Play interactive tour

Edit tour

Windows Analysis Report http://www.the-sun.com

Overview

General Information

Sample URL:	http://www.the-sun.com
Analysis ID:	458969
Infos:
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Connects to several IPs in different countries

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2996 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'http://www.the-sun.com' MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 160 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,8885377070788844635,1437694784848484457,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1700 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 1788 cmdline: 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,8885377070788844635,1437694784848484457,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=9508 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fthesun%2F	HTTP Parser: HTML title missing
Source: https://twitter.com/thesun?lang=en-gb	HTTP Parser: HTML title missing

Source: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fthesun%2F	HTTP Parser: No <meta name="author".. found
Source: https://twitter.com/thesun?lang=en-gb	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fthesun%2F	HTTP Parser: No <meta name="copyright".. found
Source: https://twitter.com/thesun?lang=en-gb	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.38:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.156.28.35:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.81.129.224:443 -> 192.168.2.3:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.116.38:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.137.37.21:443 -> 192.168.2.3:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.137.37.21:443 -> 192.168.2.3:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.192.66.111:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.137.37.21:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.157.91.125:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.245.213:443 -> 192.168.2.3:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.245.213:443 -> 192.168.2.3:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.108:443 -> 192.168.2.3:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.108:443 -> 192.168.2.3:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.242.197:443 -> 192.168.2.3:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.13:443 -> 192.168.2.3:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.13:443 -> 192.168.2.3:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.46.133.124:443 -> 192.168.2.3:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.245:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.144.144.142:443 -> 192.168.2.3:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.121.111.29:443 -> 192.168.2.3:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.3:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.192.249.156:443 -> 192.168.2.3:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.144.144.142:443 -> 192.168.2.3:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.242.197:443 -> 192.168.2.3:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.245.213:443 -> 192.168.2.3:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.130:443 -> 192.168.2.3:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.38:443 -> 192.168.2.3:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.137.37.21:443 -> 192.168.2.3:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.121.111.29:443 -> 192.168.2.3:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.3:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.192.249.156:443 -> 192.168.2.3:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.2.80:443 -> 192.168.2.3:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.85:443 -> 192.168.2.3:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.155.181:443 -> 192.168.2.3:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.210.171:443 -> 192.168.2.3:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.240.234:443 -> 192.168.2.3:49936 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.208.43.12:443 -> 192.168.2.3:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.144.144.142:443 -> 192.168.2.3:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.228.74.189:443 -> 192.168.2.3:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.20.35:443 -> 192.168.2.3:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.129:443 -> 192.168.2.3:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.129:443 -> 192.168.2.3:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.115:443 -> 192.168.2.3:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.114.37:443 -> 192.168.2.3:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.2:443 -> 192.168.2.3:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.136.158:443 -> 192.168.2.3:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.69:443 -> 192.168.2.3:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.21.104.248:443 -> 192.168.2.3:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.253.128.183:443 -> 192.168.2.3:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.158.226.176:443 -> 192.168.2.3:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.216.100.107:443 -> 192.168.2.3:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.2:443 -> 192.168.2.3:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.216.100.107:443 -> 192.168.2.3:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.114.159.93:443 -> 192.168.2.3:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.110:443 -> 192.168.2.3:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.110:443 -> 192.168.2.3:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.144.144.142:443 -> 192.168.2.3:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.255.141.211:443 -> 192.168.2.3:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.27:443 -> 192.168.2.3:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.246:443 -> 192.168.2.3:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.246:443 -> 192.168.2.3:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.246:443 -> 192.168.2.3:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.7.51.190:443 -> 192.168.2.3:50057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:50094 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.210.171:443 -> 192.168.2.3:50103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:50127 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.228.74.189:443 -> 192.168.2.3:50128 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.242.197:443 -> 192.168.2.3:50130 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.159.8:443 -> 192.168.2.3:50135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:50149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.38:443 -> 192.168.2.3:50156 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.155.181:443 -> 192.168.2.3:50178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:50187 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:50191 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.21.104.248:443 -> 192.168.2.3:50192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.246:443 -> 192.168.2.3:50230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.164:443 -> 192.168.2.3:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.184.8.65:443 -> 192.168.2.3:50241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:50239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.52.2.39:443 -> 192.168.2.3:50247 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.52.2.39:443 -> 192.168.2.3:50248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.7.51.190:443 -> 192.168.2.3:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.114.159.93:443 -> 192.168.2.3:50265 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.242.197:443 -> 192.168.2.3:50275 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:50277 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.126.56.137:443 -> 192.168.2.3:50282 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:50284 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:50283 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:50287 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:50288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:50295 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.253.128.183:443 -> 192.168.2.3:50297 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50310 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:50317 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:50319 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.126.56.137:443 -> 192.168.2.3:50322 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:50325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50332 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50330 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50333 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.38:443 -> 192.168.2.3:50359 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.240.234:443 -> 192.168.2.3:50375 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:50378 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.158.226.176:443 -> 192.168.2.3:50383 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:50407 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50408 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.3:50412 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.227.248.159:443 -> 192.168.2.3:50417 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50437 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50442 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:50441 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:50459 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.21.104.248:443 -> 192.168.2.3:50466 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:50478 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:50485 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.210.171:443 -> 192.168.2.3:50487 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.210.171:443 -> 192.168.2.3:50488 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:50493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.184.220.70:443 -> 192.168.2.3:50495 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.136.158:443 -> 192.168.2.3:50498 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.184.220.70:443 -> 192.168.2.3:50494 version: TLS 1.2

