05 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.5	50565	38.68.201.140	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	655	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CAB_1148B1422_6EA26C92.1.0000000000000000662AAE47
2024-04-25 19:26:05 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Thu, 25 Apr 2024 19:26:05 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-397077965; includeSubDomains
2024-04-25 19:26:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.5	50567	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	762	OUT	GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MTA3MjA4MDY2MTk3OTc0NjcyMjI5MA%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:05 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:26:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.5	50569	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	817	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; receive-cookie-deprecation=1; uuid2=3473854422107831099
2024-04-25 19:26:05 UTC	1433	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=3473854422107831099 AN-X-Request-Uuid: ec8992e1-3847-49c9-9e0d-873c10b0ea2e Set-Cookie: XANDR_PANID=os5h4Jh2bHn6AZqt_RYa45GF_tv9iV4PDTa6mu2iZs9c3MvUCQLZjBqUze_Uu7u9Ro2J6StCIAIIxNsg4n8XHF-lGBCf8k1VVp3yN2gW0Go.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:26:05 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 13-Apr-2034 19:26:05 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3473854422107831099; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:26:05 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 185.152.66.230; 185.152.66.230; 672.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.5	50592	173.194.219.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	481	OUT	GET /pagead/js/car.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Accept: application/javascript Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:05 UTC	680	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 25 Apr 2024 19:26:05 GMT Expires: Thu, 25 Apr 2024 20:26:05 GMT Cache-Control: public, max-age=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 5254994389894157996 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 4043 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	575	IN	Data Raw: 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 65 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 67 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 29 26 26 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 2e 72 61 77 29 7d 66 75 6e 63 Data Ascii: /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var e=this\|\|self,f=function(a){return a};/ SPDX-License-Identifier: Apache-2.0 */ var g={};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}func
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 76 61 72 20 64 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 64 26 26 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 74 72 79 7b 62 3d 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 7d 29 7d 63 61 74 63 68 28 63 29 7b 65 2e 63 6f 6e 73 6f 6c 65 26 26 65 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 6e 3d 62 7d 61 3d 28 62 3d 6e 29 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 71 28 61 29 7d 3b 76 61 72 20 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 Data Ascii: ){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}n=b}a=(b=n)?b.createScriptURL(a):a;return new q(a)};var t=class{constru
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: 6e 20 20 20 20 49 74 20 6c 6f 6f 6b 73 20 6c 69 6b 65 20 79 6f 75 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 63 61 6c 6c 20 61 20 74 65 6d 70 6c 61 74 65 20 74 61 67 20 66 75 6e 63 74 69 6f 6e 20 28 66 6e 60 2e 2e 2e 60 29 5c 6e 20 20 20 20 75 73 69 6e 67 20 74 68 65 20 6e 6f 72 6d 61 6c 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 74 61 78 20 28 66 6e 28 2e 2e 2e 29 29 2c 20 77 68 69 63 68 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 5c 6e 5c 6e 20 20 20 20 54 68 65 20 66 75 6e 63 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 73 61 66 65 76 61 6c 75 65 73 20 6c 69 62 72 61 72 79 20 61 72 65 20 6e 6f 74 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 20 63 61 6c 6c 65 64 5c 6e 20 20 20 20 6c 69 6b 65 20 6e 6f 72 6d 61 6c 20 66 75 6e 63 74 69 6f 6e 73 2c 20 61 Data Ascii: n It looks like you are trying to call a template tag function (fn`...`)\n using the normal function syntax (fn(...)), which is not supported.\n\n The functions in the safevalues library are not designed to be called\n like normal functions, a
2024-04-25 19:26:05 UTC	958	IN	Data Raw: 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 74 6f 70 2d 6c 65 76 65 6c 20 64 6f 6d 61 69 6e 20 6d 75 73 74 20 73 74 61 72 74 20 77 69 74 68 20 61 20 6c 65 74 74 65 72 2e 22 29 3b 63 3d 21 30 7d 65 6c 73 65 20 63 3d 21 31 3b 69 66 28 21 63 29 69 66 28 2f 5e 5c 2f 2f 2e 74 65 73 74 28 64 29 29 69 66 28 22 2f 22 3d 3d 3d 64 7c 7c 31 3c 64 2e 6c 65 6e 67 74 68 26 26 22 2f 22 21 3d 3d 64 5b 31 5d 26 26 22 5c 5c 22 21 3d 3d 64 5b 31 5d 29 63 3d 21 30 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 70 61 74 68 20 73 74 61 72 74 20 69 6e 20 74 68 65 20 75 72 6c 20 69 73 20 69 6e 76 61 6c 69 64 2e 22 29 3b 65 6c 73 65 20 63 3d 21 31 3b 69 66 28 21 28 63 3d 63 7c 7c 52 65 67 45 78 70 28 22 5e 5b 5e 3a 5c 5c 73 5c 5c 5c 5c 2f 5d 2b 2f 22 29 2e Data Ascii: row Error("The top-level domain must start with a letter.");c=!0}else c=!1;if(!c)if(/^\//.test(d))if("/"===d\|\|1<d.length&&"/"!==d[1]&&"\\"!==d[1])c=!0;else throw Error("The path start in the url is invalid.");else c=!1;if(!(c=c\|\|RegExp("^[^:\\s\\\\/]+/").

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.5	50591	142.250.105.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	698	OUT	GET /dfp/120006/4861501641/1605545600158/images/adc_stm_space_300x250_animated_atlas_1.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/dfp/120006/4861501641/1605545600158/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:05 UTC	722	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 122923 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 14:15:42 GMT Expires: Fri, 26 Apr 2024 14:15:42 GMT Cache-Control: public, max-age=86400 Age: 18623 Last-Modified: Mon, 16 Nov 2020 16:53:20 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	533	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 04 00 08 03 00 00 00 48 c3 db b1 00 00 02 fd 50 4c 54 45 2c 54 54 7c 8f 51 7b 9c 75 bf f8 00 82 8b 41 40 4a 56 08 fd ff 31 b6 a3 a2 a1 85 24 47 4e d8 dc d8 4e 5f 48 a6 9d 5b 72 6c 3a 79 78 76 32 4c 3a a4 73 26 55 a3 0e 8c 9d 61 64 7f 47 89 a6 a6 83 a4 a3 37 54 3f 67 8c 89 9a a9 a9 76 5e 38 59 5f 41 3d 70 12 7d ad ac b9 db d4 38 fa fb 89 ba bd 87 ad ae 98 a9 6f 7c 7d 71 bd dd d9 95 84 67 1a f0 b7 54 5c 53 42 73 71 81 8e 92 4f 7a 79 88 b1 af 60 6f 3c b6 d7 d6 8d 94 8c 9e a3 a0 9e a0 9c ee f0 ec 9a b3 b2 64 9d 9a 41 33 1c 7b 8c 70 76 83 62 9a 66 11 b3 86 08 00 ff 08 46 77 72 e1 ae 15 04 af 0a 52 53 4f 83 9f a0 db f7 aa a1 a9 73 11 2d 35 9e 8f 93 94 cd bc ec fc 6a 0d 1a 24 21 3f 37 1a 83 92 64 Data Ascii: PNGIHDRHPLTE,TT\|Q{uA@JV1$GNN_H[rl:yxv2L:s&UadG7T?gv^8Y_A=p}8o\|}qgT\SBsqOzy`o<dA3{pvbfFwrRSOs-5j$!?7d
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: 98 b8 ba 88 73 32 0d 16 20 fc fc fc 9f 8d 5c fb fc fd 0f 1d 28 0a 1a 22 74 ac a9 04 f2 00 0d 1e 27 d6 d6 d6 76 b0 ae 0e 3e 43 10 1c 27 88 76 70 82 ee 00 77 9c 99 df df de 06 fb e9 74 a8 a6 74 a1 a0 0c 1c 27 44 30 11 0c 15 1c 7f a0 a1 7c b5 b1 82 a7 a9 0a 11 16 00 f8 df 7c a9 a9 a0 7a 33 78 9e 9d 7c ab af ce d1 bc 92 b9 08 0e 1c 27 fa fa fa 00 fa ff f6 f6 f6 8d ff ff 0e 39 3d 97 a2 a0 ff ff 00 ea ea ea 12 2d 39 41 40 5f a3 a2 a0 ff ff ff fc fc fc f9 f9 f9 f3 f3 f3 f8 f8 f8 02 1b 24 f2 f2 f2 fc fc fc ff ff ff 00 00 00 f1 f1 f1 34 34 2a f8 f8 f8 00 2e 74 f8 f8 f8 b6 b6 b6 f1 f1 f1 38 35 25 00 00 00 6a 2b 40 97 ff ff 80 00 ff 99 99 99 aa aa aa fc fc fc cc cc cc ff 00 ff f8 f8 f8 f8 f8 f8 f0 f0 f0 c6 c6 c6 a1 a7 a0 ad 85 eb ff 80 ff 14 2b 3a 79 9b a0 aa aa aa Data Ascii: s2 \("t'v>C'vpwtt'D0\|\|z3x\|'9=-9A@_$44*.t85%j+@+:y
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: fd ca fc ab 31 0f b0 b8 77 5a 86 4e e9 79 09 88 11 f0 0f bd 0a 40 7b 00 e5 fd 71 4b 50 9b fb 2e 36 86 4e 7a 50 9e b9 f7 03 31 02 fe 61 7c 08 f0 61 a4 d7 49 cc dd 94 55 c0 46 63 e6 b0 70 2f 20 46 80 46 9c c8 01 34 df d1 15 05 ba 58 c2 6e b9 18 83 cf 90 18 01 6a 70 42 01 98 0d 7a 7d e6 7a be ed 09 b3 dd dc a3 53 2e 46 80 4a 74 15 c0 f1 d4 7a a4 17 93 cc a4 83 18 01 aa 71 a4 0c b8 dd a4 cb 79 d5 c2 e4 27 f4 a2 ef 65 0a c5 08 d0 8e 23 0a 60 68 38 ad d7 68 84 af ce 9e cc 77 45 15 cc 9e 18 01 cf a1 a5 13 b0 35 b6 e7 c6 0c a3 96 e9 37 0e be 4f cb 6a 4d c0 2d fc 29 46 c0 3b dc 52 00 4d 93 93 e1 df d3 66 fd e8 00 c4 08 b8 0b 2d 1e c0 54 e2 e2 c5 5d 00 e0 08 9e 28 80 a5 c1 6b e7 5a 46 1b 5a 69 bb 70 63 34 4f bf 1b ff 18 1b cc 8a 18 01 17 31 af 00 3c 35 6b f9 96 9f Data Ascii: 1wZNy@{qKP.6NzP1a\|aIUFcp/ FF4XnjpBz}zS.FJtzqy'e#`h8hwE57OjM-)F;RMf-T](kZFZipc4O1<5k
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: e6 69 da 09 b3 41 8c 00 65 38 7d 31 c8 95 0f 4a 5d 60 98 b7 7f 57 ef a0 a9 76 cf e1 9e 6a 31 02 14 e1 b4 02 a0 f7 58 a9 81 e9 b9 e3 87 fe f7 71 3c 3e fc b5 6a bd 67 49 8c 80 97 38 a1 00 06 c7 d6 98 e7 ad eb 63 e4 bb 3b ca c9 16 9f ed fc af 8e 9d 1c 80 3f a3 62 04 3c 65 a2 77 03 4e b2 5b ec 50 3d a3 72 55 5d d3 ec 51 b1 d7 b8 f2 fe 95 47 d1 f0 74 89 11 f0 94 09 29 00 fb d6 ed 92 23 dd 57 3a ee f3 9b 9f 0c 96 c4 0d ce d4 a0 fa 20 1e 88 11 70 18 17 15 40 ef b9 59 d5 4b 74 a4 48 65 74 65 19 f0 4b 35 13 6c a6 bd e8 6f cc 3e c1 24 33 22 46 c0 1b 26 19 02 1c f6 ad e6 9e bf 2e 19 28 8f 5d 38 d9 6f 52 ed f9 d3 2d d4 7d ea 46 32 6f b6 c4 08 b8 cb 24 15 c0 3b f3 86 61 bc c3 59 35 5d 97 7e 6b 7d c4 de b1 d9 c2 9f 1b 5d 72 fe 17 23 40 0f 13 4d 02 8e a0 da a9 1d 4d a0 Data Ascii: iAe8}1J]`Wvj1Xq<>jgI8c;?b<ewN[P=rU]QGt)#W: p@YKtHeteK5lo>$3"F&.(]8oR-}F2o$;aY5]~k}]r#@MM
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: 5b 9c 8a 67 9f ed 01 5f 55 db f0 5d 7f 3a ed ea d6 7b 67 8b 5e b3 2a 46 80 4a f4 14 80 ee 05 d4 ad ae cf 67 c2 12 52 33 3d 5e 7b d3 8d ab b5 1f 13 59 ec 1b 34 69 7f ec ff 12 c4 08 d0 cd 48 0f c0 82 99 9a d6 94 f0 53 83 bd 6e 5a 6a 02 c4 08 50 cb 48 05 b0 04 ab f0 12 92 25 3f ca 5b 7b 2e 88 11 a0 16 6a 1a 81 2e 7e ff d4 d0 b5 b2 ad fb 56 42 61 63 55 a9 71 cd 78 06 fc f5 53 8f 37 bb 1f c4 08 50 44 8f 02 18 cc dd 68 1f 3a 37 49 27 74 36 b0 2b f6 b3 4f 0c d5 a2 b7 9d b9 e9 52 13 8b bf 70 ff 82 07 31 42 36 c0 47 38 e8 01 68 76 9f 74 86 51 18 58 b9 03 f7 52 bc c3 e1 b4 b6 25 a9 8e 3e 9f 4f 18 97 86 36 53 a3 1a 7c 6c 73 78 79 3b 7b 59 d6 74 8a 11 a0 14 a3 0a a0 7a 7c b2 a4 9b d2 76 81 56 df bf cc f1 6e 7f 4c c2 ce 78 45 fd 78 68 17 1c 1e 6a 3e d0 20 33 2a 46 80 Data Ascii: [g_U]:{g^FJgR3=^{Y4iHSnZjPH%?[{.j.~VBacUqxS7PDh:7I't6+ORp1B6G8hvtQXR%>O6S\|lsxy;{Ytz\|vVnLxExhj> 3F
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: aa ff 73 c7 7e 8d fc 2d b4 3f d3 eb be 02 fc e0 38 fe 8e 73 70 3d 24 6b 5c 03 ef cc 8a 11 a0 15 27 1a 81 b6 4d 5e 24 77 f1 a9 53 ab a4 73 9f ed a9 2d 47 bb da 6d f8 d1 5e d6 f9 be b6 bc e1 68 00 bf 78 d5 a1 52 c1 34 8b 11 a0 95 91 0a a0 7a 19 38 6a f7 79 5e 2d 09 5f dc 07 b3 a4 b3 bf 8e 46 ae ec fc 98 21 d8 f8 45 f7 c7 ad 79 10 23 40 2d 23 15 c0 fd cb 68 4f db b5 75 fc 1a f8 9e 06 38 cb 69 ef 23 bd 4f f5 8d 8e 83 db 31 a3 7a cf ca db 9f b2 03 62 04 e8 c5 f3 99 80 c6 33 6e 16 68 1a 76 92 f5 1e d8 bc ba af cb 66 1a dd 65 28 17 23 40 2b fa 0a c0 f6 cc aa f7 27 f9 89 ba 85 63 2f a7 ef fd 34 da 33 bf 55 1f bd ef 68 cb 12 79 e0 21 f9 9b c5 c3 35 33 2b 46 c0 17 e8 2b 00 9b 5d 68 db 17 47 f7 c7 46 c7 16 d1 b6 33 87 9a ce e9 b6 99 9b bd 55 73 ef 6c fb dd cc 8a 11 Data Ascii: s~-?8sp=$k\'M^$wSs-Gm^hxR4z8jy^-_F!Ey#@-#hOu8i#O1zb3nhvfe(#@+'c/43Uhy!53+F+]hGF3Usl
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: 2c b5 71 3b c0 70 7a db dc a1 17 9b 37 e7 19 e3 f4 0f 03 df 00 31 02 34 63 d8 03 50 fd da b3 31 8b 4e d3 16 8e 2b 57 b7 8c 9c 89 75 e0 88 fd 44 82 ee d6 1f 3a 1b 4a ef 97 06 31 02 54 31 81 81 20 2d d5 14 0d 2f 6a 72 66 85 9c 4d a1 6a 8c 8e d9 76 1c 3d 9c bf 49 73 26 c5 08 b8 cd 80 02 38 33 e0 37 fe c9 52 23 fb 70 03 49 ef 00 3d 5b f7 da f6 a0 d1 cb ea 45 f6 1b c4 08 f8 04 13 1e c0 71 d7 c6 58 3b 31 f6 c1 0d df d1 c8 0c 2a 2f e7 5d 37 b7 87 b7 0d 88 11 a0 08 13 0a e0 83 cd c6 14 17 96 10 55 53 a9 89 d9 1c d8 9d 5a 9f 0f c4 08 50 84 86 02 d0 35 31 ea d2 33 d0 b2 ee 3f dc 38 9d 0b 62 04 7c 80 99 24 60 7f 60 db 6c 1e e7 6d e4 7a b4 b3 64 ba dd 36 53 04 88 11 a0 87 51 0a 60 94 67 78 9f d8 30 43 07 52 8e cd d8 05 fd 9b 71 8f f3 ef 26 93 86 6a 5d 47 c4 ce 9c b7 Data Ascii: ,q;pz714cP1N+WuD:J1T1 -/jrfMjv=Is&837R#pI=[EqX;1*/]7USZP513?8b\|$``lmzd6SQ`gx0CRq&j]G
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: 64 f4 4e ac 6d 1b c7 58 2f 63 ff ed 3f 5d 7f 0f c4 08 d0 8f 91 10 e0 fd 78 f3 f5 fb c1 6f 0c 3e c5 f2 aa 68 bd bc 5c b1 6e 3b a3 2d eb 97 62 f5 bc 88 fe 87 04 31 02 f4 d1 af 00 8e ac de 20 d9 c9 35 bb 30 61 b2 f9 ab b1 e7 6f 6d 56 9c 9a ce d7 c5 af c5 68 72 c3 82 18 81 09 d3 af 00 b6 fd 38 15 da aa 55 ec e6 c4 5b ce bb ac d7 62 f4 d1 95 bc f4 89 11 98 00 ae 54 01 68 c3 44 11 1e ec 98 3e 20 c6 29 e4 52 01 f8 c8 54 99 e7 7a ca 4e c7 5c b9 67 ac 3a 62 bc 8a 82 35 ef fa f3 2d 93 13 23 30 31 a8 f0 00 26 17 78 74 96 f0 77 dd af 7a b5 9e 76 08 7c 69 f4 5a f7 cd bc cb 1f 2e ff 32 d9 88 8a 5e 31 02 d4 a2 ab 00 74 d5 7b eb d2 ac bd a5 65 f8 e3 a5 61 7a 33 f2 51 63 c8 6f 6b a5 c7 2f a5 60 39 c2 05 31 02 54 a3 ab 00 2e cd c9 c5 60 4e 7a df f5 2b b3 2f 51 ad ae 81 9d Data Ascii: dNmX/c?]xo>h\n;-b1 50aomVhr8U[bThD> )RTzN\g:b5-#01&xtwzv\|iZ.2^1t{eaz3Qcok/`91T.`Nz+/Q
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: cb 66 16 3b 1d b3 46 b0 6c f9 40 8c 80 17 38 11 02 68 4f c6 c0 ab 44 cf aa 69 56 b0 dc ed 5c 21 b1 fc fd 09 a4 d9 6c 74 01 81 18 81 c9 e3 66 0e a0 d5 13 45 f6 cd 9b 7b a2 75 8b bc ad 74 5b 7e ec 4d d6 66 6f dc a3 07 10 23 e0 1e aa 02 d0 b3 3d 6e 91 1f 7f d2 be 17 03 1d 75 79 b5 5c d7 6c dd d7 5d c0 17 ee df 66 09 62 04 7c c7 a4 ab 00 6a f9 79 5f 63 74 fe 75 64 6b c5 c3 bc af 7a be d5 fc b1 db 29 7c cd d8 b7 b7 59 60 32 3d f8 7e 17 23 40 0b 9e 94 01 5b 23 2f dd c9 5b df 43 cd 01 07 58 df a3 b5 9a c4 b2 78 5d 90 2b f8 58 8c 00 2d cc 79 12 d4 39 9e 46 9a d8 be d4 7b 23 10 23 e0 4b 5c f5 00 74 77 85 7f 2f 91 d2 35 86 2e a6 c6 a7 50 8c 00 2d f4 2b 80 49 15 78 26 13 28 3b 43 4f 61 6f 69 84 7c 7a 33 80 20 46 c0 2f 98 f7 00 66 e9 1e 78 62 62 f7 af e3 dc 23 07 b3 Data Ascii: f;Fl@8hODiV\!ltfE{ut[~Mfo#=nuy\l]fb\|jy_ctudkz)\|Y`2=~#@[#/[CXx]+X-y9F{##K\tw/5.P-+Ix&(;COaoi\|z3 F/fxbb#
2024-04-25 19:26:05 UTC	1255	IN	Data Raw: bd e3 d1 4b d3 b9 1c 7d 47 8c 43 06 1f c4 08 d0 86 b1 1c 80 59 d3 32 f1 28 70 ec 07 bc 50 37 df e8 87 19 9c e7 3d 84 e1 e3 2f 20 46 80 36 1c 49 02 f6 35 c4 90 0a b8 b1 e9 34 0e da c3 6d 52 d8 1a 7a bd 81 93 a9 6f c7 ee d4 d1 6b 37 ef d8 ad 7b da cc 88 18 01 9a 30 ae 00 ee eb 2f b4 21 a7 cf d8 0a 68 39 3c c1 e2 fe 50 f7 cd d9 51 af 15 ed 3d ea 60 85 a6 13 c1 2d 88 11 a0 09 e3 0a a0 ea f9 c5 90 1a 47 e3 fb d7 ea 98 0d da 7a d9 ff f5 65 a5 ee f2 17 d3 28 a2 8d 2e e6 59 89 76 67 52 8c 00 b5 d0 d1 07 d0 e5 b5 bb 6b a7 ba af 69 ba 3e fc a9 fb 17 35 be ed 35 f3 d5 ef ec 4c cd f0 0c 2a c4 e8 ea 47 00 1c c3 b0 02 d8 ee b7 5c 06 03 cf 5e 6b 63 aa 35 66 c9 b1 5a 52 cf 47 d0 69 80 ed 3b c3 d6 ec 31 eb ad 6f 9e 9a 4d dc 8f 1b e0 33 33 62 74 ea 7d 01 77 31 ac 00 06 a6 Data Ascii: K}GCY2(pP7=/ F6I54mRzok7{0/!h9<PQ=`-Gze(.YvgRki>55L*G\^kc5fZRGi;1oM33bt}w1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.5	50590	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	590	OUT	GET /w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:05 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.5	50597	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	526	OUT	GET /idsync/ex/receive?partner_id=1955&partner_device_id=1204c7db-0ff0-0854-044f-9b275ba68c4b HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:26:05 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:05 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:26:05 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:26:05 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:26:05 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.5	50585	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	943	OUT	GET /bidRequest/?s2sVersion=production HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:26:05 UTC	292	IN	HTTP/1.1 404 Not Found Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 150 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Content-Security-Policy: default-src 'none' X-Content-Type-Options: nosniff