Source: unknown

Network traffic detected: IP country count 11

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.the-sun.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7666&xuid=3a833780-b1f3-4ace-9569-87604f67abce&dongle=8f7 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7666&xuid=3a833780-b1f3-4ace-9569-87604f67abce&dongle=8f7&gdpr=1&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: Current Session.0.dr	String found in binary or memory: https://www.facebook.com/thesun/: equals www.facebook.com (Facebook)
Source: Current Session.0.dr	String found in binary or memory: "Ohttps://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fthesun%2F equals www.facebook.com (Facebook)
Source: Current Session.0.dr	String found in binary or memory: "Ohttps://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fthesun%2F8 equals www.facebook.com (Facebook)
Source: Reporting and NEL.1.dr	String found in binary or memory: #chttpswww.facebook.com equals www.facebook.com (Facebook)
Source: 05ba0695c8cc3180_1.0.dr	String found in binary or memory: $ http://www.twitter.com/adspolicy equals www.twitter.com (Twitter)
Source: de350ae5115662e4_1.0.dr	String found in binary or memory: @V0https://www.microsoft.com/p/twitter/9wzdncrfj140 equals www.twitter.com (Twitter)
Source: Current Session.0.dr	String found in binary or memory: Lhttps://www.facebook.com/login/device-based/regular/login/ [jazoest lsd ] #0 equals www.facebook.com (Facebook)
Source: Current Session.0.dr	String found in binary or memory: Ohttps://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fthesun%2F equals www.facebook.com (Facebook)
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: connect-src 'self' blob: https://.giphy.com https://.pscp.tv https://.video.pscp.tv https://.twimg.com https://api.twitter.com https://api-stream.twitter.com https://ads-api.twitter.com https://aa.twitter.com https://caps.twitter.com https://media.riffsy.com https://pay.twitter.com https://sentry.io https://ton.twitter.com https://twitter.com https://upload.twitter.com https://www.google-analytics.com https://app.link https://api2.branch.io https://bnc.lt wss://.pscp.tv https://vmap.snappytv.com https://vmapstage.snappytv.com https://vmaprel.snappytv.com https://vmap.grabyo.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net ; default-src 'self'; form-action 'self' https://twitter.com https://.twitter.com; font-src 'self' https://.twimg.com; frame-src 'self' https://twitter.com https://mobile.twitter.com https://pay.twitter.com https://cards-frame.twitter.com https://accounts.google.com/; img-src 'self' blob: data: https://.cdn.twitter.com https://ton.twitter.com https://.twimg.com https://analytics.twitter.com https://cm.g.doubleclick.net https://www.google-analytics.com https://www.periscope.tv https://www.pscp.tv https://media.riffsy.com https://.giphy.com https://.pscp.tv https://.periscope.tv https://prod-periscope-profile.s3-us-west-2.amazonaws.com https://platform-lookaside.fbsbx.com https://scontent.xx.fbcdn.net https://scontent-sea1-1.xx.fbcdn.net https://.googleusercontent.com https://imgix.revue.co; manifest-src 'self'; media-src 'self' blob: https://twitter.com https://.twimg.com https://.vine.co https://.pscp.tv https://.video.pscp.tv https://.giphy.com https://media.riffsy.com https://dhdsnappytv-vh.akamaihd.net https://pdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://mdhdsnappytv-vh.akamaihd.net https://mpdhdsnappytv-vh.akamaihd.net https://mmdhdsnappytv-vh.akamaihd.net https://dwo3ckksxlb0v.cloudfront.net; object-src 'none'; script-src 'self' 'unsafe-inline' https://.twimg.com https://www.google-analytics.com https://twitter.com https://app.link https://apis.google.com/js/platform.js https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js 'nonce-OGVhYzM3N2EtYTAwMi00NzcwLThhYTktNjYxZjU4MmU4Yzli'; style-src 'self' 'unsafe-inline' https://.twimg.com; worker-src 'self' blob:; report-uri https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false"( equals www.twitter.com (Twitter)
Source: Reporting and NEL.1.dr	String found in binary or memory: coop_reporthttps://www.facebook.com/browser_reporting/ equals www.facebook.com (Facebook)
Source: Reporting and NEL.1.dr	String found in binary or memory: coop_reporthttps://www.facebook.com/browser_reporting/Q equals www.facebook.com (Facebook)
Source: Reporting and NEL-journal.1.dr	String found in binary or memory: coop_reporthttps://www.facebook.com/browser_reporting/p equals www.facebook.com (Facebook)
Source: 05ba0695c8cc3180_1.0.dr	String found in binary or memory: http://www.twitter.com/adspolicy equals www.twitter.com (Twitter)
Source: Current Session.0.dr	String found in binary or memory: https://www.facebook.com equals www.facebook.com (Facebook)
Source: Network Action Predictor.0.dr	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: Current Session.0.dr	String found in binary or memory: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fthesun%2F equals www.facebook.com (Facebook)
Source: History-journal.0.dr	String found in binary or memory: https://www.facebook.com/login/?next=https%3A%2F%2Fwww.facebook.com%2Fthesun%2FBei Facebook anmelden equals www.facebook.com (Facebook)
Source: Current Session.0.dr	String found in binary or memory: https://www.facebook.com/thesun/ equals www.facebook.com (Facebook)
Source: History-journal.0.dr	String found in binary or memory: https://www.facebook.com/thesun/Bei Facebook anmelden equals www.facebook.com (Facebook)
Source: History-journal.0.dr	String found in binary or memory: https://www.facebook.com/thesun/Bei Facebook anmelden/'L equals www.facebook.com (Facebook)
Source: de350ae5115662e4_1.0.dr	String found in binary or memory: https://www.microsoft.com/p/twitter/9wzdncrfj140 equals www.twitter.com (Twitter)
Source: 6a1eaf0fe2f8ebf5_1.0.dr	String found in binary or memory: https://www.twitter.com equals www.twitter.com (Twitter)
Source: Reporting and NEL.1.dr	String found in binary or memory: httpswww.facebook.com equals www.facebook.com (Facebook)
Source: Network Action Predictor.0.dr	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: www.twitter.com equals www.twitter.com (Twitter)
Source: Network Action Predictor.0.dr	String found in binary or memory: xwww.facebook.com equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://a.tribalfusion.com/i.match?p=b10&u=
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://adadvisor.net/adscores/g.pixel?sid=9212270498
Source: b071f523622ac435_1.0.dr	String found in binary or memory: http://ads.twitter.com/transparency/ads/
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://api.primecaster.net/adlogue/api/sync/rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://b1sync.zemanta.com/usersync/rubicon/
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://bh.contextweb.com/bh/rtset?pid=560687&ev=1&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.p
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://bttrack.com/pixel/cookiesync?source=c91bfcce-bb43-46f7-b14e-567c0a4332b3
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: http://card-type-url-is-deprecated.invalid
Source: A4B782275DC1682E4DC39E697A49B151.1.dr	String found in binary or memory: http://certificates.godaddy.com/repository/gdig2.crt
Source: A4B782275DC1682E4DC39E697A49B1510.1.dr	String found in binary or memory: http://certs.godaddy.com/repository/1301
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://cm.adgrx.com/bridge?AG_SETCOOKIE&AG_PID=rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://cm.ctnsnet.com/int/cm?exc=2&redir=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D14965
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://cm.eyereturn.com/rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_sc
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://cms.quantserve.com/pixel/p-e4m3Yko6bFYVc.gif?idmatch=0
Source: A4B782275DC1682E4DC39E697A49B1510.1.dr	String found in binary or memory: http://crl.godaddy.com/gdroot-g2.crl0F
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://crl.rootg2.amazontrust.com/rootg2.crl0
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://crl.sca1b.amazontrust.com/sca1b.crl0
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://crt.rootg2.amazontrust.com/rootg2.cer0=
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://crt.sca1b.amazontrust.com/sca1b.crt0
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://cti.w55c.net/ct/cms-2c-rubicon.html
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://d5p.de17a.com/cookies/rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://dsp.adfarm1.adition.com/cookie/?ssp=7
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: c6fd75d8d508cb9c_0.0.dr	String found in binary or memory: http://git.io/TrdQbw
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://i.w55c.net/ping_match.gif?ei=RUBICON&rurl=http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://ib.adnxs.com/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://match.adsby.bidtheatre.com/rubiconmatch
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://match.adsrvr.org/track/cmf/rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://o.ss2.us/0
Source: A4B782275DC1682E4DC39E697A49B1510.1.dr	String found in binary or memory: http://ocsp.godaddy.com/05
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://ocsp.rootg2.amazontrust.com08
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://ocsp.sca1b.amazontrust.com06
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://onetag-sys.com/bridge/e
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://p.rfihub.com/cm?in=1&pub=64
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://pixel.mathtag.com/sync/img?redir=http%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D35912%
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://pixel.rubiconproject.com/exchange/sync.php?p=a9eu
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://pixel.rubiconproject.com/exchange/sync.php?p=a9us
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: http://play.google.com/store/apps/details?id=
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://px.owneriq.net/erb
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://px.owneriq.net/eucm/p/rc?redir=http%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D3353%26p
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://rbp.mxptint.net/sn.ashx
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://rcp.c.appier.net/rbcm
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://rubicon.digitru.st/digitrust-sync
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://s.ss2.us/r.crl0
Source: e6f88b79ac1d9121_1.0.dr	String found in binary or memory: http://schema.org
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://sync.1rx.io/usersync2/rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=54
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://sync.ipredictive.com/d/sync/cookie/generic?http://pixel.rubiconproject.com/tap.php?v=17149&ni
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://sync.mathtag.com/sync/img?mt_exid=9
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://sync.tidaltv.com/GenericUserSync.ashx?dpid=695
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://sync.tidaltv.com/genericusersync.ashx?dpid=rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://tap.rubiconproject.com/stats/rtbsync
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://token.rubiconproject.com/token?pid=2046&pt=n&a=1
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://token.rubiconproject.com/token?pid=2249&pt=n
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://token.rubiconproject.com/token?pid=27&a=1
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://token.rubiconproject.com/token?pid=2974&pt=n&a=1
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://token.rubiconproject.com/token?pid=37556&a=1
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: http://twitter.com/schema/videoVMapV2.xsd
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://um.simpli.fi/rb_match
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://um2.eqads.com/um/rc
Source: Current Session.0.dr, History-journal.0.dr	String found in binary or memory: http://www.the-sun.com/
Source: History-journal.0.dr	String found in binary or memory: http://www.the-sun.com/.
Source: History Provider Cache.0.dr	String found in binary or memory: http://www.the-sun.com/20News
Source: History-journal.0.dr	String found in binary or memory: http://www.the-sun.com/News
Source: History-journal.0.dr	String found in binary or memory: http://www.the-sun.com/R
Source: Current Session.0.dr	String found in binary or memory: http://www.thescottishsun.co.uk/
Source: Current Session.0.dr	String found in binary or memory: http://www.thescottishsun.co.uk/F
Source: 05ba0695c8cc3180_1.0.dr	String found in binary or memory: http://www.twitter.com/adspolicy
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: http://x.bidswitch.net/sync?ssp=rubicon
Source: 2cc80dabc69f58b6_0.0.dr	String found in binary or memory: http://x.ss2.us/x.cer0&
Source: Current Session.0.dr	String found in binary or memory: https://3235dbb71b5f447d11fe832bfec59903.safeframe.googlesyndication.com/safeframe/1-0-38/html/conta
Source: Current Session.0.dr	String found in binary or memory: https://7446e271aa22d9ff546186d64e702ce4.safeframe.googlesyndication.com/safeframe/1-0-38/html/conta
Source: Current Session.0.dr	String found in binary or memory: https://9bd84d3d4aaff0394f7f6fbd582fe715.safeframe.googlesyndication.com/safeframe/1-0-38/html/conta
Source: Reporting and NEL.1.dr	String found in binary or memory: https://a.nel.cloudflare.com/report/v3?s=gcygCj5Y7n%2FoNLFUbMj1Nt%2FRjfXgKTHH47%2BcPGuYUUJKk0CmX8oLw
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b10&u=
Source: af47be93e4c33dc6_0.0.dr, 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://aa.twitter.com
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com(
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=3lift.com&id=10544094648115599701
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=smart.com&id=6636411461143068863&gdpr=0&gdpr_consent=
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=vmg.com&id=y-IiY3iph1l2PpqquQ2yv7g6VXsK2qBbU-&&gdpr=0&g
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?id=664945635911279510&ex=appnexus.com&gdpr=0
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?id=D98CBCCC-7B42-4052-B938-206E5FF0E883&ex=pubmatic.com
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_n-emx
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_n-index_pm-db5_n-emx
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=0&dl=gg_pm-db5_rbd_n-emx_n-v
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=gg_n-index&fv=1.0&a=cm&cm3ppd=1&gdpr=0
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=gg_n-index_rx&fv=1.0&a=cm&cm3ppd=1&gdpr=0
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=gg_pm-db5_rbd_n-emx_n-vmg_rx_ox-db5_smrt_an-db5_so
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/x/1c2fd14bf310b6aff649
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/x/1c2fd14bf310b6aff649?gdpr=0
Source: Current Session.0.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.comh
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://about.twitter.com
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://about.twitter.com/press/brand-assets
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs-0.twimg.com/emoji/v2
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://abs.twimg.com/
Source: 5b2417f102c4ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/a/1602199131/img/moments/moments-card.jpg
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://abs.twimg.com/errors/logo46x38
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://abs.twimg.com/errors/logo46x38.png
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-bold-web.woff
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-bold-web.woff2
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-extended-heavy-web.woff
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-extended-heavy-web.woff2
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-heavy-web.woff
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-heavy-web.woff2
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-medium-web.woff
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-medium-web.woff2
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-regular-web.woff
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/fonts/chirp-regular-web.woff2
Source: 6c038e3570d6abf1_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-serviceworker/
Source: 6c038e3570d6abf1_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-serviceworker/serviceworker.cb967995.js
Source: 6c038e3570d6abf1_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-serviceworker/serviceworker.cb967995.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AboutThisAd.259bd585.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Account.3fa0f4e5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AccountVerification.a0bd3f95.js
Source: d524261213bc365d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AccountVerification.a0bd3f95.jsH
Source: d524261213bc365d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AccountVerification.a0bd3f95.jsHP
Source: 4e5fdd3ee2425470_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AdvancedSearch.24538845.js
Source: 4e5fdd3ee2425470_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AdvancedSearch.24538845.jsH
Source: 4e5fdd3ee2425470_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AdvancedSearch.24538845.jsHP
Source: 4e5fdd3ee2425470_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AdvancedSearch.24538845.jsaD
Source: f3ab1e1292e135fa_1.0.dr, bcfa6eba12dc9e84_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Articles.89cf7bb5.js
Source: bcfa6eba12dc9e84_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Articles.89cf7bb5.js(window.webpackJsonp=wind
Source: bcfa6eba12dc9e84_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Articles.89cf7bb5.jsH
Source: bcfa6eba12dc9e84_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Articles.89cf7bb5.jsHP
Source: bcfa6eba12dc9e84_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Articles.89cf7bb5.jsaD
Source: 67a81dc3937135f0_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceDetail.ef731df5.js
Source: 67a81dc3937135f0_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceDetail.ef731df5.jsH
Source: 67a81dc3937135f0_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceDetail.ef731df5.jsHP
Source: 67a81dc3937135f0_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceDetail.ef731df5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceLoggedIn.81744505.js
Source: 6dbb8ab9e452b30c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceLoggedIn.81744505.js(window.webpack
Source: 6dbb8ab9e452b30c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceLoggedIn.81744505.jsH
Source: 6dbb8ab9e452b30c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceLoggedIn.81744505.jsHP
Source: 6dbb8ab9e452b30c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceLoggedIn.81744505.jsaD
Source: f3ab1e1292e135fa_1.0.dr, fec2f6f436e38ada_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.BadgeViolationsNotification.5157b655.js
Source: fec2f6f436e38ada_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.BadgeViolationsNotification.5157b655.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Birdwatch.0984e7d5.js
Source: 52cffd23070c4586_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Bookmarks.9213a645.js
Source: 52cffd23070c4586_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Bookmarks.9213a645.jsa
Source: 52cffd23070c4586_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Bookmarks.9213a645.jsaD
Source: f3ab1e1292e135fa_1.0.dr, 025aac4eef124560_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Collection.dc391b75.js
Source: 025aac4eef124560_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Collection.dc391b75.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Communities.213331d5.js
Source: dba8538b2d2384a5_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Communities.213331d5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Compose.eb7fdec5.js
Source: db342032dd6b7ef2_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Compose.eb7fdec5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ComposeMedia.31f351a5.js
Source: 98556f7f3cbc1c21_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ComposeMedia.31f351a5.jsH
Source: 98556f7f3cbc1c21_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ComposeMedia.31f351a5.jsHP
Source: 98556f7f3cbc1c21_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ComposeMedia.31f351a5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConnectTab.49362975.js
Source: 2ff610a3bc840d72_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConnectTab.49362975.js(window.webpackJsonp=wi
Source: 2ff610a3bc840d72_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConnectTab.49362975.jsH
Source: 2ff610a3bc840d72_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConnectTab.49362975.jsHP
Source: 2ff610a3bc840d72_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConnectTab.49362975.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Conversation.024a7cb5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConversationParticipants.b3c5b3b5.js
Source: b240670c25bb93ef_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConversationParticipants.b3c5b3b5.js(window.w
Source: b240670c25bb93ef_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConversationParticipants.b3c5b3b5.jsH
Source: b240670c25bb93ef_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConversationParticipants.b3c5b3b5.jsHP
Source: b240670c25bb93ef_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ConversationParticipants.b3c5b3b5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.DMRichTextCompose.30de1865.js
Source: e593b5be82dab25e_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.DMRichTextCompose.30de1865.jsH
Source: e593b5be82dab25e_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.DMRichTextCompose.30de1865.jsHP
Source: e593b5be82dab25e_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.DMRichTextCompose.30de1865.jsa
Source: e593b5be82dab25e_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.DMRichTextCompose.30de1865.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.DirectMessages.bf29b0d5.js
Source: 2a68d864930cb488_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.DirectMessages.bf29b0d5.jsH
Source: 2a68d864930cb488_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.DirectMessages.bf29b0d5.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Display.8f2e8ae5.js
Source: f3ab1e1292e135fa_1.0.dr, de350ae5115662e4_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Download.fc421785.js
Source: de350ae5115662e4_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Download.fc421785.jsH
Source: de350ae5115662e4_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Download.fc421785.jsHP
Source: de350ae5115662e4_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Download.fc421785.jsaD
Source: 5b2417f102c4ca49_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Explore.420b1285.js
Source: 5b2417f102c4ca49_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Explore.420b1285.jsH
Source: 5b2417f102c4ca49_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Explore.420b1285.jsHP
Source: 5b2417f102c4ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Explore.420b1285.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ExploreTopics.b22d8a95.js
Source: 912e0212fcdaa1a9_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ExploreTopics.b22d8a95.jsH
Source: 912e0212fcdaa1a9_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ExploreTopics.b22d8a95.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.FleetsNotification.a1a3a895.js
Source: 616fb4dabaa72f20_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.FollowerRequests.ffe43d45.js
Source: 616fb4dabaa72f20_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.FollowerRequests.ffe43d45.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.GenericTimeline.d3762235.js
Source: 4303ccdabba4a8c4_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.GenericTimeline.d3762235.jsH
Source: 4303ccdabba4a8c4_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.GenericTimeline.d3762235.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.GifSearch.a742ddf5.js
Source: f2f49b15706de10d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.GifSearch.a742ddf5.jsH
Source: f2f49b15706de10d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.GifSearch.a742ddf5.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.HomeTimeline.bc556035.js
Source: abf65c94526f878c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.HomeTimeline.bc556035.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.KeyboardShortcuts.c770a815.js
Source: f3ab1e1292e135fa_1.0.dr, 8219cb10b98db536_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.LiveEvent.bdbb3cf5.js
Source: 8219cb10b98db536_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.LiveEvent.bdbb3cf5.jsH
Source: 8219cb10b98db536_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.LiveEvent.bdbb3cf5.jsHP
Source: 8219cb10b98db536_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.LiveEvent.bdbb3cf5.jsa
Source: 8219cb10b98db536_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.LiveEvent.bdbb3cf5.jsaD
Source: 21c7c1012b49f84e_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Login.0d101105.js
Source: 21c7c1012b49f84e_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Login.0d101105.jsa
Source: 21c7c1012b49f84e_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Login.0d101105.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Logout.21abae45.js
Source: 8074e67c4f41773a_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Logout.21abae45.js(window.webpackJsonp=window
Source: 8074e67c4f41773a_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Logout.21abae45.jsH
Source: 8074e67c4f41773a_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Logout.21abae45.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Moment.e9823205.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.MomentMaker.97a433b5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.MultiAccount.58303e05.js
Source: ac5d7d74abe46619_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.MultiAccount.58303e05.jsH
Source: ac5d7d74abe46619_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.MultiAccount.58303e05.jsHP
Source: ac5d7d74abe46619_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.MultiAccount.58303e05.jsaD
Source: f3ab1e1292e135fa_1.0.dr, dbdb4ad5b1e1b8f0_0.0.dr, 3904d96f421495de_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.9f748dc5.js
Source: 3904d96f421495de_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.9f748dc5.jsH
Source: 3904d96f421495de_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.9f748dc5.jsHP
Source: 3904d96f421495de_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.9f748dc5.jsa
Source: 3904d96f421495de_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.9f748dc5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NewsLanding.a5ef6365.js
Source: a0da10eda92fd3e8_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NewsLanding.a5ef6365.jsH
Source: a0da10eda92fd3e8_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NewsLanding.a5ef6365.jsHP
Source: 370e9ec328648c18_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Newsletters.680a95a5.js
Source: 370e9ec328648c18_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Newsletters.680a95a5.jsH
Source: 370e9ec328648c18_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Newsletters.680a95a5.jsHP
Source: 370e9ec328648c18_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Newsletters.680a95a5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NotMyAccount.04f01e25.js
Source: f3ab1e1292e135fa_1.0.dr, 1e2025473e56da8b_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NotificationDetail.e8c743e5.js
Source: 1e2025473e56da8b_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NotificationDetail.e8c743e5.js(window.webpack
Source: 1e2025473e56da8b_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NotificationDetail.e8c743e5.jsH
Source: 1e2025473e56da8b_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NotificationDetail.e8c743e5.jsHP
Source: 1e2025473e56da8b_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.NotificationDetail.e8c743e5.jsaD
Source: af1d33226d4f5da5_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Notifications.ce262aa5.js
Source: af1d33226d4f5da5_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Notifications.ce262aa5.jsa
Source: af1d33226d4f5da5_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Notifications.ce262aa5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.OAuth.9352a225.js
Source: 6a1eaf0fe2f8ebf5_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.OAuth.9352a225.jsa
Source: 6a1eaf0fe2f8ebf5_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.OAuth.9352a225.jsaD
Source: f3ab1e1292e135fa_1.0.dr, 29e3368655160011_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Ocf.b761d375.js
Source: 29e3368655160011_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Ocf.b761d375.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Place.a171fc25.js
Source: 7889d39a93d85fc2_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Place.a171fc25.jsH
Source: 7889d39a93d85fc2_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Place.a171fc25.jsHP
Source: 7889d39a93d85fc2_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Place.a171fc25.jsa
Source: 7889d39a93d85fc2_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Place.a171fc25.jsaD
Source: b772cfa6f7b3b869_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.PlainTextCompose.4dda3125.js
Source: b772cfa6f7b3b869_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.PlainTextCompose.4dda3125.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.ProfileRedirect.1bf2c4b5.js
Source: f3ab1e1292e135fa_1.0.dr, 67d8d7beadb2b33c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.QuoteTweetActivity.a7dcf7a5.js
Source: 67d8d7beadb2b33c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.QuoteTweetActivity.a7dcf7a5.jsH
Source: 67d8d7beadb2b33c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.QuoteTweetActivity.a7dcf7a5.jsHP
Source: 67d8d7beadb2b33c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.QuoteTweetActivity.a7dcf7a5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Report.386d7815.js
Source: 4ce6653d4e799813_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Report.386d7815.jsH
Source: 4ce6653d4e799813_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Report.386d7815.jsHP
Source: 3319999741a0cfd3_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.RichTextCompose.9807aa55.js
Source: 3319999741a0cfd3_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.RichTextCompose.9807aa55.jsaD
Source: f3ab1e1292e135fa_1.0.dr, dafae7486bbb9431_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Search.3077ddf5.js
Source: dafae7486bbb9431_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Search.3077ddf5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Settings.28d64e25.js
Source: 05ba0695c8cc3180_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsBizProfile.0edd4b95.js
Source: 05ba0695c8cc3180_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsBizProfile.0edd4b95.jsH
Source: 05ba0695c8cc3180_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsBizProfile.0edd4b95.jsHP
Source: 05ba0695c8cc3180_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsBizProfile.0edd4b95.jsaD
Source: dc1814e667911147_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsInternals.0408d1c5.js
Source: dc1814e667911147_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsInternals.0408d1c5.jsa
Source: dc1814e667911147_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsInternals.0408d1c5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsProfile.99812135.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsRevamp.ae558615.js
Source: 04768b74ae8cfdc9_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsRevamp.ae558615.jsH
Source: 04768b74ae8cfdc9_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsRevamp.ae558615.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsTransparency.1e29d965.js
Source: 6791b5722c185dfb_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsTransparency.1e29d965.jsH
Source: 6791b5722c185dfb_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SettingsTransparency.1e29d965.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SmsLogin.14223745.js
Source: 605886be295073bb_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SmsLogin.14223745.jsH
Source: 605886be295073bb_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.SmsLogin.14223745.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TopicPeek.867e2955.js
Source: e1863fb01ce798ab_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TopicPeek.867e2955.jsa
Source: e1863fb01ce798ab_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TopicPeek.867e2955.jsaD
Source: 9fdcbfb57a4ec68c_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Topics.11acc6a5.js
Source: 9fdcbfb57a4ec68c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Topics.11acc6a5.jsH
Source: 9fdcbfb57a4ec68c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Topics.11acc6a5.jsHP
Source: 9fdcbfb57a4ec68c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Topics.11acc6a5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Trends.57b46ce5.js
Source: 813e41ed04126488_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Trends.57b46ce5.jsH
Source: 813e41ed04126488_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Trends.57b46ce5.jsHP
Source: 813e41ed04126488_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Trends.57b46ce5.jsaD
Source: f3ab1e1292e135fa_1.0.dr, f000eb47ed4c22d0_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetActivity.eb272a25.js
Source: f000eb47ed4c22d0_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetActivity.eb272a25.jsa
Source: f000eb47ed4c22d0_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetActivity.eb272a25.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetActivityReactions.2ee99de5.js
Source: c1126b20e6383066_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetActivityReactions.2ee99de5.jsH
Source: c1126b20e6383066_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetActivityReactions.2ee99de5.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetMediaDetail.e2a88ea5.js
Source: 9f063b07d37f8801_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetMediaDetail.e2a88ea5.jsH
Source: 9f063b07d37f8801_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetMediaDetail.e2a88ea5.jsHP
Source: 9f063b07d37f8801_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetMediaDetail.e2a88ea5.jsaD
Source: f3ab1e1292e135fa_1.0.dr, 450b823fc0bd582d_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetMediaTags.6367f0b5.js
Source: 450b823fc0bd582d_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.TweetMediaTags.6367f0b5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Twitterversary.9d57f695.js
Source: dbb15682e3574cdb_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Twitterversary.9d57f695.js(window.webpackJson
Source: dbb15682e3574cdb_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Twitterversary.9d57f695.jsH
Source: dbb15682e3574cdb_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Twitterversary.9d57f695.jsHP
Source: dbb15682e3574cdb_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.Twitterversary.9d57f695.jsaD
Source: b27c702a7c68d79f_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserAvatar.ad281585.js
Source: b27c702a7c68d79f_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserAvatar.ad281585.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserFollowLists.8576e8b5.js
Source: 98a5d15a066394f0_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserFollowLists.8576e8b5.jsH
Source: 98a5d15a066394f0_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserFollowLists.8576e8b5.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserLists.eadc2c15.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserMoments.fa036195.js
Source: 8fe670a9fc48d9f8_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserMoments.fa036195.jsH
Source: 8fe670a9fc48d9f8_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserMoments.fa036195.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserProfile.beb2b015.js
Source: e6f88b79ac1d9121_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserProfile.beb2b015.jsH
Source: e6f88b79ac1d9121_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserProfile.beb2b015.jsHP
Source: e6f88b79ac1d9121_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserProfile.beb2b015.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/bundle.UserRedirect.503064d5.js
Source: af47be93e4c33dc6_0.0.dr, 40c912d229579eac_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/i18n/en.50afce55.js
Source: 40c912d229579eac_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/i18n/en.50afce55.jsH
Source: 40c912d229579eac_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/i18n/en.50afce55.jsHP
Source: 40c912d229579eac_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/i18n/en.50afce55.jsaD
Source: 40c912d229579eac_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/i18n/en.50afce55.jswindow.__SCRIPTS_LOADED__
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/icon-ios.b1fc7275.png
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/icon-svg.168b89d5.svg
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AbsolutePower.0d0c0d95.js
Source: 7ad1353fbbf360d0_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AppModules.49936285.js
Source: ab2f7e36a3f418c5_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AppModules.49936285.jsH
Source: ab2f7e36a3f418c5_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AppModules.49936285.jsHP
Source: ab2f7e36a3f418c5_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AppModules.49936285.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioContextSpaceMedia.e5539525.js
Source: d004e602c05ea55c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioContextSpaceMedia.e5539525.js(window.web
Source: d004e602c05ea55c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioContextSpaceMedia.e5539525.jsH
Source: d004e602c05ea55c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioContextSpaceMedia.e5539525.jsHP
Source: d004e602c05ea55c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioContextSpaceMedia.e5539525.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioContextVoiceMedia.b15e5c75.js
Source: 6143b69e002f0fb8_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioContextVoiceMedia.b15e5c75.jsaD
Source: 7fd90b1fef32fa10_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.cf855765.js
Source: 7fd90b1fef32fa10_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.cf855765.js(window.webpackJsonp=win
Source: 7fd90b1fef32fa10_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.cf855765.jsH
Source: 7fd90b1fef32fa10_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.cf855765.jsHP
Source: 7fd90b1fef32fa10_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.cf855765.jsa
Source: 7fd90b1fef32fa10_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.cf855765.jsaD
Source: f3ab1e1292e135fa_1.0.dr, 40ad6ee5c010fc07_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.c05e6185.js
Source: 40ad6ee5c010fc07_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.c05e6185.jsH
Source: 40ad6ee5c010fc07_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.c05e6185.jsHP
Source: 40ad6ee5c010fc07_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.c05e6185.jsaD
Source: f77b9d58371d8466_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.DMDrawer.1f9d6665.js
Source: f77b9d58371d8466_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.DMDrawer.1f9d6665.jsH
Source: f77b9d58371d8466_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.DMDrawer.1f9d6665.jsHP
Source: f77b9d58371d8466_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.DMDrawer.1f9d6665.jsaD
Source: 902da7685210207b_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.DashMenu.53966895.js
Source: 902da7685210207b_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.DashMenu.53966895.jsH
Source: 902da7685210207b_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.DashMenu.53966895.jsHP
Source: 902da7685210207b_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.DashMenu.53966895.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.ExploreSidebar.0b198e05.js
Source: 065c4b75e275ef37_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.ExploreSidebar.0b198e05.jsH
Source: 065c4b75e275ef37_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.ExploreSidebar.0b198e05.jsHP
Source: 065c4b75e275ef37_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.ExploreSidebar.0b198e05.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.FeedbackSheet.d37389e5.js
Source: 75dc1414ebf058a2_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.FeedbackSheet.d37389e5.js(window.webpackJsonp
Source: 75dc1414ebf058a2_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.FeedbackSheet.d37389e5.jsH
Source: 75dc1414ebf058a2_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.FeedbackSheet.d37389e5.jsHP
Source: 5ed6f5da91222ef1_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.FeedbackTombstone.03efbe75.js
Source: 5ed6f5da91222ef1_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.FeedbackTombstone.03efbe75.jsa
Source: 5ed6f5da91222ef1_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.FeedbackTombstone.03efbe75.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.MediaPreviewVideoPlayer.9b376685.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.68ab1ee5.js
Source: aa9cb5178c926fed_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.68ab1ee5.jsH
Source: aa9cb5178c926fed_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.68ab1ee5.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.PreviewActions.4bfe67d5.js
Source: 08d6bae33a3af969_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.PreviewActions.4bfe67d5.js(window.webpackJson
Source: 08d6bae33a3af969_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.PreviewActions.4bfe67d5.jsH
Source: 08d6bae33a3af969_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.PreviewActions.4bfe67d5.jsHP
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.ProfileClusterFollow.4d55c065.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.PushNotificationsPrompt.1a6a35c5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.SideNav.34f5b4c5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.SignupModule.dd7da525.js
Source: ac77ae823562826d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.SignupModule.dd7da525.js(window.webpackJsonp=
Source: ac77ae823562826d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.SignupModule.dd7da525.jsH
Source: ac77ae823562826d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.SignupModule.dd7da525.jsHP
Source: f3ab1e1292e135fa_1.0.dr, 8c6e4336c021a009_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.TimelineRenderer.6e421a65.js
Source: 8c6e4336c021a009_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.TimelineRenderer.6e421a65.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.TweetCurationActionMenu.05449145.js
Source: 4878248943f5dddf_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.TweetCurationActionMenu.05449145.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.Typeahead.137d7b35.js
Source: 740c4883c9a5df82_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.Typeahead.137d7b35.jsH
Source: 740c4883c9a5df82_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.Typeahead.137d7b35.jsHP
Source: 740c4883c9a5df82_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.Typeahead.137d7b35.jsa
Source: 740c4883c9a5df82_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.Typeahead.137d7b35.jsaD
Source: f3ab1e1292e135fa_1.0.dr, 161f7544731c605c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.WideLayout.66f93b85.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.directMessagesData.6cb46ac5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.graphQLDarkReads.3aca5f25.js
Source: b70c6c4eb4d9a694_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.graphQLDarkReads.3aca5f25.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.personalizationData.13d430c5.js
Source: 01da856fc5ed49d5_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.personalizationData.13d430c5.jsH
Source: 01da856fc5ed49d5_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.personalizationData.13d430c5.jsHP
Source: 01da856fc5ed49d5_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loader.personalizationData.13d430c5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls13.a678fb65.js
Source: e691b830ecef8e14_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls13.a678fb65.js(window.webpack
Source: e691b830ecef8e14_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls13.a678fb65.jsH
Source: e691b830ecef8e14_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls13.a678fb65.jsHP
Source: e691b830ecef8e14_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls13.a678fb65.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls14.ff730af5.js
Source: 3ff2fb06614d2b8d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls14.ff730af5.js(window.webpack
Source: 3ff2fb06614d2b8d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls14.ff730af5.jsH
Source: 3ff2fb06614d2b8d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls14.ff730af5.jsHP
Source: 3ff2fb06614d2b8d_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls14.ff730af5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerDefaultUI.3146cd35.js
Source: 2133b9d70bc343da_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerDefaultUI.3146cd35.jsH
Source: 2133b9d70bc343da_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerDefaultUI.3146cd35.jsHP
Source: 2133b9d70bc343da_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerDefaultUI.3146cd35.jsaD
Source: 5e6edf7cb595ebe3_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerEventsUI.18d1bac5.js
Source: 5e6edf7cb595ebe3_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerEventsUI.18d1bac5.jsH
Source: 5e6edf7cb595ebe3_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerEventsUI.18d1bac5.jsHP
Source: 5e6edf7cb595ebe3_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerEventsUI.18d1bac5.jsaD
Source: af47be93e4c33dc6_0.0.dr, 03dda55e1ca0ca49_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/main.19e34665.js
Source: 03dda55e1ca0ca49_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/main.19e34665.jsH
Source: 03dda55e1ca0ca49_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/main.19e34665.jsHP
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/main.19e34665.jsa
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/main.19e34665.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.AnimatedReaction.be3678e5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.Balloons.f5a167f5.js
Source: 41ecd9e6d05274de_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.BranchSdk.1c8f9f05.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.CarouselScroller.23bef735.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.ComposeScheduling.fce55965.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.Dropdown.9a8711d5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.EditBirthdate.4d561d65.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.EditPinned.79deeea5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.EmojiPicker.35e26135.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.FleetMediaDetail.b8a5d9b5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.GraphQLModule.45681f35.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.HoverCard.53d87815.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.InlinePlayer.0d7edd05.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.IntentPrompt.8831efd5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.LottieWeb.3401c9b5.js
Source: 4dee3d99323264fe_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.ProfileSidebar.f97315d5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.ReactBeautifulDnd.51fbf595.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.RichText.83f07285.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.ScrollArticle.0ca657e5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.SettingsInternals.18803fc5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.SettingsRevamp.c459ee65.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.UserProfileGraphQL.f8f1d175.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ar.07494e75.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-bg.baae2e15.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-bn.8d36f535.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ca.d36f0895.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-cs.bdb7b5f5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-da.4f06bf85.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-de.6a94f925.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-el.ef321155.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-en-GB.1e4f8375.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-en.b894fec5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-es.7b53c705.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-eu.36da7d15.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-fa.e573d345.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-fi.957bcc25.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-fil.fb7eb335.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-fr.56f4b6b5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ga.e2a50885.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-gl.6f2ca075.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-gu.0b2b1615.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-he.ca42b455.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-hi.b3535635.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-hr.a13d1dc5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-hu.b0882f95.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-id.0e66f205.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-it.20ae7115.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ja.eb003dc5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-kn.3a3c50c5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ko.fc25f815.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-mr.722d6ff5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ms.a1a488a5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-nb.3224c845.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-nl.904d2415.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-pl.04b812b5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-pt.3ed85265.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ro.e444b265.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ru.8620b365.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-sk.d6c4a835.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-sr.c9f40625.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-sv.35c96675.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ta.3c37d3d5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-th.46f08a05.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-tr.f06af4a5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-uk.e3e7b725.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ur.ded3bf35.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-zh-Hant.cb8ba305.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.countries-zh.8e2e7015.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ar-x-fm.cae36905.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ar.e99f4015.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.bg.c1caaf85.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.bn.91cdeda5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ca.25116835.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.cs.0bf97e55.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.da.e49279d5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.de.b34ce295.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.el.3b8cd635.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.en-GB.b1641115.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.en-ss.8d2de475.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.en-xx.a1279a25.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.en.2abf7eb5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.es.a11f12c5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.eu.7149d165.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.fa.0bd497e5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.fi.c2759c05.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.fil.f98b1ef5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.fr.281422d5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ga.7f4a0535.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.gl.bbce1c95.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.gu.36af0795.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.he.b8d17c05.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.hi.8e8cc735.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.hr.f9ece505.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.hu.c53b4845.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.id.47871d25.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.it.01179515.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ja.ac4235c5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.kn.fe45a475.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ko.76627825.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.mr.c26b9cc5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ms.06a82ce5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.nb.2b2edc65.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.nl.eb3233c5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.pl.d1075925.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.pt.5552e9b5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ro.235da155.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ru.d7513d55.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.sk.9c0bf115.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.sr.c1989815.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.sv.cfcda2a5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ta.ee280b85.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.th.aed31365.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.tr.bb046775.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.uk.999c3fe5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ur.cf55c7f5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.vi.25f015b5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.zh-Hant.92e46935.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.zh.6f278aa5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/ondemand.framerateTracking.c5be5dc5.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/polyfills.6a7b2b85.js
Source: 3dbaf3da45a61199_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/polyfills.6a7b2b85.jsH
Source: 3dbaf3da45a61199_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/polyfills.6a7b2b85.jsHP
Source: b071f523622ac435_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/sharedCore.0ce26fa5.js
Source: b071f523622ac435_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/sharedCore.0ce26fa5.jsH
Source: b071f523622ac435_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/sharedCore.0ce26fa5.jsHP
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/sharedCore.0ce26fa5.jsaD
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.AudioSpacePeek~bundle.AudioSpaceLogged
Source: 9bcd688edd3d4dd6_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.Birdwatch~bundle.Explore~bundle.Topics
Source: 5f5684f1f6befe9c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.ComposeMedia~bundle.SettingsProfile~bu
Source: fdb8d9660f84888e_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.PlainTextCompose.2b3c95
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.Compose~bundle.RichTextCompose~ondeman
Source: 011247b8e01584c1_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.DirectMessages~bundle.TweetMediaDetail
Source: cebbc593014c6d8f_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.LoggedOutHome~loader.SignupModule.dbd0
Source: 31c8e33e2b4c95ec_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.RichTextCompose~bundle.DMRichTextCompo
Source: c65842c0d8c693f2_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsRevamp~bundle.AccountVerificat
Source: 5f84ce33fc83edfa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~bundle.SettingsRevamp~bundle.SettingsTranspar
Source: 225a64a30af263b8_0.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~bundle.AudioSpacePeek~bundle
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.Compose~bundle.RichTex
Source: 66d1dd758fe21f4f_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.DMDrawer~bundle.DMRichTextCompose~bund
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~bundle.Account.348d47c5.js
Source: eca2dbddb2e641ce_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~bundle.Account.348d47c5.jsH
Source: eca2dbddb2e641ce_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.DashMenu~bundle.Account.348d47c5.jsHP
Source: f3ab1e1292e135fa_1.0.dr, f89efab7685f4b3d_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~bundle.Explore.c54fc695.js
Source: f89efab7685f4b3d_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~bundle.Explore.c54fc695.jsaD
Source: f3ab1e1292e135fa_1.0.dr, 085f3a4bee25b7c6_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~bundle.Explore~bundle.UserLi
Source: 040911658f5b9de1_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loaders.video.VideoPlayerDefaultUI~loader.Med
Source: a1bacf710991a44d_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~loaders.video.VideoPlayerDefaultUI~loaders.vi
Source: 4ba07f2973385c29_0.0.dr, 3862146bd7a47fe6_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~ondemand.EmojiPickerData~ondemand.EmojiPicker
Source: 15854fbfaa86ce25_1.0.dr, f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~ondemand.GraphQLModule~ondemand.UserProfileGr
Source: 4bbc00e786677d78_1.0.dr, da6e05d03317dad0_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPl
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/shared~ondemand.SettingsRevamp~ondemand.SettingsInte
Source: 524edb74a98508ab_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/vendors~main.d7a94f25.js
Source: c6fd75d8d508cb9c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/vendors~main.d7a94f25.jsH
Source: c6fd75d8d508cb9c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/vendors~main.d7a94f25.jsHP
Source: c6fd75d8d508cb9c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/vendors~main.d7a94f25.jsa
Source: c6fd75d8d508cb9c_1.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/vendors~main.d7a94f25.jsaD
Source: c6fd75d8d508cb9c_0.0.dr	String found in binary or memory: https://abs.twimg.com/responsive-web/client-web/vendors~main.d7a94f25.jswindow.__SCRIPTS_LOADED__.po
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://abs.twimg.com/sticky/animations/like.2.json
Source: 67a81dc3937135f0_1.0.dr	String found in binary or memory: https://abs.twimg.com/sticky/cards/TwitterSpacesCardImage.2.jpg
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://abs.twimg.com/sticky/default_profile_images/default_profile_normal.png
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://abs.twimg.com/sticky/illustrations/lohp_1302x955.png
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://abs.twimg.com/sticky/illustrations/lohp_850x623.png
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://abs.twimg.com/sticky/illustrations/lohp_en_1302x955.png
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://abs.twimg.com/sticky/illustrations/lohp_en_850x623.png
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://accounts.google.com
Source: 079c10d432a1ccd2_0.0.dr	String found in binary or memory: https://accounts.google.com/
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://accounts.google.com/;
Source: Current Session.0.dr	String found in binary or memory: https://acdn.adnxs.com/dmp/async_usersync.html
Source: Current Session.0.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/adi/N395401.279382DBMGIMOLTD-3326381/B25876110.303210623;dc_ver=78.22
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/magnite
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=6
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://adadvisor.net/adscores/g.pixel?sid=9212270498
Source: af47be93e4c33dc6_0.0.dr, 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://ads-api.twitter.com
Source: Current Session.0.dr	String found in binary or memory: https://ads.pubmatic.com
Source: Current Session.0.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&predirect=https%3A%2F%2Felb
Source: Current Session.0.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156657&predirect=https%3A%2F%2Faax-eu.amazon-a
Source: Current Session.0.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Frtb.gumgum.com%2Fusersyn
Source: Current Session.0.dr	String found in binary or memory: https://ads.pubmatic.comh
Source: 4391c9f7cf68198f_0.0.dr	String found in binary or memory: https://ads.the-sun.com/ads.suncom.min.js
Source: 7c0bcb1c1711fd22_0.0.dr	String found in binary or memory: https://ads.thescottishsun.co.uk/ads.scottishsun.min.js
Source: ba38ae73affde065_0.0.dr	String found in binary or memory: https://ads.thescottishsun.co.uk/prebid.scottishsun.min.js
Source: 47ce14644a264bd1_0.0.dr	String found in binary or memory: https://ads.thesun.co.uk/ads.sun.min.js
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://ads.twitter.com/?ref=gl-tw-tw-twitter-advertise
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://amp.twimg.com/
Source: 940a66db08c695da_0.0.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://analytics.twitter.com
Source: 3ff2fb06614d2b8d_1.0.dr	String found in binary or memory: https://aomedia.org/emsg/ID3
Source: Current Session.0.dr	String found in binary or memory: https://ap.lijit.com/beacon/amazon?url=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fid%3D%2
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://api-stream.twitter.com
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://api.primecaster.net/adlogue/api/sync/rubicon
Source: af47be93e4c33dc6_0.0.dr, 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://api.twitter.com
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://api2.branch.io
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://apis.google.com
Source: 2a6b34e7fd5d46e5_0.0.dr	String found in binary or memory: https://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.4sn9RO63fqo.O/m=auth2/rt=j/sv=1/d=1/e
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://apis.google.com/js/platform.js
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://app.link
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/rubicon/
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://beacon.lynx.cognitivlabs.com/rb.gif
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=560687&ev=1&rurl=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap
Source: 28bdfc01cd94c96e_0.0.dr	String found in binary or memory: https://bidder.criteo.com/
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://bit.ly/3cXEKWf
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://blog.twitter.com
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://bnc.lt
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://bttrack.com/pixel/cookiesync?source=c91bfcce-bb43-46f7-b14e-567c0a4332b3
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://business.twitter.com/?ref=web-twc-ao-gbl-twitterforbusiness&utm_source=twc&utm_medium=web&ut
Source: af47be93e4c33dc6_0.0.dr, b071f523622ac435_1.0.dr	String found in binary or memory: https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-ad
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://c.amazon-adsystem.com/
Source: 49adf8a7a64ec4d8_0.0.dr, 45d955c51d7f54f9_0.0.dr	String found in binary or memory: https://c.amazon-adsystem.com/aax2/apstag.js
Source: 6dec96a7ba08e47e_0.0.dr	String found in binary or memory: https://c.betrad.com/durly.js?;ad_w=300;ad_h=600;coid=290;nid=3689;ecaid=131630
Source: 112330bd740aeee6_0.0.dr	String found in binary or memory: https://c.betrad.com/durly.js?;ad_w=970;ad_h=250;coid=290;nid=3689;ecaid=131630
Source: 91d244a9d1cf787c_0.0.dr	String found in binary or memory: https://c.evidon.com/a/n/290/3689.js
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1164
Source: Current Session.0.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=D98CBCCC-7B42-4052-B938-206E5FF0E883
Source: Current Session.0.dr	String found in binary or memory: https://c2da806ea99afb5f9ddace5ecbe10f6b.safeframe.googlesyndication.com
Source: Current Session.0.dr	String found in binary or memory: https://c2da806ea99afb5f9ddace5ecbe10f6b.safeframe.googlesyndication.com/safeframe/1-0-38/html/conta
Source: Current Session.0.dr	String found in binary or memory: https://c2da806ea99afb5f9ddace5ecbe10f6b.safeframe.googlesyndication.comh
Source: af47be93e4c33dc6_0.0.dr, 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://caps.twitter.com
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://cards-frame.twitter.com
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://cards-frame.twitter.com/i/cards/tfw/v1/uc/
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://careers.twitter.com
Source: 90cc51c9c9fa9430_0.0.dr	String found in binary or memory: https://cdn.brandmetrics.com/tag/3507d3a478cd4f59b15eb40434141032/thesun.js
Source: 3c43db118f70342d_0.0.dr	String found in binary or memory: https://cdn.optimizely.com/js/19638580519.js
Source: 653e56b4b6556a9e_1.0.dr	String found in binary or memory: https://cdn.p-n.io
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://cdn.p-n.io/
Source: 183ce2fc42d07f79_0.0.dr	String found in binary or memory: https://cdn.p-n.io/pushly-sdk.min.js?domain_key=D7SZWy9iXX9gaGaWqZdZ894th5T1GiPWgmvu
Source: 2cc80dabc69f58b6_0.0.dr, 653e56b4b6556a9e_1.0.dr, 2cc80dabc69f58b6_1.0.dr, 0d3086d7cda635d4_1.0.dr	String found in binary or memory: https://cdn.p-n.io/pushly-sw.min.js
Source: 653e56b4b6556a9e_1.0.dr	String found in binary or memory: https://cdn.p-n.io/pushly-sw.min.jsaD
Source: 9f0afa0fa8339b42_0.0.dr	String found in binary or memory: https://cdn.parsely.com/keys/the-sun.com/p.js
Source: c5a87726075dfbc2_0.0.dr	String found in binary or memory: https://cdn.permutive.com/88a66e5c-8fe8-48af-9c6c-3ec3f4983aad-web.js
Source: A4B782275DC1682E4DC39E697A49B1510.1.dr	String found in binary or memory: https://certs.godaddy.com/repository/0
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.0.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_SETCOOKIE&AG_PID=rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cm.ctnsnet.com/int/cm?exc=2&redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D149
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cm.eyereturn.com/rubicon
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://cm.g.doubleclick.net
Source: Current Session.0.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV82ODY2NDNlMi00YjgyLTQwNjctOTg1Z
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_cm&google_sc
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=twitter_dbm&google_redir=https://analytics.twitter.com
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cm.smadex.com/sync?sm_p=rbc&sm_r=rbc
Source: f81963217a343691_0.0.dr	String found in binary or memory: https://cmp.cdn.thescottishsun.co.uk/wrapperMessagingWithoutDetection.js
Source: Network Action Predictor-journal.0.dr	String found in binary or memory: https://cmp.cdn.thesun.co.uk/
Source: 950bace1670d32a4_0.0.dr	String found in binary or memory: https://cmp.cdn.thesun.co.uk/wrapperMessagingWithoutDetection.js
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-e4m3Yko6bFYVc.gif?idmatch=0
Source: 20e9cac3fcee01a1_0.0.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: 20479e480dd0d5a3_0.0.dr, 465d0415902e02eb_0.0.dr	String found in binary or memory: https://connect.facebook.net/signals/config/752905198150451?v=2.9.44&r=stable
Source: manifest.json0.0.dr	String found in binary or memory: https://content.googleapis.com
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cr-p16.ladsp.jp/cookiesender/16
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cs.adnear.net/v2/cookiesync/rubicon
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/downloads-lorry
Source: Reporting and NEL.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/downloads-lorryY
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://cti.w55c.net/ct/cms-2c-rubicon.html
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://d5p.de17a.com/cookies/rubicon
Source: 3ff2fb06614d2b8d_1.0.dr	String found in binary or memory: https://developer.apple.com/streaming/emsg-id3
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://developer.twitter.com
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://dhdsnappytv-vh.akamaihd.net
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=6&p=70&cp=Rubicon&cu=1&url=https%3A%2F%2Fpixel.rubiconpro
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://dmp.brand-display.com/cm/api/rubicon
Source: ad08f15c-3786-4f40-928c-bb34969f3b1e.tmp.1.dr, 55e53343-5a34-45e3-ac1e-90c8f2b79261.tmp.1.dr, f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://dns.google
Source: adba8338fc9be233_0.0.dr	String found in binary or memory: https://doubleclick.net/
Source: aeaed23de7297d73_0.0.dr	String found in binary or memory: https://doubleclick.net/Jd
Source: 27479c0568135fe0_0.0.dr	String found in binary or memory: https://doubleclick.net/M6
Source: d6958924975f9124_0.0.dr	String found in binary or memory: https://doubleclick.net/O
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://ds.uncn.jp/rp/0/sync
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://dsp.adfarm1.adition.com/cookie/?ssp=7
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://dwo3ckksxlb0v.cloudfront.net
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://dwo3ckksxlb0v.cloudfront.net;
Source: Current Session.0.dr	String found in binary or memory: https://eb2.3lift.com/sync?
Source: Current Session.0.dr	String found in binary or memory: https://elb.the-ozone-project.com
Source: Current Session.0.dr	String found in binary or memory: https://elb.the-ozone-project.com(
Source: Current Session.0.dr	String found in binary or memory: https://elb.the-ozone-project.com/static/load-cookie.html?gdpr=0&gdpr_consent=&pubcid=c804e7f8-214a-
Source: Current Session.0.dr	String found in binary or memory: https://elb.the-ozone-project.com/static/load-cookie.html?gdpr=0&gdpr_consent=&pubcid=de17f996-cf53-
Source: Current Session.0.dr	String found in binary or memory: https://eu-u.openx.net/w/1.0/pd?plm=6&ph=3c66d1a6-3e15-4a65-9bdc-66840dcc60ef&gdpr=0
Source: 000007.ldb.0.dr	String found in binary or memory: https://eus.rubiconproject.com
Source: Current Session.0.dr	String found in binary or memory: https://eus.rubiconproject.com/usync.html
Source: Current Session.0.dr	String found in binary or memory: https://eus.rubiconproject.com/usync.html?&geo=eu&co=ch
Source: Current Session.0.dr	String found in binary or memory: https://eus.rubiconproject.com/usync.html?p=a9eu&endpoint=eu&gdpr=0
Source: Current Session.0.dr	String found in binary or memory: https://eus.rubiconproject.com/usync.html?p=gumgum
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://eus.rubiconproject.com/usync.js
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://eus.rubiconproject.com/usync.jsaD
Source: Current Session.0.dr	String found in binary or memory: https://eus.rubiconproject.comPHhttps://c2da806ea99afb5f9ddace5ecbe10f6b.safeframe.googlesyndication
Source: manifest.json0.0.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: 7889d39a93d85fc2_1.0.dr	String found in binary or memory: https://foursquare.com/v/
Source: 112330bd740aeee6_0.0.dr, a5c0facd51fc2992_0.0.dr	String found in binary or memory: https://googlesyndication.com/
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://gu.dyntrk.com/adx/rbcn/us.php?dynk=r1b32c0n
Source: 28bdfc01cd94c96e_0.0.dr	String found in binary or memory: https://gum.criteo.com
Source: 28bdfc01cd94c96e_0.0.dr	String found in binary or memory: https://gum.criteo.com/syncframe
Source: Current Session.0.dr	String found in binary or memory: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.the-sun.com&gdpr=0&gdpr_consent=#
Source: Current Session.0.dr	String found in binary or memory: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.thesun.co.uk&gdpr=0&gdpr_consent=#
Source: manifest.json0.0.dr	String found in binary or memory: https://hangouts.google.com/
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://help.twitter.com
Source: 6a1eaf0fe2f8ebf5_1.0.dr	String found in binary or memory: https://help.twitter.com/en/managing-your-account/connect-or-revoke-access-to-third-party-apps
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://help.twitter.com/en/rules-and-policies/enforcement-options
Source: e6f88b79ac1d9121_1.0.dr	String found in binary or memory: https://help.twitter.com/en/safety-and-security/safety-mode
Source: 3319999741a0cfd3_1.0.dr	String found in binary or memory: https://help.twitter.com/en/using-twitter/mentions-and-replies?lang=browser#hidden-reply
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://help.twitter.com/en/using-twitter/twitter-videos
Source: 4878248943f5dddf_1.0.dr	String found in binary or memory: https://help.twitter.com/forms
Source: 4878248943f5dddf_1.0.dr	String found in binary or memory: https://help.twitter.com/forms/netzwerkdurchsetzungsgesetz?tweet_id=
Source: e6f88b79ac1d9121_1.0.dr	String found in binary or memory: https://help.twitter.com/managing-your-account/about-twitter-verified-accounts
Source: ac5d7d74abe46619_1.0.dr	String found in binary or memory: https://help.twitter.com/managing-your-account/managing-multiple-twitter-accounts
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://help.twitter.com/rules-and-policies/twitter-cookies
Source: de350ae5115662e4_1.0.dr	String found in binary or memory: https://help.twitter.com/using-twitter#twitter-on-your-device
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://help.twitter.com/using-twitter/how-to-retweet#prompt
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://help.twitter.com/using-twitter/how-to-tweet#source-labels
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://help.twitter.com/using-twitter/twitter-supported-browsers
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://i.w55c.net/ping_match.gif?ei=RUBICON&rurl=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://pixel.rubiconproject.com/tap.php?v=564534&nid=5466&put=$UID
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://id.knsso.com/usync
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://id.rlcdn.com/709414.gif
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://id.sharedid.org/usync?redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D624210%26
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://id5-sync.com/i/175/9.gif
Source: Current Session.0.dr	String found in binary or memory: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://imgix.revue.co;
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://itunes.apple.com/app/id
Source: de350ae5115662e4_1.0.dr	String found in binary or memory: https://itunes.apple.com/us/app/twitter/id333903271?mt=8&uo=
Source: Current Session.0.dr	String found in binary or memory: https://js-sec.indexww.com
Source: Current Session.0.dr	String found in binary or memory: https://js-sec.indexww.com(
Source: Current Session.0.dr	String found in binary or memory: https://js-sec.indexww.com/um/ixmatch.html
Source: 653e56b4b6556a9e_1.0.dr	String found in binary or memory: https://k.p-n.io/allow
Source: 653e56b4b6556a9e_1.0.dr	String found in binary or memory: https://k.p-n.io/event-stream
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://legal.twitter.com/ads-terms/apac.html
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://legal.twitter.com/ads-terms/brazil.html
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://legal.twitter.com/ads-terms/indonesia.html
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://legal.twitter.com/ads-terms/international.html
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://legal.twitter.com/ads-terms/japan.html
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://legal.twitter.com/ads-terms/uk.html
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://legal.twitter.com/ads-terms/us.html
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://legal.twitter.com/imprint
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://marketing.twitter.com
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/rubiconmatch
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://match.deepintent.com/usersync/143
Source: Current Session.0.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/adx?bee_sync_partners=sas%2Cpp%2Cpm&bee_sync_current_partner=
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://mdhdsnappytv-vh.akamaihd.net
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://media.giphy.com/media/
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://media.riffsy.com
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://mmdhdsnappytv-vh.akamaihd.net
Source: 8219cb10b98db536_0.0.dr, af47be93e4c33dc6_0.0.dr, 6c038e3570d6abf1_0.0.dr	String found in binary or memory: https://mobile.twitter.com
Source: 6c038e3570d6abf1_0.0.dr	String found in binary or memory: https://mobile.twitter.comvary:Accept-Encodingx-cache:HITx-connection-hash:82a075cc8d390ca28b58d17b7
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://mpdhdsnappytv-vh.akamaihd.net
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://ogs.google.com
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://onetag-sys.com/bridge/e
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://p.rfihub.com/cm?in=1&pub=64
Source: a3f2950cda5240fe_0.0.dr	String found in binary or memory: https://pac.thesun.co.uk/track?eventtype=
Source: 50771a2e13923cb2_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/5DoHiAB8gciOXy4tN-30Samgrf9Qq3bIy1sciudvWGA.js
Source: 50771a2e13923cb2_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/5DoHiAB8gciOXy4tN-30Samgrf9Qq3bIy1sciudvWGA.jsaD
Source: aeaed23de7297d73_0.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/r20210729/r20110914/elements/html/omrhp.js
Source: Current Session.0.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9tYXRjaC5hZHNieS5ia
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://pay.twitter.com
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://pbs.twimg.com
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://pbs.twimg.com/lex/placeholder_live_nomargin.png
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://pbs.twimg.com/live_event_img/989245694278909952/5nluRSX3?format=jpg&name=orig
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://pbs.twimg.com/media/EXZ2rMvVAAAAfrN.png
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://pdhdsnappytv-vh.akamaihd.net
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://pixel-a.sitescout.com/dmp/pixelSync?nid=1
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://pixel.mathtag.com/sync/img?redir=https%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D3591
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=a9eu
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://pixel.rubiconproject.com/exchange/sync.php?p=a9us
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://pixel.rubiconproject.com/token?pid=27384
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://pixel.rubiconproject.com/token?pid=34458
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://platform-lookaside.fbsbx.com
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://platform.twitter.com/embed/Tweet.html?dnt=false&embedId=twitter-widget-1&frame=false&hideCar
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://play.google.com
Source: de350ae5115662e4_1.0.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.twitter.android&referrer=utm_source%3Drweb%26utm_m
Source: 21c7c1012b49f84e_1.0.dr	String found in binary or memory: https://policies.google.com/privacy
Source: aea015ff5cf2e913_0.0.dr	String found in binary or memory: https://prebid.the-ozone-project.com/snowplow/newsuk-thesun.js
Source: 5967e810b3ed3127_0.0.dr	String found in binary or memory: https://prebid.the-ozone-project.com/snowplow/sp.js
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://prod-periscope-profile.s3-us-west-2.amazonaws.com
Source: 67a81dc3937135f0_1.0.dr	String found in binary or memory: https://proxsee.pscp.tv
Source: 8219cb10b98db536_1.0.dr	String found in binary or memory: https://pscp.tv/u/
Source: 4878248943f5dddf_1.0.dr	String found in binary or memory: https://publish.twitter.com/?url=https://twitter.com
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://px.owneriq.net/erb
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://px.owneriq.net/eucm/p/rc?redir=https%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D3353%2
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://rbp.mxptint.net/sn.ashx
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://rcp.c.appier.net/rbcm
Source: c6fd75d8d508cb9c_1.0.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: c6fd75d8d508cb9c_1.0.dr	String found in binary or memory: https://redux.js.org/Errors?code=
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://rtb.adentifi.com/CookieSyncRubicon
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com/usersync?b=atm&i=YQmy_wADWhdGyAAC&gdpr=0&gdpr_consent=
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com/usersync?b=mmh&i=882f6109-b2fa-4300-aff5-862397ab821f&gdpr=0&gdpr_consent=
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com/usersync?b=rth&i=wZXd4CIAIjoNmUjbcaIz&pi=gumgum
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com/usersync?b=sus&i=YQmzKcCo5tIAABBGwVYAAAAA
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com/usersync?b=ttd&i=4533807a-c37f-4659-958a-882b2153d9e3&t=1630617640
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com/usersync?b=ttd&i=4533807a-c37f-4659-958a-882b2153d9e3&t=1630617643
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com/usersync?b=zet&i=1871597497196319436
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dgg
Source: Current Session.0.dr	String found in binary or memory: https://rtb.gumgum.comh
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://rubicon.digitru.st/digitrust-sync
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://rubiconcm.digitaleast.mobi/usersync/rubicon.gif
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://rubiconproject.com/
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://s.amazon-adsystem.com/x/1c2fd14bf310b6aff649
Source: 27479c0568135fe0_0.0.dr	String found in binary or memory: https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_273.js
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://schema.org/Collection
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/CreativeWork
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/FollowAction
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/ImageObject
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/InteractionCounter
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/Person
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/SocialMediaPosting
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/SubscribeAction
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/VideoObject
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://schema.org/WriteAction
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://scontent-sea1-1.xx.fbcdn.net
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://scontent.xx.fbcdn.net
Source: 7e0e9ad1a255e481_0.0.dr	String found in binary or memory: https://scripts.webcontentassessor.com/scripts/6da747316f548e90a4ee3ce24bcb57d58a8399e17d6b4f73e4463
Source: bd4ef0a3d7570ba6_0.0.dr	String found in binary or memory: https://scripts.webcontentassessor.com/scripts/ee8bf0fbcf04ca7e8abc933407f3310bf64c71d2a58f66543ec76
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://secure.adnxs.com/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%
Source: df1edf6c224df50b_0.0.dr, b70833597f009a4f_0.0.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/gpt/pubads_impl_2021072901.js
Source: 6e03fb95b570b024_0.0.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/tag/js/gpt.js
Source: 6c038e3570d6abf1_1.0.dr, af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://sentry.io
Source: Current Session.0.dr	String found in binary or memory: https://simage2.pubmatic.com/AdServer/Pug?vcode&gdpr_consent=null&piggybackCookie=$UID&gdpr=0
Source: Current Session.0.dr	String found in binary or memory: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=0&gdpr
Source: Current Session.0.dr	String found in binary or memory: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA=&piggybackCo
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://ssl.gstatic.com
Source: 079c10d432a1ccd2_0.0.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/o/1031810748-idpiframe.js
Source: Current Session.0.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?gdpr=0&gdpr_consent=undefined&d=https://www.thescottishsu
Source: Current Session.0.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?gdpr=0&gdpr_consent=undefined&d=https://www.thesun.co.uk/
Source: Current Session.0.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?s=192259&cb=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%
Source: 28bdfc01cd94c96e_0.0.dr	String found in binary or memory: https://static.criteo.net/images/pixel.gif?ch=1
Source: 28bdfc01cd94c96e_0.0.dr	String found in binary or memory: https://static.criteo.net/images/pixel.gif?ch=2
Source: 28bdfc01cd94c96e_0.0.dr	String found in binary or memory: https://static.criteo.net/js/ld/publishertag.
Source: bc71fe43e7c4b6b1_0.0.dr, 28bdfc01cd94c96e_0.0.dr	String found in binary or memory: https://static.criteo.net/js/ld/publishertag.prebid.js
Source: 28bdfc01cd94c96e_0.0.dr	String found in binary or memory: https://static.criteo.net/js/ld/publishertag.prebid.jsaD
Source: Network Action Predictor.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/
Source: adf7722569fd0bc6_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/CrII4R3C1FT.js?_nc_x=Ij3Wp8lg5Kz
Source: 41aaa36d588890d1_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yI/r/aYA1p2v5mas.js?_nc_x=Ij3Wp8lg5Kz
Source: 624e3f9e63e2d7ca_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yN/r/BbHEQ1K3kNM.js?_nc_x=Ij3Wp8lg5Kz
Source: 90668a29d094497b_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yN/r/gVdv1B-P379.js?_nc_x=Ij3Wp8lg5Kz
Source: ba89d4cd042a9853_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yc/r/jekoEHnQc5Q.js?_nc_x=Ij3Wp8lg5Kz
Source: ef103027ee3b845d_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yf/r/xn-3wPDECjN.js?_nc_x=Ij3Wp8lg5Kz
Source: 4680e10ede25a29b_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yr/r/CkxGwwOF0MG.js?_nc_x=Ij3Wp8lg5Kz
Source: c72ece553cf9a4ee_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3i5ED4/yB/l/de_DE/XMDsWZ5tthJ.js?_nc_x=Ij3Wp8lg5Kz
Source: 1331133c1df1a2b2_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3iMoJ4/yl/l/de_DE/W_RRpqaK3br.js?_nc_x=Ij3Wp8lg5Kz
Source: e76d480e5ffe042e_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3iNtm4/yP/l/de_DE/xqdIHa8I6D_.js?_nc_x=Ij3Wp8lg5Kz
Source: 76015e3a4b6224a2_0.0.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3iVab4/y2/l/de_DE/RTkqPFbXKo8.js?_nc_x=Ij3Wp8lg5Kz
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://status.twitterstat.us
Source: 4cb013792b196a35_1.0.dr, ce2a2172c04b134d_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1
Source: 23469ac906fcc612_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-cache-expiration.prod.js
Source: 23469ac906fcc612_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-cache-expiration.prod.jsaD
Source: afe1e5264eea33bc_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-core.prod.js
Source: afe1e5264eea33bc_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-core.prod.jsaD
Source: f13a76bbf6c7f0b3_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-routing.prod.js
Source: f13a76bbf6c7f0b3_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-routing.prod.jsaD
Source: fa813c9ad67834ac_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-strategies.prod.jsa
Source: fa813c9ad67834ac_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-strategies.prod.jsaD
Source: 2cc80dabc69f58b6_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-sw.js
Source: 4cb013792b196a35_1.0.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.6.1/workbox-sw.jsaD
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/answer/2998456
Source: messages.json41.0.dr	String found in binary or memory: https://support.google.com/chromecast/troubleshooter/2995236
Source: e6f88b79ac1d9121_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/117063
Source: e6f88b79ac1d9121_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/14016
Source: 66d1dd758fe21f4f_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/14606
Source: 66d1dd758fe21f4f_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/14606#faq
Source: 66d1dd758fe21f4f_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/15364
Source: 66d1dd758fe21f4f_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/15790
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/18311
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/20156423
Source: dc1814e667911147_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/20169220
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/20170514
Source: e6f88b79ac1d9121_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/20172060
Source: 4878248943f5dddf_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/20175032
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/370610
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/66885
Source: 3319999741a0cfd3_1.0.dr	String found in binary or memory: https://support.twitter.com/articles/90491
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync-dsp.ad-m.asia/dsp/api/sync/send?s=rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/btu4jd3a?redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.1rx.io/usersync2/rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.adotmob.com/cookie/rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.extend.tv/r.gif?exchange=rubicon
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&dpi=54
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://pixel.rubiconproject.com/tap.php?v=17149&
Source: Current Session.0.dr	String found in binary or memory: https://sync.mathtag.com/sync/iframe?mt_uuid=882f6109-b2fa-4300-aff5-862397ab821f&no_iframe=1&mt_lim
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.mathtag.com/sync/img?mt_exid=9&redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=14
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.tidaltv.com/GenericUserSync.ashx?dpid=695
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://sync.tidaltv.com/genericusersync.ashx?dpid=rubicon
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://t.lv.twimg.com/live_video_stream/cookie_check
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://tags.bluekai.com/site/6123?redir=https%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D3%26
Source: 653475866a611d7d_0.0.dr	String found in binary or memory: https://tags.mathtag.com/notify/js?exch=ruc&s_exch=ruc&id=5aW95q2jLzIzLyAvT0RneVpqWXhNRGt0WWpKbVlTMD
Source: a80552694a9cc5cd_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.com.web.2019/prod/utag.2.js?utv=ut4.46.2021072
Source: a3f2950cda5240fe_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.com.web.2019/prod/utag.58.js?utv=ut4.46.202103
Source: 08b34eeabe34fb08_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.com.web.2019/prod/utag.59.js?utv=ut4.46.202010
Source: 6cb1922db915c343_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.com.web.2019/prod/utag.js
Source: 84702c4a79e4a543_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.scottish.web.2/prod/utag.27.js?utv=ut4.42.2021
Source: 8ff3cb3cbee929ce_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.scottish.web.2/prod/utag.38.js?utv=ut4.42.2021
Source: 336605e17edde1f6_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.web.2017/prod/utag.26.js?utv=ut4.42.2021052413
Source: 92ade2715d811812_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.web.2017/prod/utag.59.js?utv=ut4.42.2021052413
Source: 3d6ecb7a68d1eb23_0.0.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/newsinternational/thesun.web.2017/prod/utag.69.js?utv=ut4.42.2021052413
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://tg.socdm.com/rtb/sync?proto=rubicon
Source: 16d6284efdc582c6_0.0.dr, 28bdfc01cd94c96e_0.0.dr, ae1c34c7760242cd_0.0.dr, df032818a530781e_0.0.dr	String found in binary or memory: https://the-sun.com/
Source: 0aff68fde7b68100_0.0.dr	String found in binary or memory: https://the-sun.com/#
Source: 4391c9f7cf68198f_0.0.dr	String found in binary or memory: https://the-sun.com/#%
Source: df032818a530781e_0.0.dr	String found in binary or memory: https://the-sun.com/.8$
Source: c5a87726075dfbc2_0.0.dr	String found in binary or memory: https://the-sun.com/:
Source: b1d1b3bca9a0a883_0.0.dr	String found in binary or memory: https://the-sun.com/?
Source: b872863357604590_0.0.dr	String found in binary or memory: https://the-sun.com/B7B
Source: 317b6048f3f63700_0.0.dr	String found in binary or memory: https://the-sun.com/L:B
Source: d0d07794eaafe13a_0.0.dr	String found in binary or memory: https://the-sun.com/RNB
Source: 860cd0b4d7a6e71f_0.0.dr	String found in binary or memory: https://the-sun.com/Y6B
Source: b1d1b3bca9a0a883_0.0.dr	String found in binary or memory: https://the-sun.com/c
Source: 2f2d8df09354b1fd_0.0.dr	String found in binary or memory: https://the-sun.com/h
Source: 70acc5f94167915b_0.0.dr	String found in binary or memory: https://the-sun.com/hMB
Source: 49adf8a7a64ec4d8_0.0.dr	String found in binary or memory: https://the-sun.com/kuJ
Source: c518781dc7d596d1_0.0.dr	String found in binary or memory: https://the-sun.com/mOB
Source: 860cd0b4d7a6e71f_0.0.dr	String found in binary or memory: https://the-sun.com/pN
Source: c518781dc7d596d1_0.0.dr	String found in binary or memory: https://the-sun.com/u
Source: c5a87726075dfbc2_0.0.dr	String found in binary or memory: https://the-sun.com/w
Source: 616848b7ce3634d8_0.0.dr	String found in binary or memory: https://the-sun.com/~
Source: 183ce2fc42d07f79_0.0.dr, b686bb176e90cdc0_0.0.dr, bc71fe43e7c4b6b1_0.0.dr, 1f66603e406c242e_0.0.dr, 318c7b4d814e569b_0.0.dr, 2b2deddb224832c8_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/
Source: f5308980d1a71f85_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/4
Source: 45d955c51d7f54f9_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/5
Source: ff44781bf8deff0f_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/A
Source: b43d58b7b5a59e42_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/G
Source: 0787abb26b1d80da_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/R/
Source: 34d9da613091dc1c_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/W
Source: 3ec9685f1d111825_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/nH
Source: 06aef5aad22b5e4a_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/t0
Source: 53e996ecee7f04de_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/y
Source: 7c0bcb1c1711fd22_0.0.dr	String found in binary or memory: https://thescottishsun.co.uk/z
Source: 2cdb959f070e2648_0.0.dr, 91d244a9d1cf787c_0.0.dr, a668fc0f4a9013d3_0.0.dr, 2fc1b94ec9bbf3c8_0.0.dr	String found in binary or memory: https://thesun.co.uk/
Source: ba64692af02ef1fc_0.0.dr	String found in binary or memory: https://thesun.co.uk/#d
Source: bd4ef0a3d7570ba6_0.0.dr	String found in binary or memory: https://thesun.co.uk/%p
Source: 93ef2add301fee4c_0.0.dr	String found in binary or memory: https://thesun.co.uk/.B
Source: 760524ab5a7e9c5a_0.0.dr	String found in binary or memory: https://thesun.co.uk//
Source: 058d7b862a264e14_0.0.dr	String found in binary or memory: https://thesun.co.uk/1
Source: fbc5562a82dd66b0_0.0.dr	String found in binary or memory: https://thesun.co.uk/8
Source: aea015ff5cf2e913_0.0.dr	String found in binary or memory: https://thesun.co.uk/9i
Source: 950bace1670d32a4_0.0.dr	String found in binary or memory: https://thesun.co.uk/?
Source: 646cb395298f1c82_0.0.dr	String found in binary or memory: https://thesun.co.uk/KT
Source: 336605e17edde1f6_0.0.dr	String found in binary or memory: https://thesun.co.uk/Sw
Source: db1b7c9943564750_0.0.dr	String found in binary or memory: https://thesun.co.uk/Tr
Source: 653475866a611d7d_0.0.dr	String found in binary or memory: https://thesun.co.uk/X
Source: 4279be2944aec971_0.0.dr	String found in binary or memory: https://thesun.co.uk/YU
Source: 0b36250bce72c6ef_0.0.dr	String found in binary or memory: https://thesun.co.uk/YY
Source: c549f3e91f4967ee_0.0.dr	String found in binary or memory: https://thesun.co.uk/f
Source: f69d65a1ad0a8b0c_0.0.dr	String found in binary or memory: https://thesun.co.uk/k
Source: e5aec42484970de5_0.0.dr	String found in binary or memory: https://thesun.co.uk/n
Source: b90575cd3527447c_0.0.dr	String found in binary or memory: https://thesun.co.uk/p
Source: 8540f1eda391bbd5_0.0.dr	String found in binary or memory: https://thesun.co.uk/x=
Source: 8d03fc4088763c7a_0.0.dr	String found in binary or memory: https://thesun.co.uk/xW
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/khaos.jpg?
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=10362
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=2046&pt=n&a=1
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=2249&pt=n
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=25470
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=26594
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=27&a=1
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=28752
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=2974&pt=n&a=1
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=36584
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=37556&a=1
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://token.rubiconproject.com/token?pid=6404
Source: af47be93e4c33dc6_0.0.dr, 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://ton.twitter.com
Source: 6c038e3570d6abf1_1.0.dr, 6c038e3570d6abf1_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-serviceworker/serviceworker.cb9679
Source: d524261213bc365d_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.AccountVerification.a0b
Source: 4e5fdd3ee2425470_1.0.dr, 4e5fdd3ee2425470_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.AdvancedSearch.24538845
Source: bcfa6eba12dc9e84_1.0.dr, bcfa6eba12dc9e84_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Articles.89cf7bb5.js.ma
Source: 67a81dc3937135f0_1.0.dr, 67a81dc3937135f0_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.AudioSpaceDetail.ef731d
Source: 6dbb8ab9e452b30c_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.AudioSpaceLoggedIn.8174
Source: fec2f6f436e38ada_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.BadgeViolationsNotifica
Source: 52cffd23070c4586_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Bookmarks.9213a645.js.m
Source: 025aac4eef124560_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Collection.dc391b75.js.
Source: dba8538b2d2384a5_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Communities.213331d5.js
Source: db342032dd6b7ef2_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Compose.eb7fdec5.js.map
Source: 98556f7f3cbc1c21_1.0.dr, 98556f7f3cbc1c21_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.ComposeMedia.31f351a5.j
Source: 2ff610a3bc840d72_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.ConnectTab.49362975.js.
Source: b240670c25bb93ef_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.ConversationParticipant
Source: e593b5be82dab25e_1.0.dr, e593b5be82dab25e_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.DMRichTextCompose.30de1
Source: 2a68d864930cb488_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.DirectMessages.bf29b0d5
Source: de350ae5115662e4_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Download.fc421785.js.ma
Source: 5b2417f102c4ca49_1.0.dr, 5b2417f102c4ca49_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Explore.420b1285.js.map
Source: 912e0212fcdaa1a9_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.ExploreTopics.b22d8a95.
Source: 616fb4dabaa72f20_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.FollowerRequests.ffe43d
Source: 4303ccdabba4a8c4_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.GenericTimeline.d376223
Source: f2f49b15706de10d_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.GifSearch.a742ddf5.js.m
Source: abf65c94526f878c_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.HomeTimeline.bc556035.j
Source: 8219cb10b98db536_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.LiveEvent.bdbb3cf5.js.m
Source: 21c7c1012b49f84e_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Login.0d101105.js.map
Source: 8074e67c4f41773a_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Logout.21abae45.js.map
Source: ac5d7d74abe46619_1.0.dr, ac5d7d74abe46619_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.MultiAccount.58303e05.j
Source: 3904d96f421495de_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.NetworkInstrument.9f748
Source: a0da10eda92fd3e8_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.NewsLanding.a5ef6365.js
Source: 370e9ec328648c18_1.0.dr, 370e9ec328648c18_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Newsletters.680a95a5.js
Source: 1e2025473e56da8b_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.NotificationDetail.e8c7
Source: af1d33226d4f5da5_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Notifications.ce262aa5.
Source: 6a1eaf0fe2f8ebf5_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.OAuth.9352a225.js.map
Source: 29e3368655160011_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Ocf.b761d375.js.map
Source: 7889d39a93d85fc2_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Place.a171fc25.js.map
Source: b772cfa6f7b3b869_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.PlainTextCompose.4dda31
Source: 67d8d7beadb2b33c_1.0.dr, 67d8d7beadb2b33c_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.QuoteTweetActivity.a7dc
Source: 4ce6653d4e799813_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Report.386d7815.js.map
Source: 3319999741a0cfd3_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.RichTextCompose.9807aa5
Source: dafae7486bbb9431_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Search.3077ddf5.js.map
Source: 05ba0695c8cc3180_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.SettingsBizProfile.0edd
Source: dc1814e667911147_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.SettingsInternals.0408d
Source: 04768b74ae8cfdc9_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.SettingsRevamp.ae558615
Source: 6791b5722c185dfb_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.SettingsTransparency.1e
Source: 605886be295073bb_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.SmsLogin.14223745.js.ma
Source: e1863fb01ce798ab_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.TopicPeek.867e2955.js.m
Source: 9fdcbfb57a4ec68c_1.0.dr, 9fdcbfb57a4ec68c_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Topics.11acc6a5.js.map
Source: 813e41ed04126488_1.0.dr, 813e41ed04126488_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Trends.57b46ce5.js.map
Source: f000eb47ed4c22d0_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.TweetActivity.eb272a25.
Source: c1126b20e6383066_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.TweetActivityReactions.
Source: 9f063b07d37f8801_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.TweetMediaDetail.e2a88e
Source: 450b823fc0bd582d_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.TweetMediaTags.6367f0b5
Source: dbb15682e3574cdb_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Twitterversary.9d57f695
Source: b27c702a7c68d79f_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.UserAvatar.ad281585.js.
Source: 98a5d15a066394f0_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.UserFollowLists.8576e8b
Source: 8fe670a9fc48d9f8_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.UserMoments.fa036195.js
Source: e6f88b79ac1d9121_1.0.dr, e6f88b79ac1d9121_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.UserProfile.beb2b015.js
Source: 40c912d229579eac_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/en.50afce55.js.map
Source: ab2f7e36a3f418c5_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AppModules.49936285.js.
Source: d004e602c05ea55c_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioContextSpaceMedia.
Source: 6143b69e002f0fb8_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioContextVoiceMedia.
Source: 7fd90b1fef32fa10_1.0.dr, 7fd90b1fef32fa10_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioDock.cf855765.js.m
Source: 40ad6ee5c010fc07_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioOnlyVideoPlayer.c0
Source: f77b9d58371d8466_1.0.dr, f77b9d58371d8466_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DMDrawer.1f9d6665.js.ma
Source: 902da7685210207b_1.0.dr, 902da7685210207b_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DashMenu.53966895.js.ma
Source: 065c4b75e275ef37_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.ExploreSidebar.0b198e05
Source: 75dc1414ebf058a2_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.FeedbackSheet.d37389e5.
Source: 5ed6f5da91222ef1_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.FeedbackTombstone.03efb
Source: aa9cb5178c926fed_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.NewTweetsPill.68ab1ee5.
Source: 08d6bae33a3af969_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.PreviewActions.4bfe67d5
Source: ac77ae823562826d_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SignupModule.dd7da525.j
Source: 8c6e4336c021a009_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.6e421a
Source: 4878248943f5dddf_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TweetCurationActionMenu
Source: 740c4883c9a5df82_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.Typeahead.137d7b35.js.m
Source: b70c6c4eb4d9a694_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.graphQLDarkReads.3aca5f
Source: 01da856fc5ed49d5_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.personalizationData.13d
Source: e691b830ecef8e14_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loaders.video.PlayerHls13.a678
Source: 3ff2fb06614d2b8d_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loaders.video.PlayerHls14.ff73
Source: 2133b9d70bc343da_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loaders.video.VideoPlayerDefau
Source: 5e6edf7cb595ebe3_1.0.dr, 5e6edf7cb595ebe3_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loaders.video.VideoPlayerEvent
Source: 03dda55e1ca0ca49_1.0.dr, 03dda55e1ca0ca49_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/main.19e34665.js.map
Source: 3dbaf3da45a61199_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/polyfills.6a7b2b85.js.map
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/runtime.fcf209f5.js.map
Source: b071f523622ac435_1.0.dr, b071f523622ac435_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/sharedCore.0ce26fa5.js.map
Source: 9bcd688edd3d4dd6_1.0.dr, 9bcd688edd3d4dd6_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~bundle
Source: 5f5684f1f6befe9c_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.ComposeMedia~bun
Source: fdb8d9660f84888e_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Compose~bundle.P
Source: 011247b8e01584c1_1.0.dr, 011247b8e01584c1_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.DirectMessages~b
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.LoggedOutHome~lo
Source: 31c8e33e2b4c95ec_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.RichTextCompose~
Source: 5f84ce33fc83edfa_1.0.dr, c65842c0d8c693f2_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.SettingsRevamp~b
Source: 66d1dd758fe21f4f_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DMDrawer~bundle.
Source: eca2dbddb2e641ce_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.DashMenu~bundle.
Source: f89efab7685f4b3d_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.Typeahead~bundle
Source: 040911658f5b9de1_1.0.dr, 040911658f5b9de1_0.0.dr, a1bacf710991a44d_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loaders.video.VideoPlay
Source: 4ba07f2973385c29_1.0.dr, 4ba07f2973385c29_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.EmojiPickerDat
Source: 15854fbfaa86ce25_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.GraphQLModule~
Source: 4bbc00e786677d78_1.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePlayer~l
Source: 41569e03093eab95_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.SettingsRevamp
Source: c6fd75d8d508cb9c_1.0.dr, c6fd75d8d508cb9c_0.0.dr	String found in binary or memory: https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/vendors~main.d7a94f25.js.map
Source: Current Session.0.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: c82f7f31ce42af6c_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210729/r20110914/client/qs_click_protection_fy2019.js
Source: 5d4c486f1693cac9_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/pagead/js/r20210729/r20110914/client/window_focus_fy2019.js
Source: adba8338fc9be233_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/UFYwWwmt.js
Source: c549f3e91f4967ee_0.0.dr, 80e95d07cbc7eff0_0.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2.js
Source: Current Session.0.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/224/runner.html
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://tr.blismedia.com/v1/api/sync/rubicon
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://translate.google.com
Source: c6fd75d8d508cb9c_1.0.dr	String found in binary or memory: https://twemoji.maxcdn.com/v/latest/72x72/
Source: c6fd75d8d508cb9c_1.0.dr	String found in binary or memory: https://twemoji.maxcdn.com/v/latest/svg/
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://twitter.app.link/banner_switch_to_app
Source: de350ae5115662e4_1.0.dr	String found in binary or memory: https://twitter.app.link/hfQ1AFOM52?$fallback_url=
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://twitter.app.link/interstitial_switch_to_app
Source: 6c038e3570d6abf1_0.0.dr	String found in binary or memory: https://twitter.com
Source: 8821501f2404a281_0.0.dr, 085f3a4bee25b7c6_0.0.dr	String found in binary or memory: https://twitter.com/
Source: 1e2025473e56da8b_0.0.dr	String found in binary or memory: https://twitter.com/$
Source: 8f504b412747b7e1_0.0.dr	String found in binary or memory: https://twitter.com/G:
Source: f9c8b5009d864d09_0.0.dr	String found in binary or memory: https://twitter.com/T
Source: 37efba5e4372dd06_0.0.dr	String found in binary or memory: https://twitter.com/X2
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://twitter.com/account/begin_password_reset
Source: 161f7544731c605c_0.0.dr	String found in binary or memory: https://twitter.com/e
Source: 5b2417f102c4ca49_1.0.dr	String found in binary or memory: https://twitter.com/explore
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ar
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ar-x-fm
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=bg
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=bn
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ca
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=cs
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=da
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=de
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=el
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=en
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=en-GB
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=en-ss
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=en-xx
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=es
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=eu
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=fa
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=fi
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=fil
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=fr
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ga
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=gl
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=gu
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=he
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=hi
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=hr
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=hu
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=id
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=it
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ja
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=kn
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ko
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=mr
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ms
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=nb
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=nl
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=pl
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=pt
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ro
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ru
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=sk
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=sr
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=sv
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ta
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=th
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=tr
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=uk
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=ur
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=vi
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=zh
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?lang=zh-Hant
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?precache=1
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/home?precache=1H
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://twitter.com/i/broadcasts/
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://twitter.com/i/communities/
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://twitter.com/i/csp_report?a=O5RXE%3D%3D%3D&ro=false
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://twitter.com/i/directory/profiles
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://twitter.com/i/events/
Source: 8219cb10b98db536_1.0.dr	String found in binary or memory: https://twitter.com/i/events/I
Source: cebbc593014c6d8f_1.0.dr	String found in binary or memory: https://twitter.com/i/js_inst?c_name=ui_metrics
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://twitter.com/i/moments/
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://twitter.com/i/spaces/
Source: 9fdcbfb57a4ec68c_1.0.dr	String found in binary or memory: https://twitter.com/i/topics/
Source: 2a6b34e7fd5d46e5_0.0.dr	String found in binary or memory: https://twitter.com/n5
Source: af47be93e4c33dc6_0.0.dr, 370e9ec328648c18_1.0.dr	String found in binary or memory: https://twitter.com/privacy
Source: 176e7d1d913270bc_0.0.dr	String found in binary or memory: https://twitter.com/r2
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://twitter.com/settings/content_you_see
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://twitter.com/sw.js
Source: f3ab1e1292e135fa_1.0.dr	String found in binary or memory: https://twitter.com/sw.jsaD
Source: Current Session.0.dr	String found in binary or memory: https://twitter.com/thesun?lang=en-gb
Source: History-journal.0.dr	String found in binary or memory: https://twitter.com/thesun?lang=en-gbThe
Source: Current Session.0.dr	String found in binary or memory: https://twitter.com/thesun?lang=en-gbz
Source: af47be93e4c33dc6_0.0.dr, b071f523622ac435_1.0.dr	String found in binary or memory: https://twitter.com/tos
Source: da6e05d03317dad0_0.0.dr	String found in binary or memory: https://twitter.com/u
Source: 8e823c8633d5b1a6_0.0.dr	String found in binary or memory: https://twitter.com/wk;
Source: Current Session.0.dr	String found in binary or memory: https://u.openx.net/w/1.0/cm?cc=1&id=e818ca1e-0c23-caa8-0dd3-096b0ada08b7&ph=2d1251ae-7f3a-47cf-bd2a
Source: 08b34eeabe34fb08_0.0.dr	String found in binary or memory: https://uk-script.dotmetrics.net/door.js?d=
Source: b1d1b3bca9a0a883_0.0.dr	String found in binary or memory: https://uk-script.dotmetrics.net/door.js?d=www.the-sun.com&t=homepage
Source: a6cc27e90b6ef5ce_0.0.dr	String found in binary or memory: https://uk-script.dotmetrics.net/door.js?d=www.thescottishsun.co.uk&t=homepage
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://um.simpli.fi/rb_match
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://um2.eqads.com:443/um/rc
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://ums.acuityplatform.com/tum?umid=2
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://upload.twitter.com
Source: b071f523622ac435_1.0.dr	String found in binary or memory: https://upload.twitter.com/i/media/upload.json
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://vmap.grabyo.com
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://vmap.snappytv.com
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://vmaprel.snappytv.com
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://vmapstage.snappytv.com
Source: 370e9ec328648c18_1.0.dr	String found in binary or memory: https://www.getrevue.co?utm_source=twitter-nav&utm_campaign=announcement-modal&utm_content=find-out-
Source: 3319999741a0cfd3_1.0.dr	String found in binary or memory: https://www.getrevue.co?utm_source=twitter-threads&utm_campaign=announcement-callout&utm_content=lea
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://www.google-analytics.com
Source: 03dda55e1ca0ca49_1.0.dr, 2f7d89c4d94f3223_0.0.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: 940a66db08c695da_0.0.dr	String found in binary or memory: https://www.google-analytics.com/analytics.jsaD
Source: 940a66db08c695da_0.0.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: 2cdb959f070e2648_0.0.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=GTM-59BWW7J&t=thesun&cid=1335784315.1628058023
Source: 23a2c77602866f08_0.0.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=GTM-W2RTJS7&t=thesun&cid=1153005236.1628058037
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr, manifest.json0.0.dr	String found in binary or memory: https://www.google.com
Source: Current Session.0.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: manifest.json0.0.dr	String found in binary or memory: https://www.google.com;
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json0.0.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 940a66db08c695da_0.0.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: d6958924975f9124_0.0.dr, 5c557df0a69e0ac5_0.0.dr	String found in binary or memory: https://www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
Source: a5c0facd51fc2992_0.0.dr	String found in binary or memory: https://www.googletagservices.com/dcm/dcmads.js
Source: f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.0.dr	String found in binary or memory: https://www.gstatic.com;
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://www.periscope.tv
Source: af47be93e4c33dc6_0.0.dr	String found in binary or memory: https://www.pscp.tv
Source: 03dda55e1ca0ca49_1.0.dr	String found in binary or memory: https://www.pscp.tv/w/
Source: 000003.log5.0.dr	String found in binary or memory: https://www.the-sun.com
Source: QuotaManager.0.dr	String found in binary or memory: https://www.the-sun.com/
Source: Current Session.0.dr	String found in binary or memory: https://www.the-sun.com/#main-content
Source: Current Session.0.dr	String found in binary or memory: https://www.the-sun.com/#main-content0News
Source: Current Session.0.dr	String found in binary or memory: https://www.the-sun.com/#main-contentM
Source: History-journal.0.dr	String found in binary or memory: https://www.the-sun.com/#main-contentNews
Source: Current Session.0.dr	String found in binary or memory: https://www.the-sun.com/0
Source: Current Session.0.dr	String found in binary or memory: https://www.the-sun.com/0News
Source: History Provider Cache.0.dr	String found in binary or memory: https://www.the-sun.com/20News
Source: QuotaManager-journal.0.dr	String found in binary or memory: https://www.the-sun.com/J
Source: History-journal.0.dr	String found in binary or memory: https://www.the-sun.com/News
Source: 90d79730a75dccc7_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/app_es6~493df0b3.9e31b258a46f4f83c7f3.1.js
Source: 0aff68fde7b68100_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/app_es6~a0fc626b.95783255cd6f505cf9b1.1.js
Source: 0aff68fde7b68100_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/app_es6~a0fc626b.95783255cd6f505cf9b1.1.jsa
Source: 0aff68fde7b68100_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/app_es6~a0fc626b.95783255cd6f505cf9b1.1.jsaD
Source: 317b6048f3f63700_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/app_es6~dpa_es6~493df0b3.54c06e7555a32d6cbd27.1.js
Source: c518781dc7d596d1_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/app_es6~dpa_es6~ea1f58e8.89fea462382e2a0bfafd.1.js
Source: 616848b7ce3634d8_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/app_es6~ea1f58e8.51c47b77d86dbd6e2170.1.js
Source: 21d6e3a4c6e4c4b0_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/embeds~6ed1eda6.cdda24d87cec14b5801b.1.js
Source: 21d6e3a4c6e4c4b0_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/embeds~6ed1eda6.cdda24d87cec14b5801b.1.jsaD
Source: ae1c34c7760242cd_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/gallery~21833f8f.d24bc5604baff847ed7d.1.js
Source: ae1c34c7760242cd_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/gallery~21833f8f.d24bc5604baff847ed7d.1.jsa
Source: ae1c34c7760242cd_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/gallery~21833f8f.d24bc5604baff847ed7d.1.jsaD
Source: fdc0c9ebc0b980d7_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendors~app_es6~d939e436.8e7cddc6850f02bb7f85.1.js
Source: d0d07794eaafe13a_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~0928ebd2.091cf791a62a3a3ef167.1.js
Source: d0d07794eaafe13a_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~0928ebd2.091cf791a62a3a3ef167.1.jsaD
Source: 53253a5b9a44d922_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~0f485567.c318d3d1dc81a148b07c.1.js
Source: af38e7dc15184b8e_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~2977f88b.0b964addc523d71e914c.1.js
Source: af38e7dc15184b8e_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~2977f88b.0b964addc523d71e914c.1.jsaD
Source: 697d8c15add284f3_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~31c671ca.c6b33d63ee70431faa7e.1.js
Source: b872863357604590_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~3f764be9.d49ff996004c77ffbc13.1.js
Source: b872863357604590_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~3f764be9.d49ff996004c77ffbc13.1.jsaD
Source: 15e41511c194ea6b_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~59c9b7c8.dc79245289a3df850791.1.js
Source: 70acc5f94167915b_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~690b702c.a727453a291c929cfb44.1.js
Source: 70acc5f94167915b_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~690b702c.a727453a291c929cfb44.1.jsaD
Source: 2f2d8df09354b1fd_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~6eb4af75.bd363941340f4717f59a.1.js
Source: 65f59fad7b4899b7_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~73914085.be0da6f2c35e1d2f982b.1.js
Source: 65f59fad7b4899b7_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~73914085.be0da6f2c35e1d2f982b.1.jsaD
Source: 16d6284efdc582c6_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~c7bac266.7d8fadeef80125cbd366.1.js
Source: 03752c5191f33af7_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~d939e436.650a1aac8feb0edee4f6.1.js
Source: 03752c5191f33af7_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~d939e436.650a1aac8feb0edee4f6.1.jsaD
Source: 860cd0b4d7a6e71f_0.0.dr	String found in binary or memory: https://www.the-sun.com/assets/client/vendor~f2868502.db5e2bbb7eff3eef7402.1.js
Source: 000003.log3.0.dr	String found in binary or memory: https://www.the-sun.com/assets/thesun/images/sunmasthead.svg
Source: 000003.log3.0.dr	String found in binary or memory: https://www.the-sun.com/assets/thesun/images/sunmasthead.svg_
Source: 000003.log3.0.dr	String found in binary or memory: https://www.the-sun.com/assets/thesun/images/sunmasthead.svgipsL
Source: 2cc80dabc69f58b6_1.0.dr	String found in binary or memory: https://www.the-sun.com/sw.js
Source: 2cc80dabc69f58b6_1.0.dr	String found in binary or memory: https://www.the-sun.com/sw.jsaD
Source: Current Session.0.dr	String found in binary or memory: https://www.the-sun.comh
Source: MANIFEST-0000011.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk
Source: Current Session.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/
Source: 80078e92cf60e5e9_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/app_es6~21e8bd9d.47fd35b821227d0f3ce5.1.js
Source: 3459005c9813b2c6_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/app_es6~493df0b3.9e31b258a46f4f83c7f3.1.js
Source: 318c7b4d814e569b_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/app_es6~614db18d.7053b912e9dbe2ad2a3b.1.js
Source: 0787abb26b1d80da_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/app_es6~a0fc626b.95783255cd6f505cf9b1.1.js
Source: f5308980d1a71f85_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/app_es6~ea1f58e8.51c47b77d86dbd6e2170.1.js
Source: b686bb176e90cdc0_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/desktopHeaderControl~8becc859.f333faa7d4c6fedd5225.1.
Source: d3b2661d8baba6d3_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/embeds~6ed1eda6.cdda24d87cec14b5801b.1.js
Source: 7d049d8be9a6baf5_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/extendedHeaderControl~40b10c59.df9e2477da968fc0a953.1
Source: b43d58b7b5a59e42_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/gallery~21833f8f.d24bc5604baff847ed7d.1.js
Source: 34d9da613091dc1c_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendors~app_es6~d6132156.00a9a4e741b3ea5e5498.1.js
Source: 2b2deddb224832c8_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendors~app_es6~ec8c427e.326c873eda8a9e9244fd.1.js
Source: 06aef5aad22b5e4a_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~0928ebd2.091cf791a62a3a3ef167.1.js
Source: 1e2001af0fbda1e0_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~0f485567.c318d3d1dc81a148b07c.1.js
Source: 1f66603e406c242e_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~2977f88b.0b964addc523d71e914c.1.js
Source: 8ba6c7c2e502c8b8_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~2a42e354.118eab43f3156018cb3c.1.js
Source: 53e996ecee7f04de_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~31c671ca.c6b33d63ee70431faa7e.1.js
Source: 3ec9685f1d111825_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~6eb4af75.bd363941340f4717f59a.1.js
Source: ff44781bf8deff0f_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~c7bac266.7d8fadeef80125cbd366.1.js
Source: 0c6b634f8b6b29ee_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~d939e436.650a1aac8feb0edee4f6.1.js
Source: 7e70d74c4d54cd93_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~da60ea53.224fe4f5bb592246d3b0.1.js
Source: 10d6cd581d627b3a_0.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/assets/client/vendor~f2868502.db5e2bbb7eff3eef7402.1.js
Source: 0d3086d7cda635d4_1.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/sw.js
Source: 0d3086d7cda635d4_1.0.dr	String found in binary or memory: https://www.thescottishsun.co.uk/sw.jsaD
Source: Current Session.0.dr	String found in binary or memory: https://www.thescottishsun.co.ukh
Source: MANIFEST-0000011.0.dr	String found in binary or memory: https://www.thesun.co.uk
Source: Current Session.0.dr	String found in binary or memory: https://www.thesun.co.uk/
Source: Current Session.0.dr	String found in binary or memory: https://www.thesun.co.uk/-News
Source: History-journal.0.dr	String found in binary or memory: https://www.thesun.co.uk/News
Source: e87710482b594a30_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/app_es6~21e8bd9d.47fd35b821227d0f3ce5.1.js
Source: 0b36250bce72c6ef_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/app_es6~493df0b3.9e31b258a46f4f83c7f3.1.js
Source: f7a5872b11e7920c_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/app_es6~dpa_es6~493df0b3.54c06e7555a32d6cbd27.1.js
Source: 8d03fc4088763c7a_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/app_es6~dpa_es6~ea1f58e8.89fea462382e2a0bfafd.1.js
Source: b90575cd3527447c_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/app_es6~ea1f58e8.51c47b77d86dbd6e2170.1.js
Source: 8540f1eda391bbd5_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/desktopHeaderControl~8becc859.f333faa7d4c6fedd5225.1.js
Source: 93ef2add301fee4c_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/embeds~6ed1eda6.cdda24d87cec14b5801b.1.js
Source: b53d5bec1e237f09_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/gallery~21833f8f.d24bc5604baff847ed7d.1.js
Source: 8b46a1998c43d02d_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendors~app_es6~690b702c.d309e3f34dd2d0091a19.1.js
Source: 4279be2944aec971_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendors~app_es6~d939e436.8e7cddc6850f02bb7f85.1.js
Source: 646cb395298f1c82_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~0928ebd2.091cf791a62a3a3ef167.1.js
Source: db1b7c9943564750_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~10e2e882.8c64165991a6c1f88a4d.1.js
Source: 2fc1b94ec9bbf3c8_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~2977f88b.0b964addc523d71e914c.1.js
Source: e5aec42484970de5_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~2a42e354.118eab43f3156018cb3c.1.js
Source: 760524ab5a7e9c5a_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~31c671ca.c6b33d63ee70431faa7e.1.js
Source: ba64692af02ef1fc_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~3f764be9.d49ff996004c77ffbc13.1.js
Source: 2f673252c90490e2_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~59c9b7c8.dc79245289a3df850791.1.js
Source: 9b2b7d34ca7aad79_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~73914085.be0da6f2c35e1d2f982b.1.js
Source: f11ceda3ba14913f_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~99af934a.5a79f0b05188a45f0cb3.1.js
Source: 375a9a069a16f108_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~b58f7129.a02e4534b7cc2552b71a.1.js
Source: 10dfd19ebcc01576_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~d939e436.650a1aac8feb0edee4f6.1.js
Source: e6de88778f149c28_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~ec8c427e.4d897225732ea6676698.1.js
Source: 64879874fe6d8bc2_0.0.dr	String found in binary or memory: https://www.thesun.co.uk/assets/client/vendor~f2868502.db5e2bbb7eff3eef7402.1.js
Source: Current Session.0.dr	String found in binary or memory: https://www.thesun.co.ukh
Source: 6a1eaf0fe2f8ebf5_1.0.dr	String found in binary or memory: https://www.twitter.com
Source: 135a9e73b7a29232_0.0.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=rubicon