2024-04-25 19:26:05 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 62 69 64 52 65 71 75 65 73 74 2f 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /bidRequest/</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.5	50582	34.236.60.188	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	716	OUT	GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA
2024-04-25 19:26:05 UTC	852	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Length: 0 Connection: close Location: https://usersync.gumgum.com/usersync?b=oth&i=y-_IfnGIJE2peK4sSE6yEVRW.U1zQWesG66kSq~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBDquKmYCEHE_QMQARTEXV5-W730020oFEgEBAQH_K2Y0Ztwx0iMA_eMAAA&S=AQAAAixq0Qu5u8aLIjVx6QUjvTA; Expires=Sat, 26 Apr 2025 01:26:05 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.5	50581	23.105.12.142	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	861	OUT	GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=5382283141381983659; csync=117:f3b7d652e007eae21eec0dd71ae622c5\|127:AABL7E7MVVwAABRpRLTzpA\|135:TAM_OK\|141:fi18fRxtHfSS0OelCAGOe32Ow
2024-04-25 19:26:05 UTC	173	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 25 Apr 2024 19:26:05 GMT location: https://usersync.gumgum.com/usersync?b=sad&i=5382283141381983659 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.5	50583	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	688	OUT	GET /ecm3?ex=gg.com&id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:26:06 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: N3DPFFHT0F0DHN4A0TT0 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.5	50586	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	1045	OUT	GET /usersync/redirect?partner=thirty_three_across&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=212578338838864 HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:26:05 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.5	50584	74.119.118.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	732	OUT	GET /sid/json?origin=publishertagids&domain=earnandexcel.com&sn=ChromeSyncframe&so=2&topUrl=earnandexcel.com&bundle=o_bdzV8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUGclMkJYcEtRb3JIczU2VjdFcEtqTDJrTHZyOHJBNTRjYzREZ3J1WkpLYkdqNHM3aFdMbWZHNU9nYjdLVnpPSkY0MyUyQnJVb0dRNlpvUmNvcjNNWUZiJTJCcGkzUjVrQVIlMkJRJTJCYmR3cEU2OWFLRzRxSg&cw=1&lsw=1&topicsavail=1&fledgeavail=1 HTTP/1.1 Host: gum.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=7d0d2d72-8a65-404e-bc6d-3d00a8d24145
2024-04-25 19:26:05 UTC	350	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 date: Thu, 25 Apr 2024 19:26:05 GMT server: Kestrel cache-control: no-cache, no-store, must-revalidate expires: 0 pragma: no-cache transfer-encoding: chunked server-processing-duration-in-ticks: 1377707 strict-transport-security: max-age=31536000; preload; connection: close
2024-04-25 19:26:05 UTC	462	IN	Data Raw: 31 43 37 0d 0a 7b 22 73 69 64 22 3a 6e 75 6c 6c 2c 22 72 65 6d 6f 76 65 53 69 64 22 3a 66 61 6c 73 65 2c 22 62 75 6e 64 6c 65 22 3a 22 2d 4e 6f 7a 4e 31 38 77 62 53 55 79 51 6b 4a 36 61 44 68 32 55 45 68 4a 65 58 4a 77 65 6e 51 30 56 6c 46 51 55 47 35 4d 4e 47 39 74 56 46 52 69 57 55 55 79 57 55 74 58 59 30 4d 77 64 6e 46 68 61 57 74 46 55 55 4a 4b 4d 69 55 79 51 6d 55 77 4d 6e 46 57 61 57 6c 46 55 31 56 4a 64 47 35 4c 4f 58 67 35 4d 31 64 31 61 6a 52 75 62 43 55 79 51 6e 68 57 51 58 4e 49 64 6b 59 31 51 7a 5a 69 63 48 42 43 56 31 56 6a 5a 6c 52 46 4e 6e 6c 7a 53 45 31 79 53 56 45 79 62 6b 68 51 53 6e 5a 6d 4e 30 73 30 5a 32 77 79 62 58 4a 7a 62 44 4e 55 53 58 6b 34 54 6a 6b 78 54 46 56 33 54 33 56 47 57 57 74 35 4d 30 70 74 62 58 41 35 53 46 5a 47 55 47 Data Ascii: 1C7{"sid":null,"removeSid":false,"bundle":"-NozN18wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUG5MNG9tVFRiWUUyWUtXY0MwdnFhaWtFUUJKMiUyQmUwMnFWaWlFU1VJdG5LOXg5M1d1ajRubCUyQnhWQXNIdkY1QzZicHBCV1VjZlRFNnlzSE1ySVEybkhQSnZmN0s0Z2wybXJzbDNUSXk4TjkxTFV3T3VGWWt5M0ptbXA5SFZGUG
2024-04-25 19:26:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.5	50603	104.18.36.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	426	OUT	GET /openrtb/pbjs?s=1018789 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; CMPS=957; CMPRO=957
2024-04-25 19:26:06 UTC	606	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Type: application/json Connection: close CF-Ray: 87a0b9070ac94590-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2Ft0DY5OOEAZXDOakvRSAdmYHeurclkQwxTSnr7Thz%2BQd2jstKlrOrfPVbI5iJvj2qMNyDYA9xtB1T8HbG9Mk1dQHstC6xRTjym8%2FmFOAi1wQMGuwu0lc9bfv4c0YnCnDyq9nbfb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.5	50579	207.65.37.181	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	4035	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=87473594&p=156423&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073163
2024-04-25 19:26:05 UTC	828	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=6; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=156423:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1714608000%3A252_164_265_253%7C1715212800%3A260_256_219_259_245_235_236_228_197_262_201_226_261_258_263%7C1714089600%3A255_248%7C1715040000%3A257; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Length: 311 Connection: close
2024-04-25 19:26:05 UTC	311	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 66 72 61 6d 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 3f 70 61 72 74 79 3d 31 34 26 63 69 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 35 31 45 41 44 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 34 32 30 34 38 36 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 30 46 37 42 35 46 45 46 2d 36 39 41 44 2d 34 36 43 36 2d 38 31 46 32 2d 41 32 36 30 44 36 Data Ascii: PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://idsync.rlcdn.com/420486.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.5	50605	18.64.153.203	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	2362	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&pid=eWu57J4Q2sVgL&cb=0&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22fc%22%3A%22USD%22%2C%22fp%22%3A100%2C%22id%22%3A%22sticky_outstream_desktop%22%2C%22mt%22%3A%22v%22%2C%22s%22%3A%5B%22300x169%22%5D%7D%2C%7B%22sd%22%3A%22adhesion_desktop%22%2C%22s%22%3A%5B%22728x90%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:26:06 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 104 Connection: close Date: Thu, 25 Apr 2024 19:26:06 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 e8f78324e5bfcb2604bfdbcc16db2a58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: mDOu-QtkZOrYZdT89f1FYZS7YwrTcp2M_YsbSYL7CKLvs2xn-b5Q3w==
2024-04-25 19:26:06 UTC	104	IN	Data Raw: 61 70 73 74 61 67 2e 70 75 6e 74 28 7b 22 63 6d 70 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6d 61 7a 6f 6e 2d 61 64 73 79 73 74 65 6d 2e 63 6f 6d 2f 69 75 33 3f 63 6d 33 70 70 64 3d 31 26 64 3d 64 74 62 2d 70 75 62 26 63 73 69 66 3d 74 26 67 64 70 72 3d 30 26 64 6c 3d 67 67 22 2c 22 63 62 22 3a 22 30 22 7d 29 Data Ascii: apstag.punt({"cmp":"https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg","cb":"0"})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.5	50577	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	2106	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%252C%252C%25257B%252522architecture%252522%25253A%252522x86%252522%25252C%252522bitness%252522%25253A%25252264%252522%25252C%252522brands%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252BChrome%252522%25252C%252522version%252522%25253A%252522117%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25253DBrand%252522%25252C%252522version%252522%25253A%2525228%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117%252522%25257D%25255D%25252C%252522fullVersionList%252522%25253A%25255B%25257B%252522brand%252522%25253A%252522Google%252BChrome%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Not%25253BA%25253DBrand%252522%25252C%252522version%252522%25253A%2525228.0.0.0%252522%25257D%25252C%25257B%252522brand%252522%25253A%252522Chromium%252522%25252C%252522version%252522%25253A%252522117.0.5938.132%252522%25257D%25255D%25252C%252522mobile%252522%25253Afalse%25252C%252522model%252522%25253A%252522%252522%25252C%252522platform%252522%25253A%252522Windows%252522%25252C%252522platformVersion%252522%25253A%25252210.0.0%252522%25257D&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pandg.tapad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFEhYKB3N2eDl0NTASCwjA5f2l8tnyPBAFGAEgASgCMgsI3tuA04ja8jwQBTgBWgdzdng5dDUwYAI.
2024-04-25 19:26:05 UTC	1660	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Length: 2239 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:26:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFEhYKB3N2eDl0NTASCwjA5f2l8tnyPBAFEhQKBXRhcGFkEgsIzOvd2_LZ8jwQBRgBIAEoAjILCN7d4IiJ2vI8EAU4AVoFdGFwYWRgAg..; expires=Fri, 25 Apr 2025 19:26:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:26:05 UTC	2239	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 74 74 64 5f 70 75 69 64 3d 66 32 65 35 30 62 64 64 2d 34 34 31 62 2d 34 37 31 31 2d 38 61 63 33 2d 32 65 66 61 34 30 35 63 37 61 64 32 25 32 43 25 32 43 25 32 35 37 42 25 32 35 32 32 61 72 63 68 69 74 65 63 74 75 72 65 25 32 35 32 32 25 32 35 33 41 25 32 35 32 32 78 38 36 25 32 35 32 32 25 32 35 32 43 25 32 35 32 32 62 69 74 6e 65 73 73 25 32 35 32 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%252

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.5	50596	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	954	OUT	GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACJw19Ps5QAwMVI5XdAAAAAAA&expiration=1714159563&google_cver=1&is_secure=true&google_gid=CAESEPVYYxhxz5uJfaMR_XsfrZU&google_push=AXcoOmQwfQ75gOt5qDKgow6YIk4OdmIHjEdv_hHDAme2sLFEN1J43bvhvDkKNMebD6Q0rj9WZqq1kqe8vVHmlsEEzpYFWxDHcpdN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:05 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:26:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:05 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.5	50604	34.192.42.219	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	569	OUT	GET /header/auction?lib=prebid&v=8.44.0&referrer=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&tmax=2801&us_privacy=1--- HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1072080661979746722290; tluidp=1072080661979746722290
2024-04-25 19:26:05 UTC	389	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 cache-control: no-cache, no-store, must-revalidate expires: Thu, 15 Oct 1992 20:10:00 GMT pragma: no-cache x-xss-protection: 0 set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; Domain=.3lift.com; SameSite=None; Partitioned; Max-Age=7776000 x-auction-status: 5 content-length: 19 connection: close
2024-04-25 19:26:05 UTC	19	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 62 69 64 22 7d Data Ascii: {"status":"no_bid"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.5	50574	185.184.8.90	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	756	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=c0dNMeS67bcZWfBa7Ddv_1714073147813; ts=1714073147
2024-04-25 19:26:06 UTC	397	IN	HTTP/1.1 302 Found date: Thu, 25 Apr 2024 19:26:06 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=gumgum cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 25 Apr 2024 19:26:06 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.5	50580	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	756	OUT	GET /sync?ssp=gumgum2&user_id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:26:05 UTC	327	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:26:05 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ads.creative-serving.com/bsw_sync?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.5	50593	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:05 UTC	913	OUT	GET /match?gdpr=0&gdpr_consent=&p=M1717054901&uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; arcki2_ddp2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073149686; arcki2_adform=4033174624989640038!20220908!1714073153104; arcki2_smart=5382283141381983659!20220908!1714073160420
2024-04-25 19:26:06 UTC	789	IN	HTTP/1.1 302 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Date: Thu, 25 Apr 2024 19:26:06 GMT Location: https://a.audrte.com:443/p Server: nginx/1.22.1 Set-Cookie: arcki2_pubmatic=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7!20220908!1714073166267; Max-Age=1296000; Expires=Fri, 10 May 2024 19:26:06 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Set-Cookie: arcki2_pubmatic=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7!20220908!1714073166267; Max-Age=1296000; Expires=Fri, 10 May 2024 19:26:06 GMT; Domain=audrte.com; Path=/; Secure; HttpOnly; SameSite=none; Secure Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.5	50607	3.161.188.78	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	644	OUT	GET /adscores/g.pixel?sid=9212308278&puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:06 UTC	836	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 19:26:06 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AM2AvV%2BNd4QcH7SbQ8GkUMeHA7pA9ZqvV; Path=/; Domain=.agkn.com; Expires=Fri, 25-Apr-2025 19:26:06 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 1bb882f081498a19fb2b991e6c0046aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: Ml8LU_0G_QiMVviy7XK2Dfpoa7KHIpytZj6C9y0mahLxTIsLTlwNNg==
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.5	50602	5.9.235.249	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	470	OUT	GET /mediavine-prod/detailviews/?frontend_timestamp=1714073149&frontend_sign=42faff7b8a981d17856a0b704b07ebe9987dc2c8 HTTP/1.1 Host: client-rapi-mediavine.recombee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:06 UTC	283	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: application/json; charset=utf-8 Content-Length: 90 Connection: close Allow: DELETE,OPTIONS,POST Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS
2024-04-25 19:26:06 UTC	90	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 22 4d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 20 22 73 74 61 74 75 73 43 6f 64 65 22 3a 20 34 30 35 2c 20 22 73 74 61 74 75 73 4d 65 73 73 61 67 65 22 3a 20 22 6d 65 74 68 6f 64 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 22 7d Data Ascii: {"error": "Method not allowed.", "statusCode": 405, "statusMessage": "method not allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.5	50599	34.196.226.77	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	718	OUT	GET /qmap?c=240&tp=PUBM&tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=6efb576f370522a24883b5b8d45a1e39
2024-04-25 19:26:06 UTC	315	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.11.232 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-04-25 19:26:06 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.5	50587	35.208.249.213	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	678	OUT	GET /ju/cs/eplist?tn=41b6e88a2b85b0e731ef8e73e5558712&dm=https%253A%252F%252Fcdn.mediago.io&mcb=mmgg_1714073162990_990 HTTP/1.1 Host: gtrace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.mediago.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca790f083ee2g42hg00lvfmwkrq