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 50381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50466
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50472
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50474
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50488
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50491
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50417
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50412
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50421
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50420
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50422
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50437
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50441
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50442
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 50319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50375
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50495
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50381
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443

Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.38:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.156.28.35:443 -> 192.168.2.3:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.81.129.224:443 -> 192.168.2.3:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.116.38:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.137.37.21:443 -> 192.168.2.3:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.137.37.21:443 -> 192.168.2.3:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.192.66.111:443 -> 192.168.2.3:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.137.37.21:443 -> 192.168.2.3:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.157.91.125:443 -> 192.168.2.3:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.245.213:443 -> 192.168.2.3:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.245.213:443 -> 192.168.2.3:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.108:443 -> 192.168.2.3:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.108:443 -> 192.168.2.3:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.242.197:443 -> 192.168.2.3:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.13:443 -> 192.168.2.3:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.13:443 -> 192.168.2.3:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.46.133.124:443 -> 192.168.2.3:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.245:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.144.144.142:443 -> 192.168.2.3:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.121.111.29:443 -> 192.168.2.3:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.3:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.192.249.156:443 -> 192.168.2.3:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.144.144.142:443 -> 192.168.2.3:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.242.197:443 -> 192.168.2.3:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.245.213:443 -> 192.168.2.3:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.130:443 -> 192.168.2.3:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.38:443 -> 192.168.2.3:49890 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.137.37.21:443 -> 192.168.2.3:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.121.111.29:443 -> 192.168.2.3:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.226.228.48:443 -> 192.168.2.3:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.192.249.156:443 -> 192.168.2.3:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.2.80:443 -> 192.168.2.3:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.174.11.85:443 -> 192.168.2.3:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.155.181:443 -> 192.168.2.3:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.210.171:443 -> 192.168.2.3:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:49932 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.240.234:443 -> 192.168.2.3:49936 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:49935 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.208.43.12:443 -> 192.168.2.3:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.144.144.142:443 -> 192.168.2.3:49941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.228.74.189:443 -> 192.168.2.3:49954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49960 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.17.15:443 -> 192.168.2.3:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 157.240.20.35:443 -> 192.168.2.3:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.129:443 -> 192.168.2.3:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.129:443 -> 192.168.2.3:49965 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.115:443 -> 192.168.2.3:49966 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.114.37:443 -> 192.168.2.3:49970 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.2:443 -> 192.168.2.3:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.136.158:443 -> 192.168.2.3:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.69:443 -> 192.168.2.3:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.21.104.248:443 -> 192.168.2.3:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.253.128.183:443 -> 192.168.2.3:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.158.226.176:443 -> 192.168.2.3:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.216.100.107:443 -> 192.168.2.3:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.244.42.2:443 -> 192.168.2.3:49996 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:49997 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.216.100.107:443 -> 192.168.2.3:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.114.159.93:443 -> 192.168.2.3:50005 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.110:443 -> 192.168.2.3:50006 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.189.110:443 -> 192.168.2.3:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.144.144.142:443 -> 192.168.2.3:50013 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50022 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.255.141.211:443 -> 192.168.2.3:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.27:443 -> 192.168.2.3:50040 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.246:443 -> 192.168.2.3:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.246:443 -> 192.168.2.3:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.246:443 -> 192.168.2.3:50058 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.7.51.190:443 -> 192.168.2.3:50057 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50074 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:50094 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:50088 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.210.171:443 -> 192.168.2.3:50103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50118 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50119 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:50127 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.228.74.189:443 -> 192.168.2.3:50128 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.242.197:443 -> 192.168.2.3:50130 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.159.8:443 -> 192.168.2.3:50135 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:50149 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.38:443 -> 192.168.2.3:50156 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.135.227:443 -> 192.168.2.3:50167 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.155.181:443 -> 192.168.2.3:50178 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50180 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:50187 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:50191 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.21.104.248:443 -> 192.168.2.3:50192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.29.132.246:443 -> 192.168.2.3:50230 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.180.164:443 -> 192.168.2.3:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.184.8.65:443 -> 192.168.2.3:50241 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:50239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.52.2.39:443 -> 192.168.2.3:50247 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.52.2.39:443 -> 192.168.2.3:50248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.7.51.190:443 -> 192.168.2.3:50244 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.114.159.93:443 -> 192.168.2.3:50265 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.248.242.197:443 -> 192.168.2.3:50275 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:50277 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.126.56.137:443 -> 192.168.2.3:50282 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:50284 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:50283 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:50287 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.64.190.80:443 -> 192.168.2.3:50288 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:50295 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.253.128.183:443 -> 192.168.2.3:50297 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50310 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:50317 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:50319 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.126.56.137:443 -> 192.168.2.3:50322 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:50325 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50332 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50330 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50333 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.252.173.38:443 -> 192.168.2.3:50359 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.195.240.234:443 -> 192.168.2.3:50375 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:50378 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.158.226.176:443 -> 192.168.2.3:50383 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.155.71.149:443 -> 192.168.2.3:50407 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50408 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.3:50412 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.227.248.159:443 -> 192.168.2.3:50417 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.17.245.120:443 -> 192.168.2.3:50437 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 213.19.147.44:443 -> 192.168.2.3:50442 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 70.42.32.127:443 -> 192.168.2.3:50441 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.205.167.202:443 -> 192.168.2.3:50459 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.21.104.248:443 -> 192.168.2.3:50466 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.82.100.176:443 -> 192.168.2.3:50478 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.123.167:443 -> 192.168.2.3:50485 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.210.171:443 -> 192.168.2.3:50487 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.208.210.171:443 -> 192.168.2.3:50488 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 152.199.21.141:443 -> 192.168.2.3:50493 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.184.220.70:443 -> 192.168.2.3:50495 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.232.136.158:443 -> 192.168.2.3:50498 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 93.184.220.70:443 -> 192.168.2.3:50494 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@82/861@318/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-610A3179-BB4.pma

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Local\Temp\faccf554-bc05-46ea-b0d3-6bf6909ae71f.tmp

Jump to behavior

Source: QuotaManager.0.dr

Binary or memory string: CREATE TABLE HostQuotaTable(host TEXT NOT NULL, type INTEGER NOT NULL, quota INTEGER DEFAULT 0, UNIQUE(host, type));