2024-04-25 19:26:06 UTC	509	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: https%3A%2F%2Fcdn.mediago.io Content-Length: 153 Content-Type: application/javascript; charset=utf-8 Set-Cookie: cst_70=ts=1714073166; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=None Date: Thu, 25 Apr 2024 19:26:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	153	IN	Data Raw: 6d 6d 67 67 5f 31 37 31 34 30 37 33 31 36 32 39 39 30 5f 39 39 30 28 7b 22 64 61 74 61 22 3a 7b 22 6c 69 73 74 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 62 61 69 64 75 5f 6d 65 64 69 61 67 6f 5c 75 30 30 32 36 67 6f 6f 67 6c 65 5f 68 6d 3d 32 32 32 31 30 63 61 37 39 30 66 30 38 33 65 65 32 67 34 32 68 67 30 30 6c 76 66 6d 77 6b 72 71 22 5d 7d 7d 29 Data Ascii: mmgg_1714073162990_990({"data":{"list":["https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago\u0026google_hm=22210ca790f083ee2g42hg00lvfmwkrq"]}})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.5	50589	54.242.78.179	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	657	OUT	GET /tag/?id=20909&user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:06 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.5	50600	44.210.158.2	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	641	OUT	GET /?companyId=673&id=pubmatic_id:0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:06 UTC	391	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:06 GMT Location: https://io.narrative.io/?io.narrative.guid.v2=a96ff280-0339-11ef-a180-0a02e9f38595&companyId=673&id=pubmatic_id:0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=a96ff280-0339-11ef-a180-0a02e9f38595; Max-Age=47278080; SameSite=None; Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.5	50608	50.57.31.206	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	696	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:06 UTC	688	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 6 Set-Cookie: SEUNCY=AA1161D2E1B50EE0; Expires=Fri, 25 Apr 2025 19:26:06 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.5	50601	134.122.57.34	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	740	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:06 UTC	517	IN	HTTP/1.1 302 302 Date: Thu, 25 Apr 2024 19:26:06 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=5386a604-e36a-41c1-a1c7-ae9d716c8858.483287166; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:5386a604-e36a-41c1-a1c7-ae9d716c8858&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.5	50609	141.94.170.77	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	657	OUT	GET /?partner=214&mapped=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:06 UTC	525	IN	HTTP/1.1 302 Found set-cookie: cookie=198b624e2ecca676; Max-Age=31536000; Expires=Fri, 25 Apr 2025 19:26:06 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects161=1; Max-Age=86400; Expires=Fri, 26 Apr 2024 19:26:06 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://loada.exelator.com/load/?p=1164&g=1&j=r&gdpr=0&ru=https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D161%26icm%26cver%26mapped%3D%25%25UID%25%25%26gdpr%3D0 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.5	50588	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	526	OUT	GET /idsync/ex/receive?partner_id=1955&partner_device_id=1204c7db-0ff0-0854-044f-9b275ba68c4b HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:26:06 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:06 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.5	50595	211.120.53.204	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	734	OUT	GET /aux/idsync?proto=gumgum HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SOC=ZiquPMCo5r8AAPv8cvMAAAAA
2024-04-25 19:26:06 UTC	894	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://usersync.gumgum.com/usersync?b=sus&i=ZiquPMCo5r8AAPv8cvMAAAAA P3P: CP="See also http://www.scaleout.jp/privacy/" Set-Cookie: SOC=ZiquPMCo5r8AAPv8cvMAAAAA; path=/; expires=Sat, 25-Apr-26 19:26:06 GMT; domain=socdm.com; secure; SameSite=None X-SO-Ads-Time: 2 X-SO-HostName: a-ad40082.dc2p.scaleout.jp X-SO-LB-Hostname: a-tgng40014.dc2p.scaleout.jp X-SO-LB-Data: {"ban":false,"clean_query":"\/aux\/idsync?proto=gumgum","cluster_id":0,"gdpr":false,"ipv4":"185.152.66.230","key":"ZiquPMCo5r8AAPv8cvMAAAAA","privacy_sensitive":false,"uid":"ZiquPMCo5r8AAPv8cvMAAAAA","upstream_id":"a-ad40082"} X-SO-UID: ZiquPMCo5r8AAPv8cvMAAAAA X-SO-Key: ZiquPMCo5r8AAPv8cvMAAAAA X-SO-IP: 185.152.66.230 X-SO-Cluster-ID: 0 X-SO-Upstream-ID: a-ad40082

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.5	50616	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	625	OUT	GET /w/1.0/sd?id=537072977&val=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:06 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.5	50610	207.65.37.182	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	4114	OUT	GET /AdServer/SPug?partnerID=156423&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; SPugT=1714073159; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; chkChromeAb67Sec=5; pi=157108:3; DPSync3=1715212800%3A261_245_262_260_235_201_258_256_219_259_236_263_228_226%7C1714608000%3A252_265_253%7C1714089600%3A255_248%7C1715040000%3A257; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073165; KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA
2024-04-25 19:26:06 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:06 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1714073166; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.5	50618	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	578	OUT	GET /w/1.0/sd?id=537073026&val=ZiquQIPQzJS1XtQhuYTwyGhu HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:06 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.5	50621	18.64.153.203	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	2433	OUT	GET /e/dtb/bid?src=600&u=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&pid=eWu57J4Q2sVgL&cb=1&ws=1280x907&v=24.418.2211&t=2000&slots=%5B%7B%22sd%22%3A%22sidebar_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%2C%7B%22sd%22%3A%22content_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%2C%7B%22sd%22%3A%22content_2_btf%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22fc%22%3A%22USD%22%2C%22fp%22%3A28%7D%5D&pj=%7B%22device%22%3A%7B%22sua%22%3A%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22mobile%22%3A0%2C%22model%22%3A%22%22%2C%22source%22%3A2%2C%22platform%22%3A%7B%22brand%22%3A%22Windows%22%2C%22version%22%3A%5B%2210%22%2C%220%22%2C%220%22%5D%7D%2C%22browsers%22%3A%5B%7B%22brand%22%3A%22Google+Chrome%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%5B%228%22%2C%220%22%2C%220%22%2C%220%22%5D%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%5B%22117%22%2C%220%22%2C%225938%22%2C%22132%22%5D%7D%5D%7D%7D%7D&sg=%7B%22ortb2%22%3A%7B%22site%22%3A%7B%22name%22%3A%22Earn+and+Excel%22%2C%22domain%22%3A%22earnandexcel.com%22%2C%22cat%22%3A%5B%22IAB9%22%5D%2C%22sectioncat%22%3A%5B%22IAB9%22%5D%2C%22pagecat%22%3A%5B%22IAB9%22%5D%2C%22page%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%22%2C%22ref%22%3A%22%22%2C%22mobile%22%3A1%2C%22privacypolicy%22%3A1%2C%22content%22%3A%7B%22cat%22%3A%5B%22IAB9%22%5D%2C%22language%22%3A%22en%22%2C%22data%22%3A%5B%7B%22name%22%3A%22gumgum.com%22%2C%22ext%22%3A%7B%22segtax%22%3A2%7D%2C%22segment%22%3A%5B%5D%7D%5D%7D%2C%22ext%22%3A%7B%7D%7D%7D%7D&schain=1.0%2C1%21mediavine.com%2Ca6b3ff189247621e2e58a04c0b9bf64b%2C1%2C%2C%2C&gpp=DBABzw%7E1---%7EBqgAAAAAAgA&sm=ec02ae7b-7cbd-44b2-a0bc-d47ae78c7197&pubid=38918095-8e45-4332-88bf-226b3514cb64&gdpre=0&gdprl=%7B%22status%22%3A%22explicit-no-gdpr%22%2C%22enabled%22%3Afalse%7D&_c=1 HTTP/1.1 Host: aax.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:26:07 UTC	354	IN	HTTP/1.1 200 OK Content-Type: text/javascript;charset=UTF-8 Content-Length: 839 Connection: close Date: Thu, 25 Apr 2024 19:26:06 GMT Server: Server X-Cache: Miss from cloudfront Via: 1.1 9c798fa006e33ebed1097e0208eeca1a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-P2 X-Amz-Cf-Id: DGRI14EzJfPmr5NCrcW7n2xgzA1wyrkV2tzVwVCfnotP7zgkMyVzYA==
2024-04-25 19:26:07 UTC	839	IN	Data Raw: 2f 2a 20 61 61 78 20 72 65 73 70 6f 6e 73 65 20 2a 2f 0a 61 70 73 74 61 67 2e 62 69 64 73 28 7b 22 73 6c 6f 74 73 22 3a 5b 7b 22 74 61 72 67 65 74 69 6e 67 22 3a 5b 22 61 6d 7a 6e 69 69 64 22 2c 22 61 6d 7a 6e 70 22 2c 22 61 6d 7a 6e 73 7a 22 2c 22 61 6d 7a 6e 62 69 64 22 2c 22 61 6d 7a 6e 61 63 74 74 22 5d 2c 22 61 6d 7a 6e 69 69 64 22 3a 22 4a 4f 44 70 50 63 65 6d 74 2d 2d 73 46 56 58 45 50 52 77 50 5f 6a 6f 41 41 41 47 50 46 72 6a 6c 49 41 45 41 41 41 4a 59 41 51 42 68 63 48 4e 66 64 48 68 75 58 32 4a 70 5a 44 45 67 49 43 42 68 63 48 4e 66 64 48 68 75 58 32 6c 74 63 44 45 67 49 43 43 61 31 56 4f 4a 22 2c 22 73 69 7a 65 22 3a 22 33 30 30 78 32 35 30 22 2c 22 6d 65 74 61 22 3a 5b 22 73 6c 6f 74 49 44 22 2c 22 6d 65 64 69 61 54 79 70 65 22 2c 22 73 69 7a Data Ascii: /* aax response */apstag.bids({"slots":[{"targeting":["amzniid","amznp","amznsz","amznbid","amznactt"],"amzniid":"JODpPcemt--sFVXEPRwP_joAAAGPFrjlIAEAAAJYAQBhcHNfdHhuX2JpZDEgICBhcHNfdHhuX2ltcDEgICCa1VOJ","size":"300x250","meta":["slotID","mediaType","siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.5	50622	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	578	OUT	GET /w/1.0/sd?id=537073026&val=ZiquQXeRy6jM9IHPeZYNrP2I HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:06 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.5	50615	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	590	OUT	GET /w/1.0/sd?id=537073028&val=5b5548e1-f48f-42a5-987f-5a866f7c8916 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:06 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.5	50625	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	547	OUT	GET /idsync/ex/receive?partner_id=3203&partner_device_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:26:06 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:06 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.5	50614	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	970	OUT	GET /usersync/redirect?partner=rubicon&partnerId=LVFMWC1R-1E-MDQF HTTP/1.1 Host: exchange.mediavine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mv_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; mv_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D; am_tokens_invalidate-verizon-pushes=%7B%22mv_uuid%22%3A%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22%3A%22invalidate-verizon-pushes%22%7D
2024-04-25 19:26:07 UTC	239	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Cache-Control: private, no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.5	50611	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	787	OUT	GET /usersync?b=pbm&i=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.5	50627	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	611	OUT	GET /w/1.0/sd?id=540245193&val=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:06 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.5	50630	3.161.136.103	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	1163	OUT	GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=1978557987846830937&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3Db0185c5d-64c1-46f7-941a-e05dbec13e5b%253A1714073159.9130583%26pid%3D500040%26it%3D1%26iv%3Db0185c5d-64c1-46f7-941a-e05dbec13e5b%253A1714073159.9130583%26_%3D1714073159.9148479 HTTP/1.1 Host: live.rezync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zync-uuid=b0185c5d-64c1-46f7-941a-e05dbec13e5b:1714073159.9130583; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiYjAxODVjNWQtNjRjMS00NmY3LTk0MWEtZTA1ZGJlYzEzZTViOjE3MTQwNzMxNTkuOTEzMDU4MyJ9.ZiquRw.qw9kjvNo5DmKk0ysUcM5RjcfW_4
2024-04-25 19:26:07 UTC	1070	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 651 Connection: close Date: Thu, 25 Apr 2024 19:26:06 GMT Location: https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=b0185c5d-64c1-46f7-941a-e05dbec13e5b%3A1714073159.9130583&pid=500040&it=1&iv=b0185c5d-64c1-46f7-941a-e05dbec13e5b%3A1714073159.9130583&_=1714073159.9148479 Set-Cookie: zync-uuid=b0185c5d-64c1-46f7-941a-e05dbec13e5b:1714073159.9130583; Domain=rezync.com; Expires=Tue, 20 May 2025 19:26:06 GMT; Path=/; SameSite=None; Secure Set-Cookie: sd-session-id=.eJwNylEKwyAMANC75LsOQ4xRL1OqZiBb3ajtz0rvvn4-eCfMX93WpWvfIe3boROUd7s1IJ0w2m_VFyTAKIFZYpDgfCAbSeCaYOgY7dPnVu-TLQYuXI13BY3zTzHR4WLUcs1akJRzQkFnhZDjIyJZDgTXH7upJeA.ZiquTg.qnauM7Rgj4lo0MCHD5OY3WFYpGU; Expires=Tue, 20 May 2025 19:26:06 GMT; HttpOnly; Path=/; SameSite=None; Secure Vary: Cookie Server: lighttpd/1.4.69 X-Cache: Miss from cloudfront Via: 1.1 7b3fb4ffb47262e20c0ec753e26fc5ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 X-Amz-Cf-Id: BrrR9QtcanBRcyuAGFzflX_5uFS2pgfnOerT4Zp3v6IHxhKxNolqDw==
2024-04-25 19:26:07 UTC	651	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 35 36 34 30 39 3f 62 69 64 64 65 72 5f 69 64 3d 32 30 30 34 34 32 26 61 6d 70 3b 62 69 64 64 65 72 5f 75 75 69 64 3d 62 30 31 38 35 63 35 64 2d 36 34 63 31 2d 34 36 66 37 2d 39 34 31 61 2d 65 30 35 64 62 65 63 31 33 65 35 62 25 33 41 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://i.liadm.com/s/56409?bidder_id=200442&bidder_uuid=b0185c5d-64c1-46f7-941a-e05dbec13e5b%3A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.5	50623	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	505	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LVFMWCG3-S-CYEQ HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:26:06 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:06 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 24 Jun 2024 19:26:06 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:06 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.5	50620	52.46.155.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	455	OUT	GET /ecm3?id=LVFMWCG3-S-CYEQ&ex=d-rubiconproject.com&status=ok HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:26:06 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: SWKN7D6R07NT1BGDFXKG Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.5	50624	52.46.155.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	449	OUT	GET /ecm3?ex=rubiconprojectHMT&id=aabZheBiTA-2vl2B5W91eQ HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:26:06 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: NR6EM4JC9WQWDDR94MMD Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.5	50626	52.205.109.183	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	471	OUT	GET /api/v1/dsync/Martin?exid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=7c5a292e-89b9-0bf7-5209-01cf0fa3be45
2024-04-25 19:26:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=7c5a292e-89b9-0bf7-5209-01cf0fa3be45; Path=/; Domain=kargo.com; Expires=Fri, 25 Apr 2025 19:26:06 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-25 19:26:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.5	50633	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	802	OUT	GET /usersync?b=rth&i=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=gumgum HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.5	50619	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	427	OUT	GET /usersync?b=mag&i=LVFMWCG3-S-CYEQ HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.5	50632	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	665	OUT	GET /usersync?b=apn&i=3473854422107831099 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.5	50634	3.226.156.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	532	OUT	GET /v1/targeting?url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f&tenant=b4 HTTP/1.1 Host: pdmp.papi-public.us-east-1.tagger.opecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:06 UTC	153	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Type: application/json Content-Length: 134 Connection: close Cache-Control: no-cache
2024-04-25 19:26:06 UTC	134	IN	Data Raw: 7b 22 73 22 3a 22 58 61 68 79 6e 4f 57 33 4d 39 46 41 74 68 4a 65 73 66 30 51 44 71 50 43 63 31 4c 39 74 6b 48 55 53 51 67 47 59 62 35 68 48 35 39 65 63 75 65 36 6b 51 35 46 22 2c 22 74 22 3a 22 67 62 45 47 56 4a 73 49 64 6c 76 6a 69 6f 4c 36 37 54 35 68 53 6a 75 49 70 31 55 69 4b 65 55 33 4e 2b 4d 59 4a 4b 31 32 77 62 57 68 73 41 3d 3d 22 2c 22 6b 69 64 22 3a 32 2c 22 74 74 6c 5f 73 22 3a 37 36 7d Data Ascii: {"s":"XahynOW3M9FAthJesf0QDqPCc1L9tkHUSQgGYb5hH59ecue6kQ5F","t":"gbEGVJsIdlvjioL67T5hSjuIp1UiKeU3N+MYJK12wbWhsA==","kid":2,"ttl_s":76}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.5	50631	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	897	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFEhYKB3N2eDl0NTASCwjA5f2l8tnyPBAFGAEgASgCMgsI3tuA04ja8jwQBTgBWgdzdng5dDUwYAI.
2024-04-25 19:26:06 UTC	719	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:06 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%2C%2C set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:26:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFEhYKB3N2eDl0NTASCwjA5f2l8tnyPBAFEhQKBXRhcGFkEgsI7NrH5PLZ8jwQBRgBIAEoAjILCKLRypGJ2vI8EAU4AVoFdGFwYWRgAg..; expires=Fri, 25 Apr 2025 19:26:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:26:06 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 74 74 64 5f 70 75 69 64 3d 66 32 65 35 30 62 64 64 2d 34 34 31 62 2d 34 37 31 31 2d 38 61 63 33 2d 32 65 66 61 34 30 35 63 37 61 64 32 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.5	50612	5.9.235.249	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:06 UTC	515	OUT	GET /mediavine-prod/recomms/items/4a0d234a-a41e-428a-8b50-810331596236/items/?frontend_timestamp=1714073149&frontend_sign=f7471ef987cf6d189aea5339e254ece904afcbe3 HTTP/1.1 Host: client-rapi-mediavine.recombee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:07 UTC	437	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 87 Connection: close X-Recombee-Request-Id: b0faae51919a9efac952b27abadfb32b Cache-Control: no-cache Access-Control-Allow-Headers: Origin, Accept, Content-Type, X-Requested-With, X-CSRF-Token, Authorization Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS
2024-04-25 19:26:07 UTC	87	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 20 22 4e 75 6d 62 65 72 20 6f 66 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 20 6d 75 73 74 20 62 65 20 70 72 6f 76 69 64 65 64 20 28 6d 69 73 73 69 6e 67 20 5c 22 63 6f 75 6e 74 5c 22 20 70 61 72 61 6d 65 74 65 72 29 22 7d Data Ascii: {"message": "Number of recommendations must be provided (missing \"count\" parameter)"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.5	50648	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	555	OUT	GET /match?bidder_id=33&external_user_id=1072080661979746722290&ts=1714073152&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:07 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:07 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.5	50652	104.18.36.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	426	OUT	GET /openrtb/pbjs?s=1018789 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiquOtHM44EAAFGDARTZHgAA; CMPS=957; CMPRO=957
2024-04-25 19:26:07 UTC	612	IN	HTTP/1.1 204 No Content Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: application/json Connection: close CF-Ray: 87a0b90ebd2e136b-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FGfqms2BXDtTLI05%2FkW2YzuimuGY4ZHSr%2BtB0GwYcn0hgGrRMmse%2BOdiMjADGIS7tVGutJ7H%2FRm1w%2F9Hyo2gtG3Z8DlXnnG9AxLqtZB1Wxzijye%2B5u01BBmS9SHoFM1TePR5UybU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.5	50646	18.160.10.47	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	482	OUT	GET /syncMe?partnerDomain=mrtnsvr.com&idType=cookie&partnerUserId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: synchroscript.deliveryengine.adswizz.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:07 UTC	312	IN	HTTP/1.1 200 OK Server: CloudFront Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Length: 0 Connection: close X-Cache: Error from cloudfront Via: 1.1 dfc1931cc62ecd4133c2b9bdae1bb476.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P3 X-Amz-Cf-Id: fCHm_uuonT1Dy0oYh0jhIkwb0pF8y7_Azc0RTU04AAVD82A3rvYrpw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.5	50647	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	514	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=90&external_user_id=3473854422107831099 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:07 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:07 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.5	50644	35.227.252.103	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	553	OUT	GET /sync/dds?ox_sc=1&ox_init=1 HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:07 UTC	309	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: image/gif P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.5	50649	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	567	OUT	GET /match?bidder_id=99&external_user_id=y-sbgedPRE2uGCHaiyczZu1yO_Tokoo8Hh%7EA&ts=1714073153&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:07 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:07 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.5	50654	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	686	OUT	GET /usersync?b=oth&i=y-_IfnGIJE2peK4sSE6yEVRW.U1zQWesG66kSq~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:07 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.5	50650	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	442	OUT	GET /merge?pid=80&3pid=LVFMWCG3-S-CYEQ HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl; _ljtrtb_80=LVFMWCG3-S-CYEQ
2024-04-25 19:26:07 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_80=LVFMWCG3-S-CYEQ; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVrIwULJS8glz8w13djfWDdZ1jnQNVKoFAEudBks%3D; Path=/; Domain=.lijit.com; Expires=Fri, 25-Apr-2025 19:26:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_80=LVFMWCG3-S-CYEQ; Path=/; Domain=.lijit.com; Expires=Fri, 25-Apr-2025 19:26:07 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=IjUNALZH0EzpouOqQka7fQWl; Path=/; Domain=.lijit.com; Expires=Fri, 25-Apr-2025 19:26:07 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-04-25 19:26:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.5	50653	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	665	OUT	GET /usersync?b=sad&i=5382283141381983659 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:07 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.5	50651	35.212.23.78	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	694	OUT	GET /bsw_sync?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=0&gdpr_consent= HTTP/1.1 Host: ads.creative-serving.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:07 UTC	801	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 25 Apr 2024 19:26:07 GMT Location: https://ads.creative-serving.com/ul_cb/bsw_sync?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=0&gdpr_consent= Set-Cookie: tuuid=d350de1e-1bed-47cb-9d79-7e9f3cdcfd0d; path=/; expires=Sun, 20-Apr-2025 19:26:07 GMT; domain=.creative-serving.com; samesite=none; secure Set-Cookie: c=1714073167; path=/; expires=Sun, 20-Apr-2025 19:26:07 GMT; domain=.creative-serving.com; samesite=none; secure Set-Cookie: tuuid_lu=1714073167; path=/; expires=Sun, 20-Apr-2025 19:26:07 GMT; domain=.creative-serving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.5	50639	3.218.216.11	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	506	OUT	GET /web/visit?tr=true&fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f HTTP/1.1 Host: pdmp.dcapi.dmp.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1072080661979746722290; tluidp=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:07 UTC	178	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 23 Connection: close Server: akka-http/10.2.8
2024-04-25 19:26:07 UTC	23	IN	Data Raw: 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e Data Ascii: Resource not available.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.5	50640	3.218.216.11	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	502	OUT	GET /ingest/topics?fpid=e2cdbc25-eedc-4e99-8fbf-cdc4d350650f HTTP/1.1 Host: pdmp.dcapi.dmp.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1072080661979746722290; tluidp=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:07 UTC	178	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 23 Connection: close Server: akka-http/10.2.8
2024-04-25 19:26:07 UTC	23	IN	Data Raw: 52 65 73 6f 75 72 63 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 2e Data Ascii: Resource not available.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.5	50638	52.72.24.92	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	431	OUT	GET /cookie-sync/rp?bee_sync_partners=rp HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AABL7E7MVVwAABRpRLTzpA; bitoIsSecure=ok
2024-04-25 19:26:07 UTC	385	IN	HTTP/1.1 200 OK cache-control: no-cache, must-revalidate content-type: image/gif Date: Thu, 25 Apr 2024 19:26:07 GMT expires: Fri, 01 Jan 1990 00:00:00 GMT p3p: CP="This is not a P3P policy! See https://beeswax.com/privacy for more info." pragma: no-cache Server: gunicorn strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 43 Connection: Close
2024-04-25 19:26:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.5	50663	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	787	OUT	GET /usersync?b=pbm&i=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:07 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.5	50662	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	773	OUT	GET /usersync?b=sus&i=ZiquPMCo5r8AAPv8cvMAAAAA HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:07 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.5	50665	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:07 UTC	625	OUT	GET /w/1.0/sd?id=537072977&val=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:07 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:07 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.5	50666	35.208.249.213	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	859	OUT	POST /ju/log/c?app=PRIVACY_SANDBOX&tn=f9f2b1ef23fe2759c2cad0953029a94b&trackingid=&mguid=&ext={%22name%22:%22PRIVACY_SANDBOX%22,%22joinIGUsable%22:true,%22actionApiUsable%22:true,%22actionApiRes%22:null,%22topicsUsebale%22:true,%22topics%22:%22[]%22} HTTP/1.1 Host: trace.mediago.io Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cdn.mediago.io Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://cdn.mediago.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca790f083ee2g42hg00lvfmwkrq
2024-04-25 19:26:08 UTC	208	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: text/html; charset=utf-8 Date: Thu, 25 Apr 2024 19:26:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.5	50661	35.212.23.78	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	787	OUT	GET /ul_cb/bsw_sync?bidswitch_ssp_id=gumgum2&bsw_custom_parameter=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=0&gdpr_consent= HTTP/1.1 Host: ads.creative-serving.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d350de1e-1bed-47cb-9d79-7e9f3cdcfd0d; c=1714073167; tuuid_lu=1714073167
2024-04-25 19:26:08 UTC	689	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Length: 0 Date: Thu, 25 Apr 2024 19:26:08 GMT Location: https://x.bidswitch.net/sync?dsp_id=4&user_id=d350de1e-1bed-47cb-9d79-7e9f3cdcfd0d&ssp=gumgum2&expires=30&user_group=5&bsw_param=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 Set-Cookie: tuuid=d350de1e-1bed-47cb-9d79-7e9f3cdcfd0d; path=/; expires=Sun, 20-Apr-2025 19:26:08 GMT; domain=.creative-serving.com; samesite=none; secure Set-Cookie: tuuid_lu=1714073168; path=/; expires=Sun, 20-Apr-2025 19:26:08 GMT; domain=.creative-serving.com; samesite=none; secure Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.5	50373	8.28.7.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	3983	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073165; KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA; chkChromeAb67Sec=6; DPSync3=1714608000%3A252_164_265_253%7C1715212800%3A260_256_219_259_245_235_236_228_197_262_201_226_261_258_263%7C1714089600%3A255_248%7C1715040000%3A257; SPugT=1714073166
2024-04-25 19:26:08 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:08 GMT; path=/ Set-Cookie: PugT=1714073168; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.5	50659	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	565	OUT	GET /match?bidder_id=10&external_user_id=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&ts=1714073160&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:08 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:08 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.5	50656	35.227.252.103	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	553	OUT	GET /sync/dds?ox_sc=1&ox_init=1 HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:08 UTC	309	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: image/gif P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.5	50678	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	1753	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%2C%2C%257B%2522architecture%2522%253A%2522x86%2522%252C%2522bitness%2522%253A%252264%2522%252C%2522brands%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117%2522%257D%255D%252C%2522fullVersionList%2522%253A%255B%257B%2522brand%2522%253A%2522Google%2BChrome%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%252C%257B%2522brand%2522%253A%2522Not%253BA%253DBrand%2522%252C%2522version%2522%253A%25228.0.0.0%2522%257D%252C%257B%2522brand%2522%253A%2522Chromium%2522%252C%2522version%2522%253A%2522117.0.5938.132%2522%257D%255D%252C%2522mobile%2522%253Afalse%252C%2522model%2522%253A%2522%2522%252C%2522platform%2522%253A%2522Windows%2522%252C%2522platformVersion%2522%253A%252210.0.0%2522%257D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pandg.tapad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:26:09 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:08 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:26:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:26:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2803;Expires=Mon, 24 Jun 2024 19:26:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:09 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.5	50677	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	826	OUT	GET /pixel?google_nid=baidu_mediago&google_hm=22210ca790f083ee2g42hg00lvfmwkrq HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.mediago.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:09 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 25 Apr 2024 19:26:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:09 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.5	50675	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	870	OUT	GET /match?liv=h&us_privacy=1---&bidder_id=25&external_user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:09 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:09 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.5	50670	204.237.133.120	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	4240	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:5386a604-e36a-41c1-a1c7-ae9d716c8858&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; receive-cookie-deprecation=1; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073165; KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA; chkChromeAb67Sec=6; DPSync3=1714608000%3A252_164_265_253%7C1715212800%3A260_256_219_259_245_235_236_228_197_262_201_226_261_258_263%7C1714089600%3A255_248%7C1715040000%3A257; SPugT=1714073166
2024-04-25 19:26:09 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.5	50680	207.65.37.184	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	3985	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=8019790904257964151&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073165; KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA; chkChromeAb67Sec=6; DPSync3=1714608000%3A252_164_265_253%7C1715212800%3A260_256_219_259_245_235_236_228_197_262_201_226_261_258_263%7C1714089600%3A255_248%7C1715040000%3A257; SPugT=1714073166
2024-04-25 19:26:09 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:08 GMT; path=/ Set-Cookie: PugT=1714073168; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:09 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.5	50682	207.65.37.184	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	3953	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=4033174624989640038 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073165; KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA; chkChromeAb67Sec=6; DPSync3=1714608000%3A252_164_265_253%7C1715212800%3A260_256_219_259_245_235_236_228_197_262_201_226_261_258_263%7C1714089600%3A255_248%7C1715040000%3A257; SPugT=1714073166
2024-04-25 19:26:09 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:08 GMT; path=/ Set-Cookie: PugT=1714073168; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.5	50690	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	581	OUT	GET /w/1.0/sd?id=537082476&val=MBqnvcOAVHZk1_2R0gb5ubmYQuY HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=c7d68b7e-fd70-0a24-1478-cb190c0d7eba\|1714073146; univ_id=537072971\|500c5aec-af13-42d6-a7ea-250f9438d1fe\|1714073151265890; pd=v2\|1714073146.5.11\|iKbwvPvMgahEgKkWg2gy.mmuYeSwrf8.wI
2024-04-25 19:26:09 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.5	50667	50.57.31.206	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	730	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=AA1161D2E1B50EE0
2024-04-25 19:26:09 UTC	581	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 10 Set-Cookie: SEUNCY=AA1161D2E1B50EE0; Expires=Fri, 25 Apr 2025 19:26:08 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-04-25 19:26:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.5	50687	34.117.239.71	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	548	OUT	GET /match?bidder_id=30&external_user_id=LVFMWCG3-S-CYEQ&ts=1714073159&gdpr_58=&gdpr=0&gdpr_consent=&us_privacy=1--- HTTP/1.1 Host: events-ssc.33across.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: check=true; 33x_ps=u%3D212578338838864%3As1%3D1714073146374%3Ats%3D1714073146374
2024-04-25 19:26:09 UTC	257	IN	HTTP/1.1 200 OK content-type: image/png cache-control: no-cache, no-store, max-age=0, must-revalidate Content-Length: 68 Date: Thu, 25 Apr 2024 19:26:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:09 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.5	50668	44.210.158.2	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	766	OUT	GET /?io.narrative.guid.v2=a96ff280-0339-11ef-a180-0a02e9f38595&companyId=673&id=pubmatic_id:0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: io.narrative.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: io.narrative.guid.v2=a96ff280-0339-11ef-a180-0a02e9f38595
2024-04-25 19:26:09 UTC	242	IN	HTTP/1.1 204 No Content Cache-Control: no-cache Date: Thu, 25 Apr 2024 19:26:08 GMT Server: nginx/1.22.1 Set-Cookie: io.narrative.guid.v2=a96ff280-0339-11ef-a180-0a02e9f38595; Max-Age=47278080; SameSite=None; Secure Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.5	50684	207.65.37.184	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	3991	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; PugT=1714073165; KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA; chkChromeAb67Sec=6; DPSync3=1714608000%3A252_164_265_253%7C1715212800%3A260_256_219_259_245_235_236_228_197_262_201_226_261_258_263%7C1714089600%3A255_248%7C1715040000%3A257; SPugT=1714073166
2024-04-25 19:26:09 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:08 GMT; path=/ Set-Cookie: PugT=1714073168; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.5	50672	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	694	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:09 UTC	172	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-04-25 19:26:09 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.5	50671	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	814	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=500c5aec-af13-42d6-a7ea-250f9438d1fe&ttd_puid=f2e50bdd-441b-4711-8ac3-2efa405c7ad2%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714073137164; TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2; TapAd_3WAY_SYNCS=
2024-04-25 19:26:09 UTC	1101	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:08 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714073137164;Expires=Mon, 24 Jun 2024 19:26:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=f2e50bdd-441b-4711-8ac3-2efa405c7ad2;Expires=Mon, 24 Jun 2024 19:26:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2803;Expires=Mon, 24 Jun 2024 19:26:08 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:09 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.5	50679	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	742	OUT	GET /420486.gif?partner_uid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi46wEQCw==; rlas3=OImDuRmhrkIqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=
2024-04-25 19:26:09 UTC	705	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=G9k2L7LzfbgqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=; Path=/; Domain=rlcdn.com; Expires=Fri, 25 Apr 2025 19:26:08 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi66gEQFBIGCLjrARAL; Path=/; Domain=rlcdn.com; Expires=Mon, 24 Jun 2024 19:26:08 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.5	50673	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	716	OUT	GET /sync?dsp_id=70&user_id=4033174624989640038&ssp=triplelift HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:26:09 UTC	542	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:26:08 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //eb2.3lift.com/xuid?mid=2409&xuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.5	50669	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	910	OUT	GET /p HTTP/1.1 Host: a.audrte.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; arcki2_ddp2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073149686; arcki2_adform=4033174624989640038!20220908!1714073153104; arcki2_smart=5382283141381983659!20220908!1714073160420; arcki2_pubmatic=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7!20220908!1714073166267
2024-04-25 19:26:09 UTC	351	IN	HTTP/1.1 200 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Content-Type: image/png Date: Thu, 25 Apr 2024 19:26:09 GMT Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 68 Connection: Close
2024-04-25 19:26:09 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.5	50676	52.95.126.160	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:08 UTC	456	OUT	GET /s/ecm3?ex=rubiconprojectHMT&id=A26nT0C4R--lAWfXBsxAgQ HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:26:09 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:26:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: V59TAZNTRX6WT4J667QK Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:26:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.5	50707	34.111.60.239	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	446	OUT	GET /ML/1dc59ba9d9073497010293a464f4ba32__scv1__300x175.png HTTP/1.1 Host: images.mediago.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca790f083ee2g42hg00lvfmwkrq
2024-04-25 19:26:09 UTC	722	IN	HTTP/1.1 200 OK x-guploader-uploadid: ABPtcPriCK-DqiHPcn1U9wR9YuHnpqCxOI52bmLKRueazsYoc-VPLfbmIZUWIVVfcQEU8RfQCfU x-goog-generation: 1712258659075183 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 34711 x-goog-hash: crc32c=HnmQTA== x-goog-hash: md5=FxfH7JOpDOUJDOEv3AY7Lg== x-goog-storage-class: STANDARD accept-ranges: bytes Content-Length: 34711 server: UploadServer via: 1.1 google Date: Thu, 25 Apr 2024 19:07:35 GMT Age: 1114 Last-Modified: Thu, 04 Apr 2024 19:24:19 GMT ETag: "1717c7ec93a90ce5090ce12fdc063b2e" Content-Type: image/png Cache-Control: public,max-age=3600 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:09 UTC	533	IN	Data Raw: ff d8 ff db 00 84 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 00 af 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a Data Ascii: ,"}!1AQa"q2#BR$3br%&'()*