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'http://www.the-sun.com'
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,8885377070788844635,1437694784848484457,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1700 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,8885377070788844635,1437694784848484457,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=9508 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,8885377070788844635,1437694784848484457,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1700 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe 'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,8885377070788844635,1437694784848484457,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=9508 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading3	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol2	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol3	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.the-sun.com	0%	Virustotal		Browse
http://www.the-sun.com	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://rubiconcm.digitaleast.mobi/usersync/rubicon.gif	0%	Virustotal		Browse
https://rubiconcm.digitaleast.mobi/usersync/rubicon.gif	0%	Avira URL Cloud	safe
https://www.the-sun.com/assets/client/embeds~6ed1eda6.cdda24d87cec14b5801b.1.js	0%	Avira URL Cloud	safe
https://api.primecaster.net/adlogue/api/sync/rubicon	0%	Virustotal		Browse
https://api.primecaster.net/adlogue/api/sync/rubicon	0%	Avira URL Cloud	safe
http://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp	0%	Virustotal		Browse
http://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp	0%	Avira URL Cloud	safe
https://www.thesun.co.uk/assets/client/vendors~app_es6~d939e436.8e7cddc6850f02bb7f85.1.js	0%	Avira URL Cloud	safe
https://www.the-sun.com/#main-content0News	0%	Avira URL Cloud	safe
https://www.the-sun.com/assets/client/vendor~2977f88b.0b964addc523d71e914c.1.jsaD	0%	Avira URL Cloud	safe
https://cmp.cdn.thesun.co.uk/wrapperMessagingWithoutDetection.js	0%	Avira URL Cloud	safe
https://www.thesun.co.uk/assets/client/gallery~21833f8f.d24bc5604baff847ed7d.1.js	0%	Avira URL Cloud	safe
https://aax-eu.amazon-adsystem.com(	0%	Avira URL Cloud	safe
https://js-sec.indexww.com(	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
um.simpli.fi	159.253.128.183	true	false	high
lga-bh-bgp.contextweb.com	198.148.27.140	true	false	high
prebid.the-ozone-project.com	216.137.37.56	true	false	unknown
global.px.quantserve.com	91.228.74.189	true	false	high
dmx.districtm.io	104.16.68.69	true	false	high
adserver-vpc-alb-3-578630024.us-west-2.elb.amazonaws.com	44.237.224.0	true	false	high
pixel-a.sitescout.com	66.155.71.149	true	false	high
p1.parsely.com	52.205.167.202	true	false	high
rtb.openx.net	35.227.252.103	true	false	high
bttrack.com	192.132.33.46	true	false	unknown
generic-2.lb.lm5v.com	162.55.6.210	true	false	unknown
t.co	104.244.42.69	true	false	high
elb-aws-va-clickdistrict-1246667425.us-east-1.elb.amazonaws.com	3.212.254.152	true	false	high
www.thescottishsun.co.uk	54.192.66.80	true	false	unknown
facebook.com	157.240.20.35	true	false	high
www.google.com	142.250.180.164	true	false	high
id.rlcdn.com	35.244.174.68	true	false	high
bcp.crwdcntrl.net	52.208.103.128	true	false	high
cs510.wpc.edgecastcdn.net	152.199.21.141	true	false	high
video.twitter.map.fastly.net	199.232.136.158	true	false	unknown
eu2-ice.360yield.com	3.124.27.129	true	false	high
match.prod.bidr.io	52.17.245.120	true	false	unknown
ads.thesun.co.uk	216.137.37.55	true	false	unknown
cdn-259.privacy-mgmt.com	54.192.66.31	true	false	unknown
pagead-googlehosted.l.google.com	142.250.184.33	true	false	high
creativecdn.com	185.184.8.65	true	false	high
privacycollector-production-457481513.us-east-1.elb.amazonaws.com	18.214.101.4	true	false	high
ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud	18.156.195.47	true	false	unknown
googleads4.g.doubleclick.net	142.250.184.34	true	false	high
plus.l.google.com	142.250.180.110	true	false	high
lax-1-sync.go.sonobi.com	72.34.250.75	true	false	high
pixel.onaudience.com	51.222.80.231	true	false	unknown
firewall-external-2134955858.eu-west-1.elb.amazonaws.com	99.81.129.224	true	false	high
d1ykf07e75w7ss.cloudfront.net	54.230.152.146	true	false	high
googleads.g.doubleclick.net	142.250.184.98	true	false	high
media.p-n.io	54.192.66.111	true	false	unknown
clients.l.google.com	216.58.212.174	true	false	high
prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com	52.16.114.37	true	false	high
googlehosted.l.googleusercontent.com	216.58.208.129	true	false	high
aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com	3.10.35.49	true	false	high
www.googletagservices.com	142.250.184.34	true	false	high
hbx.media.net	23.211.6.95	true	false	high
hb-api-fra02.omnitagjs.com	185.255.84.151	true	false	high
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	3.250.252.43	true	false	high
adservice.google.com	142.250.184.34	true	false	high
oeu.vap.lijit.com	216.52.2.30	true	false	high
ssbsync-itx5.smartadserver.com	185.86.138.119	true	false	high
ampcid.google.de	142.250.180.110	true	false	high
origin-tracking.m6r.eu	72.251.244.140	true	false	high
pop-edc2.mix.linkedin.com	108.174.11.85	true	false	high
scontent.xx.fbcdn.net	157.240.17.15	true	false	high
nep.advangelists.com	52.205.151.180	true	false	high
idsync.rlcdn.com	35.244.174.68	true	false	high
p.adsymptotic.com	104.18.98.194	true	false	high
elb-aws-fr-oba-294519942.eu-central-1.elb.amazonaws.com	18.192.249.156	true	false	high
88a66e5c-8fe8-48af-9c6c-3ec3f4983aad.prmutv.co	35.241.9.51	true	false	unknown
rtb.adentifi.com	35.171.36.131	true	false	unknown
ad.mrtnsvr.com	34.102.163.6	true	false	unknown
tags.mathtag.com	185.29.132.246	true	false	high
sync.srv.stackadapt.com	34.205.3.24	true	false	high
ssbsync-eqx.smartadserver.com	185.86.137.121	true	false	high
am-vip001.taboola.com	141.226.228.48	true	false	high
d5p.de17a.com	213.155.156.164	true	false	high
e-volution.rtb-as-useast.ak-is2.net	174.137.133.49	true	false	unknown
www.google.de	142.250.184.99	true	false	high
pixel.tapad.com	35.227.248.159	true	false	high
sync.adotmob.com	185.183.112.148	true	false	high
pagead46.l.doubleclick.net	142.250.184.66	true	false	high
twitter.com	104.244.42.129	true	false	high
ssp.ads.betweendigital.com	96.46.186.57	true	false	high
api.permutive.com	34.107.254.252	true	false	high
sync.ipredictive.com	52.21.104.248	true	false	unknown
accounts.google.com	216.58.205.77	true	false	high
cookiesyncing-1395500543.us-east-1.elb.amazonaws.com	54.205.198.81	true	false	high
s.amazon-adsystem.com	52.46.133.124	true	false	high
aax-eu.amazon-adsystem.com	52.95.116.38	true	false	high
dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com	18.158.226.176	true	false	high
match.adsby.bidtheatre.com	159.65.197.210	true	false	unknown
gum.am5.vip.prod.criteo.com	178.250.2.146	true	false	high
newrelic.map.fastly.net	151.101.1.27	true	false	unknown
ib.anycast.adnxs.com	37.252.173.38	true	false	high
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	3.126.56.137	true	false	unknown
dsp.nrich.ai	51.255.68.171	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.118.23	true	false	unknown
aorta.clickagy.com	52.7.51.190	true	false	high
banners.livepartners.com	104.18.27.183	true	false	high
pug-lhr.pubmatic.com	185.64.190.80	true	false	high
eu-u.openx.net	35.244.159.8	true	false	high
ads.thescottishsun.co.uk	216.137.37.105	true	false	unknown
nyidt.adsafeprotected.com	104.244.36.20	true	false	high
eu-eb2.3lift.com	13.248.245.213	true	false	high
pbs.ozpr.net	34.255.141.211	true	false	unknown
k.p-n.io	35.157.91.125	true	false	unknown
tpop-api.twitter.com	104.244.42.2	true	false	high
widget.par.vip.prod.criteo.com	178.250.0.163	true	false	high
ads.the-sun.com	216.137.37.29	true	false	unknown
sharedid-prodloadbalancer-1791472238.us-west-2.elb.amazonaws.com	34.216.100.107	true	false	high
cm.g.doubleclick.net	142.250.180.130	true	false	high
eu-tlx.3lift.com	35.156.28.35	true	false	high
ds-pr-bh.ybp.gysm.yahoodns.net	212.82.100.176	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV82ODY2NDNlMi00YjgyLTQwNjctOTg1Zi01YjdmNDMyNTg1Njc=&gdpr=0&gdpr_consent=	false	high
https://match.prod.bidr.io/cookie-sync/adx?bee_sync_partners=sas%2Cpp%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1	false	unknown
https://rtb.gumgum.com/usync/amzns2s?r=https%3A%2F%2Faax-eu.amazon-adsystem.com%2Fs%2Fecm3%3Fex%3Dgg.com%26id%3D&gdpr=0	false	high
https://rtb.gumgum.com/usersync?b=mmh&i=882f6109-b2fa-4300-aff5-862397ab821f&gdpr=0&gdpr_consent=	false	high
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=3lift.com&id=10544094648115599701	false	high
https://acdn.adnxs.com/dmp/async_usersync.html	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://abs.twimg.com/responsive-web/client-web/bundle.UserFollowLists.8576e8b5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.NewTweetsPill.68ab1ee5.	aa9cb5178c926fed_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.id.47871d25.js	f3ab1e1292e135fa_1.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Collection.dc391b75.js.	025aac4eef124560_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/loader.WideLayout.66f93b85.js	f3ab1e1292e135fa_1.0.dr, 161f7544731c605c_0.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/en.50afce55.js.map	40c912d229579eac_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.AnimatedReaction.be3678e5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.countries-uk.e3e7b725.js	f3ab1e1292e135fa_1.0.dr	false		high
https://rtb.gumgum.com/usersync?b=ttd&i=4533807a-c37f-4659-958a-882b2153d9e3&t=1630617640	Current Session.0.dr	false		high
http://sync.1rx.io/usersync2/rubicon	135a9e73b7a29232_0.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.RichTextCompose.9807aa5	3319999741a0cfd3_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.SettingsTransparency.1e29d965.jsHP	6791b5722c185dfb_0.0.dr	false		high
https://rubiconcm.digitaleast.mobi/usersync/rubicon.gif	135a9e73b7a29232_0.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	940a66db08c695da_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.Newsletters.680a95a5.jsH	370e9ec328648c18_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.QuoteTweetActivity.a7dcf7a5.jsaD	67d8d7beadb2b33c_1.0.dr	false		high
http://um2.eqads.com/um/rc	135a9e73b7a29232_0.0.dr	false		high
https://www.the-sun.com/assets/client/embeds~6ed1eda6.cdda24d87cec14b5801b.1.js	21d6e3a4c6e4c4b0_0.0.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ta.3c37d3d5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://ssum-sec.casalemedia.com/usermatch?gdpr=0&gdpr_consent=undefined&d=https://www.thesun.co.uk/	Current Session.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ga.7f4a0535.js	f3ab1e1292e135fa_1.0.dr	false		high
https://rtb.gumgum.com/usersync?b=ttd&i=4533807a-c37f-4659-958a-882b2153d9e3&t=1630617643	Current Session.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.countries-th.46f08a05.js	f3ab1e1292e135fa_1.0.dr	false		high
https://api.primecaster.net/adlogue/api/sync/rubicon	135a9e73b7a29232_0.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.EditBirthdate.4d561d65.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.zh.6f278aa5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.AudioSpaceLoggedIn.81744505.jsHP	6dbb8ab9e452b30c_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.cf855765.jsH	7fd90b1fef32fa10_0.0.dr	false		high
https://sync.1rx.io/usersync2/rubicon	135a9e73b7a29232_0.0.dr	false		high
http://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp	135a9e73b7a29232_0.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.fil.f98b1ef5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://s.amazon-adsystem.com/x/1c2fd14bf310b6aff649	135a9e73b7a29232_0.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.NetworkInstrument.9f748	3904d96f421495de_1.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.QuoteTweetActivity.a7dc	67d8d7beadb2b33c_1.0.dr, 67d8d7beadb2b33c_0.0.dr	false		high
https://upload.twitter.com	af47be93e4c33dc6_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.ConversationParticipants.b3c5b3b5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.Search.3077ddf5.js	f3ab1e1292e135fa_1.0.dr, dafae7486bbb9431_1.0.dr	false		high
https://twitter.com/i/communities/	b071f523622ac435_1.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.SettingsBizProfile.0edd	05ba0695c8cc3180_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.ConnectTab.49362975.jsHP	2ff610a3bc840d72_0.0.dr	false		high
https://rtb.gumgum.com/usersync?b=atm&i=YQmy_wADWhdGyAAC&gdpr=0&gdpr_consent=	Current Session.0.dr	false		high
https://www.thesun.co.uk/assets/client/vendors~app_es6~d939e436.8e7cddc6850f02bb7f85.1.js	4279be2944aec971_0.0.dr	false	Avira URL Cloud: safe	unknown
https://abs.twimg.com/responsive-web/client-web/bundle.NotMyAccount.04f01e25.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.pt.5552e9b5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.AudioSpaceDetail.ef731d	67a81dc3937135f0_1.0.dr, 67a81dc3937135f0_0.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.SettingsTransparency.1e	6791b5722c185dfb_0.0.dr	false		high
https://twitter.com/sw.js	f3ab1e1292e135fa_1.0.dr	false		high
https://cards-frame.twitter.com/i/cards/tfw/v1/uc/	03dda55e1ca0ca49_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/loader.AudioDock.cf855765.jsa	7fd90b1fef32fa10_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.countries-pl.04b812b5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/polyfills.6a7b2b85.jsHP	3dbaf3da45a61199_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.UserFollowLists.8576e8b5.jsH	98a5d15a066394f0_0.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AppModules.49936285.js.	ab2f7e36a3f418c5_1.0.dr	false		high
https://aax-eu.amazon-adsystem.com/s/x/1c2fd14bf310b6aff649?gdpr=0	Current Session.0.dr	false		high
https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-ad	af47be93e4c33dc6_0.0.dr, b071f523622ac435_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.EditPinned.79deeea5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.framerateTracking.c5be5dc5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://www.the-sun.com/#main-content0News	Current Session.0.dr	false	Avira URL Cloud: safe	unknown
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.AudioContextVoiceMedia.	6143b69e002f0fb8_1.0.dr	false		high
https://www.the-sun.com/assets/client/vendor~2977f88b.0b964addc523d71e914c.1.jsaD	af38e7dc15184b8e_0.0.dr	false	Avira URL Cloud: safe	unknown
http://pixel.rubiconproject.com/exchange/sync.php?p=a9eu	135a9e73b7a29232_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.OAuth.9352a225.js	f3ab1e1292e135fa_1.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.Notifications.ce262aa5.	af1d33226d4f5da5_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.ConversationParticipants.b3c5b3b5.js(window.w	b240670c25bb93ef_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.NetworkInstrument.9f748dc5.jsa	3904d96f421495de_1.0.dr	false		high
https://cmp.cdn.thesun.co.uk/wrapperMessagingWithoutDetection.js	950bace1670d32a4_0.0.dr	false	Avira URL Cloud: safe	unknown
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.6e421a	8c6e4336c021a009_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.Report.386d7815.jsHP	4ce6653d4e799813_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/loader.personalizationData.13d430c5.jsHP	01da856fc5ed49d5_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/sharedCore.0ce26fa5.jsH	b071f523622ac435_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.Topics.11acc6a5.jsH	9fdcbfb57a4ec68c_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.countries-ga.e2a50885.js	f3ab1e1292e135fa_1.0.dr	false		high
https://www.thesun.co.uk/assets/client/gallery~21833f8f.d24bc5604baff847ed7d.1.js	b53d5bec1e237f09_0.0.dr	false	Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com(	Current Session.0.dr	false	Avira URL Cloud: safe	low
https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.hi.8e8cc735.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.ta.ee280b85.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/loaders.video.PlayerHls14.ff730af5.jsHP	3ff2fb06614d2b8d_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.emoji.sv.cfcda2a5.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/loaders.video.VideoPlayerDefaultUI.3146cd35.jsH	2133b9d70bc343da_0.0.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=twitter_dbm&google_redir=https://analytics.twitter.com	03dda55e1ca0ca49_1.0.dr	false		high
https://pbs.twimg.com/lex/placeholder_live_nomargin.png	03dda55e1ca0ca49_1.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.HomeTimeline.bc556035.j	abf65c94526f878c_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.MultiAccount.58303e05.jsaD	ac5d7d74abe46619_1.0.dr	false		high
http://pixel.mathtag.com/sync/img?redir=http%3A%2F%2Ftoken.rubiconproject.com%2Ftoken%3Fpid%3D35912%	135a9e73b7a29232_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.EmojiPicker.35e26135.js	f3ab1e1292e135fa_1.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.ConnectTab.49362975.jsH	2ff610a3bc840d72_0.0.dr	false		high
https://doubleclick.net/	adba8338fc9be233_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/bundle.Collection.dc391b75.jsaD	025aac4eef124560_1.0.dr	false		high
https://js-sec.indexww.com(	Current Session.0.dr	false	Avira URL Cloud: safe	low
https://play.google.com	f382e6c0-6408-4709-94c4-5a047c404f13.tmp.1.dr	false		high
https://sync.mathtag.com/sync/img?mt_exid=9&redir=https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3	135a9e73b7a29232_0.0.dr	false		high
https://twitter.app.link/interstitial_switch_to_app	03dda55e1ca0ca49_1.0.dr	false		high
https://ton.twitter.com/responsive-web-internal/sourcemaps/client-web/bundle.AdvancedSearch.24538845	4e5fdd3ee2425470_1.0.dr, 4e5fdd3ee2425470_0.0.dr	false		high
https://abs.twimg.com/responsive-web/client-web/ondemand.countries-en.b894fec5.js	f3ab1e1292e135fa_1.0.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
185.86.137.121	ssbsync-eqx.smartadserver.com	France	201081	SMARTADSERVERFR	false
199.232.136.158	video.twitter.map.fastly.net	United States	54113	FASTLYUS	false
216.137.37.21	d2hpee1akynyiw.cloudfront.net	United States	8014	BATELNETBS	false
54.230.152.146	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
216.52.2.39	unknown	United States	29791	VOXEL-DOT-NETUS	false
216.52.2.30	oeu.vap.lijit.com	United States	29791	VOXEL-DOT-NETUS	false
157.240.17.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
185.33.221.13	unknown	Netherlands	29990	ASN-APPNEXUS	false
185.64.190.80	pug-lhr.pubmatic.com	United Kingdom	62713	AS-PUBMATICUS	false
18.208.43.12	a1d62eaab24bc49d6bb06f376c8bbc41-1682425342.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
185.29.135.227	unknown	United Kingdom	30419	MEDIAMATH-INCUS	false
216.239.36.21	pac.thesun.co.uk	United States	15169	GOOGLEUS	false
185.29.132.246	tags.mathtag.com	United Kingdom	30419	MEDIAMATH-INCUS	false
185.29.132.245	pixel-origin.mathtag.com	United Kingdom	30419	MEDIAMATH-INCUS	false
18.195.240.234	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.227.248.159	pixel.tapad.com	United States	15169	GOOGLEUS	false
52.46.133.124	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
216.58.209.38	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.205.77	accounts.google.com	United States	15169	GOOGLEUS	false
178.250.0.163	widget.par.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
178.250.0.165	bidder.par.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
54.192.66.121	d1gzewjq6luteh.cloudfront.net	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.95.123.167	unknown	United States	16509	AMAZON-02US	false
216.137.37.29	ads.the-sun.com	United States	8014	BATELNETBS	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
142.250.180.130	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
66.155.71.149	pixel-a.sitescout.com	Canada	13768	COGECO-PEER1CA	false
52.21.104.248	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
185.255.84.151	hb-api-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
178.250.0.130	static.par.vip.prod.criteo.net	France	44788	ASN-CRITEO-EUROPEFR	false
178.250.2.146	gum.am5.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
157.240.17.15	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
52.16.114.37	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.64.189.110	pug22000nf.pubmatic.com	United Kingdom	62713	AS-PUBMATICUS	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
185.64.189.115	pugm22000nf.pubmatic.com	United Kingdom	62713	AS-PUBMATICUS	false
152.199.21.141	cs510.wpc.edgecastcdn.net	United States	15133	EDGECASTUS	false
216.58.212.174	clients.l.google.com	United States	15169	GOOGLEUS	false
34.216.100.107	sharedid-prodloadbalancer-1791472238.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
213.155.156.164	d5p.de17a.com	European Union	1299	TELIANETTeliaCarrierEU	false
142.250.184.33	pagead-googlehosted.l.google.com	United States	15169	GOOGLEUS	false
142.250.184.34	googleads4.g.doubleclick.net	United States	15169	GOOGLEUS	false
178.250.2.131	bidder.am5.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
54.144.144.142	unknown	United States	14618	AMAZON-AESUS	false
34.255.141.211	pbs.ozpr.net	United States	16509	AMAZON-02US	false
52.95.116.38	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
157.240.20.35	facebook.com	United States	32934	FACEBOOKUS	false
178.250.2.80	3pd.am5.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
104.244.42.129	twitter.com	United States	13414	TWITTERUS	false
52.7.51.190	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
212.82.100.176	ds-pr-bh.ybp.gysm.yahoodns.net	United Kingdom	34010	YAHOO-IRDGB	false
216.58.208.129	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
108.177.126.155	unknown	United States	15169	GOOGLEUS	false
108.174.11.85	pop-edc2.mix.linkedin.com	United States	14413	LINKEDINUS	false
70.42.32.127	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
37.252.173.38	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
3.121.111.29	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
108.177.126.157	stats.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.180.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.99	www.google.de	United States	15169	GOOGLEUS	false
52.205.167.202	p1.parsely.com	United States	14618	AMAZON-AESUS	false
142.250.184.194	partnerad.l.doubleclick.net	United States	15169	GOOGLEUS	false
18.195.155.181	cs.emxdgt.com	United States	16509	AMAZON-02US	false
216.137.37.74	cdn.p-n.io	United States	8014	BATELNETBS	false
213.19.147.44	sync.1rx.io	United Kingdom	26120	RHYTHMONEUS	false
35.156.28.35	eu-tlx.3lift.com	United States	16509	AMAZON-02US	false
52.208.210.171	rtb.gumgum.com	United States	16509	AMAZON-02US	false
159.253.128.183	um.simpli.fi	Netherlands	36351	SOFTLAYERUS	false
3.126.56.137	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
104.26.6.155	cdn.brandmetrics.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.66	pagead46.l.doubleclick.net	United States	15169	GOOGLEUS	false
91.228.74.189	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
13.248.242.197	a97adde81b00f2ca4.awsglobalaccelerator.com	United States	16509	AMAZON-02US	false
52.17.245.120	match.prod.bidr.io	United States	16509	AMAZON-02US	false
185.184.8.65	creativecdn.com	Poland	204995	RTB-HOUSE-AMSNL	false
35.244.159.8	eu-u.openx.net	United States	15169	GOOGLEUS	false
54.192.66.111	media.p-n.io	United States	14618	AMAZON-AESUS	false
85.114.159.93	dsp.adfarm1.adition.com	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
35.241.9.51	88a66e5c-8fe8-48af-9c6c-3ec3f4983aad.prmutv.co	United States	15169	GOOGLEUS	false
162.55.6.210	generic-2.lb.lm5v.com	United States	35893	ACPCA	false
205.251.222.122	unknown	United States	16509	AMAZON-02US	false
99.81.129.224	firewall-external-2134955858.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.192.249.156	elb-aws-fr-oba-294519942.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.230.107.62	cdn.parsely.com	United States	16509	AMAZON-02US	false
35.157.91.125	k.p-n.io	United States	16509	AMAZON-02US	false
104.19.149.54	cdn.permutive.com	United States	13335	CLOUDFLARENETUS	false
216.137.37.56	prebid.the-ozone-project.com	United States	8014	BATELNETBS	false
151.101.1.108	prod.appnexus.map.fastly.net	United States	54113	FASTLYUS	false
216.137.37.55	ads.thesun.co.uk	United States	8014	BATELNETBS	false
142.250.184.78	ampcid.google.com	United States	15169	GOOGLEUS	false
104.244.42.2	tpop-api.twitter.com	United States	13414	TWITTERUS	false
104.244.42.69	t.co	United States	13414	TWITTERUS	false
34.107.254.252	api.permutive.com	United States	15169	GOOGLEUS	false
151.101.1.27	newrelic.map.fastly.net	United States	54113	FASTLYUS	false
54.192.66.31	cdn-259.privacy-mgmt.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	458969
Start date:	03.08.2021
Start time:	23:18:48
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 0s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.the-sun.com
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@82/861@318/100
Cookbook Comments:	Adjust boot time Enable AMSI Browse: https://www.the-sun.com/#main-content Browse: https://www.facebook.com/thesun/ Browse: https://twitter.com/thesun?lang=en-gb Browse: https://www.thesun.co.uk/ Browse: http://www.thescottishsun.co.uk/
Warnings:	Show All Exclude process from analysis (whitelisted): audiodg.exe, backgroundTaskHost.exe, SgrmBroker.exe, svchost.exe TCP Packets have been reduced to 100 Created / dropped Files have been reduced to 100 Excluded IPs from analysis (whitelisted): 13.88.21.125, 168.61.161.212, 142.250.184.110, 74.125.8.72, 209.85.226.8, 23.211.5.34, 142.250.180.163, 23.201.249.131, 216.58.205.74, 151.101.2.217, 151.101.66.217, 151.101.130.217, 151.101.194.217, 23.211.4.12, 69.173.144.140, 69.173.144.143, 69.173.144.141, 216.58.209.48, 142.250.184.48, 142.250.184.80, 142.250.184.112, 216.58.205.80, 172.217.21.80, 142.250.180.80, 142.250.180.112, 142.250.180.144, 142.250.180.176, 216.58.206.48, 216.58.208.144, 13.107.4.50, 142.250.180.162, 142.250.180.129, 40.88.32.150, 2.20.19.105, 204.79.197.200, 13.107.21.200, 69.173.144.138, 69.173.144.139, 69.173.144.165, 151.101.2.49, 151.101.66.49, 151.101.130.49, 151.101.194.49, 216.58.206.42, 216.58.206.74, 216.58.208.138, 216.58.208.170, 216.58.209.42, 142.250.184.42, 142.250.184.74, 142.250.184.106, 216.58.198.10, 172.217.21.74, 142.250.180.74, 142.250.180.106, 142.250.180.138, 142.250.180.170, 23.211.4.86, 192.124.249.31, 192.124.249.36, 192.124.249.41, 23.211.5.91, 46.228.164.11, 37.157.6.251, 37.157.2.234, 37.157.6.245, 37.157.4.40, 37.157.4.39, 37.157.3.28, 37.157.2.235, 37.157.3.30, 23.50.106.187, 162.247.243.147, 162.247.243.146, 51.103.5.159, 69.173.144.154, 69.173.144.152, 69.173.144.155, 69.173.144.153, 23.201.253.145, 23.50.106.99, 23.211.5.112, 23.201.251.131, 193.0.160.128, 34.253.137.48, 23.211.5.164, 89.207.16.204, 37.157.6.242, 37.157.2.237, 37.157.4.41, 37.157.4.23, 37.157.4.28, 37.157.2.236, 37.157.6.246, 37.157.6.252, 216.58.208.131, 216.58.209.35, 23.201.251.54, 23.211.4.217, 89.207.16.201, 74.125.8.70, 63.215.202.140, 216.58.198.34, 63.251.232.170, 23.37.239.230, 89.207.16.137, 142.250.184.35, 40.126.31.8, 20.190.159.138, 40.126.31.141, 40.126.31.137, 40.126.31.139, 40.126.31.4, 40.126.31.1, 20.190.159.134, 20.50.102.62, 74.125.8.102, 20.82.209.183, 80.67.82.235, 80.67.82.211 Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, ssl.gstatic.com, r3---sn-5hneknee.gvt1.com, storage.googleapis.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, track-eu.adformnet.akadns.net, e9957.b.akamaiedge.net, ssum.casalemedia.com.edgekey.net, skypedataprdcoleus15.cloudapp.net, e9126.x.akamaiedge.net, afp.dotomi.weighted.com.akadns.net, au-bg-shim.trafficmanager.net, dual-a-0001.a-msedge.net, a-emea.rfihub.com.akadns.net, pagead2.googlesyndication.com, au.au-msedge.net, c.bing.com, rtb.adgrx.com.tech.akadns.net, eus.rubiconproject.com.edgekey.net, e6603.g.akamaiedge.net, dsum-sec.casalemedia.com.edgekey.net, wildcard.owneriq.net.edgekey.net, h2.shared.global.fastly.net, e11294.g.akamaiedge.net, e8091.a.akamaiedge.net, c-bing-com.a-0001.a-msedge.net, r1---sn-5hneknee.gvt1.com, track.adformnet.akadns.net, htlb.casalemedia.com.edgekey.net, tagged-by.rubiconproject.net.akadns.net, r3.sn-5hnekn76.gvt1.com, wildcard.evidon.com.edgekey.net, e8960.e2.akamaiedge.net, wns.notify.trafficmanager.net, ade.googlesyndication.com, digicertwc.rubiconproject.com.edgekey.net, arc.trafficmanager.net, prod.fs.microsoft.com.akadns.net, iris-de-prod-azsc-neu.northeurope.cloudapp.azure.com, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, k3.shared.global.fastly.net, afdap.au.au-msedge.net, login.msa.msidentity.com, r3---sn-5hnekn76.gvt1.com, dsum.casalemedia.com.edgekey.net, e9533.l.akamaiedge.net, ssum-sec.casalemedia.com.edgekey.net, cdn.o6.edgekey.net, skypedataprdcolwus15.cloudapp.net, tls12.newrelic.com.cdn.cloudflare.net, usersync-geo-global.usersync-prod-sas.akadns.net, www.tm.lg.prod.aadmsa.akadns.net, tags.tiqcdn.com.edgekey.net, c2da806ea99afb5f9ddace5ecbe10f6b.safeframe.googlesyndication.com, r1.sn-5hne6nzs.gvt1.com, 3235dbb71b5f447d11fe832bfec59903.safeframe.googlesyndication.com, login.live.com, audownload.windowsupdate.nsatc.net, update.googleapis.com, watson.telemetry.microsoft.com, elasticShed.au.au-msedge.net, www.gstatic.com, r3.sn-5hneknee.gvt1.com, www.google-analytics.com, sync.tidaltv.com.akadns.net, e8960.b.akamaiedge.net, fs.microsoft.com, content-autofill.googleapis.com, r1.sn-5hneknee.gvt1.com, skypedataprdcolcus17.cloudapp.net, www.tm.a.prd.aadg.akadns.net, www.googleapis.com, e8037.i.akamaiedge.net, 9bd84d3d4aaff0394f7f6fbd582fe715.safeframe.googlesyndication.com, r1---sn-5hne6nzs.gvt1.com, js-sec.casalemedia.com.edgekey.net, blobcollector.events.data.trafficmanager.net, gdcrl.godaddy.com.akadns.net, cs2-wac.apr-8315.edgecastdns.net, pixel.rubiconproject.net.akadns.net, wildcard.betrad.com.edgekey.net, 7446e271aa22d9ff546186d64e702ce4.safeframe.googlesyndication.com, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, e5048.dsca.akamaiedge.net, arc.msn.com, pixel.mathtag.com.edgekey.net, pixel-eu.rubiconproject.net.akadns.net, e8037.g.akamaiedge.net, redirector.gvt1.com, pubmatic.edgekey.net, connextra.com.edgekey.net, a.rfihub.com.akadns.net, a.teads.tv.edgekey.net, img-prod-cms-rt-microsoft-com.akamaized.net, client.wns.windows.com, e6791.b.akamaiedge.net, e12841.d.akamaiedge.net, sync-euir.tidaltv.com.akadns.net, ctldl.windowsupdate.com, c-0001.c-msedge.net, e1723.g.akamaiedge.net, ad.turn.com.akadns.net, tpc.googlesyndication.com, e5413.g.akamaiedge.net, au.c-0001.c-msedge.net, beacon-fra2.rubiconproject.net.akadns.net Not all processes where analyzed, report is missing behavior information Report size exceeded maximum capacity and may have missing behavior information. Report size exceeded maximum capacity and may have missing network information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtOpenFile calls found. Report size getting too big, too many NtQueryVolumeInformationFile calls found. Report size getting too big, too many NtSetInformationFile calls found. Report size getting too big, too many NtWriteFile calls found. Report size getting too big, too many NtWriteVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
23:19:45	API Interceptor	3x Sleep call for process: chrome.exe modified

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Microsoft Cabinet archive data, 61020 bytes, 1 file
Category:	dropped
Size (bytes):	122040
Entropy (8bit):	7.994886945086499
Encrypted:	true
SSDEEP:	3072:0tdeYPiuWAVtlLBGbtdeYPiuWAVtlLBGm:0rec7VDBGbrec7VDBGm
MD5:	516136E560C1392A28EDFA1A957050D7
SHA1:	BBDF208E48EFC052D332255EF84184BFC946BF5F
SHA-256:	4F812F7C8163C50FE75F441AC6797E18D02B8B66895BC94D0E1153FE24FADEFE
SHA-512:	8F25750E9014F7576E5C81E1A3DE605BB29839A38F0E60D58AB79E034ED1847D9E88A427A834BCA95BF7C4627197AC1194D5A487E0D5E5F88B95E46C4574A425
Malicious:	false
Reputation:	low
Preview:	MSCF....\.......,...................I........l.........R.q .authroot.stl.N....5..CK..8T....c_.d....A.K....=.D.eWI..r."Y...."i..,.=.l.D.....3...3WW.......y...9..w..D.yM10....`.0.e.._.'..a0xN....)F.C..t.z.,.O20.1``L.....m?H..C..X>Oc..q.....%.!^v%<...O...-..@/.......H.J.W...... T...Fp..2.\|$....._Y..Y`&..s.1........s.{..,.":o}9.......%._.xWS.K..4"9......q.G:.........a.H.y.. ..r...q./6.p.;.`=.Dwj......!......s).B..y.......A.!W.........D!s0..!"X...l.....D0...........Ba...Z.0.o..l.3.v..W1F hSp.S)@.....'Z..QW...G...G.G.y+.x...aa`.3..X&4E..N...._O..<X.......K...xm..+M...O.H...)............o..~4.6.......p.`Bt.(..V.N.!.p.C>..%.ySXY.>.`..f\|....'^K`\..e......j/..\|..)..&i...wEj.w...o..r<.$.....C.....}.x...L..&..).r..\...>....v........7...^..L!.$..'m...,.....7F$..~..S.6$S.-y....\|.!.....x...~k...Q/.w.e...h.[...9<x...Q.x.][}_%Z..K.).3..'....M.6QkJ.N........Y..Q.n.[.(.... ...Bg..33..[...S..[... .Z..<i.-.]...po.k.,...X6......y3^.t[.Dw.]ts. R..L..`..ut_F....

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A4B782275DC1682E4DC39E697A49B151 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1236
Entropy (8bit):	7.139560346502974
Encrypted:	false
SSDEEP:	24:Ky1nita8l2Ymnit2FwlZ7lPo6h7s3aV9unDa1VywVAVwVm7XqyzwsoQc3:KWnita8anitxzlX43vadGVvqyvRS
MD5:	96C25031BC0DC35CFBA723731E1B4140
SHA1:	27AC9369FAF25207BB2627CEFACCBE4EF9C319B8
SHA-256:	973A41276FFD01E027A2AAD49E34C37846D3E976FF6A620B6712E33832041AA6
SHA-512:	42C5B22334CD08C727FDEC4ACA8DF6EC645AFA8DD7FC278D26A2C800C81D7CFF86FC107E6D7F28F1A8E4FAF0216FD4D2A9AF22D69714CA9099E457D1B2D5188A
Malicious:	false
Reputation:	low
Preview:	0...0...........0....H........0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, Inc.110/..U...(Go Daddy Root Certificate Authority - G20...110503070000Z..310503070000Z0..1.0...U....US1.0...U....Arizona1.0...U....Scottsdale1.0...U....GoDaddy.com, Inc.1-0+..U...$http://certs.godaddy.com/repository/1301..U...Go Daddy Secure Certificate Authority - G20.."0....H.............0.............v..b.0d...l...b../.>e..b.<R...EKU.xkc.b...il.....L.E3....+..a.yW....?0<]G.....7.AQ..KT.(....08..&.fGcm.q&G.8GS.F......E...q.o....0:yO_LG...[..`;..C..3N..'O.%.......t.dW..DU.-:>....2...d..:P.J..y3.. .....9.i.lcR.w...t....PT5KiN.;.I.....R..........0...0...U.......0....0...U...........0...U......@.'..4.0.3..l..,..0...U.#..0...:....g(.....An .....04..+........(0&0$..+.....0...http://ocsp.godaddy.com/05..U....0,0.(.&.$http://crl.godaddy.com/gdroot-g2.crl0F..U. .?0=0;..U. .0301..+........%https://certs.godaddy.com/repository/0....H..............~l...8....K.._O..l>

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.1489416832616137
Encrypted:	false
SSDEEP:	12:wd25kPlE99SNxAhUe0euO5kPlE99SNxAhUe0et:wd25kPcUQUfeF5kPcUQUfet
MD5:	65259784790317D9C2D9D8BEF0A81823
SHA1:	98DC1AB92D2AD82F0901739A405DA9BB635290BA
SHA-256:	70577E9A5AA21B9745D1EF09D123BD6B96A3B190B7660B6AFF2C2060A929D07A
SHA-512:	E5D3C4B0173028ADC8F7A04057E3E57D644FFEA866D467035C72550946021B114DB02E6634485B5965EC422788C9F42D2D56E6F6E7B1AD14003193BDB86869D5
Malicious:	false
Reputation:	low
Preview:	p...... ......../.R.....(....................................................... .........T'._......$...........\...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.6.5.4.2.7.7.5.f.d.7.1.:.0."...p...... ...............(....................................................... .........T'._......$...........\...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.6.5.4.2.7.7.5.f.d.7.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A4B782275DC1682E4DC39E697A49B151 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	262
Entropy (8bit):	2.951445990650081
Encrypted:	false
SSDEEP:	3:kkFklf059l1fllXlE/jb8V/Hll/XlRDr3wIL9CQBkYcQlA+iYl+XylRBUXl5lrSU:kKj3lSsjgIcQGQuf1K7OlGm
MD5:	0BE10B76050189F1BD45DC98E179CAE2
SHA1:	01C31408053F6879E6DFE64C2AF03A63A03F99E1
SHA-256:	797A2375DBA8F75FB26143B9DC7C7FFFCFA373DB6C1B262B15CDE4FD8A621CE0
SHA-512:	58CC314D438BD893431F8B61C990B30544E1F4BAB6D856D924FDAB382855EF03FF584E24280249E350E9612CC1B3B101A5A98F388BF22FD10DB819A380DA7473
Malicious:	false
Reputation:	low
Preview:	p...... ....j...........(....................................................... ........Fe[.c......(...............h.t.t.p.:././.c.e.r.t.i.f.i.c.a.t.e.s...g.o.d.a.d.d.y...c.o.m./.r.e.p.o.s.i.t.o.r.y./.g.d.i.g.2...c.r.t...".4.d.4.-.5.c.4.f.9.c.0.9.d.7.a.4.0."...

C:\Users\user\AppData\Local\Google\Chrome\User Data\1dd3d0e0-e28b-4926-b9b6-67fab11eb711.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	165870
Entropy (8bit):	6.049594871546763
Encrypted:	false
SSDEEP:	3072:bGaYTJQE+mugy9+QV1T7IRwdfLSNP1FcbXafIB0u1GOJmA3iuRC:6xaV+QfT7GSmhDaqfIlUOoSiuRC
MD5:	D7AB1CF962D9064C33A467042B3E193B
SHA1:	E0B40901E9120D6FE9C4FB503BCF047461A22F7D
SHA-256:	BD467E40122CAA5712DAB8EEB8A2E1B44B35ECC488849B5BF104020B3969F50D
SHA-512:	45D6DDD1FED379E9FB732D5AC56D7A1BC07D48F0DCE0BAC817B7188756EFD3F0077C5D2BF10D356C57852DD7EC52776BDED8FE6DBA217CE5947C48EEB58306AC
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.628057980809172e+12,"network":1.628025582e+12,"ticks":6524395778.0,"uncertainty":4389617.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016991039"},"plugins":{"metadata":{"adobe-flash-player":{"dis

C:\Users\user\AppData\Local\Google\Chrome\User Data\3311b065-6931-4ab9-9d57-57ad6386fc46.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	96680
Entropy (8bit):	3.749928062681885
Encrypted:	false
SSDEEP:	384:2rjYgKNvBFpSEVFHs/Ngr5vcY3zQWPHKfG3ar1Koe5xz+GG5r1omh2ZaQMMPOSWK:/Wq1ZC+jr8eH/gEekHH+sKicMJd
MD5:	01962E80B0AD6D7FEDB1A7F5CE67FD5E
SHA1:	3C71B4699608381C3CA53942FB8B0EF59C404A71
SHA-256:	A14A40B92CBEEE43CB4F542F1551626D1C2DABCFD95FBE053A1585D3A6360F5F
SHA-512:	AE93B9ABC08760677F514DD276FCC8A963182F1404C8D44911351DE03E9EB2642CB688B9F3DCEB814298839D895B65B7F1DF2B92F805C9C75BBC46E19DCA47C3
Malicious:	false
Reputation:	low
Preview:	.y.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....A8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\45db9dae-c609-4564-846b-ecf40da4403f.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	174337
Entropy (8bit):	6.079378728084194
Encrypted:	false
SSDEEP:	3072:yx8GaYTJQE+mugy9+QV1T7IRwdfLSNP1FcbXafIB0u1GOJmA3iuRC:w9xaV+QfT7GSmhDaqfIlUOoSiuRC
MD5:	2607EB5F10139432E66B16643BCDCBAC
SHA1:	D634E0B3ED1A532F214983171A0C980F256CB385
SHA-256:	77A40A591E1F6840CC7DF2D5E62CDD5AD8BE0E99AB98AE286D78DF9EE204A3C6
SHA-512:	E06A3D66B005EF9C203BC119616B19093507DFD517E4984CA32C97FFE4122A742D95BEB76510BD4F016711B3937E7364B3000E886FB44F95FCE5606B4E33ED38
Malicious:	false
Reputation:	low
Preview:	{"browser":{"last_redirect_origin":"","shortcut_migration_version":"85.0.4183.121"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"legacy":{"profile":{"name":{"migrated":true}}},"network_time":{"network_time_mapping":{"local":1.628057980809172e+12,"network":1.628025582e+12,"ticks":6524395778.0,"uncertainty":4389617.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAABL95WKt94zTZq03WydzHLcAAAAAAIAAAAAABBmAAAAAQAAIAAAABAL2tyan+lsWtxhoUVdUYrYiwg8iJkppNr2ZbBFie9UAAAAAA6AAAAAAgAAIAAAABDv4gjLq1dOS7lkRG21YVXojnHhsRhNbP8/D1zs78mXMAAAAB045Od5v4BxiFP4bdRYJjDXn4W2fxYqQj2xfYeAnS1vCL4JXAsdfljw4oXIE4R7l0AAAABlt36FqChftM9b7EtaPw98XRX5Y944rq1WsGWcOPFyXOajfBL3GXBUhMXghJbDGb5WCu+JEdxaxLLxaYPp4zeP"},"password_manager":{"os_password_blank":true,"os_password_last_changed":"13245951016607996"},"plugins":{"metadata":{"adobe-flash-player":{"dis

C:\Users\user\AppData\Local\Google\Chrome\User Data\71723df9-3c08-41bf-8742-5a8295f62fa9.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	97400
Entropy (8bit):	3.7501812113397515
Encrypted:	false
SSDEEP:	384:0rjYgKNvBFpSEVFHs/Ngr5vcY3zQWPHKfG3ar1Koe5xz+GG5r1omhtHZaQMMPOSk:lWq1ZC+Qr8eH/gEekHH+sKicMJC
MD5:	221B77587A3745FE77BEB0BEB36B8859
SHA1:	603B770961D815721CC8D2B7678D277B4385C357
SHA-256:	720D2FDF8C740645C6ACDBA68B87054438AB1CCF639011BC8BFC94F9F1B56B69
SHA-512:	FFB6600F8427BEF96C303259F4CF8DD8CF8FC1892F04769CE1D19400F23A497E9E890D27988AF67F2C156412E6B69A287233E6CDA0274C7C83D7AEF1F45A5054
Malicious:	false
Reputation:	low
Preview:	t\|.................C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L..P!...[)...%.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .o.f.f.i.c.e.\.o.f.f.i.c.e.1.6.\.......g.r.o.o.v.e.e.x...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .2.0.1.6......M.i.c.r.o.s.o.f.t. .O.n.e.D.r.i.v.e. .f.o.r. .B.u.s.i.n.e.s.s. .E.x.t.e.n.s.i.o.n.s.....1.6...0...4.7.1.1...1.0.0.0.....*...C.:.\.P.R.O.G.R.A.~.1.\.M.I.C.R.O.S.~.1.\.O.f.f.i.c.e.1.6.\.G.R.O.O.V.E.E.X...D.L.L.....M.i.c.r.o.s.o.f.t. .C.o.r.p.o.r.a.t.i.o.n....A8.D...C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.C.o.m.m.o.n. .F.i.l.e.s.\.M.i.c.r.o.s.o.f.t. .S.h.a.r.e.d.\.O.F.F.I.C.E.1.6.\.m.s.o.s.h.e.x.t...d.l.l..@.....U/...%.c.o.m.m.o.n.p.r.o.g.r.a.m.f.i.l.e.s.%.\.m.i.c.r.o.s.o.f.t. .s.h.a.r.e.d.\.o.f.f.i.c.e.1.6.\.......m.s.o.s.h.e.x.t...d.l.l.....M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e.)...M.i.c.r.o.s.o.f.t. .O.f.f.i.c.e. .S.h.e.l.l. .E.x.t.e.n.s.i.o.n. .H.a.n.d.l.e.r.s.......1.6...0...4.2.6.6...1.0.0.1.....D...C.:.\.P.r.o.g.r.a.m.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.254162526001658
Encrypted:	false
SSDEEP:	3:FkXft0xE1G1mstft0xE1G1mstft0xE1n:+ftIE1G1mkftIE1G1mkftIE1n
MD5:	E9224A19341F2979669144B01332DF59
SHA1:	F7F760C7104457DF463306A7F7BAE0142EFCEB5B
SHA-256:	47DD519C226D23F203ACAE0EC44DF9BB6208828E24F726E1602EA52F63C3E2BE
SHA-512:	4184302DEB5009D767FECFC150F580DD57D5CF9CF3BFEB7E52C9F3340E5E6499251B9F0DFF37F0454411FED9046880E0A9204312D021294256372C916B8155AC
Malicious:	false
Reputation:	low
Preview:	sdPC....................s}.....M..2.!..%sdPC....................s}.....M..2.!..%sdPC....................s}.....M..2.!..%

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\079d3324-5631-40fd-9ad6-b8ca3a46dbe2.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5018
Entropy (8bit):	4.845405926228514
Encrypted:	false
SSDEEP:	96:JTnOCXGDHa+zUS4O567Ox6lx4jNURa06i4ycqFNFIv+JZ+ie4WTM6g+GrlNLGTMD:JTnOCXGDHa+zUS4O567S6lx4jNURP6iT
MD5:	A7EC9EE2F25B6583E579CA3BF8ADBCC1
SHA1:	FD831B60DF58DA4589BDF3B9B650430E92AE2502
SHA-256:	FA9684B50E57D14A455F8E6BDECBA9C628DB4378CF1037945714098E494DA23A
SHA-512:	9F391DC299B4D6AC5C33B3BC1D81E89BE1DC96465F8618970A64B95D089720674D3302201326BD159CEAEFB180907EF406B37C717FF08602B01D5EC21BE1BC41
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://www.google.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://fonts.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://www.googleapis.com","supports_spdy":true},{"isolation":[],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13275123581090627","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"alternative_se

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0a8751ce-08ca-49f9-ad20-1ae8f9d2c4c3.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5188
Entropy (8bit):	4.98508816089267
Encrypted:	false
SSDEEP:	96:nbC6XX9pcKIbok0JCKL8nkJ1CbOTQVuwn:nbCU9pcY4KykJa
MD5:	D8FD1EC8B643CC36A278011E59170289
SHA1:	3837475D4831873395D3CF522B5D3CC2B8BF3078
SHA-256:	17E4F6C3C2E49FD6189D0361A23E66AD16A75D9644F671E10431F6C17BE8F220
SHA-512:	E96FCD015585E9150B3F3E206D9C1CA2728EDAFDCECCEB9D2EA007B755CDA4EFF44A750A2E0E68131E22E506E3726C65813685D1901AEB9B0F7F8B2A7C78E9FE
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13272531577993087","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\26786171-3e82-415b-92bb-bd7ec6f6dd92.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	16745
Entropy (8bit):	5.57743960461969
Encrypted:	false
SSDEEP:	384:DEMt7LlmHXY1kXqKf/pUZNCgVLH2HfDDrU7kKlS47:HLlwY1kXqKf/pUZNCgVLH2HfHrU7BlSE
MD5:	EB8EDE37A8D89AAB056A3E2378618C70
SHA1:	EE1E02731EF957F0AFDE4EA52B9F72746711D511
SHA-256:	A77B4A09C1AE6ED03918E13887676DF91A862E2B58E197D274F70789B844D6E2
SHA-512:	1F5DE495065908D54A8DBD336241B416B4E01485F87F2CEBCE8D855051D6381EB35619F8E760B13A0F743401707515859B19B17E92C054F37A37A592DB8759D3
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13272531577686665","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\292470b9-d519-4f4e-8ada-e2f6cb6478aa.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5805
Entropy (8bit):	5.174884189764493
Encrypted:	false
SSDEEP:	96:nbC7HW9Ff0cKIHok0JCKL8nkJ1CbOTQVuwn:nbC69Ff0cw4KykJa
MD5:	9EDCD0C16A9AE1813D6A35425C9880D0
SHA1:	16535CD2CD750D73B886C772593A7B65432A8477
SHA-256:	94817DA0DF911242B5E31AD10C07D247BAD78BCA84B66C7787A8C02AE2033D97
SHA-512:	3552D8B75804FDE43FFD923F2138EA301CD84155FC7FDA51DA39D0312431BC3177E926D16C71B50D15A6B5ECC98AE1534AB3E462B7C1D4EE3937406C27BDBBD9
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13272531577993087","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2c0b8b3c-1ea2-4ae2-a70a-e4acb18a35d4.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	22595
Entropy (8bit):	5.53604016994613
Encrypted:	false
SSDEEP:	384:DEMtCLlmHXY1kXqKf/pUZNCgVLH2HfDDrUcHGqnT3LKkKHS4l:mLlwY1kXqKf/pUZNCgVLH2HfHrUQGqn0
MD5:	EC56775DB39305A9547DA32D1BD958A3
SHA1:	A3FDAFEAE2812010CFD47003FF263EFAAC009584
SHA-256:	39B392823791F9284194D62AD8944F09BB8CCF6068020574089770291DB5B4C4
SHA-512:	D600026C399AAA3489BFED105E869A151C3035B019ED9E2C51505E86C09CF93553DC160C9A62D111E75F5F4E5BBA49824F23615095075A3D79B40EF2F72FB1A0
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13272531577686665","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\337a9e14-6255-44fe-b666-89612439a518.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4889
Entropy (8bit):	5.607026922794652
Encrypted:	false
SSDEEP:	96:MUdUMUZUy6LU7eUJsUoUUsUlEU7UAJyUQAMUj8UpUrIUMYUO3KUFusUxUPUIU9Pb:MUdUMUZUy6LU7eUJsUoUUsUSU7URU5MK
MD5:	8A56FD2A66B838DEA47311A5F62A2438
SHA1:	70FABDCDC36530B5C8E14269D2128C12DEC70B63
SHA-256:	01134369AD2668050082EA38C754A5A1802BE70C18F2865FC1BD8692707C8DFF
SHA-512:	13FF208FA945AB75671499C2267AEEF8FCAF43CA7FFA21D018DE2004717AE6EDD5AE1ABE880C89D78D5EF3EF36D4ED03E40056A7FA0354AD84DDE642185A59C4
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1659594107.486629,"host":"AYn/0RUuCA+dtfJ8evM2C7EY0gUuiaPUwyQjHng621k=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058107.486682},{"expiry":1630650103.605488,"host":"Dg14fIaciUHGX6Lc+OnYmaNiAA/ADiwumtIyPrC3d6U=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1628058103.605494},{"expiry":1659594055.810266,"host":"HGgWuImG7OKoFG+SVLyzGa2Q/Pc92nvPSMCzgHENRl0=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058055.810272},{"expiry":1643610055.87318,"host":"HS0xQK8RrrSZ/KdSgKIC7bLU+xijlimr9JuWvTPbfkE=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058055.873186},{"expiry":1659594106.523086,"host":"I/1WWzGC3ORCzIiApYPQWeHZLoi50Q2mdlTs65nBysI=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058106.523092},{"expiry":1638944460.423199,"host":"LAZkYS46RVRcFiZAzmUJrz6TJHBd4nwE6VxPWfPLYHs=","mode":"force-https","sts_include_subdomains":true,"sts_o

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4cae5d0f-3059-4a93-83fb-d0d7c4cd75a2.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5891
Entropy (8bit):	5.602329635283768
Encrypted:	false
SSDEEP:	96:mUhUMUgUyi+U1LUweUJsUoUURUiIsUHbU/UcU5sZUzyUxAMUj8UDU/IUMYUO3KUD:mUhUMUgUyi+U1LUweUJsUoUURUiTU7Uw
MD5:	6E7038D68CF310FAED250E386A0A01C1
SHA1:	05DABEFBDF0B117C2D56E113548219CCD57425A6
SHA-256:	0871E3548B3C5E7F0D1E7EF8B4B0FEBC0AACE8DECFB87C560628DD50BE2CAE9D
SHA-512:	B74AF3251B36B5296AB21D3BA38B2E6EB8DAADE3937B5318E03F563FF8E327B51CB0A5A68BAC0DE07078CE95B3090D421C348D0AD2D70C07A236897164B38F59
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1659594108.944186,"host":"AYn/0RUuCA+dtfJ8evM2C7EY0gUuiaPUwyQjHng621k=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058108.944191},{"expiry":1630650112.450847,"host":"Dg14fIaciUHGX6Lc+OnYmaNiAA/ADiwumtIyPrC3d6U=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1628058112.450853},{"expiry":1659594119.985803,"host":"HGgWuImG7OKoFG+SVLyzGa2Q/Pc92nvPSMCzgHENRl0=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058119.985808},{"expiry":1643610055.87318,"host":"HS0xQK8RrrSZ/KdSgKIC7bLU+xijlimr9JuWvTPbfkE=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058055.873186},{"expiry":1659594122.530186,"host":"Hi4bEdMq563Qsqn4sVyUls/uVk7U80IxMa3wyWVUqWU=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058122.53019},{"expiry":1659594107.793718,"host":"I/1WWzGC3ORCzIiApYPQWeHZLoi50Q2mdlTs65nBysI=","mode":"force-https","sts_include_subdomains":false,"sts_o