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fc 50 f0 d4 96 5a 86 99 0d fd 9d ac 48 24 5f 98 22 f4 6e e2 b3 b5 3d 5e db c3 5e 2c 8f 51 bd 59 04 0f 11 12 18 14 16 c1 52 38 07 dc 0a cc f8 67 ad bc 37 72 68 53 4b 85 9b e7 84 13 d1 87 51 f8 8f e5 57 3e 24 da e6 18 ae 08 e4 29 53 fc eb 81 53 50 ad 66 7c dd 1a 72 c2 66 fc 8d e8 ef 6f 4f eb 43 da 3e 18 f8 e3 54 f8 85 a0 8b 69 ec b3 25 e4 92 19 9a 23 88 d3 2b f3 00 39 62 7b fa 73 ce 2b 84 92 51 71 e1 49 6d 89 c3 db 38 18 3f ec 48 53 f9 56 c7 ec a9 7f 2a 88 59 2f e6 81 92 77 42 d0 b1 01 90 c6 db 91 b1 d5 4e d5 fc 85 61 c3 30 9a 5d 4e 0c fc ac d3 32 60 71 86 0b 20 fe b5 e5 ce 73 fa e5 5a 3d 12 Data Ascii: ?PZH$_"n=^^,QYR8g7rhSKQW>$)SSPf\|rfoOC>Ti%#+9b{s+QqIm8?HSV*Y/wBNa0]N2`q sZ=
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: e3 e0 ff 00 00 78 f2 2f 17 6a 2d 78 a9 22 ea 1e 5a c0 b2 20 c9 78 a0 8c 08 95 17 ae 64 32 64 e3 9e 05 7e 7f 7c 70 fd a9 3e 34 fc 71 d4 67 d4 be 21 f8 e2 ee ea 36 73 b6 ce 32 56 05 f6 08 3e f7 d4 e4 fb d7 23 fb 3d e9 9f 10 f5 1f 1c df bf 82 20 bc 49 62 80 9b cb d8 db cb 8a d0 6e fb d2 ca e4 24 4b 81 d5 88 af 1e b6 67 89 c4 46 4a 1e ea fc 4e da 78 4a 54 a7 1e 6d 5b 67 e8 c7 c6 1f 82 5f 0c ff 00 69 3b 2b 33 f1 4b f6 fe ba d3 35 1b a5 df 77 61 a5 f8 66 ea ee c6 3e 7e 54 95 c0 42 d8 ee 76 ed 18 f4 af 99 7e 2e fe c3 1e 1a f0 4e a5 3e b1 a1 fe d1 3a 1d e7 86 6d 07 95 27 89 35 5d 16 e2 c9 24 20 90 56 18 d9 99 a7 6c f4 0b c9 cf 6a cb ff 00 85 d3 6d f0 e6 71 24 fe 23 4f 18 eb 64 6f 33 cd 0e cd 32 d5 87 e0 b2 5d b0 f5 f9 23 e3 f8 85 79 17 8e 7e 27 f8 ff 00 e2 97 8d Data Ascii: x/j-x"Z xd2d~\|p>4qg!6s2V>#= Ibn$KgFJNxJTm[g_i;+3K5waf>~TBv~.N>:m'5]$ Vljmq$#Odo32]#y~'
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: b2 49 e9 92 3f 1a e1 2c ce 75 a8 d4 30 c3 5b 48 84 7d 0a 9f ea 6b e7 b0 b2 ad 57 1d 56 55 1d db 49 6d 6d 95 ff 00 53 eb f1 34 e1 0c b6 0e 0a c9 36 f7 be fa 7e 81 a3 a3 25 be 18 77 e4 d7 49 a6 69 6d ad e9 b7 1a 73 10 be 74 25 03 11 c0 27 a1 ac 3d 21 15 48 81 9b 25 4e 08 fa 64 7f 4a ea fc 36 a5 6e 51 53 81 b8 0a e0 c6 d4 94 6e d6 e7 b9 84 82 9d 34 9e cc b9 a1 fc 2b bf b9 8d b7 df c3 95 88 f9 7b 32 3e 6e d9 ce 38 af 7d f0 c5 9e b1 e2 cf 83 3f d8 37 46 36 d5 ec ed d4 c2 ea db 81 b8 88 86 8c e7 dd 91 33 f5 35 e7 7a 1c 6e 1c 6c 18 04 71 5d ff 00 c2 cd 65 ac 75 93 a7 c8 c4 2c e0 11 ec df e7 1f 95 7c 26 7f 8f c5 62 e8 c5 bb 37 4d a9 2d 3b 1f 41 95 e5 b8 4c 1d 49 46 9d d7 3a b3 d4 e0 34 4f 11 8d 0f c6 d7 97 d6 ba ac 71 c4 25 83 5a b3 b7 d4 63 02 ea ed b6 87 31 c2 Data Ascii: I?,u0[H}kWVUImmS46~%wIimst%'=!H%NdJ6nQSn4+{2>n8}?7F635znlq]eu,\|&b7M-;ALIF:4Oq%Zc1
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: 4d 46 3b 87 3e 63 79 26 e3 69 c2 7a 2a b4 60 05 cf 18 15 ee ce a3 a4 b9 e1 53 57 dd ab 5b e7 14 70 f3 ca 7e eb 47 c3 5a 3f fc 12 7f e3 65 95 98 d5 6f 93 4d bb 96 64 53 19 bb bf f2 e4 9c 92 30 82 3c 33 06 24 8f 94 80 3a 73 9e 2b ce bf 69 0f d9 23 f6 83 f8 05 e1 0b bf 18 ea ff 00 0b 20 b2 d2 ed 75 04 b3 b8 d5 a5 d5 6d 0c 56 d3 37 02 35 88 49 e6 cc d8 19 21 41 0b 9c b6 01 15 f6 57 c4 2f 8d 11 db 06 d7 3e 12 4f a9 ea 73 1b 58 6d ae 6c 99 a6 9a d6 da 50 d9 f3 6d d5 86 f9 67 60 40 60 db 63 0d 8c 23 64 b5 60 69 7f b2 67 c5 8f 8a fe 3c f0 a7 c5 df da 53 c1 5a ee b3 e1 ad 2e 62 fa 66 88 61 8e 25 8e 15 72 ef 34 b1 95 28 ec e4 1d a8 80 a9 c2 97 62 08 15 c5 47 36 9d 6c 4f 2a 9f 33 8e fa 69 7b 5e da 3f f8 07 4c b0 8a 95 0e 67 1b 27 b7 77 e6 7c 47 a5 7e c2 5f b6 4f c4 Data Ascii: MF;>cy&iz`SW[p~GZ?eoMdS0<3$:s+i# umV75I!AW/>OsXmlPmg`@`c#d`ig<SZ.bfa%r4(bG6lO3i{^?Lg'w\|G~_O
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: c6 e7 53 b0 de 2d 25 91 18 c8 08 2a cc 00 c7 7c e6 b8 1b c6 87 44 d7 cb d8 4c b2 88 26 0c 99 52 07 ae d3 9e 7d aa 07 d4 e4 76 f9 50 73 d7 77 39 ab 1a a4 2f 7b 7e 6e 61 59 1f ed 48 25 4d f2 17 62 71 c8 24 f2 4e 41 ae da 54 b9 2f 7e a7 9f 83 c1 c3 06 9f 2b 7a 9e b1 e0 ed 4e da ff 00 c1 9a e6 ab 6d 07 94 1e de da 28 c0 39 18 69 4b 1c 67 be 57 f4 ac 3b 5b ac 6b 76 c4 9e 4c ec 9d 7f bc 8c 3f 9e 2b 2f e1 9f 8a 2d 6d 7c 33 aa 78 56 72 e2 5b 9b 88 27 80 e7 82 a9 bf 72 ff 00 e3 c0 fe 75 6a d6 0b bb dd 66 ce c3 4d b6 b8 9e ee 6b c8 fe cb 6d 6f 6e f2 49 33 06 ce d5 54 04 93 80 78 02 bc 3a 74 1d 0c 75 4b ed 7d 3d 39 57 fc 13 e9 ea 4e 33 cb 12 5d 17 e3 cc cd ed 2f 22 ea 52 5b fe 5a b0 c7 eb fd 6b ae f0 ca 16 bc 88 74 f9 c7 e3 fe 35 ec 7f 06 ff 00 e0 96 5f b4 cf 89 f4 Data Ascii: S-%*\|DL&R}vPsw9/{~naYH%Mbq$NAT/~+zNm(9iKgW;[kvL?+/-m\|3xVr['rujfMkmonI3Tx:tuK}=9WN3]/"R[Zkt5_
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: 9a d7 82 7e 20 68 37 d7 1e 2c f1 de 87 e1 5d 44 78 6f 4d 03 58 b1 d5 ec a2 9a 68 d0 6d 59 25 95 6d a5 95 b0 14 be 23 2a a9 12 46 c5 50 1c 57 9a b7 87 ac b4 df 0a 78 a6 f3 47 f8 c7 0c c7 49 bc 75 d0 62 d5 74 f0 92 eb 6d 19 6f 92 08 2c 26 9a e6 20 c3 1f 3c 85 79 c0 29 b4 9c 6a f8 fb e3 ef 8d bc 13 f0 95 bc 31 f1 86 cb 41 9f 51 d4 e1 5b 8d 4f c1 93 78 ae e8 fd 82 39 5f 25 ef 76 ce 89 1b 90 db 8c 44 c8 f9 38 70 09 c1 f4 96 32 8d 18 39 4a 69 5b 6d 5b d5 ec ad ae bf 7d fd 35 39 23 86 ab 5a 6a 31 5a bf 24 3f e2 df 8b 3e 1e 69 ba 3e ad ab 68 da 56 97 a4 58 78 8a ce 29 7c 37 af ad cc f6 f0 69 bb a7 52 3c b6 71 2b dc ba 85 04 a2 a8 18 1f 30 07 00 7c fb f1 8f c7 3a 87 89 bc 47 6d f0 bf c1 5a 85 dd d4 11 c6 6d 6e af ef ad ed 9a ef 50 97 7f 00 46 00 68 10 9d a5 63 4f Data Ascii: ~ h7,]DxoMXhmY%m#*FPWxGIubtmo,& <y)j1AQ[Ox9_%vD8p29Ji[m[}59#Zj1Z$?>i>hVXx)\|7iR<q+0\|:GmZmnPFhcO
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: 64 16 f3 23 0f 6c ca a0 e0 8e 1b 93 c7 6f 49 f8 d6 fe 02 d6 2e ad bc 3d 63 e2 9d 3f c3 7f 69 33 98 e1 bc d6 ef a3 84 95 52 ed 18 90 49 b5 9d 93 6a a0 c0 0e 49 f6 af 3f d6 4c 3e 1d d0 35 3f 16 eb de 39 b8 b7 6b 9b 39 6d 6e 2c ee 3c 4b f6 5d 4a f6 30 ac 89 bb 64 73 34 a8 72 9f 29 93 25 30 06 01 24 77 4b 15 41 45 3b a5 ea a4 bf 26 44 69 4c f9 6b fe 0a 09 e2 1f 13 dd fc 14 f1 85 be 8f ac e8 f3 69 d1 dd b5 ac 2d a5 5d c1 70 a2 c7 ed 31 3b 8f b4 79 68 d3 6e 76 8d 43 8f 98 85 da 38 24 57 92 ff 00 c1 3d 74 8d 6a 03 63 ab e8 9e 16 8f 58 9a d5 35 2d 46 4d 3a 48 d9 bc e8 a2 b7 97 70 01 08 6d dd 30 57 90 48 3d aa ff 00 fc 14 5b 5d b3 f0 ff 00 c3 dd 1b e1 cd 95 a1 b5 0f 7e 8f 2a a5 f8 97 cc 31 c5 b9 8b 92 a1 b9 91 99 b0 7a 6e ef c1 ae db f6 1f f8 65 61 0f c0 8b 2b cd Data Ascii: d#loI.=c?i3RIjI?L>5?9k9mn,<K]J0ds4r)%0$wKAE;&DiLki-]p1;yhnvC8$W=tjcX5-FM:Hpm0WH=[]~*1znea+
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: a4 fc 2b f1 8f c7 2d 53 54 5d 26 d2 3b 8b 3b 6d 40 ea 1a a5 95 9a b3 ba 3b 8b 88 24 13 c7 b5 14 0f 93 78 60 02 79 60 d7 6b 61 07 c7 5b 9b fb 5b df 0e 6b 70 6b d6 9a a5 a4 96 36 56 de 11 d5 ad ad bc e8 e3 60 f2 08 ed af ed 61 90 39 0a 77 af 9a ae 54 30 07 1b ab ca 7f 67 3f 05 7c 61 d6 3c 7d ff 00 0a 6a d7 c4 fa 7d b6 95 75 27 d8 6e 6e 35 dd 4e 48 2d ed be cd 19 9a 51 1c 53 c4 f2 48 f1 a4 67 72 db b9 61 8d b8 c1 e6 7f 89 bf 17 3c 69 e1 9f 10 3f 84 3c 3d e3 0b 45 5b 5b 75 37 53 78 7d cb 3c 4e b2 37 92 7c c7 82 38 e2 60 a1 59 64 0b 29 55 7c 02 af b8 d7 95 89 ad 52 12 f7 a4 9a 7b 37 bf ad 92 e6 ed fe 67 56 1f 0b 3a ee d4 e2 ef f8 7f 91 f5 77 8d ef be 1e fc 45 f0 7e 9b a3 78 cf e0 77 89 fc 3d 36 93 6e 46 b7 73 e2 ff 00 87 4b 7d 65 7f e5 95 55 82 14 b1 9c b4 80 Data Ascii: +-ST]&;;m@;$x`y`ka[[kpk6V`a9wT0g?\|a<}j}u'nn5NH-QSHgra<i?<=E[[u7Sx}<N7\|8`Yd)U\|R{7gV:wE~xw=6nFsK}eU
2024-04-25 19:26:09 UTC	1255	IN	Data Raw: c7 1f 89 b7 ba 95 a5 f4 73 4e fa 7a 4d e2 2b 76 9e fe 35 cc 7e 7d cb 6e 77 99 b6 e4 aa 8f 2d 63 0c 02 83 f7 8f b8 ea 9f b2 ff 00 c2 bf 88 da 3f d8 34 ef 8c d1 4d a5 9b b6 b0 36 fe 20 f0 de 49 91 18 7c 8b 25 b1 8d 99 73 8c ba c9 c1 38 38 3b 80 e9 c0 e5 18 fc cb d9 e2 b1 ad 5e cf dd 72 51 be d7 49 5d b8 a5 e5 77 af c5 7b 99 57 cc a8 61 d3 a5 85 ba b6 f2 b5 dd fe ed 7f ad 8f 33 f1 5f fc 13 ef c3 8d 68 f6 fe 1b f8 a3 a2 6a 57 16 36 ea a8 d0 6b 17 16 17 72 46 41 50 62 f3 58 c2 54 90 fb 36 20 51 b7 01 b8 26 bc 97 c5 1f 0c 3c 7f f0 47 42 b6 b4 ff 00 84 6a 0b ef 07 e8 fa 83 4f 71 a7 6a 76 50 ca bf 6d 20 b2 5d 4d 35 a2 b4 77 4c b8 24 3c c1 a2 05 14 91 b8 03 5f 46 78 63 f6 35 f1 d6 97 e2 3b ef 17 fc 1f f1 f4 5a ba dd 6a 70 a5 e4 6b e2 eb e8 5f 51 fb 32 b7 96 a1 af Data Ascii: sNzM+v5~}nw-c?4M6 I\|%s88;^rQI]w{Wa3_hjW6krFAPbXT6 Q&<GBjOqjvPm ]M5wL$<_Fxc5;Zjpk_Q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.5	50696	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	1105	OUT	GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis
2024-04-25 19:26:09 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 25 Apr 2024 19:26:09 GMT Content-Length: 43 Connection: Close
2024-04-25 19:26:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.5	50695	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	1104	OUT	GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBABzw~1---~BqgAAAAAAgA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id=s%3A0-301aa7bd-c380-5476-64d7-fd91d206f9b9.0nPLTO3I1XGcKgZmoDfHhZLITTcWTg2R88HtG%2BnsQww; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v2=s%3AMBqnvcOAVHZk1_2R0gb5ubmYQuY.45S6w4cKZz2DDn0M%2BvKcFOSeDw6NOQVZDmqkCpqPLIc; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis; sa-user-id-v3=s%3AAQAKID0kUcEFk3KD0hqKPiSURySOdAgT6_R8yslT1ojHky4qEHwYBCC73KqxBjABOgT87-jmQgRYX0Mi.hmdJxSUE05C4i3JsUQ2Y5iMoeDbtiJoS90b%2FUF2XZis
2024-04-25 19:26:09 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 25 Apr 2024 19:26:09 GMT Content-Length: 43 Connection: Close
2024-04-25 19:26:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.5	50720	35.208.249.213	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	1578	OUT	GET /api/log/winnotice?tn=41b6e88a2b85b0e731ef8e73e5558712&winloss=2&id=755fe0a11c7f84a63de907ec2c7b0ef4&seat_id=${AUCTION_SEAT_ID}&currency=${AUCTION_CURRENCY}&bid_id=${AUCTION_BID_ID}&ad_id=${AUCTION_AD_ID}&loss=${AUCTION_LOSS}&imp_id=1&price=${AUCTION_PRICE}&test=0&time=1714073160&dp=udvXexflVfCYdQPF3YbtcPD6yJDw0fhdKBw2X0o4o4Q&dsp_id=22&data=W76JtY2sQQuoaAv-Y6CDSSFuO8n5wmAP7UYkccAlvUNuKMzZhBSG0pQ-Tu2Xq6EEHlHRnk2RbbaDkmMDjPhdRUCn-je7V6rX8iPTvWOhVI_mJJcgY8ln3y6rPY9XbYjO5DLF7fXKFfsXyydYG2uklcjMgsKrjGwiGrz9t8Rmi7LjVTRoi_apchm48mkO-xQl9vz8pqFDFwxjGn8KGiDdq_CvN6PCy_8W_i3NOSmLDGtHlkvkJSM2Gr0Y_hRRBP8WXOhycAPQn9tp3mAaiIeK2t_l0nvVKJo8MLJt8tL4j6L9oi04_Kr33oUt_yH3XUGYZaJGYziLeFSO8lZUtISdMuR3YOpoja5DwEuYJXZSALcyapFYA87pQIZRexm5Mez6D5c2uj0o42YXaJbpQlzcvfQprfHN5uRnBGUsP4qzdpmvQWZV-3dlk2ClyLrJ6IYRYQYmHOvew59U1wtWy277Iz6_sv4nN3TszHDPzGOjSrTFCKvFnBvuKg7WdJwrL6ur0sKVf9MGXsrUQJuowYNmBY4XtZCsOzKKhM3qoT-k7LfLiG2Mc49J6I88oK-paTeMINKM9WaFyKarFGXP_1VZEK3w2R0Ks3lExWU2IppsaYPlhDBuuzfk-YbU7fahH2tLXqk2gi8yX8DUDqRJpqeHV5fdcf3TRRUccRwxj8moKaASJsTCvRVM0MFTQYFuyrdIKWL_WBgKmXv37u8oLFY_FvbpT9y2z_ITX75eZynpwlg&trackingid=8c58b1b530c5cb3796d4811c4fba22d0&sp=udvXexflVfCYdQPF3YbtcPD6yJDw0fhdKBw2X0o4o4Q&cbvp=2 HTTP/1.1 Host: trace.mediago.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __mguid_=22210ca790f083ee2g42hg00lvfmwkrq
2024-04-25 19:26:09 UTC	209	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Date: Thu, 25 Apr 2024 19:26:09 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.5	50693	52.22.203.92	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	588	OUT	GET /insync?gdpr=0&gdpr_consent=&vxii_pdid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&vxii_pid=12&vxii_pid1=10067&vxii_rcid=fd088d8c-f63e-4f27-85bc-7c0a8a324fab HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImZkMDg4ZDhjLWY2M2UtNGYyNy04NWJjLTdjMGE4YTMyNGZhYiIsImwiOjE3MTQwNzMxNjAzMDEsInQiOjF9
2024-04-25 19:26:09 UTC	353	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImZkMDg4ZDhjLWY2M2UtNGYyNy04NWJjLTdjMGE4YTMyNGZhYiIsImwiOjE3MTQwNzMxNjkzNDUsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Mon, 11 Nov 2024 19:26:09 GMT; Secure; SameSite=None
2024-04-25 19:26:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.5	50692	52.20.207.59	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	477	OUT	GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LVFMWCG3-S-CYEQ HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stx_user_id=28d9228a-b1cb-43ea-a245-18ac678f2a55
2024-04-25 19:26:09 UTC	320	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:09 GMT Content-Type: image/png Content-Length: 68 Connection: close Set-Cookie: stx_user_id=28d9228a-b1cb-43ea-a245-18ac678f2a55; Max-Age=2592000; Expires=Sat, 25 May 2024 19:26:09 GMT; Path=/; Domain=.sharethrough.com; Secure; SameSite=None Cache-Control: no-cache
2024-04-25 19:26:09 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0b 49 44 41 54 78 da 63 f8 ff 1f 00 03 00 01 ff 6f 81 ab b6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxcoIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.5	50694	34.196.226.77	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	487	OUT	GET /map/ct=y/c=14701/tp=MTAI/tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7/gdpr=0/gdpr_consent= HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=6efb576f370522a24883b5b8d45a1e39
2024-04-25 19:26:09 UTC	315	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:09 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.10.182 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-04-25 19:26:09 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.5	50705	34.229.3.43	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	713	OUT	GET /load/?p=1164&g=1&j=r&gdpr=0&ru=https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D161%26icm%26cver%26mapped%3D%25%25UID%25%25%26gdpr%3D0 HTTP/1.1 Host: loada.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:09 UTC	1069	IN	HTTP/1.1 302 server: nginx date: Thu, 25 Apr 2024 19:26:09 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="6ff6677f944450cb87fd7d9da1ed9aaf"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Fri, 23-Aug-2024 07:26:09 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQcEsLc3MzNw8zdLExMTUIDnJwjwtxTzFMiXRMDXFMjExbXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo93xwAAdikoEg%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Fri, 23-Aug-2024 07:26:09 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://loada.exelator.com/load/?p=1164&g=1&j=r&gdpr=0&ru=https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D161%26icm%26cver%26mapped%3D%25%25UID%25%25%26gdpr%3D0&xl8blockcheck=1 access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.5	50706	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:09 UTC	675	OUT	GET /p? HTTP/1.1 Host: a.audrte.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; arcki2_ddp2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073149686; arcki2_adform=4033174624989640038!20220908!1714073153104; arcki2_smart=5382283141381983659!20220908!1714073160420; arcki2_pubmatic=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7!20220908!1714073166267
2024-04-25 19:26:09 UTC	351	IN	HTTP/1.1 200 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Origin: * Content-Type: image/png Date: Thu, 25 Apr 2024 19:26:09 GMT Server: nginx/1.22.1 Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Content-Length: 68 Connection: Close
2024-04-25 19:26:09 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 0b 49 44 41 54 78 da 63 60 00 02 00 00 05 00 01 e9 fa dc d8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRIDATxc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.5	50723	202.233.84.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:10 UTC	575	OUT	GET /g/asr?google_gid=CAESEO1iBBYLvdjKFw6_WiQGcDQ&google_cver=1&google_push=AXcoOmR4bvUILxb5EetjAo2FbE-XnoVlMmCTuBecI2oh0xPgQ1Tn0kUgtGMJFiV4GUAFP3beasgAfb7JWbPbg7cBwlwKxGSkeaUq HTTP/1.1 Host: aid.send.microad.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TR=cd2c1d96f8bb63efde485c5cd79a680aea3e9d0f30701320
2024-04-25 19:26:10 UTC	845	IN	HTTP/1.1 302 302 Date: Thu, 25 Apr 2024 19:26:10 GMT Server: Apache Location: //cm.g.doubleclick.net/pixel?google_nid=MiAd&google_hm=ZPgcmm6kd8gIWKi3PGlWO9K9+HwdSQQn cache-control: no-cache Set-Cookie: TR=cd2c1d96f8bb63efde485c5cd79a680aea3e9d0f30701320; Max-Age=7776000; Expires=Wed, 24-Jul-2024 19:26:10 GMT; Domain=.send.microad.jp; Path=/; Secure; SameSite=None Set-Cookie: ASR-g=1; Max-Age=1209600; Expires=Thu, 09-May-2024 19:26:10 GMT; Domain=.send.microad.jp; Path=/; Secure; SameSite=None Content-Type: Content-Length: 0 P3P: policyref="http://www.microad.jp/w3c/p3p.xml",CP="NOI DSP COR NID DEVo PSAo OUR STP STA PRE" Access-Control-Allow-Headers: origin, x-requested-with, If-Modified-Since, content-type, Pragma, Cache-Control Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=3600 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.5	50712	34.229.3.43	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:10 UTC	943	OUT	GET /load/?p=1164&g=1&j=r&gdpr=0&ru=https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D161%26icm%26cver%26mapped%3D%25%25UID%25%25%26gdpr%3D0&xl8blockcheck=1 HTTP/1.1 Host: loada.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="6ff6677f944450cb87fd7d9da1ed9aaf"; ud="eJxrXxzq6XKLQcEsLc3MzNw8zdLExMTUIDnJwjwtxTzFMiXRMDXFMjExbXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo93xwAAdikoEg%253D%253D"
2024-04-25 19:26:10 UTC	1004	IN	HTTP/1.1 302 server: nginx date: Thu, 25 Apr 2024 19:26:10 GMT content-type: text/html content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="6ff6677f944450cb87fd7d9da1ed9aaf"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Fri, 23-Aug-2024 07:26:10 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQcEsLc3MzNw8zdLExMTUIDnJwjwtxTzFMiXRMDXFMjExbXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252FvjgEA1dArEQ%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Fri, 23-Aug-2024 07:26:10 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://pixel.onaudience.com/?partner=161&icm&cver&mapped=6ff6677f944450cb87fd7d9da1ed9aaf&gdpr=0 access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.5	50730	34.204.109.177	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:10 UTC	848	OUT	GET /s/56409?bidder_id=200442&bidder_uuid=b0185c5d-64c1-46f7-941a-e05dbec13e5b%3A1714073159.9130583&pid=500040&it=1&iv=b0185c5d-64c1-46f7-941a-e05dbec13e5b%3A1714073159.9130583&_=1714073159.9148479 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=ChAKBgjSARDiFwoGCKIBEOIX; lidid=16375e6d-7183-43c9-8be0-eb3cedad6305
2024-04-25 19:26:10 UTC	612	IN	HTTP/1.1 303 See Other Date: Thu, 25 Apr 2024 19:26:10 GMT Content-Length: 0 Connection: close Location: https://pippio.com/api/sync?it=1&pid=500040&_=1714073159.9148479&iv=b0185c5d-64c1-46f7-941a-e05dbec13e5b:1714073159.9130583 Set-Cookie: _li_ss=ChAKBgjSARDiFwoGCKIBEOIX; Max-Age=2592000; Expires=Sat, 25 May 2024 19:26:10 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=16375e6d-7183-43c9-8be0-eb3cedad6305; Max-Age=63072000; Expires=Sat, 25 Apr 2026 19:26:10 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.5	50731	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:10 UTC	692	OUT	GET /pixel?google_nid=epsilon&google_cm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk1_XJnBuqRvIhgNUu7389LlIrsSfJ5N_KqWboAYBJUz4bsNY5IKO_5tgAi
2024-04-25 19:26:10 UTC	658	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://idsync.rlcdn.com/362358.gif?google_gid=CAESEM0rNZtLAwEAKw_ks32Qb20&google_cver=1 Date: Thu, 25 Apr 2024 19:26:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 289 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:10 UTC	289	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 33 36 32 33 35 38 2e 67 69 66 3f 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 4d 30 72 4e 5a 74 4c 41 77 45 41 4b 77 5f 6b 73 33 32 51 62 32 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://idsync.rlcdn.com/362358.gif?google_gid=CAESEM0rNZtLAwEAKw_ks32Qb20&google_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.5	50732	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:10 UTC	801	OUT	GET /sync?dsp_id=4&user_id=d350de1e-1bed-47cb-9d79-7e9f3cdcfd0d&ssp=gumgum2&expires=30&user_group=5&bsw_param=cd1f46a5-d294-434b-82d4-0e4cc2e3d038 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: c=1714073146; tuuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038; tuuid_lu=1714073147
2024-04-25 19:26:11 UTC	537	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //usersync.gumgum.com/usersync?b=bsw&i=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.5	50734	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	765	OUT	GET /xuid?mid=2409&xuid=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=1072080661979746722290; tluid=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:11 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.5	50735	107.178.254.65	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	756	OUT	GET /api/sync?it=1&pid=500040&_=1714073159.9148479&iv=b0185c5d-64c1-46f7-941a-e05dbec13e5b:1714073159.9130583 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: did=GkXQXHx-JIbhq4Lu; didts=1714073150; nnls=; pxrc=CL7cqrEGEgYIgr0rEAA=
2024-04-25 19:26:11 UTC	461	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: pxrc=CL7cqrEGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Mon, 24 Jun 2024 19:26:11 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.5	50733	141.94.170.77	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	702	OUT	GET /?partner=161&icm&cver&mapped=6ff6677f944450cb87fd7d9da1ed9aaf&gdpr=0 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=198b624e2ecca676; done_redirects161=1
2024-04-25 19:26:11 UTC	438	IN	HTTP/1.1 302 Found set-cookie: cookie=198b624e2ecca676; Max-Age=31536000; Expires=Fri, 25 Apr 2025 19:26:11 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects147=1; Max-Age=86400; Expires=Fri, 26 Apr 2024 19:26:11 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.5	50736	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	754	OUT	GET /362358.gif?google_gid=CAESEM0rNZtLAwEAKw_ks32Qb20&google_cver=1 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=G9k2L7LzfbgqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=; pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi66gEQFBIGCLjrARAL