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\525807b4-990d-4a58-b6af-e7662b9a8d42.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2712
Entropy (8bit):	5.614244279797206
Encrypted:	false
SSDEEP:	48:YI6UH5Uyy6UUhTpEU3U3qAMU3UrIUM9seKUexvwUGqPeUer2UefDwUKUeRUy0UB:EUZUyXUU9OU3UaAMU3UrIUM93KULU9Pa
MD5:	83FB01ADCFB689CC357F8B71E4EE446C
SHA1:	FD81F2D29AB15BDAC349C1A6CBEDF85447E69DD7
SHA-256:	AB1087C888CCA042ADD26C6570017E2BA6BF2DE716C373B8F461B67322E08928
SHA-512:	85A157428CD36352805A18166E404000B3A0FCCC35CBB400E73F9A7F3E06E343C4F832DFD54B4831ED51FC6611EAF714E65DB785C25EE4A3DA2758B26B1446BF
Malicious:	false
Reputation:	low
Preview:	{"expect_ct":[],"sts":[{"expiry":1659594055.810266,"host":"HGgWuImG7OKoFG+SVLyzGa2Q/Pc92nvPSMCzgHENRl0=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058055.810272},{"expiry":1643610055.87318,"host":"HS0xQK8RrrSZ/KdSgKIC7bLU+xijlimr9JuWvTPbfkE=","mode":"force-https","sts_include_subdomains":false,"sts_observed":1628058055.873186},{"expiry":1633014077.350499,"host":"OuKlWsMW1dkkbI1X/oi6o0Y95ZNSWnSoeaIXAEYPlv4=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1601478077.350503},{"expiry":1659593983.797168,"host":"TZmujbl93Yt3JI8wZ4X/zjkA0WFNGNW44A+o7h4YyHw=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1628057983.797174},{"expiry":1643609984.022761,"host":"YGNo13DyurOd9jjmfXDsZOOuJRMEHMRKh6juvvDPJ3w=","mode":"force-https","sts_include_subdomains":true,"sts_observed":1628057984.022767},{"expiry":1659594048.565167,"host":"dwZ58ZRCSu+lLJoaX2YsDo5GzCPunJS8dYKiwKLst2M=","mode":"force-https","sts_include_subdomains":false,"sts_ob

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\759e8e22-c030-4b1e-a899-6fc617473ccf.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	22596
Entropy (8bit):	5.535953060037474
Encrypted:	false
SSDEEP:	384:DEMtCLlmHXY1kXqKf/pUZNCgVLH2HfDDrUcHG1nT3LKkK02S4f:mLlwY1kXqKf/pUZNCgVLH2HfHrUQG1nE
MD5:	848B948E54A62E14A9AEC28C63197E7D
SHA1:	D3FE68DA29A9026C8822C29C356B6536EBB2961D
SHA-256:	9E0C3853FAE821A3A07C6C335956D74EABB47382DF29E47FBA9DA3BE4ACC2B72
SHA-512:	8A1985D416FD8E0D4F3C728698156AD5D7D71E043A2268B48B18064BAC38CDB34867DBAD66ED09583648181E03D7032AC91CB112DFF9DBCBA6B1B54DC4BBBDCE
Malicious:	false
Reputation:	low
Preview:	{"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"manifest_permissions":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"from_bookmark":false,"from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"install_time":"13272531577686665","location":5,"manifest":{"app":{"launch":{"web_url":"https://chrome.google.com/webstore"},"urls":["https://chrome.google.com/webstore"]},"description":"Discover great apps, games, extensions and themes for Google Chrome.","icons":{"128":"webstore_icon_128.png","16":"webstore_icon_16.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtl3tO0osjuzRsf6xtD2SKxPlTfuoy7AWoObysitBPvH5fE1NaAA1/2JkPWkVDhdLBWLaIBPYeXbzlHp3y4Vv/4XG+aN5qFE3z+1RU/NqkzVYHtIpVScf3DjTYtKVL66mzVGijSoAIwbFCC3LpGdaoe6Q1rSRDp76wR6jjFzsYwQIDAQAB","name":"Web Store","pe

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\80609a2c-494e-4ad3-ac9b-3da5bbf70119.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	10049
Entropy (8bit):	4.841507402314244
Encrypted:	false
SSDEEP:	192:sgNTOCXGDHzUS+54xDTijko8+3ZU67Oa6lxN6itRcqPF5+XT6ieNFWp6VFq647w6:sgNTOCXG7AS+54xDmIo8+3ZU67Oa6lxO
MD5:	1152CE6FCB7617C5DE95FB2ECC8EBB94
SHA1:	D997221EC72E80B2BB0355C3AA91772B74155970
SHA-256:	F8040CBA63839D26EA55FC995561DE140F0F88221FEC84ECEF8918159DB3AF8D
SHA-512:	13E9ABA254F28DBDBE61CD769ABE9443F23B76EECC3B2AFC676109487B24E04F7331CCEDE3E9D0BC2F7B3FC18B3E973D40C055A578FD1E2A7837426CDAF93E32
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"broken_alternative_services":[{"broken_count":2,"broken_until":"1628058347","host":"securepubads.g.doubleclick.net","isolation":[],"port":443,"protocol_str":"quic"}],"servers":[{"isolation":[],"server":"https://www.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://ssl.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://fonts.gstatic.com","supports_spdy":true},{"isolation":[],"server":"https://apis.google.com","supports_spdy":true},{"isolation":[],"server":"https://play.google.com","supports_spdy":true},{"isolation":[],"server":"https://ogs.google.com","supports_spdy":true},{"isolation":[],"server":"https://dns.google","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13275123581090627","port":443,"protocol_str":"quic"}],"isolation":[],"server":"https://accounts.google.com","supports_spdy":true},{"alternative_service":[{"advertised_versions":[50],"expiration":"13275123581099491",

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9893cc78-7800-436f-98f3-3f9196928c2a.tmp Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	5798
Entropy (8bit):	5.175608808404828
Encrypted:	false
SSDEEP:	96:nbC6HW9Ff0cKIUok0JCKL8nkJ1CbOTQVuwn:nbCL9Ff0cZ4KykJa
MD5:	6EFD1C7ABDC54B9B84BEE58F7FA2AF4E
SHA1:	24CD1A9D4FCA564866F2E7FB4A34BF282E98AA45
SHA-256:	27A132041D1845694A59449DA6B1F9E20061AFD2EF07ED3BB4EB6E063D846651
SHA-512:	F4E4A7CDAAE170128143D83AE84BC887BC34D0E3D277CD9A8CF276DF6E6C9F76B9B9525B0B16F9B2A6AAD271D4268F66D3D5F75FF8FC13513BF2481493CF3117
Malicious:	false
Reputation:	low
Preview:	{"account_id_migration_state":2,"account_tracker_service_last_update":"13272531577993087","alternate_error_pages":{"backup":true},"announcement_notification_service_first_run_time":"13245951485614034","autocomplete":{"retention_policy_last_version":85},"autofill":{"orphan_rows_removed":true},"browser":{"default_browser_infobar_last_declined":"13245951692116406","has_seen_welcome_page":true,"navi_onboard_group":"","should_reset_check_default_browser":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"countryid_at_install":21843,"data_reduction":{"daily_original_length":["0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","0","7355378"],"daily_received_length":["0","0","0","0","0","0","0","

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	331
Entropy (8bit):	5.23109897511916
Encrypted:	false
SSDEEP:	6:m1bM+q2PWXp+N23iKKdK9RXXTZIFUtpIGZmwPILMVkwOWXp+N23iKKdK9RXX5LJ:Yo+va5Kk7XT2FUtpIG/PI4V5f5Kk7XVJ
MD5:	5E95990D4F04CA01839424DED2AB17FD
SHA1:	65459D8D2C0C048BA05AD329AF1FC96409881520
SHA-256:	98447CEAF2D9822824D57E5F96965781FAF6504B8F2D4EB970844FBEF8A07E1B
SHA-512:	9F6D7778078F740AA74E4E76B00367CDBE39AF1775E29683A8D6D755939E42377722AE51BBD6CAF79E83941ACA2B675D7C062535DB4EC357CC8E3FA43CFFDE83
Malicious:	false
Reputation:	low
Preview:	2021/08/03-23:19:56.007 6ac Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/MANIFEST-000001.2021/08/03-23:19:56.009 6ac Recovering log #3.2021/08/03-23:19:56.010 6ac Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.oldNT (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	331
Entropy (8bit):	5.23109897511916
Encrypted:	false
SSDEEP:	6:m1bM+q2PWXp+N23iKKdK9RXXTZIFUtpIGZmwPILMVkwOWXp+N23iKKdK9RXX5LJ:Yo+va5Kk7XT2FUtpIG/PI4V5f5Kk7XVJ
MD5:	5E95990D4F04CA01839424DED2AB17FD
SHA1:	65459D8D2C0C048BA05AD329AF1FC96409881520
SHA-256:	98447CEAF2D9822824D57E5F96965781FAF6504B8F2D4EB970844FBEF8A07E1B
SHA-512:	9F6D7778078F740AA74E4E76B00367CDBE39AF1775E29683A8D6D755939E42377722AE51BBD6CAF79E83941ACA2B675D7C062535DB4EC357CC8E3FA43CFFDE83
Malicious:	false
Reputation:	low
Preview:	2021/08/03-23:19:56.007 6ac Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/MANIFEST-000001.2021/08/03-23:19:56.009 6ac Recovering log #3.2021/08/03-23:19:56.010 6ac Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.254296082293157
Encrypted:	false
SSDEEP:	6:m1QAEpM+q2PWXp+N23iKKdKyDZIFUtpIQ7dZZmwPIQZMVkwOWXp+N23iKKdKyJLJ:YQi+va5Kk02FUtpIwv/PIdV5f5KkWJ
MD5:	7099A1F7AC89175B0A1B40287447B606
SHA1:	8558E20059BE379F9EAC51413D9B19F8FA6907AF
SHA-256:	59F3DC1245CB6B615E2FDB2C33379E197CC10471E444134514BCBF882CF91430
SHA-512:	5785CDE93CE28CFEB8DED96DC14ADA72B27D1D6407E23FD75F27E8DEC73D2075BB4FFC2E963C054A2F700EF686F5468CAB1306BB23C4C5AAA1148EDB0C76CBD0
Malicious:	false
Reputation:	low
Preview:	2021/08/03-23:19:55.995 6ac Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/MANIFEST-000001.2021/08/03-23:19:55.996 6ac Recovering log #3.2021/08/03-23:19:55.997 6ac Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy) Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.254296082293157
Encrypted:	false
SSDEEP:	6:m1QAEpM+q2PWXp+N23iKKdKyDZIFUtpIQ7dZZmwPIQZMVkwOWXp+N23iKKdKyJLJ:YQi+va5Kk02FUtpIwv/PIdV5f5KkWJ
MD5:	7099A1F7AC89175B0A1B40287447B606
SHA1:	8558E20059BE379F9EAC51413D9B19F8FA6907AF
SHA-256:	59F3DC1245CB6B615E2FDB2C33379E197CC10471E444134514BCBF882CF91430
SHA-512:	5785CDE93CE28CFEB8DED96DC14ADA72B27D1D6407E23FD75F27E8DEC73D2075BB4FFC2E963C054A2F700EF686F5468CAB1306BB23C4C5AAA1148EDB0C76CBD0
Malicious:	false
Reputation:	low
Preview:	2021/08/03-23:19:55.995 6ac Reusing MANIFEST C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/MANIFEST-000001.2021/08/03-23:19:55.996 6ac Recovering log #3.2021/08/03-23:19:55.997 6ac Reusing old log C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase/000003.log .

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\03752c5191f33af7_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1849
Entropy (8bit):	5.690184445091684
Encrypted:	false
SSDEEP:	24:gIpNh4ZqAdmbFAp3WQICNfyIpNspxEgCCM1hklJuFCoZsrVNm7/YMBzAcCEJp:ppZAdmbFAtWyp0EdCM1hkYOI/FEcpz
MD5:	C18FC8DED0BF88C609B24FF95DCC11E2
SHA1:	CFB16DBB5D96019D9EE5A6654C4FFBA120BDA24F
SHA-256:	E31F9359D1777FDFC913F51256FE592F60F7FA29AAB4A570179DDD59DD6D8906
SHA-512:	F18FBDC3AE9B85255BD77C5C1D6C8C05B145FBDDDA4DFF682417EDE964BD25C31BC15C1F38C9A20DB08B844768144AE308F911A117DAAB0C5C10EE4A7AFBEC3B
Malicious:	false
Reputation:	low
Preview:	0\r..m......i..........._keyhttps://www.the-sun.com/assets/client/vendor~d939e436.650a1aac8feb0edee4f6.1.js .https://the-sun.com/.5B.L'/.....................6<.\.d.....(r.N.....Ry..kP+Di..A..Eo......,e`..........A..Eo...................5B.L'/...................'..8....O.........2.k.............................(S....`.....,L`......Qc.U......window....Q.`........webpackJsonpEs6...Qbf..0....push.....`......L`.......`......Ma........`.....0..b........J...C`j...C`....C`....C`.....(S.......Pc........push.165aL........D..n4.............@......@......@......@......@...... ...........d..............@.......Qb........165.E.@.-....\P.a.....O...https://www.the-sun.com/assets/client/vendor~d939e436.650a1aac8feb0edee4f6.1.js.a........D`....D`L...D`.....9....`....&...&.....D&.(S.....Pc........push.181a.....2.......................@......@......@......@. . ..@.!.!..@.!."..@."."..@.".#..@.#.$..@.$.$..@.%.%..@.&.I..@.J.N..@.N.Q..@.Q.R..@.R.S..@.S.S..@.S.S..@.S.T..@.T.T..@.U.U..@.U.V..@.V.V..@.V.V..

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\055b4bc2e028ebe4_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	243
Entropy (8bit):	5.7278454378776065
Encrypted:	false
SSDEEP:	6:m8CPYEQEBM0MrZ45FufK4PK9Y5WkaW7lhK6t:1CbbW00Z45Fu6qW4N
MD5:	07FF31F6FB9891FCBE330BE3FA27E534
SHA1:	931D20A1F2C5AE15D1A49D6A3F5E50A768B7941A
SHA-256:	CBF14F1BFF66C105899A027123E572EC1A53F7D11341F1A347EDDF42FDCBAE03
SHA-512:	53541E671A63335472DA6A2C530C6AB1D0AFE758D90DCA73614C4C97726D4AB35C4292CFECF06D23719415B0C3788DE7790CD9CA38386FE3330C066517D93B06
Malicious:	false
Reputation:	low
Preview:	0\r..m......o....3......_keyhttps://cdn.p-n.io/pushly-sdk.min.js?domain_key=KtL4100XTLLEgUtYDKtO1stRdc1XNxnLUb5i .https://thesun.co.uk/K...L'/............. .......+...wN.....C..A....._...F4J4.k..A..Eo......Qaky.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\058d7b862a264e14_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	236
Entropy (8bit):	5.622233621330567
Encrypted:	false
SSDEEP:	6:m/OYAWGUJ3IcVYolNYyFvNYfKyJY3hu9CO8ZK6t:MdhVYonYWvWsu9CB
MD5:	A539737D33939D81CF871365659909B3
SHA1:	3646DCFE3D67413F3E65A64C0E91CF460638F4E0
SHA-256:	699D4776DB6A6C2D4CCE52443D51F08BC80F417046ED3EA76FDF20B3D92ADF25
SHA-512:	AB73586AFAF85C5759135369C280CB08443FF20C2CDC2A8EC55E1A786D255FB8A5AD4C578D4F875A28412700E52E97EE284EB93A43C837FC4BD79C0BCB0B0BB7
Malicious:	false
Reputation:	low
Preview:	0\r..m......h.....R....._keyhttps://connect.facebook.net/signals/config/752905198150451?v=2.9.44&r=stable .https://thesun.co.uk/1...L'/.............!.........;.....I.~7.7.r........;...Nu.A..Eo......u............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\06aef5aad22b5e4a_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	255
Entropy (8bit):	5.590761616672422
Encrypted:	false
SSDEEP:	6:m/XYGLP5RLOL2GFUwodHiVqhh6C7mGGo4bDK6t:OvGuJciNmGGou1
MD5:	F5A6A7BEDD18522D10D4163EF1BC2F49
SHA1:	8B6A31528E6B90365E007D7DBB5CF264D13A08F4
SHA-256:	B5CE2FC24A85F688349F13852437A5FC31548911A26708F4F4F94EBFF4F184B5
SHA-512:	D3B06637C95D0EE4A112A5B42CAE8679F1C93CF3B496C520CAB8D349F4273B1CB5CE0513C45731355A527E8121D81C7DDB766A5EAE077A2CC61208FAE9136048
Malicious:	false
Reputation:	low
Preview:	0\r..m......{....WM$...._keyhttps://www.thescottishsun.co.uk/assets/client/vendor~0928ebd2.091cf791a62a3a3ef167.1.js .https://thescottishsun.co.uk/t0..L'/.............`]......j=....84...Z.\|...ybs..<.B\.C%.A..Eo.......3c..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\075421d8bf77e62f_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.607534020225684
Encrypted:	false
SSDEEP:	6:ml6EYj018IrAMUJABIHy6N+BgHIzxABIHLKkpMgy8sVnzAvw43//hK6t:8P1thULDsaHInvJ0zAp7
MD5:	F0278736C6CBBB6206A3ACA92ECB3A87
SHA1:	65206C00E33933797284385F480E02B1845B3F6D
SHA-256:	05899BA3DB2D18D6A974BC9EF2B4579AC4D2EBED70341FAE9C2F4990B61EB019
SHA-512:	CFD85F09799E22C5B2D7858F4B5447C1C27B8442D1CFDC0B03D5EC29B203FC4CB5DAE14FAEC10ECFF5A3B0235338941EEE0BE2E0738C85E6D9DD48DD0ADA333C
Malicious:	false
Reputation:	low
Preview:	0\r..m..........g.ah...._keyhttps://abs.twimg.com/responsive-web/client-web/shared~loaders.video.VideoPlayerDefaultUI~loader.MediaPreviewVideoPlayer~loaders.video.VideoPlayerEventsUI.41b39275.js .https://twitter.com/.v;.L'/.............q.......*.1Q.A..p.W...uvfV.9..m..).}0..A..Eo.......2...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0787abb26b1d80da_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	256
Entropy (8bit):	5.591590027703758
Encrypted:	false
SSDEEP:	6:mGrYGLP5RLfeI1TLL0odH+v6xe+BersRK6t:pf5JAgr
MD5:	817A05064B60065A9002F7465412B02B
SHA1:	A561DE76A683F5E08670C136BB18B6A050227005
SHA-256:	5D32E9DF5926A56B94AF4FD9C73BF28EB738B88954710B5983598FE84CD0B86B
SHA-512:	AE34FDF91535CE72AFC8DE67521791F935CC07469A0B6B99C43FA3FA2061A1AB97CE088DD7633C6D2EF772625E44DAE790118A7A6377D16B45B9AFD04CC5D087
Malicious:	false
Reputation:	low
Preview:	0\r..m......\|....kR....._keyhttps://www.thescottishsun.co.uk/assets/client/app_es6~a0fc626b.95783255cd6f505cf9b1.1.js .https://thescottishsun.co.uk/R/..L'/.............W]........RO..s.....)..[`.X...QaC........A..Eo......W.K..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\079c10d432a1ccd2_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	224
Entropy (8bit):	5.4432634466759495
Encrypted:	false
SSDEEP:	3:m+lU0/lA8RzYjbiqcdlQLy8yR0U9279KVJ3uAhflHCOctlAHV22Ez1kb5mU2llpD:me/XYvEdCy8yf4w+Am/t6HV23/nhK6t
MD5:	E778F2F6B210A9583480040CC3F260E4
SHA1:	2E113AE0221E6EAE1DE37621897467390B8D07FD
SHA-256:	EC91B4C85DCB6B522203A04FCAA6150FE9B2F6EC18C2C238272F6E847B2FF3DE
SHA-512:	3377B3773406EE271758A158DA984E08124B50767F645C89A91F24EF9BB2F6BEB56B519353422F9121796EDC1924A3796E0DB9260712F401685112687303FE80
Malicious:	false
Reputation:	low
Preview:	0\r..m......\...4......_keyhttps://ssl.gstatic.com/accounts/o/1031810748-idpiframe.js .https://accounts.google.com/.-..L'/.............+.......8....m.".1S:..8.8.1..g8.!.nz.9~..A..Eo......z............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\085f3a4bee25b7c6_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	273
Entropy (8bit):	5.6219871362211356
Encrypted:	false
SSDEEP:	6:m4PXYj018IrAMUF/1nQ6OSXaM0AnygKh947S/bK6t:B31thUpNQOXPygKCiN
MD5:	416A8CF3EF46B0C8FF9942485C78D317
SHA1:	10753846A288069DA846AD35F7976690F352FD47
SHA-256:	D0C1FE8BEAAED7842AAAEE40B4C18B161B4F9AF734573F0765D732FE392B4243
SHA-512:	AA3187B64B9658E51A8CAC9C6207BD522B7DE54A0A43709C56A3CA0E66ACB82141BC573705935F7822FDC6F03B4C006C256897C5AD8CE0946902CFE718B3EF08
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~bundle.Explore~bundle.UserLists.3aae6315.js .https://twitter.com/}...L'/......................C..v.{ .'>.xO!1.ro.)..[.0.6.6j.A..Eo........9..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\08b34eeabe34fb08_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.174064663203759
Encrypted:	false
SSDEEP:	96:CVQ27EHBx/T2W4cphjUhZlvv6vTJ3IsOe3:CvoHBdT2W48hG7oJ3GC
MD5:	93EF8230A9F8449621FABF6E562A6CF1
SHA1:	3A39F4CFD4E3F554C33CF74511C996798F6D92C3
SHA-256:	01DA0CF5CDA48C172BB6BDD4A8CFE50744A1869EDB85EF83550BDB43154F3207
SHA-512:	72FC6AC4B5ED4EBCDD2BFC19127D8127C6675C3250C0FFE93489B1637CD9B7DF5A553AEBEC9F0C054EC5BC32A5C55C059705C728209865072DA26B98ECBA2810
Malicious:	false
Reputation:	low
Preview:	0\r..m............2r...._keyhttps://tags.tiqcdn.com/utag/newsinternational/thesun.com.web.2019/prod/utag.59.js?utv=ut4.46.202010271359 .https://the-sun.com/..G.L'/...................o...$(.......RS.`....J.[..pX...A..Eo.......[A.........A..Eo....................G.L'/...................'.......O.........n...............................(S....`.....8L`......Qc.U......window....Qb.l......dm......a..........QcJe._....AjaxData.....`....].(S........5.a...............a.............Pd........dm.AjaxEventa........IE.@.-....xP.......j...https://tags.tiqcdn.com/utag/newsinternational/thesun.com.web.2019/prod/utag.59.js?utv=ut4.46.202010271359..a........D`....D`....D`.....$...`....&...&..a.&.(S....`.....HL` ....0Rc..................R..`....I`....Da..........Qb&&.'....utag..Qb.?.....o.....Qc........sender....Qb.......ut....Qc..I.....loader...(S.......Pc........u.loadera....3.... ..f.......................%P...I..Q...A.d........................a..........QbR.......view`......Qb.-u.....ev....Qd

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\095c36b8d98eac0e_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.573700695612757
Encrypted:	false
SSDEEP:	6:mU5YGLPfKpLOLQC3r+OKVofK9vYn+kkIDV1z2AnJhK6t:p4K514JkkOVz
MD5:	E418A6178CB580BDA84C5EF161CBF6F4
SHA1:	967EB3546EBFD9014DCFB7A2160252435523995B
SHA-256:	8881876CF7FAF0B28024544118FB814C66A33A41176DDF2F487805CB33509270
SHA-512:	7EEE4CEC8B83E17E636FC5B7D318FE862BD2F2EF1331724B3A615A8750654F597B6BF90F6A3E52DD64AC4F089E21A57EDF29D860C0040CE00F8A76C62BC5C0D3
Malicious:	false
Reputation:	low
Preview:	0\r..m......k....6. ...._keyhttps://www.thesun.co.uk/assets/client/vendor~690b702c.a727453a291c929cfb44.1.js .https://thesun.co.uk/.b..L'/.............i!........K!$.saM.5..!....]....4.y...f.9.A..Eo......j.g.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0aff68fde7b68100_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	4514
Entropy (8bit):	5.430073268935243
Encrypted:	false
SSDEEP:	96:WoYBfFCIKP7Yh9MU2z1erUvwjuD/4YKQbsY:Q3C/TGax5ojuDQYKlY
MD5:	9BEEF86FB46B67D566F1BA5E6E4BEECB
SHA1:	45E9507AED8C45665391D2AAFB1BC661AE52A845
SHA-256:	670699741FB8390E3A2F7A949FA38A1AE3496A135A9A6299794D4511E2E70FF9
SHA-512:	F7781E70C8DAE3CD38283FD4F4756A9D98FD7011948A177063895B10E8D29F17CC5BAA33CB4B8AA1FEC1F842B8556ADC0A2523F1B98C2541520414364C291866
Malicious:	false
Reputation:	low
Preview:	0\r..m......j...kN......_keyhttps://www.the-sun.com/assets/client/app_es6~a0fc626b.95783255cd6f505cf9b1.1.js .https://the-sun.com/#.B.L'/......................9`/..2,I.iB.fG................A..Eo..................A..Eo................................'.+Q....O.................................................(S.....`......L`@.....Qc.U......window....Q.`........webpackJsonpEs6...Qbf..0....push.....`......L`.......`......Ma....6...`........bp...........C`....C`....C`....C`....C`....C` ...C`4...C`"...C`$...C`(...C`J...C`f...C`....C`D...C`....C`....C``...C`....C`....C`....C`b...C`....C`l...C`....C`....C`....C`.....(S.......Pc........push.102aL...?.....Qb........102.E.@.-....\P.a.....P...https://www.the-sun.com/assets/client/app_es6~a0fc626b.95783255cd6f505cf9b1.1.jsa........D`....D`Z...D`..........`....&...&.....D&.(S.......Pc........push.111aL........L..q=.............@......@......@......@......@......@..*.....................Qb........111.E....d........@............D&.(S.....Pc........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0b36250bce72c6ef_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	5.641239673001411
Encrypted:	false
SSDEEP:	6:mfGYGLPfKpL0tdAs4/S0ofKwWYBiNnZ16Gh7ChZK6t:K0oB/S1HTunZxN6
MD5:	24B45F4F964544AB02ACA6F11FF4F03A
SHA1:	586DCECB6DE876D14B472DD88D3E8B02C281F70A
SHA-256:	AF096900A7EF28B8C5E4723B2EE008E10138B11858BEC9873C585965C9EA5A4C
SHA-512:	68DDADA42602B58EABE36D5BB891DC92140D208028489CC677A669470475B751073B82A6A24C2797C902F4BD06FA3009466D0872F0EE0A09B62921215158B95A
Malicious:	false
Reputation:	low
Preview:	0\r..m......l......?...._keyhttps://www.thesun.co.uk/assets/client/app_es6~493df0b3.9e31b258a46f4f83c7f3.1.js .https://thesun.co.uk/YY..L'/..............!........q.(.Ms...I.o..k.[ ....S......A..Eo...................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0b9c5f7767cd3e2e_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.587120692949204
Encrypted:	false
SSDEEP:	6:mUEYGLPfKpLOLSXGMWcofKco+Y9/E/FrF7m40thK6t:pJbXGxtoIW
MD5:	A7501DE978402013899A061C73157B99
SHA1:	D0A21B534016282242F0322D4FE01B697AB66DC7
SHA-256:	96B7D9B5FACFA6804A79361674C0D8D533F4232FAAF3DB0A7DB560711DE601AE
SHA-512:	C76B7E3A252BE667769FE44489EFC020ED9DCCF01640FA12DF3D5D5301EA9E465AE543337503DFC88CF8E035A7104E79A1B5F9F97EC0297E119BE1A74CEFB109
Malicious:	false
Reputation:	low
Preview:	0\r..m......k...23K....._keyhttps://www.thesun.co.uk/assets/client/vendor~85de788a.de30a10599707345ce6b.1.js .https://thesun.co.uk/.{..L'/.............O!......EV.'..i..6.}_..D....`'Y_...;._5..A..Eo......e............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0c6b634f8b6b29ee_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	255
Entropy (8bit):	5.55768117548736
Encrypted:	false
SSDEEP:	6:m+YGLP5RLOLteyklRzSKVodHab6aapvASrT4N/ZK6t:/pN3IkyTu/T
MD5:	32B1042BC812807379890B6AA0D36218
SHA1:	B944B62D8C9A3B2D460AE871438F3960FC0B8AEA
SHA-256:	C117FAD96B8A8DE6BA31A59140EE54347EFDBBD4E0FF5E1BF5F134BFB1DD9A3A
SHA-512:	8C3C71B458A027EC7563BA145647A12BE451A36A6FE75BC6DFDD5F8E2BA01C7A8B855DD5B2D7E4BE8DC1C3A57510C8038922EA00F14F2AEE42B39DC8E98B1821
Malicious:	false
Reputation:	low
Preview:	0\r..m......{....r....._keyhttps://www.thescottishsun.co.uk/assets/client/vendor~d939e436.650a1aac8feb0edee4f6.1.js .https://thescottishsun.co.uk/...L'/..............]......g.K]i.U....{..w @.....Q..w...S..A..Eo.......,t9.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0cd926cdd0e23afe_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	274
Entropy (8bit):	5.568111798064481
Encrypted:	false
SSDEEP:	6:mWnY0/21JGK3XZ/H2SSJTRRYdHbPf+un9ANthK6t:hfehJ/H2S83YZpn9Et7
MD5:	5A43ABED08D7C00D0040B0D7BA515051
SHA1:	1A3DFA4B26A51ACC77EF185151107FCF366D0365
SHA-256:	5260EB56F038BAB9C641167BD755E2E9C15FA54075A48382541DB8D3AC1B1DE2
SHA-512:	B1243FF185C712D2C135ED7521E28663E8F3F67998C536BEEACEC9C69DC3B2516CE918F1604E88BBD44B744B28507D5DB29484A8D4B26B0994E40955D2F7484C
Malicious:	false
Reputation:	low
Preview:	0\r..m..........?.QF...._keyhttps://tags.tiqcdn.com/utag/newsinternational/thesun.scottish.web.2/prod/utag.3.js?utv=ut4.42.202106011239 .https://thescottishsun.co.uk/....L'/..............b...........ZUY.$qsx..\..rF.N.....c.%..A..Eo......j............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0e76419ccaf45f6c_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	232
Entropy (8bit):	5.580957141646162
Encrypted:	false
SSDEEP:	6:mgiPVYj018IrAWQzGM76zY9Ou2vy4K4FzK6t:Xil1tBQzF/2q4H
MD5:	BDB68BEBBADA540C09780002BD83D09D
SHA1:	BC2BC4693598508B1E00C17102103A6324A7D7DB
SHA-256:	1EAAC891CFB864CB9972913484AF6988227799C79969BC9EFF8C9E98FF709EE4
SHA-512:	0B307C59F85869B919131475BD458C836778E1453A0481528E6EBD7D3E0093D78A17C4F5A74149F3EFC261084AA1F4289A6DAF4C58C6C6EEF4120632430C2A72
Malicious:	false
Reputation:	low
Preview:	0\r..m......d..........._keyhttps://abs.twimg.com/responsive-web/client-web/loader.SideNav.34f5b4c5.js .https://twitter.com/....L'/.............M............$p,t[..x....#...........lj.A..Eo......x8...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0f822a7613f36afd_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	254
Entropy (8bit):	5.672324779347163
Encrypted:	false
SSDEEP:	6:mY9YGLPfKpLjTbtHQ6B9FGnofKUbTYlrIvthtzgRK6t:nURQqZUrUdkr
MD5:	6E1EE8AD020EBEA10DDB4CA9458395F9
SHA1:	7F4A1AAD9884322C8167DE068561ECA087D20B3C
SHA-256:	DDB07C8965F1A1D71C850720FA9BCD315EC81FDD31FCA1F83A26FE185A03BDED
SHA-512:	94FFB2533C0632D251EB77F3BFCEBE4D2E046D4BA87E287EFA49913B724EE6DD433A67D237FD409FDBC46C880F1CD44761695DB0BE56FE4B92A2A46D60B263B4
Malicious:	false
Reputation:	low
Preview:	0\r..m......z...T6......_keyhttps://www.thesun.co.uk/assets/client/extendedHeaderControl~40b10c59.df9e2477da968fc0a953.1.js .https://thesun.co.uk/.>..L'/.............'........C...+<.....B..!.D...[../z..A..Eo.......MhN.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\10d6cd581d627b3a_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	255
Entropy (8bit):	5.65405629397901
Encrypted:	false
SSDEEP:	6:miVYGLP5RLOLpyDHzZodHVx16rUqUZZKG3t7uhyP4CK6t:NRHDHOPx1lxnKGZukH
MD5:	45D059157B1C74D6317A30D1561F9E50
SHA1:	67DD8F28F52F79DADD41393AD37CA28C47278186
SHA-256:	8237B1C3E41B3418C531884DC3618E772C3D76C21127A613AAC92890CA5EF95B
SHA-512:	CF5D46A9DDE1FE67E327B14B7EE3BAD8F7ED4D589CF4816CFEDD945C803EB89A8DBCC403BBC913B8A700CE974BA8087B2ABF68CC546C57BA93DF0517E178339E
Malicious:	false
Reputation:	low
Preview:	0\r..m......{...'.Z....._keyhttps://www.thescottishsun.co.uk/assets/client/vendor~f2868502.db5e2bbb7eff3eef7402.1.js .https://thescottishsun.co.uk/....L'/..............].........1X:..+.\|L.2.$...C.%.O-.....Wm.A..Eo...................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\10dfd19ebcc01576_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.5558920011532695
Encrypted:	false
SSDEEP:	6:mUoyYGLPfKpLOLteyklRzSKVofKGrlvYA7m8NmShzr1zbK6t:poLpN3InrlDmalxN
MD5:	0C91CF9AA8CD1E3B684DEC30F9956256
SHA1:	D6C71EE0802DE6EDE54D342F3BFBB81DB37312EF
SHA-256:	A0B44336AB7095169931030F8EDED9AD7FD8F5A08BDE67A2440FFF3CEE8057F6
SHA-512:	C78EBF2CA443126AC406EB047E364C51ABCE1F04699E6CF24D42B31DB40865F382263974608B36DBABB5A6DBD3701AAA95AE1D6F7A06663488989784664F8A78
Malicious:	false
Reputation:	low
Preview:	0\r..m......k...4@.s...._keyhttps://www.thesun.co.uk/assets/client/vendor~d939e436.650a1aac8feb0edee4f6.1.js .https://thesun.co.uk/....L'/............. .......y..\|.J,.j.8.;.c .C..r.4..vO...A..Eo...................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\112330bd740aeee6_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	263
Entropy (8bit):	5.759690485145141
Encrypted:	false
SSDEEP:	6:mccYoAbXJcwNeRVsUlj8vGAKxVmw1HEHISjtwJo813+4hXhK6t:xlzrsGG8sx9RitgOa
MD5:	60DC6B15F2A9F65588A482C32F34DCCB
SHA1:	78343F8083DB12C5A85FF51C324308032908044B
SHA-256:	A9E92B9E1936392A4743B03E0BE30CB740AC59D8325106C56A5CDB89C7447D1F
SHA-512:	09494CC23886D5C0D87501E3369B13213168BF794A85727747723C4B85819D79EE415806FF8A935502F7433D566D728F69D14A8CBFA794AFFEBE667801611B4B
Malicious:	false
Reputation:	low
Preview:	0\r..m.............R...._keyhttps://c.betrad.com/durly.js?;ad_w=970;ad_h=250;coid=290;nid=3689;ecaid=131630\|8733511\|9155845 .https://googlesyndication.com/..7.L'/.............w7.......D.A+D..0O..~X.[z.$.+7...x...U.A..Eo......e...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\11c392223b2ba602_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	245
Entropy (8bit):	5.680493100969004
Encrypted:	false
SSDEEP:	6:mixlllVYj018IrAETJcpuH3TExM1eJYoXVE4R9kA8thK6t:P/N1tnS8H3repFu7
MD5:	9BCAA22D5CCCCE46949D3C05420D38B0
SHA1:	4F0063F7184DC409E8A51694B00D3536E010D4E1
SHA-256:	D35EAD0A9D0D47671260D602A16AE34AD6B90CBF2DEFC0EC81B8530F1D61CDC6
SHA-512:	3EF21E10A1A61E126386A4B30AB647D4FF8B9C87ECC20E3CE4D8BD0D051E226E9683FEB995C618A6169047D5BA2F2E1173044BA4D55D210EA21B6A4F842A8CB7
Malicious:	false
Reputation:	low
Preview:	0\r..m......q...#......._keyhttps://abs.twimg.com/responsive-web/client-web/loader.AudioOnlyVideoPlayer.c05e6185.js .https://twitter.com/....L'/........................<..%W.W.....iF.O.N..b..:.]..A..Eo......u.4..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\126a7b581d23f314_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.517105838353266
Encrypted:	false
SSDEEP:	6:m8yYj018IrAr+VVpM504zY4jQe8ahm4u/bK6t:De1tUIVc04we8acN
MD5:	DDB086572107C50FBDEB50661E4ABA6A
SHA1:	AFEC3B19881E19FB0A68A10245C3157FC9DEE5D6
SHA-256:	277B420D4D0DCF6E13FFC9ACF81C023B1C5364B881FE24DF2FE322965ACE39A6
SHA-512:	8C5FBBE18AA5A48ED98CCC52BC18395B25E500B463679AB198EBEF18458D761C5E6A5FD63FF8F044F61589898E406BBBC49F0A8ED15A054F10B3C56635DB3CA1
Malicious:	false
Reputation:	low
Preview:	0\r..m......j..........._keyhttps://abs.twimg.com/responsive-web/client-web/loader.NewTweetsPill.68ab1ee5.js .https://twitter.com/....L'/.....................G5........J$..,z].wHO......L,.Y..A..Eo..................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1331133c1df1a2b2_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	247
Entropy (8bit):	5.722868446420457
Encrypted:	false
SSDEEP:	6:m5Yk+f2pomW0cChmJ2pYOlFCPNELK4tDK6t:c++amPcCkJKPSqLP
MD5:	1C06B42C3A4DFC614A2246D5207B327B
SHA1:	C1590D47D463EA0E71EBC45D9027564C89C84273
SHA-256:	5C699D447B23B6CA556BE554A755A9623F60274BEEDFB2FF0EB58D9B7EFAAF36
SHA-512:	A31FB7976EAD096EF4FC7AAA970E6843D0EB01196E3BF12E49EBAA6073252308999F6682F4E6BF8F09BF3A66F2AAFC3C34E223876CFB3A00CD68479C7641C864
Malicious:	false
Reputation:	low
Preview:	0\r..m......s...jE......_keyhttps://static.xx.fbcdn.net/rsrc.php/v3iMoJ4/yl/l/de_DE/W_RRpqaK3br.js?_nc_x=Ij3Wp8lg5Kz .https://facebook.com/.f.L'/.............k.........jTc.F.%e.a..0.g#...'..5.B...<.A..Eo......6..`.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\134394d19ef02042_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.5308486864574675
Encrypted:	false
SSDEEP:	6:mU6nYGLPfKpLOLZIADvg2VofK/P+YrYqupGYHzRK6t:p6yYIZLGQr
MD5:	3D101710C6D1D5339F13175E0F7B8F3E
SHA1:	B75787AD0AD8305408644EFA77F234770F0972A1
SHA-256:	6B162FD3E430AAAEBF5DFB507A5C4ECE4009AA73C6D38C2F6ED387B78C592FAD
SHA-512:	0998429B37B227F2CCF5CD00212F701640027BDF9A181F2FA9D7FE2AB97E30232256E659CD172CA51EA2AC6FB82DEB499A678F5C6CFF1439061A4E49854004B7
Malicious:	false
Reputation:	low
Preview:	0\r..m......k......`...._keyhttps://www.thesun.co.uk/assets/client/vendor~c7bac266.7d8fadeef80125cbd366.1.js .https://thesun.co.uk/B...L'/.............B!........d@\|.dA.2....D.5.u.F..O..v.s..A..Eo........0z.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\135a9e73b7a29232_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	43600
Entropy (8bit):	6.1737807313817665
Encrypted:	false
SSDEEP:	768:rrMFnwd1y52ysZmMq1TthxoB/dYuHgkZ3gPA9QKuEnpMsws/SVt9Ovb9VF69:rrMFwdo52ygq1TxoKHOT9VF69
MD5:	696CF3ACDE3853BBD3A7F3EEBB2695AF
SHA1:	B96350B58B426D1AC0C6757D529562515C777989
SHA-256:	57799022CE8D80A497B7E7E65E92715F83A63F8FC8176AD65F6A15FCE7BC23ED
SHA-512:	C0AE2861C11988C97B133A348C0EB645B975D3CC43A891E9C0391F7DB25367AC24795B4ABBA2EF7F3D1EC60B47CF4F1DAE92390D185DCFADB4A4ACAC645D6D6D
Malicious:	false
Reputation:	low
Preview:	0\r..m......H...Nj....._keyhttps://eus.rubiconproject.com/usync.js .https://rubiconproject.com/..}.L'/.............r..........K.L.....\....)....M\.,%..fG.A..Eo.......x$..........A..Eo..................0\r..m......H...Nj....._keyhttps://eus.rubiconproject.com/usync.js .https://rubiconproject.com/..............'..\|....O....X...9.&S............................................................T................(S....`<....hL`0......L`......Qcz..u....comments..Qc..D....rtb_sync.(S.....IaLH..oH....Qd.5.a....isSellerSyncE.@.-....4P......'...https://eus.rubiconproject.com/usync.js.a........D`....D`....D`.....%....`....&...&....&.(S...`.....4L`......Qe..>m....skipBuyerSync.....Qb........Math..Qc..d6....floor.....QcR.g.....random.......1...Qc2.D.....sample....Qe.^.n....alreadyRanOnPage..Qb...z....log..4Qk:6@.%...skipping buyer sync cause already ran....0Qj...#...skipping buyer sync due to sampling...K`....D.a. ...................&....h........u...&.(...&....&.(...&.X...Bd.&.Y....&....&....&