2024-04-25 19:26:11 UTC	640	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=+G8NEsHhnCwqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=; Path=/; Domain=rlcdn.com; Expires=Fri, 25 Apr 2025 19:26:11 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi66gEQFBIGCLjrARAL; Path=/; Domain=rlcdn.com; Expires=Mon, 24 Jun 2024 19:26:11 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.5	50742	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	529	OUT	GET /xuid?mid=5989&xuid=CAESEKK4GKo1jrHm98VnRwrke5w&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1072080661979746722290; tluidp=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:11 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.5	50738	207.65.37.184	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	4040	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AAAGGt2UjFe-2ANo84BRAAAAAAA&expiration=1714159560&nuid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7; KRTBCOOKIE_57=22776-3473854422107831099&KRTB&23339-3473854422107831099; KRTBCOOKIE_1251=23269-di_ca3aed69a6d948869efee&KRTB&23571-di_ca3aed69a6d948869efee; KRTBCOOKIE_148=19421-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23486-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23489-uid:BB7435D573F24117990D5894FB5D3774&KRTB&23539-uid:BB7435D573F24117990D5894FB5D3774; KRTBCOOKIE_80=22987-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23025-CAESEM-j6CSoDg41BAFzi37WM4U&KRTB&23386-CAESEM-j6CSoDg41BAFzi37WM4U; KRTBCOOKIE_377=6810-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22918-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&22926-500c5aec-af13-42d6-a7ea-250f9438d1fe&KRTB&23031-500c5aec-af13-42d6-a7ea-250f9438d1fe; KRTBCOOKIE_279=22890-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23011-5b5548e1-f48f-42a5-987f-5a866f7c8916&KRTB&23355-5b5548e1-f48f-42a5-987f-5a866f7c8916; KRTBCOOKIE_18=22947-1978557987846830937; KRTBCOOKIE_153=1923-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&19420-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&22979-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw&KRTB&23462-mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw; KRTBCOOKIE_860=16335-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23334-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23417-MBqnvcOAVHZk1_2R0gb5ubmYQuY&KRTB&23426-MBqnvcOAVHZk1_2R0gb5ubmYQuY; KRTBCOOKIE_1278=23329-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23340-4df7d229-f8a3-4c53-bb16-fd8aeed54a56&KRTB&23498-4df7d229-f8a3-4c53-bb16-fd8aeed54a56; KRTBCOOKIE_1003=22761-a1bf1886-0339-11ef-b50c-0785ba3fe1f5&KRTB&23275-a1bf1886-0339-11ef-b50c-0785ba3fe1f5; KRTBCOOKIE_107=1471-uid:2MKo2Xc81S04Jb5&KRTB&23421-uid:2MKo2Xc81S04Jb5; SyncRTB3=1714867200%3A63%7C1715299200%3A35_268%7C1719187200%3A69%7C1715212800%3A233_249_234_266_99_21_176_46_166_71_48_267_240_56_178_3_8_214_264_54_13_238_81_220_250_5_55_104_7_165_231_22_96_243%7C1714608000%3A38_15_223_2%7C1716595200%3A224; KRTBCOOKIE_188=3189-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553&KRTB&23418-20d6f965-a0e4-4486-bb52-f6976948d853-662aae3f-5553; KRTBCOOKIE_27=16735-uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe; KRTBCOOKIE_22=14911-8019790904257964151&KRTB&23150-8019790904257964151&KRTB&23527-8019790904257964151; KRTBCOOKIE_1323=23480-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23485-OPUad9a36a3dee7490d8b3d28e53f985deb&KRTB&23575-OPUad9a36a3dee7490d8b3d28e53f985deb; KRTBCOOKIE_466=16530-cd1f46a5-d294-434b-82d4-0e4cc2e3d038; KRTBCOOKIE_391=22924-4033174624989640038&KRTB&23263-4033174624989640038&KRTB&23481-4033174624989640038; KRTBCOOKIE_52=22772-R35CAB_1148B1422_6EA26C92&KRTB&23092-R35CAB_1148B1422_6EA26C92; KRTBCOOKIE_632=23041-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23047-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23234-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&KRTB&23361-TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8; KRTBCOOKIE_904=23554-NSqZaeSECB6dsksASa4qZg&KRTB&23557-NSqZaeSECB6dsksASa4qZg&KRTB&23586-NSqZaeSECB6dsksASa4qZg; KRTBCOOKIE_699=22727-AABL7E7MVVwAABRpRLTzpA; KRTBCOOKIE_594=17105-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005&KRTB&17107-RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005; KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA; chkChromeAb67Sec=6; DPSync3=1714608000%3A252_164_265_253%7C1715212800%3A260_256_219_259_245_235_236_228_197_262_201_226_261_258_263%7C1714089600%3A255_248%7C1715040000%3A257; SPugT=1714073166; PugT=1714073168
2024-04-25 19:26:11 UTC	708	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22713-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&22715-AAAGGt2UjFe-2ANo84BRAAAAAAA&KRTB&23519-AAAGGt2UjFe-2ANo84BRAAAAAAA; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 24-Jul-2024 19:26:11 GMT; path=/ Set-Cookie: PugT=1714073171; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 25-May-2024 19:26:11 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-25 19:26:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.5	50740	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	515	OUT	GET /xuid?mid=2662&xuid=y-TgsrWNpE2oTazxz5yrMaadmBl26dNhqiG4IVkrS0sw--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1072080661979746722290; tluidp=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:11 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.5	50741	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	523	OUT	GET /xuid?mid=2319&xuid=0-301aa7bd-c380-5476-64d7-fd91d206f9b9$ip$185.152.66.230&dongle=4430 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1072080661979746722290; tluidp=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:11 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.5	50739	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	524	OUT	GET /xuid?mid=3658&xuid=500c5aec-af13-42d6-a7ea-250f9438d1fe&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=1072080661979746722290; tluidp=1072080661979746722290; receive-cookie-deprecation=1
2024-04-25 19:26:11 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=1072080661979746722290; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=1072080661979746722290; Max-Age=7776000; Expires=Wed, 24 Jul 2024 19:26:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-04-25 19:26:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.5	50744	52.46.155.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	454	OUT	GET /ecm3?ex=gg.com&id=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-privacy=0; ad-id=A0XINyouQ0Udlc-zDfFfqMY
2024-04-25 19:26:11 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 8PG4WD0MZPAMNPXAQ4ET Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-25 19:26:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.5	50746	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	431	OUT	GET /usersync?b=apn&i=3473854422107831099 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:11 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.5	50747	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	534	OUT	GET /396846.gif?served_by=evergreen&partner_uid=41bccb41-99b0-03b3-11d7-830251b12c9f HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=G9k2L7LzfbgqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=; pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi66gEQFBIGCLjrARAL
2024-04-25 19:26:11 UTC	640	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=+G8NEsHhnCwqLXYOhVbIOWTAMJYkoJy+u/LHJPhouew=; Path=/; Domain=rlcdn.com; Expires=Fri, 25 Apr 2025 19:26:11 GMT; Secure; SameSite=None Set-Cookie: pxrc=CLzcqrEGEgUI6AcQABIFCOhHEAASBgi66gEQFBIGCLjrARAL; Path=/; Domain=rlcdn.com; Expires=Mon, 24 Jun 2024 19:26:11 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.5	50750	64.233.185.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	420	OUT	GET /dfp/120006/4861501641/1605545600158/images/adc_stm_space_300x250_animated_atlas_1.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:11 UTC	722	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 122923 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 02:26:57 GMT Expires: Fri, 26 Apr 2024 02:26:57 GMT Cache-Control: public, max-age=86400 Last-Modified: Mon, 16 Nov 2020 16:53:20 GMT Content-Type: image/png Age: 61154 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 19:26:11 UTC	533	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 04 00 08 03 00 00 00 48 c3 db b1 00 00 02 fd 50 4c 54 45 2c 54 54 7c 8f 51 7b 9c 75 bf f8 00 82 8b 41 40 4a 56 08 fd ff 31 b6 a3 a2 a1 85 24 47 4e d8 dc d8 4e 5f 48 a6 9d 5b 72 6c 3a 79 78 76 32 4c 3a a4 73 26 55 a3 0e 8c 9d 61 64 7f 47 89 a6 a6 83 a4 a3 37 54 3f 67 8c 89 9a a9 a9 76 5e 38 59 5f 41 3d 70 12 7d ad ac b9 db d4 38 fa fb 89 ba bd 87 ad ae 98 a9 6f 7c 7d 71 bd dd d9 95 84 67 1a f0 b7 54 5c 53 42 73 71 81 8e 92 4f 7a 79 88 b1 af 60 6f 3c b6 d7 d6 8d 94 8c 9e a3 a0 9e a0 9c ee f0 ec 9a b3 b2 64 9d 9a 41 33 1c 7b 8c 70 76 83 62 9a 66 11 b3 86 08 00 ff 08 46 77 72 e1 ae 15 04 af 0a 52 53 4f 83 9f a0 db f7 aa a1 a9 73 11 2d 35 9e 8f 93 94 cd bc ec fc 6a 0d 1a 24 21 3f 37 1a 83 92 64 Data Ascii: PNGIHDRHPLTE,TT\|Q{uA@JV1$GNN_H[rl:yxv2L:s&UadG7T?gv^8Y_A=p}8o\|}qgT\SBsqOzy`o<dA3{pvbfFwrRSOs-5j$!?7d
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: 98 b8 ba 88 73 32 0d 16 20 fc fc fc 9f 8d 5c fb fc fd 0f 1d 28 0a 1a 22 74 ac a9 04 f2 00 0d 1e 27 d6 d6 d6 76 b0 ae 0e 3e 43 10 1c 27 88 76 70 82 ee 00 77 9c 99 df df de 06 fb e9 74 a8 a6 74 a1 a0 0c 1c 27 44 30 11 0c 15 1c 7f a0 a1 7c b5 b1 82 a7 a9 0a 11 16 00 f8 df 7c a9 a9 a0 7a 33 78 9e 9d 7c ab af ce d1 bc 92 b9 08 0e 1c 27 fa fa fa 00 fa ff f6 f6 f6 8d ff ff 0e 39 3d 97 a2 a0 ff ff 00 ea ea ea 12 2d 39 41 40 5f a3 a2 a0 ff ff ff fc fc fc f9 f9 f9 f3 f3 f3 f8 f8 f8 02 1b 24 f2 f2 f2 fc fc fc ff ff ff 00 00 00 f1 f1 f1 34 34 2a f8 f8 f8 00 2e 74 f8 f8 f8 b6 b6 b6 f1 f1 f1 38 35 25 00 00 00 6a 2b 40 97 ff ff 80 00 ff 99 99 99 aa aa aa fc fc fc cc cc cc ff 00 ff f8 f8 f8 f8 f8 f8 f0 f0 f0 c6 c6 c6 a1 a7 a0 ad 85 eb ff 80 ff 14 2b 3a 79 9b a0 aa aa aa Data Ascii: s2 \("t'v>C'vpwtt'D0\|\|z3x\|'9=-9A@_$44*.t85%j+@+:y
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: fd ca fc ab 31 0f b0 b8 77 5a 86 4e e9 79 09 88 11 f0 0f bd 0a 40 7b 00 e5 fd 71 4b 50 9b fb 2e 36 86 4e 7a 50 9e b9 f7 03 31 02 fe 61 7c 08 f0 61 a4 d7 49 cc dd 94 55 c0 46 63 e6 b0 70 2f 20 46 80 46 9c c8 01 34 df d1 15 05 ba 58 c2 6e b9 18 83 cf 90 18 01 6a 70 42 01 98 0d 7a 7d e6 7a be ed 09 b3 dd dc a3 53 2e 46 80 4a 74 15 c0 f1 d4 7a a4 17 93 cc a4 83 18 01 aa 71 a4 0c b8 dd a4 cb 79 d5 c2 e4 27 f4 a2 ef 65 0a c5 08 d0 8e 23 0a 60 68 38 ad d7 68 84 af ce 9e cc 77 45 15 cc 9e 18 01 cf a1 a5 13 b0 35 b6 e7 c6 0c a3 96 e9 37 0e be 4f cb 6a 4d c0 2d fc 29 46 c0 3b dc 52 00 4d 93 93 e1 df d3 66 fd e8 00 c4 08 b8 0b 2d 1e c0 54 e2 e2 c5 5d 00 e0 08 9e 28 80 a5 c1 6b e7 5a 46 1b 5a 69 bb 70 63 34 4f bf 1b ff 18 1b cc 8a 18 01 17 31 af 00 3c 35 6b f9 96 9f Data Ascii: 1wZNy@{qKP.6NzP1a\|aIUFcp/ FF4XnjpBz}zS.FJtzqy'e#`h8hwE57OjM-)F;RMf-T](kZFZipc4O1<5k
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: e6 69 da 09 b3 41 8c 00 65 38 7d 31 c8 95 0f 4a 5d 60 98 b7 7f 57 ef a0 a9 76 cf e1 9e 6a 31 02 14 e1 b4 02 a0 f7 58 a9 81 e9 b9 e3 87 fe f7 71 3c 3e fc b5 6a bd 67 49 8c 80 97 38 a1 00 06 c7 d6 98 e7 ad eb 63 e4 bb 3b ca c9 16 9f ed fc af 8e 9d 1c 80 3f a3 62 04 3c 65 a2 77 03 4e b2 5b ec 50 3d a3 72 55 5d d3 ec 51 b1 d7 b8 f2 fe 95 47 d1 f0 74 89 11 f0 94 09 29 00 fb d6 ed 92 23 dd 57 3a ee f3 9b 9f 0c 96 c4 0d ce d4 a0 fa 20 1e 88 11 70 18 17 15 40 ef b9 59 d5 4b 74 a4 48 65 74 65 19 f0 4b 35 13 6c a6 bd e8 6f cc 3e c1 24 33 22 46 c0 1b 26 19 02 1c f6 ad e6 9e bf 2e 19 28 8f 5d 38 d9 6f 52 ed f9 d3 2d d4 7d ea 46 32 6f b6 c4 08 b8 cb 24 15 c0 3b f3 86 61 bc c3 59 35 5d 97 7e 6b 7d c4 de b1 d9 c2 9f 1b 5d 72 fe 17 23 40 0f 13 4d 02 8e a0 da a9 1d 4d a0 Data Ascii: iAe8}1J]`Wvj1Xq<>jgI8c;?b<ewN[P=rU]QGt)#W: p@YKtHeteK5lo>$3"F&.(]8oR-}F2o$;aY5]~k}]r#@MM
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: 5b 9c 8a 67 9f ed 01 5f 55 db f0 5d 7f 3a ed ea d6 7b 67 8b 5e b3 2a 46 80 4a f4 14 80 ee 05 d4 ad ae cf 67 c2 12 52 33 3d 5e 7b d3 8d ab b5 1f 13 59 ec 1b 34 69 7f ec ff 12 c4 08 d0 cd 48 0f c0 82 99 9a d6 94 f0 53 83 bd 6e 5a 6a 02 c4 08 50 cb 48 05 b0 04 ab f0 12 92 25 3f ca 5b 7b 2e 88 11 a0 16 6a 1a 81 2e 7e ff d4 d0 b5 b2 ad fb 56 42 61 63 55 a9 71 cd 78 06 fc f5 53 8f 37 bb 1f c4 08 50 44 8f 02 18 cc dd 68 1f 3a 37 49 27 74 36 b0 2b f6 b3 4f 0c d5 a2 b7 9d b9 e9 52 13 8b bf 70 ff 82 07 31 42 36 c0 47 38 e8 01 68 76 9f 74 86 51 18 58 b9 03 f7 52 bc c3 e1 b4 b6 25 a9 8e 3e 9f 4f 18 97 86 36 53 a3 1a 7c 6c 73 78 79 3b 7b 59 d6 74 8a 11 a0 14 a3 0a a0 7a 7c b2 a4 9b d2 76 81 56 df bf cc f1 6e 7f 4c c2 ce 78 45 fd 78 68 17 1c 1e 6a 3e d0 20 33 2a 46 80 Data Ascii: [g_U]:{g^FJgR3=^{Y4iHSnZjPH%?[{.j.~VBacUqxS7PDh:7I't6+ORp1B6G8hvtQXR%>O6S\|lsxy;{Ytz\|vVnLxExhj> 3F
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: aa ff 73 c7 7e 8d fc 2d b4 3f d3 eb be 02 fc e0 38 fe 8e 73 70 3d 24 6b 5c 03 ef cc 8a 11 a0 15 27 1a 81 b6 4d 5e 24 77 f1 a9 53 ab a4 73 9f ed a9 2d 47 bb da 6d f8 d1 5e d6 f9 be b6 bc e1 68 00 bf 78 d5 a1 52 c1 34 8b 11 a0 95 91 0a a0 7a 19 38 6a f7 79 5e 2d 09 5f dc 07 b3 a4 b3 bf 8e 46 ae ec fc 98 21 d8 f8 45 f7 c7 ad 79 10 23 40 2d 23 15 c0 fd cb 68 4f db b5 75 fc 1a f8 9e 06 38 cb 69 ef 23 bd 4f f5 8d 8e 83 db 31 a3 7a cf ca db 9f b2 03 62 04 e8 c5 f3 99 80 c6 33 6e 16 68 1a 76 92 f5 1e d8 bc ba af cb 66 1a dd 65 28 17 23 40 2b fa 0a c0 f6 cc aa f7 27 f9 89 ba 85 63 2f a7 ef fd 34 da 33 bf 55 1f bd ef 68 cb 12 79 e0 21 f9 9b c5 c3 35 33 2b 46 c0 17 e8 2b 00 9b 5d 68 db 17 47 f7 c7 46 c7 16 d1 b6 33 87 9a ce e9 b6 99 9b bd 55 73 ef 6c fb dd cc 8a 11 Data Ascii: s~-?8sp=$k\'M^$wSs-Gm^hxR4z8jy^-_F!Ey#@-#hOu8i#O1zb3nhvfe(#@+'c/43Uhy!53+F+]hGF3Usl
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: 2c b5 71 3b c0 70 7a db dc a1 17 9b 37 e7 19 e3 f4 0f 03 df 00 31 02 34 63 d8 03 50 fd da b3 31 8b 4e d3 16 8e 2b 57 b7 8c 9c 89 75 e0 88 fd 44 82 ee d6 1f 3a 1b 4a ef 97 06 31 02 54 31 81 81 20 2d d5 14 0d 2f 6a 72 66 85 9c 4d a1 6a 8c 8e d9 76 1c 3d 9c bf 49 73 26 c5 08 b8 cd 80 02 38 33 e0 37 fe c9 52 23 fb 70 03 49 ef 00 3d 5b f7 da f6 a0 d1 cb ea 45 f6 1b c4 08 f8 04 13 1e c0 71 d7 c6 58 3b 31 f6 c1 0d df d1 c8 0c 2a 2f e7 5d 37 b7 87 b7 0d 88 11 a0 08 13 0a e0 83 cd c6 14 17 96 10 55 53 a9 89 d9 1c d8 9d 5a 9f 0f c4 08 50 84 86 02 d0 35 31 ea d2 33 d0 b2 ee 3f dc 38 9d 0b 62 04 7c 80 99 24 60 7f 60 db 6c 1e e7 6d e4 7a b4 b3 64 ba dd 36 53 04 88 11 a0 87 51 0a 60 94 67 78 9f d8 30 43 07 52 8e cd d8 05 fd 9b 71 8f f3 ef 26 93 86 6a 5d 47 c4 ce 9c b7 Data Ascii: ,q;pz714cP1N+WuD:J1T1 -/jrfMjv=Is&837R#pI=[EqX;1*/]7USZP513?8b\|$``lmzd6SQ`gx0CRq&j]G
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: 64 f4 4e ac 6d 1b c7 58 2f 63 ff ed 3f 5d 7f 0f c4 08 d0 8f 91 10 e0 fd 78 f3 f5 fb c1 6f 0c 3e c5 f2 aa 68 bd bc 5c b1 6e 3b a3 2d eb 97 62 f5 bc 88 fe 87 04 31 02 f4 d1 af 00 8e ac de 20 d9 c9 35 bb 30 61 b2 f9 ab b1 e7 6f 6d 56 9c 9a ce d7 c5 af c5 68 72 c3 82 18 81 09 d3 af 00 b6 fd 38 15 da aa 55 ec e6 c4 5b ce bb ac d7 62 f4 d1 95 bc f4 89 11 98 00 ae 54 01 68 c3 44 11 1e ec 98 3e 20 c6 29 e4 52 01 f8 c8 54 99 e7 7a ca 4e c7 5c b9 67 ac 3a 62 bc 8a 82 35 ef fa f3 2d 93 13 23 30 31 a8 f0 00 26 17 78 74 96 f0 77 dd af 7a b5 9e 76 08 7c 69 f4 5a f7 cd bc cb 1f 2e ff 32 d9 88 8a 5e 31 02 d4 a2 ab 00 74 d5 7b eb d2 ac bd a5 65 f8 e3 a5 61 7a 33 f2 51 63 c8 6f 6b a5 c7 2f a5 60 39 c2 05 31 02 54 a3 ab 00 2e cd c9 c5 60 4e 7a df f5 2b b3 2f 51 ad ae 81 9d Data Ascii: dNmX/c?]xo>h\n;-b1 50aomVhr8U[bThD> )RTzN\g:b5-#01&xtwzv\|iZ.2^1t{eaz3Qcok/`91T.`Nz+/Q
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: cb 66 16 3b 1d b3 46 b0 6c f9 40 8c 80 17 38 11 02 68 4f c6 c0 ab 44 cf aa 69 56 b0 dc ed 5c 21 b1 fc fd 09 a4 d9 6c 74 01 81 18 81 c9 e3 66 0e a0 d5 13 45 f6 cd 9b 7b a2 75 8b bc ad 74 5b 7e ec 4d d6 66 6f dc a3 07 10 23 e0 1e aa 02 d0 b3 3d 6e 91 1f 7f d2 be 17 03 1d 75 79 b5 5c d7 6c dd d7 5d c0 17 ee df 66 09 62 04 7c c7 a4 ab 00 6a f9 79 5f 63 74 fe 75 64 6b c5 c3 bc af 7a be d5 fc b1 db 29 7c cd d8 b7 b7 59 60 32 3d f8 7e 17 23 40 0b 9e 94 01 5b 23 2f dd c9 5b df 43 cd 01 07 58 df a3 b5 9a c4 b2 78 5d 90 2b f8 58 8c 00 2d cc 79 12 d4 39 9e 46 9a d8 be d4 7b 23 10 23 e0 4b 5c f5 00 74 77 85 7f 2f 91 d2 35 86 2e a6 c6 a7 50 8c 00 2d f4 2b 80 49 15 78 26 13 28 3b 43 4f 61 6f 69 84 7c 7a 33 80 20 46 c0 2f 98 f7 00 66 e9 1e 78 62 62 f7 af e3 dc 23 07 b3 Data Ascii: f;Fl@8hODiV\!ltfE{ut[~Mfo#=nuy\l]fb\|jy_ctudkz)\|Y`2=~#@[#/[CXx]+X-y9F{##K\tw/5.P-+Ix&(;COaoi\|z3 F/fxbb#
2024-04-25 19:26:11 UTC	1255	IN	Data Raw: bd e3 d1 4b d3 b9 1c 7d 47 8c 43 06 1f c4 08 d0 86 b1 1c 80 59 d3 32 f1 28 70 ec 07 bc 50 37 df e8 87 19 9c e7 3d 84 e1 e3 2f 20 46 80 36 1c 49 02 f6 35 c4 90 0a b8 b1 e9 34 0e da c3 6d 52 d8 1a 7a bd 81 93 a9 6f c7 ee d4 d1 6b 37 ef d8 ad 7b da cc 88 18 01 9a 30 ae 00 ee eb 2f b4 21 a7 cf d8 0a 68 39 3c c1 e2 fe 50 f7 cd d9 51 af 15 ed 3d ea 60 85 a6 13 c1 2d 88 11 a0 09 e3 0a a0 ea f9 c5 90 1a 47 e3 fb d7 ea 98 0d da 7a d9 ff f5 65 a5 ee f2 17 d3 28 a2 8d 2e e6 59 89 76 67 52 8c 00 b5 d0 d1 07 d0 e5 b5 bb 6b a7 ba af 69 ba 3e fc a9 fb 17 35 be ed 35 f3 d5 ef ec 4c cd f0 0c 2a c4 e8 ea 47 00 1c c3 b0 02 d8 ee b7 5c 06 03 cf 5e 6b 63 aa 35 66 c9 b1 5a 52 cf 47 d0 69 80 ed 3b c3 d6 ec 31 eb ad 6f 9e 9a 4d dc 8f 1b e0 33 33 62 74 ea 7d 01 77 31 ac 00 06 a6 Data Ascii: K}GCY2(pP7=/ F6I54mRzok7{0/!h9<PQ=`-Gze(.YvgRki>55L*G\^kc5fZRGi;1oM33bt}w1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.5	50751	3.161.188.80	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	462	OUT	GET /adscores/g.pixel?sid=9212308278&puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3AM2AvV%2BNd4QcH7SbQ8GkUMeHA7pA9ZqvV
2024-04-25 19:26:11 UTC	836	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 25 Apr 2024 19:26:11 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AM2AvV%2BNd4QcH7SbQ8GkUMeHA7pA9ZqvV; Path=/; Domain=.agkn.com; Expires=Fri, 25-Apr-2025 19:26:11 GMT; Max-Age=31536000; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 efaae0f35ec3f4a42a1a428972e100c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: xB5L8JTXh1f9xOgL-ZNj_N92NlY5MsXlSACStV9I0-MdS49v4jAJfA==
2024-04-25 19:26:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.5	50749	38.98.69.175	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	419	OUT	GET /sn.ashx?ak=1 HTTP/1.1 Host: pmp.mxptint.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mxpim=R35CAB_1148B1422_6EA26C92.1.0000000000000000662AAE47
2024-04-25 19:26:11 UTC	242	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 Date: Thu, 25 Apr 2024 19:26:11 GMT Connection: close Content-Length: 43 Strict-Transport-Security: max-age=-397077971; includeSubDomains
2024-04-25 19:26:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.5	50748	172.66.42.247	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	429	OUT	GET /dyn/smat-us?user_id=fdca454d4b&gdpr=0&gdpr_consent= HTTP/1.1 Host: router.infolinks.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SAMUSERCOOKIE=fdca454d4b
2024-04-25 19:26:11 UTC	476	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: no-store, no-cache, private set-cookie: SAMUSERCOOKIE=fdca454d4b; Domain=infolinks.com; Expires=Wed, 24-Jul-2024 19:26:11 GMT; Path=/; SameSite=None; Secure pragma: no-cache expires: Tue, 25 Apr 2023 19:26:11 GMT p3p: CP="NON DSP NID OUR COR" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87a0b929fb72ad5e-ATL
2024-04-25 19:26:11 UTC	35	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 01 00 07 07 07 ff ff ff 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF87a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.5	50752	52.3.114.66	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	482	OUT	GET /qmap?c=240&tp=PUBM&tpid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=6efb576f370522a24883b5b8d45a1e39
2024-04-25 19:26:11 UTC	315	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.52.171 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-04-25 19:26:11 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.5	50753	34.230.229.237	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	421	OUT	GET /tag/?id=20909&user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent= HTTP/1.1 Host: bpi.rtactivate.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 19:26:11 UTC	140	IN	HTTP/1.1 200 OK Server: awselb/2.0 Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close
2024-04-25 19:26:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.5	50754	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	714	OUT	GET /usersync?b=bsw&i=cd1f46a5-d294-434b-82d4-0e4cc2e3d038&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:11 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:11 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:11 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.5	50759	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	452	OUT	GET /usersync?b=oth&i=y-_IfnGIJE2peK4sSE6yEVRW.U1zQWesG66kSq~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:12 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:12 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.5	50758	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	431	OUT	GET /usersync?b=sad&i=5382283141381983659 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=u_4a1a36ff-22e0-4a11-9d26-d255ac6437d8
2024-04-25 19:26:12 UTC	210	IN	HTTP/1.1 200 Date: Thu, 25 Apr 2024 19:26:12 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-04-25 19:26:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.5	50755	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:11 UTC	857	OUT	GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFEhYKB3N2eDl0NTASCwjA5f2l8tnyPBAFEhQKBXRhcGFkEgsI7NrH5PLZ8jwQBRgBIAEoAjILCKLRypGJ2vI8EAU4AVoFdGFwYWRgAg..
2024-04-25 19:26:12 UTC	670	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 19:26:12 GMT Content-Length: 261 Connection: close server: Kestrel location: https://pixel.onaudience.com/?partner=147&mapped=500c5aec-af13-42d6-a7ea-250f9438d1fe&icm&gdpr=0&gdpr_consent=&cver set-cookie: TDID=500c5aec-af13-42d6-a7ea-250f9438d1fe; expires=Fri, 25 Apr 2025 19:26:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjK6qG78dnyPBAFEhYKB3J1Ymljb24SCwjItubq8dnyPBAFEhYKB3N2eDl0NTASCwjA5f2l8tnyPBAFEhQKBXRhcGFkEgsI7NrH5PLZ8jwQBRgBIAEoAjILCMa18MKJ2vI8EAU4AVoHeGtzdzlsYWAC; expires=Fri, 25 Apr 2025 19:26:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-25 19:26:12 UTC	261	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 34 37 26 6d 61 70 70 65 64 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 69 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 76 65 72 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 34 37 26 6d 61 70 70 65 64 3d 35 30 30 63 35 61 65 63 2d 61 66 31 33 2d 34 32 64 36 2d 61 37 65 61 2d 32 35 30 66 39 34 33 38 64 31 66 65 26 69 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 76 Data Ascii: Redirecting to: <a href="https://pixel.onaudience.com/?partner=147&mapped=500c5aec-af13-42d6-a7ea-250f9438d1fe&icm&gdpr=0&gdpr_consent=&cver">https://pixel.onaudience.com/?partner=147&mapped=500c5aec-af13-42d6-a7ea-250f9438d1fe&icm&gdpr=0&gdpr_consent=&cv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.5	50761	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:12 UTC	3499	OUT	GET /https://earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698 HTTP/1.1 Host: earnandexcel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nitroCachedPage=0; _ga_NLTTYMX3TH=GS1.1.1714073125.1.0.1714073125.0.0.0; _ga_37L88V1J5W=GS1.1.1714073125.1.0.1714073125.0.0.0; _gcl_au=1.1.1676511191.1714073129; _gid=GA1.2.2146030412.1714073131; _gat=1; _gat_UA-190016353-1=1; mediavine_session={%22depth%22:1%2C%22referrer%22:%22DIRECT%22%2C%22wrapperVersionGroup%22:{%22version%22:%223.1.15%22%2C%22name%22:%223.1.15-1450-SwapCMP.5-beta-control%22}%2C%22s2sVersionGroup%22:{%22version%22:%22production%22%2C%22name%22:%22production%22}}; _scid=e047ce99-8b6d-400f-973c-746356c74d77; _scid_r=e047ce99-8b6d-400f-973c-746356c74d77; _ga_8Y0K4MPJV5=GS1.1.1714073132.1.0.1714073132.60.0.0; _ga=GA1.1.1040263935.1714073125; _hjSessionUser_2832943=eyJpZCI6Ijc4MDVlYjQ2LWJmMWQtNTRlNi1hYzFkLWE2YWJkYWY3YzllNiIsImNyZWF0ZWQiOjE3MTQwNzMxMzM4ODksImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_2832943=eyJpZCI6IjgxZDgwMjQ1LTIwYzgtNDhkMS05NzUyLTBkNzQ0NjE1OTkyMiIsImMiOjE3MTQwNzMxMzM4OTIsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MX0=; am_gpp=DBABzw~1---~BqgAAAAAAgA; am_gpp_cmp_version=v2test; wickedfu_null=%7B%22url%22%3A%22https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F%3Futm_source%3DDirect%26utm_medium%3DDirect%26utm_campaign%3DDirect%26utm_content%3Dearnandexcel.com%252Fblog%252Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%26utm_term%3DOrganic%2520traffic%22%2C%22referrer%22%3A%22%22%2C%22time%22%3A1714073134342%2C%22c%22%3A3819%7D; _pin_unauth=dWlkPU9HWmhaalEwWm1JdE0ySmxPQzAwTWpBMExUazJaRGN0Wm1FMlpEWXlaR1kyTldSaw; _tt_enable_cookie=1; _ttp=JqnnrKuxcWw0MgqHxFigUNkJfTU; _fbp=fb.1.1714073135563.564279544; utm_source=; utm_campaign=; growme_version={"name":"7.244.0","version":"7.244.0"}; _sctr=1%7C1713996000000; _pubCommonId=303aba81-9bad-4df5-bdf6-df2dbdf61980; _lr_retry_request=true; _lr_env_src_ats=false; am_tokens={%22mv_uuid%22:%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22:%22invalidate-verizon-pushes%22}; am_tokens_invalidate-verizon-pushes={%22mv_uuid%22:%229c050a90-0339-11ef-8f5d-8719b2ab76bc%22%2C%22version%22:%22invalidate-verizon-pushes%22}; _pubCommonId_cst=KSwgLIAsRg%3D%3D; _scor_uid=da71df78ddbe405581bd0f39b44fe028; cto_bundle=asb6wF8wbSUyQkJ6aDh2UEhJeXJwenQ0VlFQUHBhaCUyRnZQTVh3MkUlMkIwckJKNjY4UE1QNHpJN2VrUyUyQjA3Q2Q1YTZQWjJjMDBTS3dCWlZ6aDlGRFU5NVlMZDklMkJybTFhSWVwc21xS2JDNkEwanRQR2FUWk9oeVQ4dFg0NXFzVFQlMkJ4a25VaXFwcDlscUM0NDZ4eUZTRU13ZkNwMVpiWFh5bFZzdUU4cnpSV1h1N1B3VWtXRkUlM0Q; TAPAD=%7B%22id%22%3A%22a9f717fb-fccf-4006-980b-232a96a53b16%22%7D; __gads=ID=d0732290375c83c0:T=1714073159:RT=1714073159:S=ALNI_MZbaMpMoVsdFXOH7y-U0bxYsxXO9Q; __gpi=UID=00000df669624852:T=1714073159:RT=1714073159:S=ALNI_Ma6Wp_h5MQNE3CNX-FiY1eM1wF4Qw; __eoi=ID=665ab9e36e745c0d:T=1714073159:RT=1714073159:S=AA-AfjYli1gEzKcDWdYlI535NnQ_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.5	50718	52.215.143.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 19:26:12 UTC	674	OUT	GET /p HTTP/1.1 Host: a.audrte.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: arcki2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073148033!ip#185.152.66.230; arcki2_ddp2=fi18fRxtHfSS0OelCAGOe32Ow!20220908!1714073149686; arcki2_adform=4033174624989640038!20220908!1714073153104; arcki2_smart=5382283141381983659!20220908!1714073160420; arcki2_pubmatic=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7!20220908!1714073166267