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\14fa636a805375da_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	216
Entropy (8bit):	5.510047427985542
Encrypted:	false
SSDEEP:	6:mzEYGLPfKpzgU6FfKwq8JYPODLhqm4U5tbK6t:I96FdHBRFt5tN
MD5:	92DB85FD4C02090FF9AF85BFD6C43BEC
SHA1:	0ABA552898ABFF1BF0228A2C3CDCA74CA5D650CB
SHA-256:	7639ECCAE2CAD64CE8A38FD407629D0C61F60558732159E9DED41FCFB45323CC
SHA-512:	D5EE4688F3B5B864B68BBB79C5FFDA97553B721AD057E68F6971F8F426FCC01DCC4C291FC9E9158401BFCAFBDC01DB77190172733A453C91F1A369FE5DB3C43B
Malicious:	false
Reputation:	low
Preview:	0\r..m......T...lc\&...._keyhttps://www.thesun.co.uk/assets/optimizely/16003990469.js .https://thesun.co.uk/>...L'/.............X.......\....8.$*...+....U.h.P(.,h.....A..Eo...................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\15c0f370f7bca3dd_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.501656624511639
Encrypted:	false
SSDEEP:	6:mwJ9YFEDL5VThIa9fKo5//hlMP9//hK6t:dJ/f9pBlM17
MD5:	FB558859DD444F09EBDB5186ED3A0B28
SHA1:	187D0F1EEBA1421E30D889EFBDAE55413BDF4DD9
SHA-256:	C978A61B73D1A6301B09BE0D461B6DEB5EF3949431F11C251603F56378A9C2E1
SHA-512:	57D778EAA3F283272EF0A393F5DCFFBE0A6F56A4B5EEC605224EECD5E168CAC7C18AB1D570AE927C76EB73B8F00A4FF98946B43C0CFF4414A95F5ACFE56DC2B4
Malicious:	false
Reputation:	low
Preview:	0\r..m......G....B......_keyhttps://js-agent.newrelic.com/nr-1210.min.js .https://thesun.co.uk/v...L'/.............W,......l....pf^JZ#....1..[.D.`.oRL.`.*..A..Eo........i.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\15e41511c194ea6b_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	474
Entropy (8bit):	5.638057107805049
Encrypted:	false
SSDEEP:	6:m5YGLRqhLOLhTC1i02WQ1ZUeg6oWGZG4rZbK6tW5YGLRqhLOLhTC1i02WQ0thvYS:+IICYCQTUewNLrEIICYCQ0fjwNLG
MD5:	1D158269272FDBB5332E3D160493D359
SHA1:	CA833DE6367031B24B5B52945279CE812EC26D62
SHA-256:	2501E8C6349463719ED3EF154932560C7CD20FAD3A9D3C7912C98584B8DDF5BA
SHA-512:	F80232CE4BFCDC0F7BF85DD3384638A61608BBB67016631A0DECAAEEE4B76AA4B06B5BBE0F893604D6310EA2B9FD99D15E1388C40B2BA52CDF2AC34052D3C6BA
Malicious:	false
Reputation:	low
Preview:	0\r..m......i..........._keyhttps://www.the-sun.com/assets/client/vendor~59c9b7c8.dc79245289a3df850791.1.js .https://the-sun.com/..A.L'/.....................$........#.9.$.v./7.e.....o.P+X.A..Eo......+............A..Eo..................0\r..m......i..........._keyhttps://www.the-sun.com/assets/client/vendor~59c9b7c8.dc79245289a3df850791.1.js .https://the-sun.com/....L'/.............d.......$........#.9.$.v./7.e.....o.P+X.A..Eo..................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\161f7544731c605c_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	235
Entropy (8bit):	5.550690859679826
Encrypted:	false
SSDEEP:	6:m2Gr//XYj018IrASTD93MqJYDvgr0i3G32om4pbK6t:nc1tFTD9/YgAnX
MD5:	E4B1D9266B350FF16483DDBB806174E5
SHA1:	5573096E1E72DD1926A0D9F18EC2C64F0A20C993
SHA-256:	E66CFFB86369EB231D18B51DDC2A4085D58AD6DBBA7FFCF29AE5CC7442125108
SHA-512:	910E8ED99754FC26F8EB263D84A59EE5CBE3407226EF20986114DC75CDFD0DFFE813D7696B87FAA636852CEC36FEA4416B231E860C9033B341302949F4EDD3BB
Malicious:	false
Reputation:	low
Preview:	0\r..m......g....$......_keyhttps://abs.twimg.com/responsive-web/client-web/loader.WideLayout.66f93b85.js .https://twitter.com/e...L'/.....................L..-o..G.V..C..TqIEz.c.v..u..bR.A..Eo...... .x..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\16d1dd6511c84a23_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	5.668342092176996
Encrypted:	false
SSDEEP:	6:m2mXYGLP5RL52VodHuhh6QEnGx8+4aRK6t:Jq5J4OGx8Sr
MD5:	CF7EDEEED8F46E77DD1C205EFB24670D
SHA1:	592D6F989B12ABBA99FFB33EF2096D832A6896D9
SHA-256:	11E91143A85430314B73E5258FBF0C0838479B2521243ACF9DFADBB19F177084
SHA-512:	10BA7A312B0E1D859F8DD8237A34345804FCC60053DAC06EB7363C3939D99ACB5FDF496C1DD0056E7184884F3379BAC0895EA47C72A8EC57DD0417410A66D938
Malicious:	false
Reputation:	low
Preview:	0\r..m................._keyhttps://www.thescottishsun.co.uk/assets/client/app_es6~dpa_es6~ea1f58e8.89fea462382e2a0bfafd.1.js .https://thescottishsun.co.uk/....L'/.............\]..........b....$.....*.uC.#7......"0.A..Eo......J............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\16d6284efdc582c6_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	474
Entropy (8bit):	5.683632140123903
Encrypted:	false
SSDEEP:	6:m/AlPYGLRqhLOLZIADvg2V2WQquM4k4DK6tW/AlPYGLRqhLOLZIADvg2V2WQfpCc:dpIYI2Qyu7pIYI2QfJrb
MD5:	768ED3CA79ECEFE35833980EB886C3D8
SHA1:	FDB56A5CB4CF633C76381A1BC4763AD49033355B
SHA-256:	A145F16908ABBC5ED21D42231D9EAE38F8B129D59EC8A10CF46D878B62528E2A
SHA-512:	F7A2893F1A1CFB522638A385066A3522B4DE78A48CF38C365A270A4295B6408C74ABB576A9CC1B5D4FA151261DB561D63BE52E633662328923143768F9EDD616
Malicious:	false
Reputation:	low
Preview:	0\r..m......i...J......._keyhttps://www.the-sun.com/assets/client/vendor~c7bac266.7d8fadeef80125cbd366.1.js .https://the-sun.com/..A.L'/....................Y.w.....]l:....q...-....+BA2..A..Eo.......=...........A..Eo..................0\r..m......i...J......._keyhttps://www.the-sun.com/assets/client/vendor~c7bac266.7d8fadeef80125cbd366.1.js .https://the-sun.com/....L'/.............d.......Y.w.....]l:....q...-....+BA2..A..Eo......<.G..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\176e7d1d913270bc_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	203
Entropy (8bit):	5.458893798989392
Encrypted:	false
SSDEEP:	6:mwh0lXYGL+MIwJJwMk6QHSJilxhm4tnK6t:dGIwvmHUDcp
MD5:	834722D0E8C47EF1463CCAF337BA589F
SHA1:	BECF30121887337C8B01B39959A0B27BF2FD4315
SHA-256:	FD016D289E3303E8FDC15E6DD49B07FC0B5FA03C226B7E155CD016DA3CB6CB42
SHA-512:	3B8A0E1C10057B5B92BD9C2243B2B67702A1436088032D38F7564E95A3BE874BFE2A05156DF3FBB6A75D172FEF948A41A3830E3B90C9D3B82747FD9AB28DDE43
Malicious:	false
Reputation:	low
Preview:	0\r..m......G.....I....._keyhttps://www.google-analytics.com/analytics.js .https://twitter.com/r2..L'/.......................:.&..L...jC...1UR@u<$mz.B...u..A..Eo.........?.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\177b04cd1abd5c94_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	228
Entropy (8bit):	5.61348813743292
Encrypted:	false
SSDEEP:	6:mlYEUwKLDKofK2zOy9YxoJ8jMfa4owK6t:YrKaoJzOyioJ8IabS
MD5:	33303141F7A2082C69CAADB7BB4F1549
SHA1:	87317066F55D1AD38463C55DF2548E92F31B8620
SHA-256:	B35BC031B0618173AA42CA67174515BA4174DBCF23961E8AB0D2620E32E2A959
SHA-512:	D1270E03EDAD20C40FCD2C0601C92A2BD6CBF6CD1CED1FC464C3772B80C56A93F0AB6AB0E9EB34DF7FC80CB4363EFB634EAEB8F5515B977F04079E07B659E845
Malicious:	false
Reputation:	low
Preview:	0\r..m......`.....=....._keyhttps://cdn.permutive.com/88a66e5c-8fe8-48af-9c6c-3ec3f4983aad-web.js .https://thesun.co.uk/h...L'/.............'.......#...,&.Y..`..P...zh,}.L..`.....A..Eo......2............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\179c5b6523ed12ac_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	5.659869568501075
Encrypted:	false
SSDEEP:	6:mVnYGLP5RLOGpiWcJVodH8v6R/Py9GyjSGprinK6t:kvTcJuSv6KUywp
MD5:	14E13C361970CA36153D3EA50A0CC056
SHA1:	85E08A732FCB0EA6BC30A1C7974A7E25E191217B
SHA-256:	2EE224D4CF186F8916B94C80F7ED691BB4C82FFEFF44328709AAE30D35C0799E
SHA-512:	CC6AA419F511FCC32919CDAACDF473E4BD601D7234B6C2BEAAE7F6FC1C7D8A5F8C477FE3677D7F167FF75E7D768112AD5CC76149F2018761A04703E53BF285E4
Malicious:	false
Reputation:	low
Preview:	0\r..m...........qE....._keyhttps://www.thescottishsun.co.uk/assets/client/vendors~app_es6~690b702c.d309e3f34dd2d0091a19.1.js .https://thescottishsun.co.uk/....L'/.............5].......[.>Z...&R..W.Q.5.G..i.5.F..j.$..A..Eo........z..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\183ce2fc42d07f79_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.79207772978276
Encrypted:	false
SSDEEP:	6:mg2YEQEBMqfm7cQvWdHwo6raHx0bkAsbK6t:N6bWAmgHiOGaN
MD5:	4C14FB0A1E8F5C7045E9C7A0C72E5469
SHA1:	587823326958970071E5CFC3E7799932DC6FE20D
SHA-256:	84F407CEFADE643E8B208D089EC3CF4146E045F80149AE40834E1EBCCCDAB260
SHA-512:	47CA0404E946E1AC5A5C14F716430A8FB6890EBD3F0619F79B2ABB5B473D7F99352A1DDE27AD006C148AB93703216C0093E754B9F0D09D19A5B0A8FF69ED1B90
Malicious:	false
Reputation:	low
Preview:	0\r..m......w...*..~...._keyhttps://cdn.p-n.io/pushly-sdk.min.js?domain_key=D7SZWy9iXX9gaGaWqZdZ894th5T1GiPWgmvu .https://thescottishsun.co.uk/...L'/.............[.......]....h.....8 ..)e.m:...5...o..A..Eo......a..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1ada5ae8963a52d7_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	236
Entropy (8bit):	5.712891510086985
Encrypted:	false
SSDEEP:	6:mhl/lXYk+f2pomdMCWXewhmJ2uWYU/QQ1nAnYK6t:IXz++amdzwkJ16QQn
MD5:	284482E76F0A53945A8E328BBD3078B3
SHA1:	0B0EFD9A5612BF7A6B9494A089C6823EC8D6247D
SHA-256:	C812A4013FA12AF0B42793867BEA29BC63A5BA051EFB9D40B73DFF2C69E236F1
SHA-512:	38442BCF06FA0FCDF050FABD64239B6181C9E0C33E899204F8F0BF2D71610D551F4103660B92E161FFD0B8933EAADBE73AF64428C81F124F3E7BB219C820750A
Malicious:	false
Reputation:	low
Preview:	0\r..m......h...J..V...._keyhttps://static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz .https://facebook.com/."[.L'/.....................i...c..<.%...7.....T....#.!..-.A..Eo........[..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1d91eb65241b51f2_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	222
Entropy (8bit):	5.58599454199116
Encrypted:	false
SSDEEP:	6:mbVYj018IrAoqzTxM4vYTaIfTy7yP4YnK6t:c1tzq/H7mf
MD5:	71B2716870CB0F8EE583C67DA84CABDF
SHA1:	434B8197A257705A03BD8BC3FF3520E3F218E120
SHA-256:	CE8598994E0A15386787B3A6266A784FE8B2B562C153BF70D0702B7D150E70AE
SHA-512:	91FC44F785B55B1E6A02F669AA2C21EA1EBD7D3A10AC63CA9334EE3E9005E6F2D3DDD05FC71897048FE62FB4DAAD6A828CCCD0107E1C24CC4635466A9ED0FA95
Malicious:	false
Reputation:	low
Preview:	0\r..m......Z...+.B....._keyhttps://abs.twimg.com/responsive-web/client-web/main.19e34665.js .https://twitter.com/8...L'/.............6........L.........IXY.....BHD..*..C...m.A..Eo...................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1dcd5eafcdaefc32_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	248
Entropy (8bit):	5.630171247013754
Encrypted:	false
SSDEEP:	6:mjVYGLPfKpLOlbNVofKk4zYScUu3mLXibK6t:48IbgT4HJK
MD5:	3ED2A1C5C1916DBE6627E84737110913
SHA1:	DCA42C31B5C7D7888E9FAF4F6169116E46BD9E68
SHA-256:	30D8E8DAB91E2CC51D7DDEEC0E67B9BB3F3E1BC8D91464FA35BE6B9B4F1ACBD7
SHA-512:	2C9D79FBAE3373FD46838E17DE5DD3CB115C8287949B3C571A03A799F5D1A70D1C9A21DD07C7DA5382197DD7C1F4E01465E7B4F195F24FCB6FD9024431D47DD1
Malicious:	false
Reputation:	low
Preview:	0\r..m......t....j....._keyhttps://www.thesun.co.uk/assets/client/vendors~app_es6~ec8c427e.326c873eda8a9e9244fd.1.js .https://thesun.co.uk/.U..L'/..............!..........v...R.".k......9....0tN.G0.].A..Eo......a..2.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1e2001af0fbda1e0_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	255
Entropy (8bit):	5.601207172987859
Encrypted:	false
SSDEEP:	6:m8YGLP5RLOL6UW0todHoCK6dJiAvA4yAA/lbK6t:tW220NI4yrr
MD5:	AFF0C22975AAF6517219BAECF908F109
SHA1:	F6DB3CCB1FDDF13F5C16FE0E856BD7230DBDDDC8
SHA-256:	F9D9B3E4C1AFE723841AAC73EA5A65879DEA9C4DB6D8BB59A65BDB450151088F
SHA-512:	414242014ECEA6150A3A7167AF0A1F0D219EA6B6B850705B1645FA337E334E4E08CC1DF7A71399D5153A212B4D5FCC47F4B77EEE5E970D7BB78DBC612CDD9588
Malicious:	false
Reputation:	low
Preview:	0\r..m......{...>. ....._keyhttps://www.thescottishsun.co.uk/assets/client/vendor~0f485567.c318d3d1dc81a148b07c.1.js .https://thescottishsun.co.uk/A...L'/..............].......\|b.F=.V5..M..x.-3..Kg..t/.E....A..Eo.......X...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1ebd288bcf8fafac_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	474
Entropy (8bit):	5.729590487441997
Encrypted:	false
SSDEEP:	6:mN/XYGLRqhLOLXD8Wn2WQjrArWipSmF0kP4/FhK6tWN/XYGLRqhLOLXD8Wn2WQj7:oxIW7xQj8TPC7mxIW7xQjFvtNTPP
MD5:	C98AD8EAC84781E509CF54FF9FBE2645
SHA1:	EAECBDFEFD73B85710E13C7680B968D274AC63A1
SHA-256:	8458BFEB8C3575039A6D3640376E18C60732DDACDE96ABA5DA98E22AE9E0B9B8
SHA-512:	B03ABFE6C273DEF30AB83284DE222176B1EC79DA092F5CACE95E1E2BB2485677E2E305A1CB5E12884CA5EA3C3AE18C26DC9743238751B9C48FB3BEF6D2150B1A
Malicious:	false
Reputation:	low
Preview:	0\r..m......i...0......._keyhttps://www.the-sun.com/assets/client/vendor~b58f7129.a02e4534b7cc2552b71a.1.js .https://the-sun.com/.6B.L'/......................Y.p.qJ..j..9..:......x?H.{..A..Eo...................A..Eo..................0\r..m......i...0......._keyhttps://www.the-sun.com/assets/client/vendor~b58f7129.a02e4534b7cc2552b71a.1.js .https://the-sun.com/.W..L'/.............).........Y.p.qJ..j..9..:......x?H.{..A..Eo........\|..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1f66603e406c242e_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	255
Entropy (8bit):	5.63094760014658
Encrypted:	false
SSDEEP:	6:mYvlVYGLP5RLOLMSoOiBgHodH4rTl165/lpqKhfT4CzthK6t:pvlRIiVAl1AXWEt7
MD5:	F8328FE80D5D16EA00A2370095CF1BEB
SHA1:	D19432B7F2B9717F1DF63E66AB87FB21291A6442
SHA-256:	EB14E9F9F5922B3B69B871D88AE68356F7E04BB6E03C0D6C9BD1A1D116B1843A
SHA-512:	820BFA142D2B28238985DBB9C40D9100AE88219453FC6A77C25ABDCB8DB7866694AC1582748F0530C844F31D2C01416A9074B9033277597ACC5AFBCDF3B8BDD5
Malicious:	false
Reputation:	low
Preview:	0\r..m......{......T...._keyhttps://www.thescottishsun.co.uk/assets/client/vendor~2977f88b.0b964addc523d71e914c.1.js .https://thescottishsun.co.uk/}I..L'/..............].......o_.7..a....?.v+..t....a.+3.,?..A..Eo......e.z-.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\20479e480dd0d5a3_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	244
Entropy (8bit):	5.611909645760768
Encrypted:	false
SSDEEP:	6:mUZVYAWGUJ3IcVYolNYyFvNYdHbyYBKvU46YeiD4bK6t:fudhVYonYWvWBEmw0
MD5:	7F2DBA95C0C26FA16B37821AA1680BA9
SHA1:	4296E0CE3237D8280C425BE9DD43D9609741652C
SHA-256:	540D628AE23650FF2C01DC19FAD28E754DE4D018415C11CFE0C56F0008DE7954
SHA-512:	7838C4D2620D5B5154E8853BD6381DA6B168A861738628F19E11AAA0787EBCF8F9164425A4E4F6551405DAB4BA948D79ED3728451D4B2F5954A9670BCD575304
Malicious:	false
Reputation:	low
Preview:	0\r..m......p...h.(....._keyhttps://connect.facebook.net/signals/config/752905198150451?v=2.9.44&r=stable .https://thescottishsun.co.uk/....L'/..............b.........W<G\1.}r.J..I./..*..9W.{.,F..A..Eo......(./..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\20e9cac3fcee01a1_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.407986829157793
Encrypted:	false
SSDEEP:	6:maPYAWQf257jWQP3pcLWFArlPllllhK6tWaPYAWQf257jWQblYIXNWFArvkK6t:vFe5GQ82C/NlFe5GQBdN2q2
MD5:	EF8524A446C63CB633C9847288111A44
SHA1:	3601BA3F2267A806589255530E240804BE8916AD
SHA-256:	0E67740E5CF64E947B302D3139675F8D25943B4905713682ABCBFAC1E57E67A3
SHA-512:	B5864589039CA303CE36E9FB36DD440C38F5695022E1801DD59F4D1485BC196F8054F203A0DB005C65046E30B46E3967D50E236F89DB14CD26E2FC6A769F0470
Malicious:	false
Reputation:	low
Preview:	0\r..m......H.... ......_keyhttps://connect.facebook.net/en_US/fbevents.js .https://the-sun.com/..?.L'/....................@.....hV..!=.....W.qv...G.n,.A..Eo.......d...........A..Eo..................0\r..m......H.... ......_keyhttps://connect.facebook.net/en_US/fbevents.js .https://the-sun.com/.y..L'/.............Y.......@.....hV..!=.....W.qv...G.n,.A..Eo........ir.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\21d6e3a4c6e4c4b0_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	3329
Entropy (8bit):	5.840587350203769
Encrypted:	false
SSDEEP:	48:24z0b6cdwB4fj/Ct58CT0lsLupSfHpqvwS7tfn7zQ4I/rNfZmIA/fAs:2PwBqTCz8M0Kup8Hpqvz7F4zaIA/Ys
MD5:	83BF6CD615E9090C60A1677C3AB20804
SHA1:	CC1066EEEE36C5D07C1586A665CA513B00ED056D
SHA-256:	B2D3D0F018D2268337D20E433C1EA68712A8F1F8429C142D108690A5A8145183
SHA-512:	0DF2F611D85CC79DBFB48DA0C9882DF3380FB3ACBA126DB638708320FBFEECB222BB1D9C71B99F24A4FC64A96689F65FAAAD7774ED7B23959B1E8FBAB63E36A0
Malicious:	false
Reputation:	low
Preview:	0\r..m......i...8m....._keyhttps://www.the-sun.com/assets/client/embeds~6ed1eda6.cdda24d87cec14b5801b.1.js .https://the-sun.com/.}M.L'/.....................@.....4.......H..#....t..gV.x...A..Eo.......c<U.........A..Eo...................}M.L'/...................'.......O.......................l................(S.x..`..... L`......Qc.U......window....Q.`........webpackJsonpEs6...Qbf..0....push.....`......L`.......`......Ma....L...`........b........^...C`.....(S....`.....lL`2....PRc$..................M...Qb.?.....o.....Qb..P&....d.....R.....O.d......................Qb........687.`......Pc........push.687a..........Qb..2....r.....Qb..>I....n....(S.......1.a..............@.-....\P.a.....O...https://www.the-sun.com/assets/client/embeds~6ed1eda6.cdda24d87cec14b5801b.1.js.a........D`....D`....D`.....4...`....&...&..1.&....&.(S.....q.a..............d........I...........&.(S.......R..a..............d........I...........D&.(S.x..`..... L`......Q.@B.......width.....Qc.v.L....height....Qcn...

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\221a7054dfae848a_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	255
Entropy (8bit):	5.623795838995976
Encrypted:	false
SSDEEP:	6:mn9YGLP5RLOLWwTWe+lVodHirsK6FKKkXYTj/nKRK6t:45dwF+IgsKuK/Y/K
MD5:	0B09826920730FB57B8B5B26DEC9353D
SHA1:	5B0162561DF9C3CF0919CB71868933EFBAC6823C
SHA-256:	C2D6003C257C22EFE09A86A334AF215EF39FEDC70B18DDDC6619E00E5774AFE5
SHA-512:	5C134C751EBDF4C39EAE854FCB6C300F2EEC8CE438DE5943B30443AE6C2AB3763A55E30560BD76DC43F15A27CC0D3A0BDC93D1F3659C7070332FFE44E35218EB
Malicious:	false
Reputation:	low
Preview:	0\r..m......{.........._keyhttps://www.thescottishsun.co.uk/assets/client/vendor~10e2e882.8c64165991a6c1f88a4d.1.js .https://thescottishsun.co.uk/...L'/............. ]......[....b.<.R)....2..I^.7..D_D0f...A..Eo......*e..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\225a64a30af263b8_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	327
Entropy (8bit):	5.680862234819118
Encrypted:	false
SSDEEP:	6:mgEYj018IrAMUBDGO6JA7WY51JA7WEsLBV4QpMl+YwvIxh8drqK6t:7w1thU11U2n4QRMF
MD5:	AC83A87BC6297E0FC4DA189C1BAC3B55
SHA1:	0FB0D5C7D7C903EDCC1C51F4A2EDADCBBD1A19E5
SHA-256:	BDEE4B1DD64E3D528B5942C62ED638DF095E9701BAA16CA2D918C267ED812BB1
SHA-512:	64C6B4F8CB95D1F6D948EAB48330E6AA5D3C9F68BA140E9794B6DF4B3446AA068D5C0F105B9E828EE175ABD65A3ED61F6E43AD5324A3236B1EB477DD1A494D6D
Malicious:	false
Reputation:	low
Preview:	0\r..m...........*......_keyhttps://abs.twimg.com/responsive-web/client-web/shared~loader.AudioDock~bundle.AudioSpacePeek~bundle.AudioSpaceLoggedIn~loader.AudioContextSpaceMedia~loader..037ea675.js .https://twitter.com/....L'/.............O............h$...J..lz....'...r.\R..)...A..Eo..................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\232049a787e868ff_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	84592
Entropy (8bit):	5.961330495743951
Encrypted:	false
SSDEEP:	1536:yPYus68geZl4YDJJzm0glCkGNLarMEZWMvHveE4muooeDPrA/0FRDfft+X23j+q:7T2KXYTeCFrA8Ftu23j+q
MD5:	1EBF8B13A1FD85B40F514B2BA01AC888
SHA1:	01830861A3C7646EBFCD4C5A8707DD34DD6A7013
SHA-256:	086A815B363DA35B4D67F6492899D7DF79FDA126FD9456B677F4D715F169FE3C
SHA-512:	52A3714ABD4B5917EA88B6AFB515E8258E8CEC91D3B9FF8075FAAF84F5026BC585C7B098D171258314846698C711E7F94F71E340177A508C4CEBC1F067E723B2
Malicious:	false
Reputation:	low
Preview:	0\r..m......@.....9I....A8C30636FFD40A8FC94F5D4145CD1D5DB56227209DA6076EDC35E8250C321573..............'.......O....(I...j....................X...............................h........................................................................(S.....`......L`>.....L`.....(S.L.`P.....L`.........Qc.6......iterator.(S.(.`....]..K`....Dd..............%.R....(Rc................I`......Qc..M....._typeof.a4...\.......@.-....<P......-...https://cdn.parsely.com/keys/the-sun.com/p.js...a........D`....D` ...D`.....!....`....&...&.(S..`.....LL`".....Qc.U......window....Q.@..hW....PARSELY...Qcf.p....2.0.0.....Qc.......version...Qd.J......majorVersionI..Qd:.......hotfixName...$Qgz..0....engagedtime-slots-video...Qc..V.....flavor... Qf.O......__template_track_ips.8Ql..!.+...__template_heartbeat_should_honor_autotrack..,Qi:mm.....__template_limit_et_sample_len....Qd>h`.....the-sun.com.. QfF......__template_apikey....(Qh.......__template_is_first_party.... Qf.o......__template_pixelhost.(Qh.

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\235a6c6f292f6cb6_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	247
Entropy (8bit):	5.765497292626857
Encrypted:	false
SSDEEP:	6:mG9VYk+f2pomW/7QLd6zhmJ2Y4C+vY1XlFGaJE2H41HK6t:j9N++amG7K4zkJ/4C+YnGansJ
MD5:	1714F053819ADA02882828E13C42C580
SHA1:	38147A0AFDF9B6D13E127CF25CD9D15ED6350E88
SHA-256:	05C0ADADF9A674F44C19E762625003267E341752F65D798A3C22E02186067519
SHA-512:	3765B7CB4D6DF5965C1A31F8F8FCCE39D486E2E59237ACE996B404215974FD57537C27AD187C7E2764B1F3D38AC490A485DDBB7D7603E95E5BEE0FC3D2C8EA57
Malicious:	false
Reputation:	low
Preview:	0\r..m......s.....m...._keyhttps://static.xx.fbcdn.net/rsrc.php/v3iOTn4/yy/l/de_DE/GSJO2_o6Tms.js?_nc_x=Ij3Wp8lg5Kz .https://facebook.com/.f.L'/.............t.......r........C...}P&..q...%..h.....I.A..Eo......IO...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\23a2c77602866f08_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	256
Entropy (8bit):	5.755696214271182
Encrypted:	false
SSDEEP:	6:ms9YGL+MORm/Ef2zDVKXsNodHCl16LuHLxgkH4OnK6t:TVpO0DVKNEUurxhHnp
MD5:	B60DAA0EBA342B80D459EEEF5CBDEEA7
SHA1:	22EF5D479B437698CC22C1983855A08BC2370218
SHA-256:	6961EC453CB75313A6902EB835588034CCDA111354BC24088CB45CD1D3C4F93A
SHA-512:	8C56C3BFF2C375F19FE08FCB3691E8CEFC13591B3F817A16BE20B7311E75DEDE1A8FC7BC93ED5D1BBD2AC7F7A247F468FE5D91603EEDEAFD933B5440184AA011
Malicious:	false
Reputation:	low
Preview:	0\r..m......\|....<.i...._keyhttps://www.google-analytics.com/gtm/js?id=GTM-W2RTJS7&t=thesun&cid=1153005236.1628058037 .https://thescottishsun.co.uk/....L'/.............%c.......(....kZ.@.).`.m&ed.wc..2.W..G..A..Eo.......\.a.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\27479c0568135fe0_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	233
Entropy (8bit):	5.563047357766156
Encrypted:	false
SSDEEP:	6:mmR/lgEYO3GBgIVL0jSYVOglB8zXf/ZK6t:7FqL+rL8r/T
MD5:	6880D8D547145A730AE4265BF7BFB878
SHA1:	136039DE4C64A6E9B75CD22AD9B19AD0BA078DCE
SHA-256:	944D6001244307A8B3C7A71F06D7C48B80D73212315ED49D8D57605AF5E3F5A7
SHA-512:	1828139A0B0B2E888A9DE1BEC3CC241F5FAA83D84A1B3D4991DF4B37175EB5B62B9BB64578E5F3F1956665AA84F3AC3D6CC239BA3BCFBE7C947548490D02C1E4
Malicious:	false
Reputation:	low
Preview:	0\r..m......e...j..x...._keyhttps://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_273.js .https://doubleclick.net/M6..L'/.............N......Jq3w.s....]T...i..4m..\<.WkL..}..A..Eo.......A..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\28bdfc01cd94c96e_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	54392
Entropy (8bit):	5.777969841135454
Encrypted:	false
SSDEEP:	768:ejPWxaRxbEnr0l7SZcFP75w71gcCHqRavEqSXppmIrSysi160WnyT3StM:ebWxaRxIXZcV7qiWa3Ip8IrSysi16M3h
MD5:	673ECBBE226CB07FA7CC87A8822EA424
SHA1:	1CCCDD41CCD2694240A7117244CE22CDADA307D5
SHA-256:	BB0806BE5EB573FA8EFCBF138C73BC6D04465CD047CA3231126C094FE5314FBB
SHA-512:	6BD36446EBCB882E302DA62FDF9A43D05D093F19D68ABD561E850A7F550733F30FB147CFF73301EE4E57118BFD9EC583005105C9B92B882F6AD252136606C499
Malicious:	false
Reputation:	low
Preview:	0\r..m......P..........._keyhttps://static.criteo.net/js/ld/publishertag.prebid.js .https://the-sun.com/\...L'/.............C.......X..=...!L.8.I.Bu..go1.:>.S_N..d..A..Eo......V5.L.........A..Eo................................'..J....O..........3U................. ......................................................@....................(S.0..`......L`.....(S.... .`.A.......L`R....y.Rc..................Qb.?.....o.....Qb.PKt....P......S...Qb..>I....n.....Qb......S.....QbZ.m.....t.....Qb..2....r.....Qb._......s.....Qb..YT....p.....Qb..T.....R.....Qb&:.i....c.....QbN......M.....Qb.x......l.....Qb.&.^....T.....Qb........f..........Qbvi{.....m.....Qb.K.q....E.....Qb........x......O...Qb......O.....Qb.c.}...._.....Qb..H.....D.....Qb>..@....k.....Qb..:....F.....Qb6Kv.....N.....Qbr.......L.....QbN.......W.....Qb.#.]....q.....Qbf'......K.....Qbf......z.....Qb&\.y....j.......Qb~..!....Y.....Qb........J.....Qb..\|.....X.....Qb.9......Z.....Qbfu......Q.........Qb"o......ee....Qb..i.....t

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2a6b34e7fd5d46e5_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	333
Entropy (8bit):	5.900386871179406
Encrypted:	false
SSDEEP:	6:mC2YpEWuVnfjlRpK7B5nRgMiTE36cVxG0xMlP5sK6KkXjY3nK6t:L/H0nZH05CTE3bG0iP5Xp
MD5:	9D3A575BBC44CD9906F162A77E035D88
SHA1:	0499CF3EF665D28EC552C91C3893E82E7C2BC80A
SHA-256:	241112EFF6F06925E4DB36CF30DCF864E5D7B36334884BDC07574E1D8C4C91D6
SHA-512:	56E88F1AEFB607EE5A2C6EEE4EE0F953FB35978C9ADCE89B9614C7C9F47884F2226BD66ADEAEB0B4E97A69278F6D8EAA048EBCCABDF9C8B740D37FA740809B64
Malicious:	false
Reputation:	low
Preview:	0\r..m...........D%j...._keyhttps://apis.google.com/_/scs/apps-static/_/js/k=oz.gapi.en_US.4sn9RO63fqo.O/m=auth2/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCO5GqPeHrbNQGs79bP09BnjVkdwag/cb=gapi.loaded_0?le=ili,ipu .https://twitter.com/n5..L'/.............`................;j.Y}x.>.-)i...D%...A..Eo......j............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2b2deddb224832c8_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	5.620932787083677
Encrypted:	false
SSDEEP:	6:mduYGLP5RLOlbNVodHK3653XFlk43ahK6t:NIbg03mXs
MD5:	1666C7E8CE1086DD9C536A47D3D2DFDA
SHA1:	FC998EECF066663EFC3F21B6C7B995D62E08D146
SHA-256:	5D1FCD4A3D346740C2BAC755FCCBE576786C71F8B1812A9DB980A5E33F870724
SHA-512:	6709FDCE1027AE917EFA5E87D35B3780E181C9A6084A8B8C777A5A0D1F0887915D0F6C4560E095C9030A1327E14B222A4A24063D9EFCEE07E58D7D2CFD001126
Malicious:	false
Reputation:	low
Preview:	0\r..m..........)9......_keyhttps://www.thescottishsun.co.uk/assets/client/vendors~app_es6~ec8c427e.326c873eda8a9e9244fd.1.js .https://thescottishsun.co.uk/'...L'/.............9]......]......J...r<.'.....D"\|Q.niv.A..Eo.......q...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2cdb959f070e2648_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	248
Entropy (8bit):	5.781113645984416
Encrypted:	false
SSDEEP:	6:mxYGL+MORm/A32xitofKz+YhE3jNbGvP4FZsDK6t:Qp45+IGjN+c2
MD5:	A2538BAC6E13E337096BED6EBF1C2389
SHA1:	E579351B4F6C894305F94B996DA8C6688386D3B5
SHA-256:	2323C6F1B4E90AE56AA24BAAE11D914FC577575A8CA43B23E92931C8C8961466
SHA-512:	FEF9B9C6E2472C57862E34CBA8A337CF7067A9A8D25AB4343D16581F60AC54A6538CE23A0C219010DA0B3B66F637AAD5B0207B140D7836FA9DF451CA5F89BF72
Malicious:	false
Reputation:	low
Preview:	0\r..m......t...F......._keyhttps://www.google-analytics.com/gtm/js?id=GTM-59BWW7J&t=thesun&cid=1335784315.1628058023 .https://thesun.co.uk/*)..L'/.............z(..........1B.9&..s.N....<.<_V..',._@+..A..Eo......!G<..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2cf34aaa15593108_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	1345
Entropy (8bit):	5.587361767800114
Encrypted:	false
SSDEEP:	24:xgIP1CrQkCTnrrubr2+7QuhJEfyIP1CyypI5dm7/YMhecz:79/Trqbr2+7LJm9p5K/0cz
MD5:	F830B113A550869C83ECC471A6693F4D
SHA1:	A00DFBA24102C4BA7DF8F0274620E8C525A7FB8D
SHA-256:	24C4976A2358E1C3C530F2927722FC2DF27E656BC39F5C0AFC10828F0A30DCC0
SHA-512:	D24FB689592B19D5BEC7843FED782C70294C969B8A973B4E3C8A605AA6A772E579B7659E97F1974E325A5825196B3F23AC3429E265F9454E11C5762356E548B0
Malicious:	false
Reputation:	low
Preview:	0\r..m......i....q.K...._keyhttps://www.the-sun.com/assets/client/vendor~da60ea53.224fe4f5bb592246d3b0.1.js .https://the-sun.com/.MB.L'/.........................u..{.2v.?..z.!.Qy.vom.x.F6.A..Eo...... . ..........A..Eo...................MB.L'/...................'.......O..........&.............................(S....`.....$L`......Qc.U......window....Q.`........webpackJsonpEs6...Qbf..0....push.....`......L`.......`......Ma.... ...`..... ..b............C`....C`.....(S.......Pc........push.464aL...D....l..tI.............@.M.O..@........@.......@.......@......................................d..............@........d.........N.O..@........d................@......d................@.... .e................@..........d................@.(...Qb@.......464.E.@.-....\P.a.....O...https://www.the-sun.com/assets/client/vendor~da60ea53.224fe4f5bb592246d3b0.1.js.a........D`....D`:...D`.........`D...&...&......D&.(S.....Pc........push.485aQ........4.k(...............@.......@........@..*..........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2f2d8df09354b1fd_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	474
Entropy (8bit):	5.6596300244488935
Encrypted:	false
SSDEEP:	12:bPIGdcRLQDjsRsri7VPIGdcRLQGd+jsRs7:bPIGdgLBRgiVPIGdgLBvRO
MD5:	3E95398322DF49E5B5ED31749074F842
SHA1:	2852864D54B2F682DA29A193DFABD429CA79095F
SHA-256:	D59A5ADEAD4FA673DF246D7B787FDC5DF9133F30A251D4F536D7808E99EA5E23
SHA-512:	81BB1211E8539239C24DC9943BCEC50B10653DE0FD4FDA69C14B6B48CFFA23E5BBB4F253BD74EA6D3F8EB2CE73FA67333744744DAE080373D17699A87FF09F86
Malicious:	false
Reputation:	low
Preview:	0\r..m......i...... ...._keyhttps://www.the-sun.com/assets/client/vendor~6eb4af75.bd363941340f4717f59a.1.js .https://the-sun.com/h.A.L'/.........................c.[X..u...v....Tf[.........A..Eo.......b..........A..Eo..................0\r..m......i...... ...._keyhttps://www.the-sun.com/assets/client/vendor~6eb4af75.bd363941340f4717f59a.1.js .https://the-sun.com/....L'/..........................c.[X..u...v....Tf[.........A..Eo.......%2..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2f673252c90490e2_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.596686918647882
Encrypted:	false
SSDEEP:	6:mU5nYGLPfKpLOLhTC1i0ofKmKJY5OoZy/HzbK6t:p5yICY1Ph34zN
MD5:	8C7D7B1C9AE90A92AC22295632519AC4
SHA1:	A20A321D80379979F0201568C90AE4EF94E5AF19
SHA-256:	7F6749EEBA21D99DF4C043EF5D435A3462F55CBA21F5F1A7538D727100B80CC3
SHA-512:	595C78B688944EE69F8E7CC88C830FF6D0152051F574E6570E1B4E27D5543CF065BEB946F01D92CBA6C2DFAC424F1E9B314C21C4791BA93004B1B1CFF8C7E98E
Malicious:	false
Reputation:	low
Preview:	0\r..m......k..........._keyhttps://www.thesun.co.uk/assets/client/vendor~59c9b7c8.dc79245289a3df850791.1.js .https://thesun.co.uk/....L'/.............B!.........F.".m.......<..B.m.;*J..s\O..A..Eo...... [..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2f7d89c4d94f3223_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	344
Entropy (8bit):	5.821199461184778
Encrypted:	false
SSDEEP:	6:mfYGL+MIwJJ7dHlhh6H/0FDua5/r5bK6t23I/utTbCMFDua5/P:6Iwv7jhkcRtD/aCMR
MD5:	8AA5A80AB881294D9A39B463C965699F
SHA1:	7F638B7FC6BAF6686110BB0A8894B4533430E30F
SHA-256:	C3FC959F2EF1112819B4D072054C2410D2C0DCAFB56DE8E0C7FBEFE634925953
SHA-512:	178824324095A3A38162077B09FDB5429187F5A19422972C2E414E989CC44017FA0A187CB635E668E0DBC5F33DC66D6CDE8C7CC7E119F1FFF57807D17CA030C3
Malicious:	false
Reputation:	low
Preview:	0\r..m......P...ym......_keyhttps://www.google-analytics.com/analytics.js .https://thescottishsun.co.uk/....L'/..............[......bQ[YD..t.].hBF.Yx. &.6........R..A..Eo........m5.........A..Eo......................L'/.....19377F874419F1D1D60F161C3482653F189E06DFB753AB86CF9064B5B9F14C52bQ[YD..t.].hBF.Yx. &.6........R..A..Eo.......;T.L.......