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.5	50764	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.5	50763	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.5	50767	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.5	50766	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.5	50765	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.5	50768	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.5	50762	141.94.170.77	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.5	50769	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.5	50773	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.5	50772	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.5	50770	207.65.37.184	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.5	50774	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.5	50775	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.5	50776	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.5	50777	50.57.31.206	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.5	50778	107.178.254.65	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.5	50779	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.5	50760	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.5	50780	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.5	50781	34.196.226.77	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.5	50782	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.5	50783	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.5	50784	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.5	50785	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.5	50786	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.5	50787	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.5	50788	141.94.170.77	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.5	50791	3.214.33.241	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.5	50792	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.5	50789	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.5	50790	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.5	50793	104.22.50.98	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.5	50794	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.5	50796	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.5	50799	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.5	50798	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.5	50797	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.5	50800	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.5	50801	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.5	50802	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.5	50804	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.5	50803	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.5	50805	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.5	50808	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.5	50809	104.22.50.98	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.5	50814	64.233.176.139	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.5	50815	108.177.122.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.5	50818	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.5	50821	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.5	50824	151.101.0.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.5	50823	151.101.0.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.5	50822	99.84.108.76	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.5	50825	18.64.236.18	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.5	50827	151.101.128.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.5	50826	151.101.128.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.5	50828	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.5	50829	31.13.88.35	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.5	50830	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.5	50834	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.5	50831	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.5	50833	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.5	50832	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.5	50835	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.5	50836	31.13.88.35	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.5	50837	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.5	50839	142.250.105.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.5	50838	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.5	50840	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.5	50841	31.13.65.36	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.5	50845	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.5	50844	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.5	50846	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.5	50847	108.177.122.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.5	50848	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.5	50849	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.5	50850	31.13.65.36	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.5	50853	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.5	50852	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.5	50855	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.5	50859	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.5	50861	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.5	50860	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.5	50864	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.5	50862	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.5	50863	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.5	50865	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.5	50866	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.5	50868	151.101.0.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.5	50867	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.5	50871	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.5	50870	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.5	50875	104.22.51.98	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.5	50876	151.101.0.84	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.5	50877	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.5	50878	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.5	50880	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.5	50881	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.5	50882	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.5	50884	35.190.80.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.5	50883	35.190.80.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.5	50885	35.190.80.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.5	50895	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.5	50886	107.22.223.223	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.5	50890	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.5	50889	34.150.170.96	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.5	50888	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.5	50891	198.148.27.131	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.5	50892	23.105.12.142	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.5	50893	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.5	50598	54.242.78.179	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.5	50899	8.2.110.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.5	50900	35.190.80.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.5	50901	35.190.80.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.5	50887	82.145.213.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.5	50902	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.5	50903	35.190.80.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.5	50907	3.161.188.78	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.5	50908	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.5	50904	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.5	50906	34.204.109.177	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.5	50912	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.5	50905	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.5	50909	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.5	50910	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.5	50913	107.22.223.223	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.5	50915	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.5	50914	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.5	50917	64.233.177.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.5	50911	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.5	50921	52.46.155.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.5	50922	34.230.229.237	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.5	50923	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.5	50924	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.5	50920	35.210.53.219	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.5	50926	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.5	50925	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.5	50927	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.5	50928	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.5	50929	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.5	50930	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.5	50931	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.5	50660	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.5	50933	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.5	50936	34.36.216.150	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.5	50939	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.5	50938	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.5	50937	34.198.78.192	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.5	50934	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.5	50935	192.184.67.70	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.5	50943	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.5	50932	35.71.131.137	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.5	50942	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.5	50940	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.5	50941	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.5	50946	3.161.188.80	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.5	50948	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.5	50949	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.5	50950	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.5	50951	35.244.154.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.5	50954	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.5	50957	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.5	50956	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.5	50960	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.5	50959	34.196.226.77	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.5	50962	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.5	50958	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.5	50963	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.5	50966	64.233.176.139	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.5	50961	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.5	50964	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.5	50953	35.210.53.219	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.5	50967	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.5	50971	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.5	50955	185.184.8.90	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.5	50970	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.5	50972	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.5	50973	142.250.105.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.5	50969	69.90.254.78	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.5	50974	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.5	50968	54.211.105.244	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.5	50976	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.5	50978	3.163.80.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.5	50977	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.5	50982	64.233.185.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.5	50980	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.5	50981	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.5	50983	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.5	50986	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.5	50979	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.5	50984	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.5	50985	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.5	50987	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.5	50988	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.5	50989	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.5	50991	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.5	50992	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.5	50993	34.204.109.177	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.5	50994	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.5	50995	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.5	50996	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.5	50997	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.5	50998	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.5	50999	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.5	51001	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.5	51002	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.5	51000	34.193.32.57	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.5	51004	172.67.164.44	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.5	51003	104.21.41.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.5	51010	35.244.193.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.5	51009	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.5	51011	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.5	51012	18.160.78.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.5	51013	3.218.216.11	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.5	51014	3.226.156.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.5	51015	35.172.99.217	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.5	51017	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.5	51018	172.67.164.44	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.5	51020	35.244.193.51	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.5	51016	3.209.78.31	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.5	51023	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.5	51024	52.86.118.186	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.5	51025	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.5	51027	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.5	51026	107.23.208.6	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.5	51028	172.240.155.108	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.5	51029	34.204.143.41	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.5	51031	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.5	51032	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.5	51033	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.5	51030	3.218.216.11	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.5	51034	3.226.156.1	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.5	51035	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.5	51036	74.119.118.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.5	51037	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.5	51038	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.5	51039	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.5	51040	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.5	51041	18.160.83.122	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.5	51044	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.5	51042	207.65.37.179	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.5	51046	3.226.121.246	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.5	51045	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.5	51049	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.5	51047	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.5	51048	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.5	51050	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.5	51052	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.5	51051	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.5	51054	23.54.200.27	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.5	51053	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.5	51060	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.5	51062	18.160.78.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.5	51063	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.5	51064	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.5	51066	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.5	51065	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.5	51067	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.5	51061	34.150.170.96	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.5	51068	52.72.24.92	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.5	51056	192.184.67.70	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.5	51071	165.254.203.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.5	51072	162.159.135.42	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.5	51057	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.5	51076	104.18.36.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.5	51069	3.218.216.11	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.5	51077	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.5	51070	52.4.157.85	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.5	51079	34.192.42.219	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.5	51082	18.64.153.203	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.5	51080	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.5	51083	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.5	51084	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.5	51086	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.5	51085	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.5	51091	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.5	51092	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.5	51093	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.5	51094	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.5	51090	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.5	51097	18.160.83.122	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.5	51099	184.25.164.23	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.5	51098	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.5	51096	3.226.121.246	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.5	51095	207.65.37.179	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.5	51103	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.5	51089	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.5	51104	104.18.36.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.5	51105	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.5	51106	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.5	51102	216.219.92.22	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.5	51107	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.5	51108	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.5	51110	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.5	51109	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.5	51112	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.5	51115	142.251.15.132	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.5	51114	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.5	51116	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.5	51118	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.5	51117	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.5	51119	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.5	51121	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.5	51123	172.64.151.101	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.5	51122	44.210.232.173	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.5	51124	18.160.83.122	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.5	51125	207.65.37.179	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.5	51128	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.5	51126	3.226.121.246	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.5	51111	54.239.38.253	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.5	51129	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1096	192.168.2.5	51131	173.194.219.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.5	51133	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.5	51132	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.5	51134	34.236.60.188	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.5	51127	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.5	51137	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.5	51138	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.5	51139	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.5	51140	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.5	51130	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.5	51144	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.5	51145	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.5	51147	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.5	51146	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.5	51148	104.18.36.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.5	51150	18.64.153.203	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.5	51149	34.192.42.219	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.5	51151	74.119.117.17	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.5	51136	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.5	51153	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.5	51154	52.46.155.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.5	51155	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.5	51157	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.5	51156	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.5	51158	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.5	51161	104.18.36.