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2fc1b94ec9bbf3c8_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.674893521521119
Encrypted:	false
SSDEEP:	6:mUA1VYGLPfKpLOLMSoOiBgHofKkzYJrG00YnRllZK6t:pA6IiVbyG0L/T
MD5:	760059F72EDE089E144572A2876B627F
SHA1:	339029E21FE225BC003D74ACA374C562C86E8971
SHA-256:	464F9E5562D0DC006E92900BD155AF9E89F4D6293EED7E07D3E4E385AC59B3D2
SHA-512:	97B88D3AEB62B3C656E028A198472252EC106AF3700C1DDBA2E7A622A79A19E901C84DD2D440942573E61B64CC23970D6A557EF0559BA2F347F11F16D8D10150
Malicious:	false
Reputation:	low
Preview:	0\r..m......k.....B....._keyhttps://www.thesun.co.uk/assets/client/vendor~2977f88b.0b964addc523d71e914c.1.js .https://thesun.co.uk/*...L'/.............H!......q.I....3...}...&.#.K....w^0...l..A..Eo..................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\317b6048f3f63700_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	492
Entropy (8bit):	5.678042547360452
Encrypted:	false
SSDEEP:	12:VPIk8GIGQhCYN5XoLPIk8GIGQsbSGN5XO:ZIk9VoRNBoTIk9VdSGNBO
MD5:	C2169CD71D1DC4F922511D63966435FD
SHA1:	FB70A2B5A78B20C2322D4942BE37BD6C3A0B1A34
SHA-256:	A03AAB4AB89DECCF772CA09E5F773D5C91AEC91CD001AA05B13E30E8A50529F8
SHA-512:	71A7BB52ED2C034A3326A7A3F444A59D8A12B038702B97B53DF8AE1B7163AAE1EF83109394643AF10B0926A91E716B748307DBAA6D3FD520FBE580E36180AB23
Malicious:	false
Reputation:	low
Preview:	0\r..m......r.........._keyhttps://www.the-sun.com/assets/client/app_es6~dpa_es6~493df0b3.54c06e7555a32d6cbd27.1.js .https://the-sun.com/L:B.L'/......................T.....S.o\|8..XS..T..H"....~k.A..Eo..................A..Eo..................0\r..m......r.........._keyhttps://www.the-sun.com/assets/client/app_es6~dpa_es6~493df0b3.54c06e7555a32d6cbd27.1.js .https://the-sun.com/.t..L'/.............6........T.....S.o\|8..XS..T..H"....~k.A..Eo.......B...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\318c7b4d814e569b_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	256
Entropy (8bit):	5.574981602006287
Encrypted:	false
SSDEEP:	3:m+lMND/a8RzYrSLUWGKtEARvLBzQ8RxR5xXBXG0R6AWdRtEi/sK1lHCflX5HwPeZ:mVYGLP5RLJrTodHhb6dp+mU7uK6t
MD5:	1D86862668403105981DC873CC43FF79
SHA1:	9BC90A8458A4189E384581C50B79DD59474AD9E1
SHA-256:	EED876D5AF2B3089985474F4D4C4181023267A8E0A40B8FE65C25009D730D91E
SHA-512:	294B1A4B496F2D8C2089C526BDDBAAC46FA662B91C25E2B2D92A1C48C77198052B70ADE13451DE6D3EAFF7116FF70B2FA820C9CF4750C7DD2F06922D3319BF75
Malicious:	false
Reputation:	low
Preview:	0\r..m......\|.....z...._keyhttps://www.thescottishsun.co.uk/assets/client/app_es6~614db18d.7053b912e9dbe2ad2a3b.1.js .https://thescottishsun.co.uk/*...L'/.............S].......m...!..k..........w8.e..f(.a._..A..Eo......47...........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\330951cd93b30609_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	3426
Entropy (8bit):	5.6147968356018705
Encrypted:	false
SSDEEP:	48:ImaNb14L6o7meAWC77x+0gGxNdhkYKJATjxyS+EEIVG/qCruZr1Mo:IiLvRA77x+YBSYgATM2EIk/Prw1f
MD5:	6AF9F5CAD2138E10C514BF95545A90D0
SHA1:	C0DBBD7C275E92FF95724189F2ED82B6CE6B0329
SHA-256:	EC5B396C458954D92A77B6AE7199A48CE5982263144D1CE095032F7CC098193A
SHA-512:	B92BD5C016418E04F635E6B6132B5A32D1BAE9817A2188229BE165D935FB6E9DBD14B51FFE85EB75ADEE8B573392638A59FEB975D490F9E6881CCCA5122E83CE
Malicious:	false
Reputation:	low
Preview:	0\r..m......r....9....._keyhttps://www.the-sun.com/assets/client/vendors~app_es6~ec8c427e.326c873eda8a9e9244fd.1.js .https://the-sun.com/.OB.L'/......................z.F....h.B..=..E.;.d.....C....A..Eo.......I.L.........A..Eo...................OB.L'/.(.................'..U....O........~h.N.............................(S.1...`.....LL`".....Qc.U......window....Q.`........webpackJsonpEs6...Qbf..0....push.....`......L`.......`......Ma....l...`.....p..b4...........C`p...C`....C`&...C`(...C`...C`,...C`....C`0...C`2...C`....C`....C`.....(S.......Pc........push.199aL...x.......c........sw..@.....Qb........199.E.@.-....dP.......X...https://www.the-sun.com/assets/client/vendors~app_es6~ec8c427e.326c873eda8a9e9244fd.1.jsa........D`....D`X...D`..........`@...&...&..!.D&.(S.....Pc........push.312a....C....0.i .............@......@......@......@..... .e..............@.....@......e..............@....@.@....Qb........312.E....d........@............D&.(S.....Pc........push.367aP........$.g........

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\336605e17edde1f6_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	261
Entropy (8bit):	5.6216673318747565
Encrypted:	false
SSDEEP:	6:mY6EY0/21NA2KnvV1fKoWY7/mVocmWm8+4RK6t:heQ2Kn3RmCn8+Q
MD5:	DF4A380C883A6CDBB1DB05B00AA489FB
SHA1:	4E3642CB1BC4CD9EBF90EEB89540A2B548ADA681
SHA-256:	8FE89B02596336C1B5D0795EA439688FB05AC376CC0003D248F69747800C43B1
SHA-512:	C39599A522912DF835DD89C2D01EBA43AF41FF280415AFD723718DA5FBDB98DAB9E285CE7912486F3305725E53C9B24BA1A9E46DF922D6B98EBFAFBF720EB988
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://tags.tiqcdn.com/utag/newsinternational/thesun.web.2017/prod/utag.26.js?utv=ut4.42.202105241306 .https://thesun.co.uk/Sw..L'/..............%........F.o".N..L.'Xz..(...4..2s.p.M...A..Eo......U............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\342b5e2f7081f1de_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.6372218161753
Encrypted:	false
SSDEEP:	6:mUpYGLPfKpLOLrdcRxTbofK8rlvYwMh/k5/ZK6t:pIGdcR2Jlwk5r
MD5:	D928A27E0FF1369EDC34D1951964B33D
SHA1:	D0F8118F49DB2711238B3B57D4D10D7DA1DA8B55
SHA-256:	A0F0BA8B422F1FA867F08BD366059EA98CD831FB8014BFA87EC54142427EEB15
SHA-512:	64557CC182A203C0B73697D7C5D89185C8CE6F7CD69A6218B6A46A63AAE1A2A283104D1A487C256CB5EEB230CB707CFF93D7BB2E314510BFE4EC538A01D5CA5E
Malicious:	false
Reputation:	low
Preview:	0\r..m......k....H......_keyhttps://www.thesun.co.uk/assets/client/vendor~6eb4af75.bd363941340f4717f59a.1.js .https://thesun.co.uk/....L'/............. .........>.q...(`..'.......a0x.m..e..A..Eo.......Zm..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3459005c9813b2c6_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	256
Entropy (8bit):	5.658287155030835
Encrypted:	false
SSDEEP:	6:mMNYGLP5RL0tdAs4/S0odHdsK6REhyi7lAb0RK6t:Tp0oB/S1/EEhycE0r
MD5:	89121F93CF33E7465DA565C5AA56FE17
SHA1:	D432EC37C7C1180244C1D044A78C47DA9357F0B7
SHA-256:	7D9F1C97CD12EC2E8B118DD4BCCD945243ED990CE665AC4EC832852F5084376C
SHA-512:	0B96AA158D74A3ABE46D7E8002661197840D1123D212C11692DF435349A51569BE097CDB697D296F6319008A1889799B4408A1F7A48AE5B2CBBB90BA55880EAC
Malicious:	false
Reputation:	low
Preview:	0\r..m......\|.....h(...._keyhttps://www.thescottishsun.co.uk/assets/client/app_es6~493df0b3.9e31b258a46f4f83c7f3.1.js .https://thescottishsun.co.uk/.%..L'/.............?].......>O.j.}...[.........C1...%.2..N.A..Eo..................A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\34d9da613091dc1c_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	5.612445985152679
Encrypted:	false
SSDEEP:	6:mjYGLP5RLOoJHJ0odHt6XtjI8w/h/ZK6t:WF1Xt/T
MD5:	265F9C0592812961588B4CE1A7E2E6DF
SHA1:	A758A0E88D35E21A2C557854FC038644818C3EB6
SHA-256:	01579D3ABB4CF096D89A7DD439F1ED4EAD9F3F6F5AB118E2EA7BB32C25D919ED
SHA-512:	17C7AEC303AF85A389C0A0E3C8555B79E70333E60623ADB3DF039BAF1FEDF91F92BEFD65E9C33D5E89B0E4BD217D12D1EE23D1D244589C8B724C8E8E2DC2281F
Malicious:	false
Reputation:	low
Preview:	0\r..m............pt...._keyhttps://www.thescottishsun.co.uk/assets/client/vendors~app_es6~d6132156.00a9a4e741b3ea5e5498.1.js .https://thescottishsun.co.uk/W...L'/.............]].........e....6.H..P.`....NK+../.8.f..A..Eo........@.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3738a98978d25f33_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	264
Entropy (8bit):	5.64757747570624
Encrypted:	false
SSDEEP:	6:mjtYGLP5RLktRQhQIwodHS64XQXGF7vP4nabK6t:Mk8GIJ8XbTnN
MD5:	C923CE91FB9904B98D5D0C1870DFB155
SHA1:	43193F86D20CAC19A21F490A3CA4F579A54A6A7B
SHA-256:	2F803B21F5A40FA1DEB98FDE83050A8906AAB67D3B7C5CB7714E165DA737931A
SHA-512:	7D6201C1048D0544B3238D88B5F8F8F87B16C6880A52DC2C864CF5382FF8489ABC592CD53C23645C41D68C3501AAE5BCCC9514D3E1D8D0FA590C551CDC139E93
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://www.thescottishsun.co.uk/assets/client/app_es6~dpa_es6~493df0b3.54c06e7555a32d6cbd27.1.js .https://thescottishsun.co.uk/[(..L'/.............B]........;.....F...........9D..F.....}..A..Eo......k............A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\375a9a069a16f108_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.643997797733443
Encrypted:	false
SSDEEP:	6:mUnYGLPfKpLOLXD8WnofKQYEt4GhGRrhbjfhZK6t:pyW7ox4GYNh
MD5:	BA2E011886730674C284C5FDBCE2D1AE
SHA1:	3662C2F4CCDC732BEAC0F3A5D16B1656BEC77429
SHA-256:	305C6DCD279A7216B07E23B1FCD74A228E5FE645880ADCE708E38B31C0644766
SHA-512:	A32BFBCFC2EE647BC4AF9713764675DBE3E59484CA8E4DD159C8DFA59FA2B7E79B9193C7C4DBA75C6C0C083CDA768AE41B36ED64DD7F30DD7B3D1F1B4B34DD2D
Malicious:	false
Reputation:	low
Preview:	0\r..m......k....j......_keyhttps://www.thesun.co.uk/assets/client/vendor~b58f7129.a02e4534b7cc2552b71a.1.js .https://thesun.co.uk/.`..L'/.............Z!.......7.8HO..Z.........I.O{kt[....A..Eo.........z.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\37efba5e4372dd06_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	237
Entropy (8bit):	5.578419741018397
Encrypted:	false
SSDEEP:	6:myYj018IrAWDpXQspMiODdwtkYp8DK6t:X1tBlXQzL1
MD5:	E112A24EB9B319D026B758CE40B9D96B
SHA1:	219D610B6658F130DAC1C134404935926A2DF7DB
SHA-256:	78BA8F5F94E4C71A8986A714AB978FE16B30EF6C3D5B2DD43E3AD4707EB44DA8
SHA-512:	8228B930DB6AA22A733489F2B582DE2ABBB67DC6FADC9E568070A3C7F9BD948C959D6B6B6C61F897CE422FC006F588906D3770D156041F94CB4075FF4891930F
Malicious:	false
Reputation:	low
Preview:	0\r..m......i..._(....._keyhttps://abs.twimg.com/responsive-web/client-web/loader.SignupModule.dd7da525.js .https://twitter.com/X2..L'/......................,.[.xtZ...m.....TYi..A~..;8.p.A..Eo.......*E..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3862146bd7a47fe6_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	270
Entropy (8bit):	5.638051315917232
Encrypted:	false
SSDEEP:	6:mwAPYj018IrAMUowfs21fvspME2Z1BDtt/NK6t:C1thUU22r2jr/
MD5:	7225662058D7C7F0850D261AD4E58BB1
SHA1:	082A0AF5CEABA1F4C87863F0BF7714B9900EE628
SHA-256:	5EDD5A88057B08EB030645B28980C7915E47F76C4098F38EF7AA6ACEDE265C15
SHA-512:	4996DB1F3A6F20E4782A4431A388A9BD88B85A91B2DE69AF6D44D20761FBB488F5D20C081D644670CDD30D5AE7BCB023394B600C31B327A34177212E03A7E0B3
Malicious:	false
Reputation:	low
Preview:	0\r..m.................._keyhttps://abs.twimg.com/responsive-web/client-web/shared~ondemand.EmojiPickerData~ondemand.EmojiPicker.760cff75.js .https://twitter.com/.T..L'/....................]N...5j?.^-<...$..ES5.B..[.+...A..Eo......NT..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\38eeb3af36f2d012_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	213
Entropy (8bit):	5.436145449559246
Encrypted:	false
SSDEEP:	3:m+lZOzA8RzYPIXXHKhQf2XuRW7w6AWdRtEh/pJlflHCNnlXNU19BT3ZTcqmSSRtP:mVYAWQf2579dHQprA1M19rUh7bK6t
MD5:	8D079233B260EBD96A09318CFE39CA12
SHA1:	E1AEAEF011A29EADAAF0EDA1E6935234B4460B62
SHA-256:	9909C6FC42B0C2378B226C7FD81C8F50FF992A3088BD8EEE7268EEDA840A3F09
SHA-512:	C385534AC60160FF392F0056E4707E21D3E5D484A54E68940FA508B6C4962233E6A7A916C20202CED745356E65F45C729B95E1D1AD8283A9285AF171691C88E5
Malicious:	false
Reputation:	low
Preview:	0\r..m......Q.....>....._keyhttps://connect.facebook.net/en_US/fbevents.js .https://thescottishsun.co.uk/....L'/.............\.......Yqa..qY...v.g.J..zF.K.......A..Eo........w:.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\392a1f98630d05e0_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.547293226047063
Encrypted:	false
SSDEEP:	6:mUEYj018IrAE7uPB/Mz+Yexwlb3tR/fK6t:c1tnuPBzqRp
MD5:	493587AB82C2186322C53852B4C8D3B6
SHA1:	B9A415DD20BE3F87C584A74F955D3847A16D4DB3
SHA-256:	5DBAF8E3B25BE4A01EBB8F3736449193E14F3CA9A976071F317EF35ED6827DC2
SHA-512:	A055A0B927F3AB6B12C3A65924363954413FEE3F460C7A49B977DA23CA6491C38F22D0D55327440D76EFFC87F215B8FF2E11002DF1F8AE322E91354F08528B2B
Malicious:	false
Reputation:	low
Preview:	0\r..m......j.....<j...._keyhttps://abs.twimg.com/responsive-web/client-web/loader.AbsolutePower.0d0c0d95.js .https://twitter.com/...L'/.....................B.C.\|lR.M.x...g.'+x.aQ..R....{Y.A..Eo......J.2.........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\395d48c8737c454f_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	236
Entropy (8bit):	5.654312416775726
Encrypted:	false
SSDEEP:	6:mil/lXYk+f2pomr3zehmJ2j+YHt5FEiwXJK4SK6t:rtN++amrqkJEbqXJI
MD5:	F09DB7F783FCDA413E3E68FED4D1690D
SHA1:	794E42FCB76727C8D9DB43FC943B0FF2B293F2AF
SHA-256:	911153D2F724B382F36BCFA2349B12A1A6CED96ECB498AB80C38FED1D44FC86C
SHA-512:	72F5576139301EFC16337CE6DBDF0AFEBA19865BFC664E0ACADBEBCD8B8B5A3B87CC9BFC0DA445E3CA35359E23C32A0EA608FD411B0371B7B5E3F54E8B43836A
Malicious:	false
Reputation:	low
Preview:	0\r..m......h....@.)...._keyhttps://static.xx.fbcdn.net/rsrc.php/v3/yJ/r/mVsZpBkKb6Z.js?_nc_x=Ij3Wp8lg5Kz .https://facebook.com/..f.L'/.....................4V....s.....X$`/.?..3..!..5....A..Eo......g.,].........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3a6f8fa4c3062407_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	241
Entropy (8bit):	5.517265225421522
Encrypted:	false
SSDEEP:	6:mJZXYj018IrAqmC0aMWC+YY4XVi9hnHothK6t:+51tI2Jwt7
MD5:	509FC546CB3B402C76A52EC1EF4BA2D0
SHA1:	4AB5BE44EDA993D6CFD2A05EBE7598C29BD06AE2
SHA-256:	4424A6B653E3A1DEE818A075B21C390CD7445E8FE484F25D2B406C9889472E9E
SHA-512:	F321B527421578AEC0514BC338D4DD0558ACAF9786C3B1C076721A12D185B781046E7B1C6B456CF8D4DE422681054E41BAB7E8D71F6AB6A8951E0C96F7466995
Malicious:	false
Reputation:	low
Preview:	0\r..m......m....3Q....._keyhttps://abs.twimg.com/responsive-web/client-web/loader.TimelineRenderer.6e421a65.js .https://twitter.com/...L'/.............[.......thY<m.u....t... O.f,.d0T".u".....A..Eo.......}"..........A..Eo..................

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3b59e6979850030e_0 Download File
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	248
Entropy (8bit):	5.362017438042877
Encrypted:	false
SSDEEP:	6:mhY0/21JGK3XZ/H9dHGbxAJPUofoKP4ZzbK6t:UehJ/H94bCUOMN
MD5:	6F18BD1847F6CBE7BC189CE392A04B72
SHA1:	F13F3C1C91C704BA2F4EB7CA4175D05C3737C59F
SHA-256:	A3D4BEC892264DE22F9E71883629A41542502EA74B7F5C61D58256E6A0BD3413
SHA-512:	E91EFCBFA0A439297C4B1F6532437BC15F8E51578DE8048633883DE855D2B84325863E843C01A080171EC027C5B7F593DBF1276A54C858F23D3D253882D54822
Malicious:	false
Reputation:	low
Preview:	0\r..m......t..........._keyhttps://tags.tiqcdn.com/utag/newsinternational/thesun.scottish.web.2/prod/utag.js .https://thescottishsun.co.uk/....L'/..............\......_Fo.`.m..: .(.._....=)....5....A..Eo.......w...........A..Eo..................