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.5	51162	18.64.153.203	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.5	51160	44.209.20.160	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.5	51163	52.72.24.92	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.5	51164	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.5	51165	35.244.159.8	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.5	51169	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.5	51173	52.46.155.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.5	51175	34.102.243.38	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.5	50713	52.20.207.59	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.5	51178	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.5	51174	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.5	51172	52.95.126.160	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.5	51182	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.5	51181	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.5	51185	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.5	51184	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.5	51180	174.129.112.91	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.5	51183	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.5	51189	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.5	51187	74.119.118.149	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.5	51186	34.192.42.219	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.5	51190	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.5	51179	5.9.235.249	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.5	51193	3.161.163.30	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.5	51194	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.5	51195	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.5	51196	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.5	51197	34.98.64.218	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.5	51200	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.5	51192	96.7.224.83	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.5	51191	34.235.48.93	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.5	51203	34.102.243.38	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.5	51211	142.250.105.99	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.5	51214	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.5	51215	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.5	51212	44.216.253.69	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.5	51217	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.5	51218	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.5	51220	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.5	51221	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.5	51222	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.5	51224	3.163.101.59	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.5	51226	173.223.239.154	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.5	51225	52.223.40.198	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.5	51227	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.5	51230	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.5	51233	3.163.101.59	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.5	51236	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.5	51238	34.111.113.62	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.5	51232	5.9.235.249	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.5	51242	64.233.177.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.5	51246	74.119.117.16	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.5	51247	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.5	51243	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.5	51253	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.5	51245	69.90.254.72	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.5	51259	34.36.216.150	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.5	51257	54.147.231.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.5	51254	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.5	51255	68.67.160.114	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.5	51260	52.46.143.56	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.5	51263	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.5	51264	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.5	51258	64.74.236.31	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.5	51267	142.250.9.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.5	51266	172.253.124.157	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.5	51265	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.5	51268	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.5	51256	52.7.87.144	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.5	51270	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.5	51272	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.5	51271	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.5	51273	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.5	51274	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.5	51276	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.5	51277	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.5	51278	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.5	51279	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.5	51280	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.5	51285	104.26.8.177	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.5	51286	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.5	51275	3.213.119.72	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.5	51287	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.5	51288	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.5	51289	35.190.43.134	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.5	51292	172.64.150.163	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.5	51293	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.5	51291	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.5	51282	69.90.254.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.5	51283	69.90.254.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.5	51284	69.90.254.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.5	51297	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.5	51299	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.5	51296	52.46.155.104	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.5	51298	172.253.124.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.5	51300	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.5	51306	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.5	51305	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.5	51307	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.5	51308	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.5	51310	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.5	51309	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.5	51301	35.211.178.172	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.5	51302	68.67.160.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.5	51303	68.67.160.117	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.5	51311	35.71.139.29	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.5	51312	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.5	51313	172.67.71.65	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.5	51315	69.90.254.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.5	51316	69.90.254.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.5	51314	69.90.254.75	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.5	51319	3.161.163.30	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.5	51321	173.194.219.156	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.5	51327	173.194.219.155	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1236	192.168.2.5	51328	35.190.43.134	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1237	192.168.2.5	51331	23.207.52.22	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.5	51323	192.184.67.70	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.5	51322	69.90.254.72	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.5	51325	64.74.236.31	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1241	192.168.2.5	51332	34.235.38.62	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1242	192.168.2.5	51330	174.137.133.49	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.5	51326	69.194.240.13	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1244	192.168.2.5	51333	3.163.101.59	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1245	192.168.2.5	51334	173.194.219.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1246	192.168.2.5	51336	173.194.219.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1247	192.168.2.5	51337	34.117.239.71	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1248	192.168.2.5	51339	173.194.219.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1249	192.168.2.5	51340	173.194.219.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1250	192.168.2.5	51341	173.194.219.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1251	192.168.2.5	51342	3.212.198.223	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1252	192.168.2.5	51344	69.194.240.13	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1253	192.168.2.5	51343	69.90.254.72	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1254	192.168.2.5	51347	8.28.7.82	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1255	192.168.2.5	51352	35.190.43.134	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1256	192.168.2.5	51351	172.67.175.48	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1257	192.168.2.5	51354	172.253.124.157	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1258	192.168.2.5	51353	142.250.9.156	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1259	192.168.2.5	51355	142.250.9.156	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1260	192.168.2.5	51357	173.194.219.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1261	192.168.2.5	51358	3.163.101.59	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1262	192.168.2.5	51359	172.64.150.163	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1263	192.168.2.5	51360	35.190.43.134	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1264	192.168.2.5	51361	172.67.175.48	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1265	192.168.2.5	51362	35.190.43.134	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1266	192.168.2.5	51365	172.253.124.156	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1267	192.168.2.5	51364	172.253.124.156	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1268	192.168.2.5	51366	172.253.124.156	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.5	51368	172.67.175.48	443	5640	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1270	192.168.2.5	51369	35.190.43.134	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1271	192.168.2.5	51370	172.253.124.157	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1272	192.168.2.5	51371	142.250.9.156	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1273	192.168.2.5	51372	142.250.9.156	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1274	192.168.2.5	51373	35.244.159.8	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1275	192.168.2.5	51374	172.64.150.163	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1276	192.168.2.5	51375	35.190.43.134	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1277	192.168.2.5	51376	172.67.175.48	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1278	192.168.2.5	51377	35.190.43.134	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	21:25:06
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:25:09
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2024,i,7729929623886751453,8304509775835665209,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:25:12
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/	HTTP Parser: No favicon
Source: https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/	HTTP Parser: No favicon
Source: https://tr.snapchat.com/cm/i?pid=5e40fa19-dd6c-4373-b1e0-df7865ef9034&u_scsid=bc2dc1e1-c043-4115-b003-10863bafdb69&u_sclid=23642ee4-9521-4f89-8751-3f4f3aa963a9	HTTP Parser: No favicon
Source: https://app.grow.me/iframe-login?siteId=a93bd662-05a1-4ce7-81ce-4c67bccef190&callback=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F	HTTP Parser: No favicon
Source: https://sda.fyi/topics/	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=&gdprConsent=	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyNi1kMjU1YWM2NDM3ZDg=&gdpr=&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/9534?us_privacy=1---&r=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dgumgum%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=gumgum	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=ttd&i=500c5aec-af13-42d6-a7ea-250f9438d1fe	HTTP Parser: No favicon
Source: https://ssbsync.smartadserver.com/api/sync?callerId=8	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=17404&endpoint=us-east	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=adf&i=4033174624989640038&gdpr=&gdpr_consent=	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=sus&i=ZiquPMCo5r8AAPv8cvMAAAAA	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=rth&i=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=gumgum&tc=1	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=157108&userIdMacro=PID&us_privacy=1---&gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dpubmatic%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3DPID	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?cc=1&id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?&p=156423&us_privacy=1---&predirect=https%3A%2F%2Fevents-ssc.33across.com%2Fmatch%3Fliv%3Dh%26us_privacy%3D1---%26bidder_id%3D25%26external_user_id%3D	HTTP Parser: No favicon
Source: https://google-bidout-d.openx.net/w/1.0/pd?plm=5	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=1978557987846830937	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=mB9gh89MZteDEWrQnR9_0pYaNNWDGDDXlx8r0uMw	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=MBqnvcOAVHZk1_2R0gb5ubmYQuY&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=3473854422107831099&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzAmdGw9MTI5NjAw&piggybackCookie=di_ca3aed69a6d948869efee	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=a1bf1886-0339-11ef-b50c-0785ba3fe1f5	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:2MKo2Xc81S04Jb5&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	HTTP Parser: No favicon
Source: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://5d33a36ef011e54a17c04be1d9f4ea81.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://sync.adkernel.com/user-sync?zone=218872&t=image&r=https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MjgmdGw9MjE2MDA=&piggybackCookie={UID}&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/ecm3?id=3473854422107831099&ex=appnexus.com&gdpr=0	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/v3/pr?exlist=gg_an-db5&fv=1.0&a=cm&cm3ppd=1&dmt=3&gdpr=0	HTTP Parser: No favicon
Source: https://s0.2mdn.net/dfp/120006/4861501641/1605545600158/index.html	HTTP Parser: No favicon
Source: https://s0.2mdn.net/dfp/120006/4861501641/1605545600158/index.html	HTTP Parser: No favicon
Source: https://hde.tynt.com/deb/?m=xch&rt=html&id=0014000000xvEfwAAE&us_privacy=1---&ru=https%3A%2F%2Fexchange.mediavine.com%2Fusersync%2Fredirect%3Fpartner%3Dthirty_three_across%26uuid%3D9c050a90-0339-11ef-8f5d-8719b2ab76bc%26s2sVersion%3Dproduction%26partnerId%3D33XUSERID33X&b=1	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=pbm&i=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_an-db5	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:dcc8662a-ae47-4c00-aeb9-bcbf2ebffa3f&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM2MiZ0bD0xMjk2MDA==&piggybackCookie=uid:da06662a-ae47-4d00-8ee1-89aafbf1cebe&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUdae9af279efa464e903ac100c91bf658	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUad9a36a3dee7490d8b3d28e53f985deb	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-01b099a2-17ee-4118-87d5-81f28ff0ec22-005	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AABL7E7MVVwAABRpRLTzpA&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7673595621579059178	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=NSqZaeSECB6dsksASa4qZg	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://cdn.mediago.io/js/interest_group.html	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0	HTTP Parser: No favicon
Source: https://events-ssc.33across.com/match?liv=h&us_privacy=1---&bidder_id=25&external_user_id=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=157108&us_privacy=1---	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=dV80YTFhMzZmZi0yMmUwLTRhMTEtOWQyNi1kMjU1YWM2NDM3ZDg=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv	HTTP Parser: No favicon
Source: https://pandg.tapad.com/tag?gdpr=0&us_privacy=1---&referrer_url=&page_url=https%3A%2F%2Fearnandexcel.com%2Fblog%2Fhow-to-add-a-legend-in-excel-a-comprehensive-guide%2F&owner=P%26G&bp_id=mediavine&ch=%7B%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&initiator=js&data=%7B%22category%22%3A%22Hobbies%20%26%20Interests%22%2C%22subcategory%22%3A%22Hobbies%20%26%20Interests%22%2C%22liveramp_idl%22%3Anul...	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1---&gpp=DBABzw~1---~BqgAAAAAAgA&	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=rth&i=TxfA716asTaxyTdPO3kEushryYH7iH5msBCj3lSq0L8&pi=gumgum	HTTP Parser: No favicon
Source: https://cdn.mediago.io/js/cookieSync.html?tn=41b6e88a2b85b0e731ef8e73e5558712	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://c1.adform.net/serving/cookie/match?party=14&cid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://earnandexcel.com/https:/earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698	HTTP Parser: No favicon
Source: https://earnandexcel.com/https:/earnandexcel.com/course-category/accounting/?tutor-course-filter-category=16698	HTTP Parser: No favicon
Source: https://ce.lijit.com/merge?pid=71&3pid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	HTTP Parser: No favicon
Source: https://ce.lijit.com/merge?pid=58&3pid=0F7B5FEF-69AD-46C6-81F2-A260D651EAD7	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156212&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D71%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=137711&s=137812&predirect=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D58%263pid%3D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon?informer=&gdpr_consent=&us_privacy=1---&gpp=&gpp_sid=	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=7e872606-a65a-463e-adc2-6ddfd0bdaeea&ph=0fd68730-06b2-46ad-be0b-befc4c4f19d2&r=https://exchange.mediavine.com/usersync/redirect?partner=openx&uuid=9c050a90-0339-11ef-8f5d-8719b2ab76bc&s2sVersion=production&partnerId=	HTTP Parser: No favicon

Source: chromecache_567.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Qj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_486.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=iA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},lA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_486.2.dr, chromecache_606.2.dr, chromecache_757.2.dr, chromecache_724.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Xg:d,Vg:e,Wg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!CC&&JC(x[A],n.ye))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_664.2.dr, chromecache_343.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_486.2.dr	String found in binary or memory: var NB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var h=Fz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.130
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.87
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.105.12.142

Source: global traffic	DNS traffic detected: DNS query: earnandexcel.com
Source: global traffic	DNS traffic detected: DNS query: scripts.mediavine.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: nitroscripts.com
Source: global traffic	DNS traffic detected: DNS query: support.content.office.net
Source: global traffic	DNS traffic detected: DNS query: exchange.mediavine.com
Source: global traffic	DNS traffic detected: DNS query: keywords.mediavine.com
Source: global traffic	DNS traffic detected: DNS query: sc-static.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: widget.wickedreports.com
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tr.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: vc.hotjar.io
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: track.wickedreports.com
Source: global traffic	DNS traffic detected: DNS query: faves.grow.me
Source: global traffic	DNS traffic detected: DNS query: api.grow.me
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: tr6.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: analytics.pangle-ads.com
Source: global traffic	DNS traffic detected: DNS query: app.grow.me
Source: global traffic	DNS traffic detected: DNS query: some.growplow.events
Source: global traffic	DNS traffic detected: DNS query: sda.fyi
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: imp-dev.mediavine.com
Source: global traffic	DNS traffic detected: DNS query: api.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: lexicon.33across.com
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: ap.lijit.com
Source: global traffic	DNS traffic detected: DNS query: acdn.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: u.openx.net
Source: global traffic	DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: rtb.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: ssum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ssbsync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: contextual.media.net
Source: global traffic	DNS traffic detected: DNS query: sync.colossusssp.com
Source: global traffic	DNS traffic detected: DNS query: ssc-cms.33across.com
Source: global traffic	DNS traffic detected: DNS query: e.chicoryapp.com
Source: global traffic	DNS traffic detected: DNS query: exchange.journeymv.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: ice.360yield.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: match.deepintent.com
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: tg.socdm.com
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.lijit.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: rtb-csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: a.audrte.com
Source: global traffic	DNS traffic detected: DNS query: visitor.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: ad.turn.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: hde.tynt.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: usersync.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: beacon.lynx.cognitivlabs.com
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: static.criteo.net
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: invstatic101.creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: sync1.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: oa.openxcdn.net
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: us01.z.antigena.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Chrome Cache Entry: 345

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Windows Analysis Report
https://earnandexcel.com/blog/how-to-add-a-legend-in-excel-a-comprehensive-guide/