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 3, 2021 23:19:40.812933922 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:40.813422918 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:40.814388037 CEST	49717	80	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:40.815131903 CEST	49718	80	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:40.830807924 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:40.830949068 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:40.832703114 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:40.834387064 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:40.834512949 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:40.834794044 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:40.841133118 CEST	80	49717	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:40.841264963 CEST	49717	80	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:40.841522932 CEST	80	49718	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:40.841669083 CEST	49718	80	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:40.844551086 CEST	49718	80	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:40.850065947 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:40.855993986 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:40.857240915 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:40.857281923 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:40.857326031 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:40.857373953 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:40.857383013 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:40.857423067 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:40.857450962 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:40.871004105 CEST	80	49718	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:40.871325016 CEST	80	49718	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:40.871762991 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:40.871804953 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:40.871900082 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:40.897649050 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:40.912096977 CEST	49718	80	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.087383032 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.118077040 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.118213892 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.118468046 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.149014950 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.159369946 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.159436941 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.159481049 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.159677982 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.162956953 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.162993908 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.163104057 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.301085949 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.326404095 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.330080032 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.330468893 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.330501080 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.348104000 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.348448038 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.351360083 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.351686001 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.367957115 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.368158102 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.368556023 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.374108076 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.374157906 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.374243975 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.374247074 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.374279976 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.374311924 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.374378920 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.374438047 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.383744955 CEST	49714	443	192.168.2.3	216.58.205.77
Aug 3, 2021 23:19:41.398488998 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.398540974 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.398569107 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.398858070 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.399224997 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.399684906 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.399722099 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.399935007 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.409805059 CEST	443	49714	216.58.205.77	192.168.2.3
Aug 3, 2021 23:19:41.417083979 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.417120934 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.417191029 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.417227030 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.417406082 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.423329115 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.430145025 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.430447102 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.430488110 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.430526972 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.430557013 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.430561066 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.430614948 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.432320118 CEST	49716	443	192.168.2.3	216.58.212.174
Aug 3, 2021 23:19:41.441123962 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.451056957 CEST	443	49716	216.58.212.174	192.168.2.3
Aug 3, 2021 23:19:41.504523993 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.504615068 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.504760027 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.504764080 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.504829884 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.504901886 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.505311966 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.505372047 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.505458117 CEST	49719	443	192.168.2.3	216.137.37.21
Aug 3, 2021 23:19:41.506203890 CEST	443	49719	216.137.37.21	192.168.2.3
Aug 3, 2021 23:19:41.506251097 CEST	443	49719	216.137.37.21	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 3, 2021 23:19:40.757989883 CEST	192.168.2.3	8.8.8.8	0x5041	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:40.771600962 CEST	192.168.2.3	8.8.8.8	0xc277	Standard query (0)	www.the-sun.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:40.775526047 CEST	192.168.2.3	8.8.8.8	0xa2c	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.634707928 CEST	192.168.2.3	8.8.8.8	0xd7c5	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.640016079 CEST	192.168.2.3	8.8.8.8	0x2e32	Standard query (0)	cmp.cdn.the-sun.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.928164959 CEST	192.168.2.3	8.8.8.8	0x72f8	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.929188967 CEST	192.168.2.3	8.8.8.8	0xf505	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.988456011 CEST	192.168.2.3	8.8.8.8	0x58ad	Standard query (0)	d1z2jf7jlzjs58.cloudfront.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.582001925 CEST	192.168.2.3	8.8.8.8	0xbefc	Standard query (0)	cdn.p-n.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.582053900 CEST	192.168.2.3	8.8.8.8	0xe04d	Standard query (0)	cdn.parsely.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.582504988 CEST	192.168.2.3	8.8.8.8	0x5c76	Standard query (0)	ads.the-sun.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.753329992 CEST	192.168.2.3	8.8.8.8	0xb7b3	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.965936899 CEST	192.168.2.3	8.8.8.8	0x676f	Standard query (0)	p1.parsely.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.286443949 CEST	192.168.2.3	8.8.8.8	0xb986	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.290045023 CEST	192.168.2.3	8.8.8.8	0xd571	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.293697119 CEST	192.168.2.3	8.8.8.8	0x576c	Standard query (0)	cdn.permutive.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.293735027 CEST	192.168.2.3	8.8.8.8	0x8f28	Standard query (0)	scripts.webcontentassessor.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.064774036 CEST	192.168.2.3	8.8.8.8	0xa4f8	Standard query (0)	uk-script.dotmetrics.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.110093117 CEST	192.168.2.3	8.8.8.8	0xda98	Standard query (0)	pac.thesun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.143831015 CEST	192.168.2.3	8.8.8.8	0xfd33	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.381279945 CEST	192.168.2.3	8.8.8.8	0xd8d2	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.382859945 CEST	192.168.2.3	8.8.8.8	0xda6f	Standard query (0)	88a66e5c-8fe8-48af-9c6c-3ec3f4983aad.prmutv.co	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.830563068 CEST	192.168.2.3	8.8.8.8	0x1154	Standard query (0)	media.p-n.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.017469883 CEST	192.168.2.3	8.8.8.8	0x2964	Standard query (0)	api.permutive.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.068553925 CEST	192.168.2.3	8.8.8.8	0x5a7f	Standard query (0)	ampcid.google.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.267575026 CEST	192.168.2.3	8.8.8.8	0xf88c	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.270106077 CEST	192.168.2.3	8.8.8.8	0xf9b	Standard query (0)	a.teads.tv	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.272660017 CEST	192.168.2.3	8.8.8.8	0xa681	Standard query (0)	pixel.adsafeprotected.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.298629045 CEST	192.168.2.3	8.8.8.8	0x30b6	Standard query (0)	hb-api.omnitagjs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.313154936 CEST	192.168.2.3	8.8.8.8	0x5507	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.317343950 CEST	192.168.2.3	8.8.8.8	0x106d	Standard query (0)	c2shb.ssp.yahoo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.401727915 CEST	192.168.2.3	8.8.8.8	0x226d	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.402750015 CEST	192.168.2.3	8.8.8.8	0x2f42	Standard query (0)	ampcid.google.de	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.752270937 CEST	192.168.2.3	8.8.8.8	0x5e5f	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.756797075 CEST	192.168.2.3	8.8.8.8	0x5bb9	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.858732939 CEST	192.168.2.3	8.8.8.8	0xba59	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.805358887 CEST	192.168.2.3	8.8.8.8	0x80e7	Standard query (0)	adservice.google.de	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.805984020 CEST	192.168.2.3	8.8.8.8	0x36fb	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.857683897 CEST	192.168.2.3	8.8.8.8	0xca78	Standard query (0)	googlesync.permutive.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.858983040 CEST	192.168.2.3	8.8.8.8	0x6dfc	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:47.406471968 CEST	192.168.2.3	8.8.8.8	0xba33	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.048263073 CEST	192.168.2.3	8.8.8.8	0x1085	Standard query (0)	www.the-sun.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.178000927 CEST	192.168.2.3	8.8.8.8	0x9cd7	Standard query (0)	media.p-n.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.522332907 CEST	192.168.2.3	8.8.8.8	0x868e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.804404974 CEST	192.168.2.3	8.8.8.8	0xd9f8	Standard query (0)	k.p-n.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.596857071 CEST	192.168.2.3	8.8.8.8	0x6136	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.723680019 CEST	192.168.2.3	8.8.8.8	0xf654	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.724756002 CEST	192.168.2.3	8.8.8.8	0x7b47	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.725383997 CEST	192.168.2.3	8.8.8.8	0xdcbb	Standard query (0)	acdn.adnxs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.193543911 CEST	192.168.2.3	8.8.8.8	0x9956	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.195278883 CEST	192.168.2.3	8.8.8.8	0x47bd	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.248029947 CEST	192.168.2.3	8.8.8.8	0x9152	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.250556946 CEST	192.168.2.3	8.8.8.8	0xcb91	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.250569105 CEST	192.168.2.3	8.8.8.8	0xfe2b	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.253177881 CEST	192.168.2.3	8.8.8.8	0xbcac	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.492000103 CEST	192.168.2.3	8.8.8.8	0x2700	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.994743109 CEST	192.168.2.3	8.8.8.8	0xeb72	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:55.019066095 CEST	192.168.2.3	8.8.8.8	0xa11c	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:55.026149035 CEST	192.168.2.3	8.8.8.8	0xd5f1	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:55.076031923 CEST	192.168.2.3	8.8.8.8	0x321a	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:56.233424902 CEST	192.168.2.3	8.8.8.8	0x9713	Standard query (0)	ads.yahoo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:56.886991978 CEST	192.168.2.3	8.8.8.8	0xdb3e	Standard query (0)	www.the-sun.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.383255005 CEST	192.168.2.3	8.8.8.8	0xc31c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.383327961 CEST	192.168.2.3	8.8.8.8	0x9b4f	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.500667095 CEST	192.168.2.3	8.8.8.8	0xaeb	Standard query (0)	d1z2jf7jlzjs58.cloudfront.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:58.311819077 CEST	192.168.2.3	8.8.8.8	0xeb69	Standard query (0)	p1.parsely.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:59.736850977 CEST	192.168.2.3	8.8.8.8	0x9ae1	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.349960089 CEST	192.168.2.3	8.8.8.8	0xa5eb	Standard query (0)	hb-api.omnitagjs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.452152967 CEST	192.168.2.3	8.8.8.8	0xea26	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.502576113 CEST	192.168.2.3	8.8.8.8	0x96d	Standard query (0)	c2shb.ssp.yahoo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.685895920 CEST	192.168.2.3	8.8.8.8	0x2d44	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.689029932 CEST	192.168.2.3	8.8.8.8	0x3f43	Standard query (0)	3pd.criteo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.728837967 CEST	192.168.2.3	8.8.8.8	0xa83a	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.912252903 CEST	192.168.2.3	8.8.8.8	0x90a2	Standard query (0)	sync.taboola.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.913153887 CEST	192.168.2.3	8.8.8.8	0x9d7b	Standard query (0)	www.google.de	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.913687944 CEST	192.168.2.3	8.8.8.8	0xcf97	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.914261103 CEST	192.168.2.3	8.8.8.8	0xad3e	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:01.064718008 CEST	192.168.2.3	8.8.8.8	0x6655	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:01.172518015 CEST	192.168.2.3	8.8.8.8	0x1822	Standard query (0)	prod.perf-serving.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.670021057 CEST	192.168.2.3	8.8.8.8	0xd542	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.694192886 CEST	192.168.2.3	8.8.8.8	0xabaa	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.719202995 CEST	192.168.2.3	8.8.8.8	0xcc8	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.857417107 CEST	192.168.2.3	8.8.8.8	0x18d4	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.886315107 CEST	192.168.2.3	8.8.8.8	0x123f	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.935668945 CEST	192.168.2.3	8.8.8.8	0xae7b	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.954955101 CEST	192.168.2.3	8.8.8.8	0x5218	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.837493896 CEST	192.168.2.3	8.8.8.8	0x14c3	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.854866982 CEST	192.168.2.3	8.8.8.8	0x4a50	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.877794981 CEST	192.168.2.3	8.8.8.8	0xd091	Standard query (0)	sync.taboola.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:06.026104927 CEST	192.168.2.3	8.8.8.8	0x3e46	Standard query (0)	prod.perf-serving.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:06.073415995 CEST	192.168.2.3	8.8.8.8	0xd0c1	Standard query (0)	3pd.criteo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.282255888 CEST	192.168.2.3	8.8.8.8	0xa3cc	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.521460056 CEST	192.168.2.3	8.8.8.8	0x1f42	Standard query (0)	cs.emxdgt.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.591624022 CEST	192.168.2.3	8.8.8.8	0x9a6b	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.621666908 CEST	192.168.2.3	8.8.8.8	0x2a95	Standard query (0)	certificates.godaddy.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.684185028 CEST	192.168.2.3	8.8.8.8	0x5b2e	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.750237942 CEST	192.168.2.3	8.8.8.8	0x58db	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.997843981 CEST	192.168.2.3	8.8.8.8	0x6e0	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.127657890 CEST	192.168.2.3	8.8.8.8	0xea04	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.533340931 CEST	192.168.2.3	8.8.8.8	0x25ba	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.842221975 CEST	192.168.2.3	8.8.8.8	0xf515	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.660737991 CEST	192.168.2.3	8.8.8.8	0x36f2	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.663561106 CEST	192.168.2.3	8.8.8.8	0x879	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.665528059 CEST	192.168.2.3	8.8.8.8	0x755e	Standard query (0)	sync.hgrtb.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.667311907 CEST	192.168.2.3	8.8.8.8	0x2273	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:12.045125008 CEST	192.168.2.3	8.8.8.8	0xcd93	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:12.369118929 CEST	192.168.2.3	8.8.8.8	0xa146	Standard query (0)	facebook.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:13.829514980 CEST	192.168.2.3	8.8.8.8	0x1c10	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:13.934983015 CEST	192.168.2.3	8.8.8.8	0x3645	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:13.990250111 CEST	192.168.2.3	8.8.8.8	0xdb97	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:14.261966944 CEST	192.168.2.3	8.8.8.8	0x66b0	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.233618975 CEST	192.168.2.3	8.8.8.8	0x92a0	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.254162073 CEST	192.168.2.3	8.8.8.8	0x46f5	Standard query (0)	facebook.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.391448975 CEST	192.168.2.3	8.8.8.8	0xff4a	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.566453934 CEST	192.168.2.3	8.8.8.8	0x8385	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.579437017 CEST	192.168.2.3	8.8.8.8	0xb392	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.583725929 CEST	192.168.2.3	8.8.8.8	0x4a18	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.587470055 CEST	192.168.2.3	8.8.8.8	0x1d12	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.603538036 CEST	192.168.2.3	8.8.8.8	0xc75c	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.605993986 CEST	192.168.2.3	8.8.8.8	0x5ca8	Standard query (0)	pixel-a.sitescout.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.912328959 CEST	192.168.2.3	8.8.8.8	0xfd2c	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.941731930 CEST	192.168.2.3	8.8.8.8	0x9719	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.946882010 CEST	192.168.2.3	8.8.8.8	0xc287	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.947458982 CEST	192.168.2.3	8.8.8.8	0x5685	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.953026056 CEST	192.168.2.3	8.8.8.8	0xbd8f	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.985091925 CEST	192.168.2.3	8.8.8.8	0x2e7f	Standard query (0)	t.co	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.395319939 CEST	192.168.2.3	8.8.8.8	0x29d3	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.645684958 CEST	192.168.2.3	8.8.8.8	0x1e32	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.671802044 CEST	192.168.2.3	8.8.8.8	0x4e48	Standard query (0)	id.sharedid.org	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.854075909 CEST	192.168.2.3	8.8.8.8	0x1598	Standard query (0)	d5p.de17a.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:17.148988962 CEST	192.168.2.3	8.8.8.8	0x5bb1	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:18.915286064 CEST	192.168.2.3	8.8.8.8	0x7164	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.516582966 CEST	192.168.2.3	8.8.8.8	0x89fc	Standard query (0)	www.thesun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.737235069 CEST	192.168.2.3	8.8.8.8	0x4fc4	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.776469946 CEST	192.168.2.3	8.8.8.8	0xb22	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.969084024 CEST	192.168.2.3	8.8.8.8	0xa656	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.035728931 CEST	192.168.2.3	8.8.8.8	0xb60f	Standard query (0)	cmp.cdn.thesun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.890418053 CEST	192.168.2.3	8.8.8.8	0xae2b	Standard query (0)	ads.thesun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.975591898 CEST	192.168.2.3	8.8.8.8	0xec2a	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.099261999 CEST	192.168.2.3	8.8.8.8	0x2f2e	Standard query (0)	ampcid.google.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.685637951 CEST	192.168.2.3	8.8.8.8	0x2171	Standard query (0)	ampcid.google.de	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.819906950 CEST	192.168.2.3	8.8.8.8	0xe145	Standard query (0)	prebid.the-ozone-project.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.823241949 CEST	192.168.2.3	8.8.8.8	0x4909	Standard query (0)	cdn.brandmetrics.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:23.259016037 CEST	192.168.2.3	8.8.8.8	0xa85a	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:23.971576929 CEST	192.168.2.3	8.8.8.8	0x427e	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.000366926 CEST	192.168.2.3	8.8.8.8	0x1a21	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.001557112 CEST	192.168.2.3	8.8.8.8	0x1ddd	Standard query (0)	elb.the-ozone-project.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.002280951 CEST	192.168.2.3	8.8.8.8	0xbdcd	Standard query (0)	a.teads.tv	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.020677090 CEST	192.168.2.3	8.8.8.8	0x22cd	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.116610050 CEST	192.168.2.3	8.8.8.8	0x1a50	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.469721079 CEST	192.168.2.3	8.8.8.8	0x3f0b	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.681521893 CEST	192.168.2.3	8.8.8.8	0xa74d	Standard query (0)	bam-cell.nr-data.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.628380060 CEST	192.168.2.3	8.8.8.8	0xc3b9	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.723613977 CEST	192.168.2.3	8.8.8.8	0x1318	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.726269007 CEST	192.168.2.3	8.8.8.8	0x5e47	Standard query (0)	tags.mathtag.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.735729933 CEST	192.168.2.3	8.8.8.8	0x450b	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.114238024 CEST	192.168.2.3	8.8.8.8	0x6b6d	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.173636913 CEST	192.168.2.3	8.8.8.8	0x67c6	Standard query (0)	beacon-fra2.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.199680090 CEST	192.168.2.3	8.8.8.8	0xeda0	Standard query (0)	ssl.connextra.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.204307079 CEST	192.168.2.3	8.8.8.8	0xed4f	Standard query (0)	c.betrad.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.210087061 CEST	192.168.2.3	8.8.8.8	0x327b	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:28.211457014 CEST	192.168.2.3	8.8.8.8	0xc787	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:28.213675022 CEST	192.168.2.3	8.8.8.8	0x6d41	Standard query (0)	c.evidon.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:29.901614904 CEST	192.168.2.3	8.8.8.8	0x5e65	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:29.906660080 CEST	192.168.2.3	8.8.8.8	0x73de	Standard query (0)	sync.tidaltv.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:29.915874958 CEST	192.168.2.3	8.8.8.8	0x560a	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.039344072 CEST	192.168.2.3	8.8.8.8	0x8021	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.039583921 CEST	192.168.2.3	8.8.8.8	0x490	Standard query (0)	tracking.m6r.eu	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.043401003 CEST	192.168.2.3	8.8.8.8	0x44f	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.045917034 CEST	192.168.2.3	8.8.8.8	0xe7a2	Standard query (0)	dsp.adkernel.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.045996904 CEST	192.168.2.3	8.8.8.8	0x1a1b	Standard query (0)	rtb2-useast.e-volution.ai	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.052948952 CEST	192.168.2.3	8.8.8.8	0x4fe1	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.429821014 CEST	192.168.2.3	8.8.8.8	0x3bab	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.578974962 CEST	192.168.2.3	8.8.8.8	0xab50	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.579020023 CEST	192.168.2.3	8.8.8.8	0x944	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.921004057 CEST	192.168.2.3	8.8.8.8	0xb832	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:31.686845064 CEST	192.168.2.3	8.8.8.8	0x908b	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:31.996387959 CEST	192.168.2.3	8.8.8.8	0x26e8	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:31.996989012 CEST	192.168.2.3	8.8.8.8	0x5c	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.000504971 CEST	192.168.2.3	8.8.8.8	0x4193	Standard query (0)	triplelift-match.dotomi.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.000895023 CEST	192.168.2.3	8.8.8.8	0xb09	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.003814936 CEST	192.168.2.3	8.8.8.8	0xb2dd	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.151096106 CEST	192.168.2.3	8.8.8.8	0x77af	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.157586098 CEST	192.168.2.3	8.8.8.8	0x5308	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.257011890 CEST	192.168.2.3	8.8.8.8	0xa066	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.971035957 CEST	192.168.2.3	8.8.8.8	0xf20	Standard query (0)	l.betrad.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.036583900 CEST	192.168.2.3	8.8.8.8	0x8a59	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.380443096 CEST	192.168.2.3	8.8.8.8	0x9f3d	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.492070913 CEST	192.168.2.3	8.8.8.8	0xd166	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.511142015 CEST	192.168.2.3	8.8.8.8	0xec69	Standard query (0)	static.adsafeprotected.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.217205048 CEST	192.168.2.3	8.8.8.8	0x15a	Standard query (0)	banners.livepartners.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.256768942 CEST	192.168.2.3	8.8.8.8	0xf769	Standard query (0)	dt.adsafeprotected.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.296747923 CEST	192.168.2.3	8.8.8.8	0xade3	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.328212976 CEST	192.168.2.3	8.8.8.8	0x473c	Standard query (0)	pixel.quantserve.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.369095087 CEST	192.168.2.3	8.8.8.8	0xd9c1	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.552815914 CEST	192.168.2.3	8.8.8.8	0x9e8d	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.639473915 CEST	192.168.2.3	8.8.8.8	0xf458	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.774000883 CEST	192.168.2.3	8.8.8.8	0x1bb6	Standard query (0)	www.thescottishsun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.636370897 CEST	192.168.2.3	8.8.8.8	0xf0d0	Standard query (0)	cmp.cdn.thescottishsun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.679506063 CEST	192.168.2.3	8.8.8.8	0xbda8	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.681875944 CEST	192.168.2.3	8.8.8.8	0x2be9	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.736047983 CEST	192.168.2.3	8.8.8.8	0x7a1c	Standard query (0)	d1z2jf7jlzjs58.cloudfront.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.845551014 CEST	192.168.2.3	8.8.8.8	0x20d	Standard query (0)	ads.thescottishsun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:36.632922888 CEST	192.168.2.3	8.8.8.8	0xbcbe	Standard query (0)	p1.parsely.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:38.971195936 CEST	192.168.2.3	8.8.8.8	0x547f	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:38.996511936 CEST	192.168.2.3	8.8.8.8	0x649d	Standard query (0)	news-uk-d.openx.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.027486086 CEST	192.168.2.3	8.8.8.8	0xf557	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.071835995 CEST	192.168.2.3	8.8.8.8	0x3552	Standard query (0)	c2shb.ssp.yahoo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.941946030 CEST	192.168.2.3	8.8.8.8	0x5720	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.942184925 CEST	192.168.2.3	8.8.8.8	0xc7bd	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.942570925 CEST	192.168.2.3	8.8.8.8	0x5005	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.382735014 CEST	192.168.2.3	8.8.8.8	0x89ba	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.384422064 CEST	192.168.2.3	8.8.8.8	0x1b9d	Standard query (0)	ssc-cms.33across.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.384602070 CEST	192.168.2.3	8.8.8.8	0x7b40	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.388309002 CEST	192.168.2.3	8.8.8.8	0x7889	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.392654896 CEST	192.168.2.3	8.8.8.8	0x53aa	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:41.244255066 CEST	192.168.2.3	8.8.8.8	0x5bec	Standard query (0)	cs.emxdgt.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:41.307240009 CEST	192.168.2.3	8.8.8.8	0x7ade	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:41.757206917 CEST	192.168.2.3	8.8.8.8	0x883e	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.051270008 CEST	192.168.2.3	8.8.8.8	0x1407	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.052608967 CEST	192.168.2.3	8.8.8.8	0x2482	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.056345940 CEST	192.168.2.3	8.8.8.8	0x2163	Standard query (0)	www.thesun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.057079077 CEST	192.168.2.3	8.8.8.8	0x1574	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.066468954 CEST	192.168.2.3	8.8.8.8	0x9b22	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.070102930 CEST	192.168.2.3	8.8.8.8	0x3a0e	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.122565985 CEST	192.168.2.3	8.8.8.8	0x7cd0	Standard query (0)	loada.exelator.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.373090982 CEST	192.168.2.3	8.8.8.8	0x3329	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.376842976 CEST	192.168.2.3	8.8.8.8	0xb66a	Standard query (0)	sync.adotmob.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.511075974 CEST	192.168.2.3	8.8.8.8	0x1f8d	Standard query (0)	casale-match.dotomi.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.629266977 CEST	192.168.2.3	8.8.8.8	0xee39	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.798724890 CEST	192.168.2.3	8.8.8.8	0x3bc7	Standard query (0)	dsum.casalemedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.193363905 CEST	192.168.2.3	8.8.8.8	0x5297	Standard query (0)	ssl.connextra.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.199500084 CEST	192.168.2.3	8.8.8.8	0x844f	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.208890915 CEST	192.168.2.3	8.8.8.8	0xf24a	Standard query (0)	tags.mathtag.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.215245962 CEST	192.168.2.3	8.8.8.8	0x1a20	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.221533060 CEST	192.168.2.3	8.8.8.8	0x30c3	Standard query (0)	c.evidon.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.226308107 CEST	192.168.2.3	8.8.8.8	0x4405	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.591856003 CEST	192.168.2.3	8.8.8.8	0xcb42	Standard query (0)	us.creativecdn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.593578100 CEST	192.168.2.3	8.8.8.8	0x4650	Standard query (0)	www.storygize.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.890912056 CEST	192.168.2.3	8.8.8.8	0xd7d4	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.908147097 CEST	192.168.2.3	8.8.8.8	0x7942	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.916419983 CEST	192.168.2.3	8.8.8.8	0xb88b	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.923171043 CEST	192.168.2.3	8.8.8.8	0x481	Standard query (0)	sync.mathtag.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.934807062 CEST	192.168.2.3	8.8.8.8	0x831b	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:47.107584000 CEST	192.168.2.3	8.8.8.8	0x481f	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.333781958 CEST	192.168.2.3	8.8.8.8	0x6a44	Standard query (0)	rbp.mxptint.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.337229013 CEST	192.168.2.3	8.8.8.8	0xdf0a	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.339778900 CEST	192.168.2.3	8.8.8.8	0xa47c	Standard query (0)	sync.extend.tv	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.345345020 CEST	192.168.2.3	8.8.8.8	0x9764	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.772469044 CEST	192.168.2.3	8.8.8.8	0x9c0a	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.818332911 CEST	192.168.2.3	8.8.8.8	0x6f8a	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.840872049 CEST	192.168.2.3	8.8.8.8	0xcd7e	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.863024950 CEST	192.168.2.3	8.8.8.8	0xa141	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.867628098 CEST	192.168.2.3	8.8.8.8	0x281b	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.890335083 CEST	192.168.2.3	8.8.8.8	0x1768	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.905164957 CEST	192.168.2.3	8.8.8.8	0x5214	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.910242081 CEST	192.168.2.3	8.8.8.8	0xd0d3	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.939182997 CEST	192.168.2.3	8.8.8.8	0xbdb5	Standard query (0)	ads.creative-serving.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.014194012 CEST	192.168.2.3	8.8.8.8	0x48ae	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.075236082 CEST	192.168.2.3	8.8.8.8	0x53cb	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.346849918 CEST	192.168.2.3	8.8.8.8	0x7ef8	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.409683943 CEST	192.168.2.3	8.8.8.8	0x9985	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.429300070 CEST	192.168.2.3	8.8.8.8	0x3986	Standard query (0)	loada.exelator.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.668576002 CEST	192.168.2.3	8.8.8.8	0xfeaf	Standard query (0)	nep.advangelists.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.675297022 CEST	192.168.2.3	8.8.8.8	0xee43	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.697869062 CEST	192.168.2.3	8.8.8.8	0xce57	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.704246044 CEST	192.168.2.3	8.8.8.8	0x4647	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.710875034 CEST	192.168.2.3	8.8.8.8	0x91b	Standard query (0)	p.adsymptotic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.713944912 CEST	192.168.2.3	8.8.8.8	0x2533	Standard query (0)	us.ck-ie.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.858993053 CEST	192.168.2.3	8.8.8.8	0x9f24	Standard query (0)	sync.adotmob.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.912380934 CEST	192.168.2.3	8.8.8.8	0x3e2d	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.913635015 CEST	192.168.2.3	8.8.8.8	0xf521	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.934883118 CEST	192.168.2.3	8.8.8.8	0xac7f	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.131624937 CEST	192.168.2.3	8.8.8.8	0xb34e	Standard query (0)	dsp.nrich.ai	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.676175117 CEST	192.168.2.3	8.8.8.8	0xaff	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.938465118 CEST	192.168.2.3	8.8.8.8	0xc72f	Standard query (0)	www.thescottishsun.co.uk	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.344134092 CEST	192.168.2.3	8.8.8.8	0x1b2f	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.354291916 CEST	192.168.2.3	8.8.8.8	0xa612	Standard query (0)	d.adroll.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.962377071 CEST	192.168.2.3	8.8.8.8	0xb	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:55.730344057 CEST	192.168.2.3	8.8.8.8	0xc6cd	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:55.733320951 CEST	192.168.2.3	8.8.8.8	0x5abd	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:55.738003969 CEST	192.168.2.3	8.8.8.8	0xef7c	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:55.912974119 CEST	192.168.2.3	8.8.8.8	0x8243	Standard query (0)	gu.dyntrk.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.635242939 CEST	192.168.2.3	8.8.8.8	0x5602	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.028805017 CEST	192.168.2.3	8.8.8.8	0x5ff2	Standard query (0)	ssbsync-global.smartadserver.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.367852926 CEST	192.168.2.3	8.8.8.8	0xdf18	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.557822943 CEST	192.168.2.3	8.8.8.8	0x763f	Standard query (0)	ssum.casalemedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.828274965 CEST	192.168.2.3	8.8.8.8	0x3755	Standard query (0)	cm.adform.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.895598888 CEST	192.168.2.3	8.8.8.8	0x4c74	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.901618004 CEST	192.168.2.3	8.8.8.8	0xad4d	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.915369987 CEST	192.168.2.3	8.8.8.8	0xc9da	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.933037043 CEST	192.168.2.3	8.8.8.8	0xf4a	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.954750061 CEST	192.168.2.3	8.8.8.8	0x91a9	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.023804903 CEST	192.168.2.3	8.8.8.8	0x3017	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.260703087 CEST	192.168.2.3	8.8.8.8	0xba4e	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.302069902 CEST	192.168.2.3	8.8.8.8	0xa974	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.364345074 CEST	192.168.2.3	8.8.8.8	0x4c57	Standard query (0)	nep.advangelists.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.391257048 CEST	192.168.2.3	8.8.8.8	0xc439	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.406419039 CEST	192.168.2.3	8.8.8.8	0x9d4f	Standard query (0)	d.adroll.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.419348001 CEST	192.168.2.3	8.8.8.8	0x2cda	Standard query (0)	gu.dyntrk.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.497700930 CEST	192.168.2.3	8.8.8.8	0x519a	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.699457884 CEST	192.168.2.3	8.8.8.8	0x7f37	Standard query (0)	ad2.360yield.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.796111107 CEST	192.168.2.3	8.8.8.8	0xcac8	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.984644890 CEST	192.168.2.3	8.8.8.8	0xd764	Standard query (0)	dmx.districtm.io	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.871912003 CEST	192.168.2.3	8.8.8.8	0x1a4f	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.328737020 CEST	192.168.2.3	8.8.8.8	0xaabe	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.360857010 CEST	192.168.2.3	8.8.8.8	0x2287	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.370158911 CEST	192.168.2.3	8.8.8.8	0x55e8	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.374195099 CEST	192.168.2.3	8.8.8.8	0xb2b4	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.403393030 CEST	192.168.2.3	8.8.8.8	0xcc04	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.414633989 CEST	192.168.2.3	8.8.8.8	0x27c1	Standard query (0)	sync.technoratimedia.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430654049 CEST	192.168.2.3	8.8.8.8	0xde3d	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.444864988 CEST	192.168.2.3	8.8.8.8	0xf407	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.460437059 CEST	192.168.2.3	8.8.8.8	0x3129	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.461545944 CEST	192.168.2.3	8.8.8.8	0x3f79	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.466162920 CEST	192.168.2.3	8.8.8.8	0xd4b8	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.890774012 CEST	192.168.2.3	8.8.8.8	0x4d92	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:06.664700031 CEST	192.168.2.3	8.8.8.8	0x66a9	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 3, 2021 23:19:40.801481962 CEST	8.8.8.8	192.168.2.3	0x5041	No error (0)	accounts.google.com		216.58.205.77	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:40.803004980 CEST	8.8.8.8	192.168.2.3	0xa2c	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:40.803004980 CEST	8.8.8.8	192.168.2.3	0xa2c	No error (0)	clients.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:40.809186935 CEST	8.8.8.8	192.168.2.3	0xc277	No error (0)	www.the-sun.com	d2hpee1akynyiw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:40.809186935 CEST	8.8.8.8	192.168.2.3	0xc277	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:40.809186935 CEST	8.8.8.8	192.168.2.3	0xc277	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:40.809186935 CEST	8.8.8.8	192.168.2.3	0xc277	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.70	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:40.809186935 CEST	8.8.8.8	192.168.2.3	0xc277	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.26	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.671603918 CEST	8.8.8.8	192.168.2.3	0xd7c5	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:41.686539888 CEST	8.8.8.8	192.168.2.3	0x2e32	No error (0)	cmp.cdn.the-sun.com	cdn-259.privacy-mgmt.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:41.686539888 CEST	8.8.8.8	192.168.2.3	0x2e32	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.31	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.686539888 CEST	8.8.8.8	192.168.2.3	0x2e32	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.50	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.686539888 CEST	8.8.8.8	192.168.2.3	0x2e32	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.686539888 CEST	8.8.8.8	192.168.2.3	0x2e32	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.113	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.962776899 CEST	8.8.8.8	192.168.2.3	0x72f8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:41.962776899 CEST	8.8.8.8	192.168.2.3	0x72f8	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.963253021 CEST	8.8.8.8	192.168.2.3	0xf505	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:41.963253021 CEST	8.8.8.8	192.168.2.3	0xf505	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:41.974013090 CEST	8.8.8.8	192.168.2.3	0xbd0f	No error (0)	www-google-analytics.l.google.com		142.250.184.78	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.026551962 CEST	8.8.8.8	192.168.2.3	0x58ad	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.026551962 CEST	8.8.8.8	192.168.2.3	0x58ad	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.107	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.026551962 CEST	8.8.8.8	192.168.2.3	0x58ad	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.122	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.026551962 CEST	8.8.8.8	192.168.2.3	0x58ad	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617069960 CEST	8.8.8.8	192.168.2.3	0xbefc	No error (0)	cdn.p-n.io		216.137.37.74	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617069960 CEST	8.8.8.8	192.168.2.3	0xbefc	No error (0)	cdn.p-n.io		216.137.37.89	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617069960 CEST	8.8.8.8	192.168.2.3	0xbefc	No error (0)	cdn.p-n.io		216.137.37.76	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617069960 CEST	8.8.8.8	192.168.2.3	0xbefc	No error (0)	cdn.p-n.io		216.137.37.94	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617086887 CEST	8.8.8.8	192.168.2.3	0xe04d	No error (0)	cdn.parsely.com		54.230.107.62	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617875099 CEST	8.8.8.8	192.168.2.3	0x5c76	No error (0)	ads.the-sun.com		216.137.37.29	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617875099 CEST	8.8.8.8	192.168.2.3	0x5c76	No error (0)	ads.the-sun.com		216.137.37.118	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617875099 CEST	8.8.8.8	192.168.2.3	0x5c76	No error (0)	ads.the-sun.com		216.137.37.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.617875099 CEST	8.8.8.8	192.168.2.3	0x5c76	No error (0)	ads.the-sun.com		216.137.37.114	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:42.788295984 CEST	8.8.8.8	192.168.2.3	0xb7b3	No error (0)	tags.tiqcdn.com	tags.tiqcdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:43.011909962 CEST	8.8.8.8	192.168.2.3	0x676f	No error (0)	p1.parsely.com		52.205.167.202	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.011909962 CEST	8.8.8.8	192.168.2.3	0x676f	No error (0)	p1.parsely.com		34.194.161.83	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.011909962 CEST	8.8.8.8	192.168.2.3	0x676f	No error (0)	p1.parsely.com		54.144.144.142	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.311342001 CEST	8.8.8.8	192.168.2.3	0xb986	No error (0)	securepubads.g.doubleclick.net	partnerad.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:43.311342001 CEST	8.8.8.8	192.168.2.3	0xb986	No error (0)	partnerad.l.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.322289944 CEST	8.8.8.8	192.168.2.3	0x576c	No error (0)	cdn.permutive.com		104.19.149.54	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.322289944 CEST	8.8.8.8	192.168.2.3	0x576c	No error (0)	cdn.permutive.com		104.19.150.54	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.325972080 CEST	8.8.8.8	192.168.2.3	0xd571	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:43.325972080 CEST	8.8.8.8	192.168.2.3	0xd571	No error (0)	d1ykf07e75w7ss.cloudfront.net		54.230.152.146	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:43.326838970 CEST	8.8.8.8	192.168.2.3	0x8f28	No error (0)	scripts.webcontentassessor.com	k3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:44.102121115 CEST	8.8.8.8	192.168.2.3	0xa4f8	No error (0)	uk-script.dotmetrics.net	d1gzewjq6luteh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:44.102121115 CEST	8.8.8.8	192.168.2.3	0xa4f8	No error (0)	d1gzewjq6luteh.cloudfront.net		54.192.66.121	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.102121115 CEST	8.8.8.8	192.168.2.3	0xa4f8	No error (0)	d1gzewjq6luteh.cloudfront.net		54.192.66.109	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.102121115 CEST	8.8.8.8	192.168.2.3	0xa4f8	No error (0)	d1gzewjq6luteh.cloudfront.net		54.192.66.88	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.102121115 CEST	8.8.8.8	192.168.2.3	0xa4f8	No error (0)	d1gzewjq6luteh.cloudfront.net		54.192.66.98	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.144030094 CEST	8.8.8.8	192.168.2.3	0xda98	No error (0)	pac.thesun.co.uk		216.239.36.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.144030094 CEST	8.8.8.8	192.168.2.3	0xda98	No error (0)	pac.thesun.co.uk		216.239.32.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.144030094 CEST	8.8.8.8	192.168.2.3	0xda98	No error (0)	pac.thesun.co.uk		216.239.38.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.144030094 CEST	8.8.8.8	192.168.2.3	0xda98	No error (0)	pac.thesun.co.uk		216.239.34.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.180151939 CEST	8.8.8.8	192.168.2.3	0xfd33	No error (0)	sb.scorecardresearch.com		54.192.66.103	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.180151939 CEST	8.8.8.8	192.168.2.3	0xfd33	No error (0)	sb.scorecardresearch.com		54.192.66.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.180151939 CEST	8.8.8.8	192.168.2.3	0xfd33	No error (0)	sb.scorecardresearch.com		54.192.66.88	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.180151939 CEST	8.8.8.8	192.168.2.3	0xfd33	No error (0)	sb.scorecardresearch.com		54.192.66.94	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.anycast.adnxs.com		37.252.173.38	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.anycast.adnxs.com		37.252.172.37	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.anycast.adnxs.com		37.252.173.22	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.anycast.adnxs.com		37.252.172.249	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.anycast.adnxs.com		37.252.172.36	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.anycast.adnxs.com		37.252.173.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.anycast.adnxs.com		37.252.172.250	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.406022072 CEST	8.8.8.8	192.168.2.3	0xd8d2	No error (0)	ib.anycast.adnxs.com		37.252.173.62	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.436945915 CEST	8.8.8.8	192.168.2.3	0xda6f	No error (0)	88a66e5c-8fe8-48af-9c6c-3ec3f4983aad.prmutv.co		35.241.9.51	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.865277052 CEST	8.8.8.8	192.168.2.3	0x1154	No error (0)	media.p-n.io		54.192.66.111	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.865277052 CEST	8.8.8.8	192.168.2.3	0x1154	No error (0)	media.p-n.io		54.192.66.30	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.865277052 CEST	8.8.8.8	192.168.2.3	0x1154	No error (0)	media.p-n.io		54.192.66.61	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:44.865277052 CEST	8.8.8.8	192.168.2.3	0x1154	No error (0)	media.p-n.io		54.192.66.105	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.043469906 CEST	8.8.8.8	192.168.2.3	0x2964	No error (0)	api.permutive.com		34.107.254.252	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.108937979 CEST	8.8.8.8	192.168.2.3	0x5a7f	No error (0)	ampcid.google.com		142.250.184.78	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	eu-tlx.3lift.com		35.156.28.35	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	eu-tlx.3lift.com		18.157.172.39	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	eu-tlx.3lift.com		52.28.103.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	eu-tlx.3lift.com		3.125.147.153	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	eu-tlx.3lift.com		18.192.222.132	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	eu-tlx.3lift.com		18.156.24.80	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	eu-tlx.3lift.com		35.158.152.43	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.294442892 CEST	8.8.8.8	192.168.2.3	0xf88c	No error (0)	eu-tlx.3lift.com		35.156.78.196	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	pixel.adsafeprotected.com	iepixel.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	iepixel.adsafeprotected.com	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		99.81.129.224	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		52.17.202.120	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.76.119.149	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.72.19.162	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.72.219.124	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.76.247.168	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.194.39.62	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.306365013 CEST	8.8.8.8	192.168.2.3	0xa681	No error (0)	firewall-external-2134955858.eu-west-1.elb.amazonaws.com		54.76.15.48	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.307243109 CEST	8.8.8.8	192.168.2.3	0xf9b	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.324325085 CEST	8.8.8.8	192.168.2.3	0x30b6	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.324325085 CEST	8.8.8.8	192.168.2.3	0x30b6	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.151	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.324325085 CEST	8.8.8.8	192.168.2.3	0x30b6	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.150	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.341561079 CEST	8.8.8.8	192.168.2.3	0x5507	No error (0)	bidder.criteo.com	bidder.par.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.341561079 CEST	8.8.8.8	192.168.2.3	0x5507	No error (0)	bidder.par.vip.prod.criteo.com		178.250.0.165	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.347383022 CEST	8.8.8.8	192.168.2.3	0x106d	No error (0)	c2shb.ssp.yahoo.com	c2shb.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.347383022 CEST	8.8.8.8	192.168.2.3	0x106d	No error (0)	c2shb.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.347383022 CEST	8.8.8.8	192.168.2.3	0x106d	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		18.156.195.47	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.347383022 CEST	8.8.8.8	192.168.2.3	0x106d	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		35.157.246.167	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.347383022 CEST	8.8.8.8	192.168.2.3	0x106d	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		52.28.203.152	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.442548037 CEST	8.8.8.8	192.168.2.3	0x2f42	No error (0)	ampcid.google.de		142.250.180.110	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.449629068 CEST	8.8.8.8	192.168.2.3	0x226d	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.781727076 CEST	8.8.8.8	192.168.2.3	0x5bb9	No error (0)	aax-eu.amazon-adsystem.com		52.95.116.38	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.794434071 CEST	8.8.8.8	192.168.2.3	0x5e5f	No error (0)	cm.g.doubleclick.net		142.250.180.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.900425911 CEST	8.8.8.8	192.168.2.3	0xba59	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:45.900425911 CEST	8.8.8.8	192.168.2.3	0xba59	No error (0)	stats.l.doubleclick.net		108.177.126.157	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.900425911 CEST	8.8.8.8	192.168.2.3	0xba59	No error (0)	stats.l.doubleclick.net		108.177.126.155	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.900425911 CEST	8.8.8.8	192.168.2.3	0xba59	No error (0)	stats.l.doubleclick.net		108.177.126.154	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:45.900425911 CEST	8.8.8.8	192.168.2.3	0xba59	No error (0)	stats.l.doubleclick.net		108.177.126.156	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.838527918 CEST	8.8.8.8	192.168.2.3	0x36fb	No error (0)	adservice.google.com		142.250.184.34	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.846400976 CEST	8.8.8.8	192.168.2.3	0x80e7	No error (0)	adservice.google.de	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:46.846400976 CEST	8.8.8.8	192.168.2.3	0x80e7	No error (0)	pagead46.l.doubleclick.net		142.250.184.66	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.883929968 CEST	8.8.8.8	192.168.2.3	0x6dfc	No error (0)	static.criteo.net	static.par.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:46.883929968 CEST	8.8.8.8	192.168.2.3	0x6dfc	No error (0)	static.par.vip.prod.criteo.net		178.250.0.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.890086889 CEST	8.8.8.8	192.168.2.3	0xca78	No error (0)	googlesync.permutive.com	api.permutive.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:46.890086889 CEST	8.8.8.8	192.168.2.3	0xca78	No error (0)	api.permutive.com		34.107.254.252	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:46.903397083 CEST	8.8.8.8	192.168.2.3	0xdb38	No error (0)	pagead-googlehosted.l.google.com		142.250.184.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:47.436794043 CEST	8.8.8.8	192.168.2.3	0xba33	No error (0)	gum.criteo.com	gum.am5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:47.436794043 CEST	8.8.8.8	192.168.2.3	0xba33	No error (0)	gum.am5.vip.prod.criteo.com		178.250.2.146	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.084455967 CEST	8.8.8.8	192.168.2.3	0x1085	No error (0)	www.the-sun.com	d2hpee1akynyiw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:48.084455967 CEST	8.8.8.8	192.168.2.3	0x1085	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.084455967 CEST	8.8.8.8	192.168.2.3	0x1085	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.084455967 CEST	8.8.8.8	192.168.2.3	0x1085	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.70	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.084455967 CEST	8.8.8.8	192.168.2.3	0x1085	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.26	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.213558912 CEST	8.8.8.8	192.168.2.3	0x9cd7	No error (0)	media.p-n.io		54.192.66.111	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.213558912 CEST	8.8.8.8	192.168.2.3	0x9cd7	No error (0)	media.p-n.io		54.192.66.30	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.213558912 CEST	8.8.8.8	192.168.2.3	0x9cd7	No error (0)	media.p-n.io		54.192.66.61	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.213558912 CEST	8.8.8.8	192.168.2.3	0x9cd7	No error (0)	media.p-n.io		54.192.66.105	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.557472944 CEST	8.8.8.8	192.168.2.3	0x868e	No error (0)	www.google.com		142.250.180.164	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.838386059 CEST	8.8.8.8	192.168.2.3	0xd9f8	No error (0)	k.p-n.io		35.157.91.125	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.838386059 CEST	8.8.8.8	192.168.2.3	0xd9f8	No error (0)	k.p-n.io		52.57.44.75	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.838386059 CEST	8.8.8.8	192.168.2.3	0xd9f8	No error (0)	k.p-n.io		52.58.15.113	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.838386059 CEST	8.8.8.8	192.168.2.3	0xd9f8	No error (0)	k.p-n.io		3.124.41.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.838386059 CEST	8.8.8.8	192.168.2.3	0xd9f8	No error (0)	k.p-n.io		35.156.217.149	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.838386059 CEST	8.8.8.8	192.168.2.3	0xd9f8	No error (0)	k.p-n.io		3.127.204.186	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.838386059 CEST	8.8.8.8	192.168.2.3	0xd9f8	No error (0)	k.p-n.io		35.156.73.58	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:48.838386059 CEST	8.8.8.8	192.168.2.3	0xd9f8	No error (0)	k.p-n.io		3.126.7.159	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.621494055 CEST	8.8.8.8	192.168.2.3	0x6136	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:52.621494055 CEST	8.8.8.8	192.168.2.3	0x6136	No error (0)	clients.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.755383015 CEST	8.8.8.8	192.168.2.3	0xdcbb	No error (0)	acdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:52.755383015 CEST	8.8.8.8	192.168.2.3	0xdcbb	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.755383015 CEST	8.8.8.8	192.168.2.3	0xdcbb	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.755383015 CEST	8.8.8.8	192.168.2.3	0xdcbb	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.755383015 CEST	8.8.8.8	192.168.2.3	0xdcbb	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.760982990 CEST	8.8.8.8	192.168.2.3	0xf654	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:52.760982990 CEST	8.8.8.8	192.168.2.3	0xf654	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.760982990 CEST	8.8.8.8	192.168.2.3	0xf654	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:52.766665936 CEST	8.8.8.8	192.168.2.3	0x7b47	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.232708931 CEST	8.8.8.8	192.168.2.3	0x9956	No error (0)	match.adsrvr.org	match-aga.adsrvr.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.232708931 CEST	8.8.8.8	192.168.2.3	0x9956	No error (0)	match-aga.adsrvr.org	a97adde81b00f2ca4.awsglobalaccelerator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.232708931 CEST	8.8.8.8	192.168.2.3	0x9956	No error (0)	a97adde81b00f2ca4.awsglobalaccelerator.com		13.248.242.197	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.232708931 CEST	8.8.8.8	192.168.2.3	0x9956	No error (0)	a97adde81b00f2ca4.awsglobalaccelerator.com		76.223.111.131	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.236470938 CEST	8.8.8.8	192.168.2.3	0x47bd	No error (0)	cm.g.doubleclick.net		142.250.180.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.276010036 CEST	8.8.8.8	192.168.2.3	0xcb91	No error (0)	s.amazon-adsystem.com		52.46.133.124	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.276158094 CEST	8.8.8.8	192.168.2.3	0x9152	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.276158094 CEST	8.8.8.8	192.168.2.3	0x9152	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		212.82.100.176	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.277703047 CEST	8.8.8.8	192.168.2.3	0xfe2b	No error (0)	b1sync.zemanta.com	zemanta-nychi.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.277703047 CEST	8.8.8.8	192.168.2.3	0xfe2b	No error (0)	zemanta-nychi.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.277703047 CEST	8.8.8.8	192.168.2.3	0xfe2b	No error (0)	nydc1.outbrain.org		70.42.32.127	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.anycast.adnxs.com		185.33.221.13	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.anycast.adnxs.com		185.33.220.240	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.anycast.adnxs.com		185.33.221.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.anycast.adnxs.com		185.33.221.91	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.anycast.adnxs.com		185.33.221.90	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.anycast.adnxs.com		185.33.221.87	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.anycast.adnxs.com		185.33.220.145	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.278793097 CEST	8.8.8.8	192.168.2.3	0xbcac	No error (0)	ib.anycast.adnxs.com		185.33.221.52	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:54.535595894 CEST	8.8.8.8	192.168.2.3	0x2700	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:54.535595894 CEST	8.8.8.8	192.168.2.3	0x2700	No error (0)	googlehosted.l.googleusercontent.com		216.58.208.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:55.030400991 CEST	8.8.8.8	192.168.2.3	0xeb72	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:55.048070908 CEST	8.8.8.8	192.168.2.3	0xa11c	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:55.048070908 CEST	8.8.8.8	192.168.2.3	0xa11c	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:55.048070908 CEST	8.8.8.8	192.168.2.3	0xa11c	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:55.053155899 CEST	8.8.8.8	192.168.2.3	0xd5f1	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:55.053155899 CEST	8.8.8.8	192.168.2.3	0xd5f1	No error (0)	pixel-origin.mathtag.com		185.29.132.245	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:55.053155899 CEST	8.8.8.8	192.168.2.3	0xd5f1	No error (0)	pixel-origin.mathtag.com		185.29.132.241	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:55.053155899 CEST	8.8.8.8	192.168.2.3	0xd5f1	No error (0)	pixel-origin.mathtag.com		185.29.135.227	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:55.053155899 CEST	8.8.8.8	192.168.2.3	0xd5f1	No error (0)	pixel-origin.mathtag.com		185.29.135.233	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:55.124584913 CEST	8.8.8.8	192.168.2.3	0x321a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:56.261162043 CEST	8.8.8.8	192.168.2.3	0x9713	No error (0)	ads.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:56.261162043 CEST	8.8.8.8	192.168.2.3	0x9713	No error (0)	edge.gycpi.b.yahoodns.net		87.248.118.23	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:56.261162043 CEST	8.8.8.8	192.168.2.3	0x9713	No error (0)	edge.gycpi.b.yahoodns.net		87.248.118.22	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:56.922394991 CEST	8.8.8.8	192.168.2.3	0xdb3e	No error (0)	www.the-sun.com	d2hpee1akynyiw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:56.922394991 CEST	8.8.8.8	192.168.2.3	0xdb3e	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.70	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:56.922394991 CEST	8.8.8.8	192.168.2.3	0xdb3e	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.26	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:56.922394991 CEST	8.8.8.8	192.168.2.3	0xdb3e	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:56.922394991 CEST	8.8.8.8	192.168.2.3	0xdb3e	No error (0)	d2hpee1akynyiw.cloudfront.net		216.137.37.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.415810108 CEST	8.8.8.8	192.168.2.3	0xc31c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:57.415810108 CEST	8.8.8.8	192.168.2.3	0xc31c	No error (0)	star-mini.c10r.facebook.com		157.240.17.35	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.415925980 CEST	8.8.8.8	192.168.2.3	0x9b4f	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:57.415925980 CEST	8.8.8.8	192.168.2.3	0x9b4f	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.421533108 CEST	8.8.8.8	192.168.2.3	0xb723	No error (0)	www-google-analytics.l.google.com		142.250.184.78	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.538383961 CEST	8.8.8.8	192.168.2.3	0xaeb	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.122	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.538383961 CEST	8.8.8.8	192.168.2.3	0xaeb	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.538383961 CEST	8.8.8.8	192.168.2.3	0xaeb	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:57.538383961 CEST	8.8.8.8	192.168.2.3	0xaeb	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.107	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:58.351102114 CEST	8.8.8.8	192.168.2.3	0xeb69	No error (0)	p1.parsely.com		54.144.144.142	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:58.351102114 CEST	8.8.8.8	192.168.2.3	0xeb69	No error (0)	p1.parsely.com		34.194.161.83	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:58.351102114 CEST	8.8.8.8	192.168.2.3	0xeb69	No error (0)	p1.parsely.com		52.205.167.202	A (IP address)	IN (0x0001)
Aug 3, 2021 23:19:59.761504889 CEST	8.8.8.8	192.168.2.3	0x9ae1	No error (0)	securepubads.g.doubleclick.net	partnerad.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:19:59.761504889 CEST	8.8.8.8	192.168.2.3	0x9ae1	No error (0)	partnerad.l.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.387758017 CEST	8.8.8.8	192.168.2.3	0xa5eb	No error (0)	hb-api.omnitagjs.com	hb-api-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.387758017 CEST	8.8.8.8	192.168.2.3	0xa5eb	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.151	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.387758017 CEST	8.8.8.8	192.168.2.3	0xa5eb	No error (0)	hb-api-fra02.omnitagjs.com		185.255.84.150	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.477024078 CEST	8.8.8.8	192.168.2.3	0xea26	No error (0)	bidder.criteo.com	bidder.am5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.477024078 CEST	8.8.8.8	192.168.2.3	0xea26	No error (0)	bidder.am5.vip.prod.criteo.com		178.250.2.131	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.527158976 CEST	8.8.8.8	192.168.2.3	0x96d	No error (0)	c2shb.ssp.yahoo.com	c2shb.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.527158976 CEST	8.8.8.8	192.168.2.3	0x96d	No error (0)	c2shb.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.527158976 CEST	8.8.8.8	192.168.2.3	0x96d	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		18.156.195.47	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.527158976 CEST	8.8.8.8	192.168.2.3	0x96d	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		35.157.246.167	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.527158976 CEST	8.8.8.8	192.168.2.3	0x96d	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		52.28.203.152	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.714624882 CEST	8.8.8.8	192.168.2.3	0x3f43	No error (0)	3pd.criteo.com	3pd.am5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.714624882 CEST	8.8.8.8	192.168.2.3	0x3f43	No error (0)	3pd.am5.vip.prod.criteo.com		178.250.2.80	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.718478918 CEST	8.8.8.8	192.168.2.3	0x2d44	No error (0)	stats.g.doubleclick.net	stats.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.718478918 CEST	8.8.8.8	192.168.2.3	0x2d44	No error (0)	stats.l.doubleclick.net		108.177.126.155	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.718478918 CEST	8.8.8.8	192.168.2.3	0x2d44	No error (0)	stats.l.doubleclick.net		108.177.126.156	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.718478918 CEST	8.8.8.8	192.168.2.3	0x2d44	No error (0)	stats.l.doubleclick.net		108.177.126.157	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.718478918 CEST	8.8.8.8	192.168.2.3	0x2d44	No error (0)	stats.l.doubleclick.net		108.177.126.154	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.753618002 CEST	8.8.8.8	192.168.2.3	0xa83a	No error (0)	aax-eu.amazon-adsystem.com		52.95.123.167	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.947132111 CEST	8.8.8.8	192.168.2.3	0x90a2	No error (0)	sync.taboola.com	am-sync.taboola.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.947132111 CEST	8.8.8.8	192.168.2.3	0x90a2	No error (0)	am-sync.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.947132111 CEST	8.8.8.8	192.168.2.3	0x90a2	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948652983 CEST	8.8.8.8	192.168.2.3	0x9d7b	No error (0)	www.google.de		142.250.184.99	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	x.bidswitch.net	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		3.121.111.29	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.57.47.211	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		54.93.69.146	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		18.198.117.246	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		18.195.239.175	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.58.229.235	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		3.66.103.148	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.948681116 CEST	8.8.8.8	192.168.2.3	0xcf97	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.29.176.117	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.951997042 CEST	8.8.8.8	192.168.2.3	0xad3e	No error (0)	match.prod.bidr.io		52.17.245.120	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.951997042 CEST	8.8.8.8	192.168.2.3	0xad3e	No error (0)	match.prod.bidr.io		52.30.222.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.951997042 CEST	8.8.8.8	192.168.2.3	0xad3e	No error (0)	match.prod.bidr.io		52.16.214.249	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.951997042 CEST	8.8.8.8	192.168.2.3	0xad3e	No error (0)	match.prod.bidr.io		52.49.238.187	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.951997042 CEST	8.8.8.8	192.168.2.3	0xad3e	No error (0)	match.prod.bidr.io		54.246.13.173	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.951997042 CEST	8.8.8.8	192.168.2.3	0xad3e	No error (0)	match.prod.bidr.io		52.30.92.119	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.951997042 CEST	8.8.8.8	192.168.2.3	0xad3e	No error (0)	match.prod.bidr.io		34.247.100.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:00.951997042 CEST	8.8.8.8	192.168.2.3	0xad3e	No error (0)	match.prod.bidr.io		34.252.144.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:01.109606028 CEST	8.8.8.8	192.168.2.3	0x6655	No error (0)	googleads.g.doubleclick.net		142.250.184.98	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:01.204803944 CEST	8.8.8.8	192.168.2.3	0x1822	No error (0)	prod.perf-serving.com	prod.oba.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:01.204803944 CEST	8.8.8.8	192.168.2.3	0x1822	No error (0)	prod.oba.iponweb.net	oba.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:01.204803944 CEST	8.8.8.8	192.168.2.3	0x1822	No error (0)	oba.geo.iponweb.net	elb-aws-fr-oba-294519942.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:01.204803944 CEST	8.8.8.8	192.168.2.3	0x1822	No error (0)	elb-aws-fr-oba-294519942.eu-central-1.elb.amazonaws.com		18.192.249.156	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:01.204803944 CEST	8.8.8.8	192.168.2.3	0x1822	No error (0)	elb-aws-fr-oba-294519942.eu-central-1.elb.amazonaws.com		3.127.166.11	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:01.212867022 CEST	8.8.8.8	192.168.2.3	0x677c	No error (0)	pagead-googlehosted.l.google.com		142.250.184.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.702573061 CEST	8.8.8.8	192.168.2.3	0xd542	No error (0)	match.adsrvr.org	match-aga.adsrvr.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:03.702573061 CEST	8.8.8.8	192.168.2.3	0xd542	No error (0)	match-aga.adsrvr.org	a97adde81b00f2ca4.awsglobalaccelerator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:03.702573061 CEST	8.8.8.8	192.168.2.3	0xd542	No error (0)	a97adde81b00f2ca4.awsglobalaccelerator.com		13.248.242.197	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.702573061 CEST	8.8.8.8	192.168.2.3	0xd542	No error (0)	a97adde81b00f2ca4.awsglobalaccelerator.com		76.223.111.131	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.726466894 CEST	8.8.8.8	192.168.2.3	0xabaa	No error (0)	cm.g.doubleclick.net		142.250.180.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.746838093 CEST	8.8.8.8	192.168.2.3	0xcc8	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:03.746838093 CEST	8.8.8.8	192.168.2.3	0xcc8	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.746838093 CEST	8.8.8.8	192.168.2.3	0xcc8	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.884815931 CEST	8.8.8.8	192.168.2.3	0x18d4	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:03.884815931 CEST	8.8.8.8	192.168.2.3	0x18d4	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		212.82.100.176	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.anycast.adnxs.com		37.252.173.38	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.anycast.adnxs.com		37.252.172.37	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.anycast.adnxs.com		37.252.173.22	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.anycast.adnxs.com		37.252.172.249	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.anycast.adnxs.com		37.252.172.36	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.anycast.adnxs.com		37.252.173.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.anycast.adnxs.com		37.252.172.250	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.912184954 CEST	8.8.8.8	192.168.2.3	0x123f	No error (0)	ib.anycast.adnxs.com		37.252.173.62	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.960048914 CEST	8.8.8.8	192.168.2.3	0xae7b	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:03.981535912 CEST	8.8.8.8	192.168.2.3	0x5218	No error (0)	b1sync.zemanta.com	zemanta-nychi.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:03.981535912 CEST	8.8.8.8	192.168.2.3	0x5218	No error (0)	zemanta-nychi.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:03.981535912 CEST	8.8.8.8	192.168.2.3	0x5218	No error (0)	nydc1.outbrain.org		64.202.112.127	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.874975920 CEST	8.8.8.8	192.168.2.3	0x14c3	No error (0)	match.prod.bidr.io		34.247.100.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.874975920 CEST	8.8.8.8	192.168.2.3	0x14c3	No error (0)	match.prod.bidr.io		52.16.214.249	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.874975920 CEST	8.8.8.8	192.168.2.3	0x14c3	No error (0)	match.prod.bidr.io		52.30.222.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.874975920 CEST	8.8.8.8	192.168.2.3	0x14c3	No error (0)	match.prod.bidr.io		34.252.144.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.874975920 CEST	8.8.8.8	192.168.2.3	0x14c3	No error (0)	match.prod.bidr.io		52.30.92.119	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.874975920 CEST	8.8.8.8	192.168.2.3	0x14c3	No error (0)	match.prod.bidr.io		52.49.238.187	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.874975920 CEST	8.8.8.8	192.168.2.3	0x14c3	No error (0)	match.prod.bidr.io		52.17.245.120	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.874975920 CEST	8.8.8.8	192.168.2.3	0x14c3	No error (0)	match.prod.bidr.io		54.246.13.173	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	x.bidswitch.net	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		3.121.111.29	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.57.47.211	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		54.93.69.146	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		18.198.117.246	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		18.195.239.175	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.58.229.235	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		3.66.103.148	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.890222073 CEST	8.8.8.8	192.168.2.3	0x4a50	No error (0)	alb-aws-fr-bswx-2-1673521430.eu-central-1.elb.amazonaws.com		52.29.176.117	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:05.915532112 CEST	8.8.8.8	192.168.2.3	0xd091	No error (0)	sync.taboola.com	am-sync.taboola.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:05.915532112 CEST	8.8.8.8	192.168.2.3	0xd091	No error (0)	am-sync.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:05.915532112 CEST	8.8.8.8	192.168.2.3	0xd091	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:06.085187912 CEST	8.8.8.8	192.168.2.3	0x3e46	No error (0)	prod.perf-serving.com	prod.oba.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:06.085187912 CEST	8.8.8.8	192.168.2.3	0x3e46	No error (0)	prod.oba.iponweb.net	oba.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:06.085187912 CEST	8.8.8.8	192.168.2.3	0x3e46	No error (0)	oba.geo.iponweb.net	elb-aws-fr-oba-294519942.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:06.085187912 CEST	8.8.8.8	192.168.2.3	0x3e46	No error (0)	elb-aws-fr-oba-294519942.eu-central-1.elb.amazonaws.com		18.192.249.156	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:06.085187912 CEST	8.8.8.8	192.168.2.3	0x3e46	No error (0)	elb-aws-fr-oba-294519942.eu-central-1.elb.amazonaws.com		3.127.166.11	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:06.101336002 CEST	8.8.8.8	192.168.2.3	0xd0c1	No error (0)	3pd.criteo.com	3pd.am5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:06.101336002 CEST	8.8.8.8	192.168.2.3	0xd0c1	No error (0)	3pd.am5.vip.prod.criteo.com		178.250.2.80	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.319217920 CEST	8.8.8.8	192.168.2.3	0xa3cc	No error (0)	px.ads.linkedin.com	mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:07.319217920 CEST	8.8.8.8	192.168.2.3	0xa3cc	No error (0)	mix.linkedin.com	glb-na.mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:07.319217920 CEST	8.8.8.8	192.168.2.3	0xa3cc	No error (0)	glb-na.mix.linkedin.com	pop-edc2.mix.linkedin.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:07.319217920 CEST	8.8.8.8	192.168.2.3	0xa3cc	No error (0)	pop-edc2.mix.linkedin.com		108.174.11.85	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.559142113 CEST	8.8.8.8	192.168.2.3	0x1f42	No error (0)	cs.emxdgt.com		18.195.155.181	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.626682043 CEST	8.8.8.8	192.168.2.3	0x9a6b	No error (0)	sync.1rx.io		213.19.147.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.659250021 CEST	8.8.8.8	192.168.2.3	0x2a95	No error (0)	certificates.godaddy.com	gdcrl.godaddy.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:07.721596956 CEST	8.8.8.8	192.168.2.3	0x5b2e	No error (0)	rtb.gumgum.com		52.208.210.171	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.721596956 CEST	8.8.8.8	192.168.2.3	0x5b2e	No error (0)	rtb.gumgum.com		54.77.19.59	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.721596956 CEST	8.8.8.8	192.168.2.3	0x5b2e	No error (0)	rtb.gumgum.com		34.251.173.19	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.721596956 CEST	8.8.8.8	192.168.2.3	0x5b2e	No error (0)	rtb.gumgum.com		52.208.41.69	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.721596956 CEST	8.8.8.8	192.168.2.3	0x5b2e	No error (0)	rtb.gumgum.com		34.254.122.11	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.721596956 CEST	8.8.8.8	192.168.2.3	0x5b2e	No error (0)	rtb.gumgum.com		54.194.104.251	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.721596956 CEST	8.8.8.8	192.168.2.3	0x5b2e	No error (0)	rtb.gumgum.com		52.48.175.241	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.721596956 CEST	8.8.8.8	192.168.2.3	0x5b2e	No error (0)	rtb.gumgum.com		54.77.47.243	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:07.784600019 CEST	8.8.8.8	192.168.2.3	0x58db	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:08.025532961 CEST	8.8.8.8	192.168.2.3	0x6e0	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:08.025532961 CEST	8.8.8.8	192.168.2.3	0x6e0	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:08.025532961 CEST	8.8.8.8	192.168.2.3	0x6e0	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		3.126.56.137	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.025532961 CEST	8.8.8.8	192.168.2.3	0x6e0	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		18.156.0.31	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.155524015 CEST	8.8.8.8	192.168.2.3	0xea04	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.155524015 CEST	8.8.8.8	192.168.2.3	0xea04	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.567209959 CEST	8.8.8.8	192.168.2.3	0x25ba	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:08.567209959 CEST	8.8.8.8	192.168.2.3	0x25ba	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:08.567209959 CEST	8.8.8.8	192.168.2.3	0x25ba	No error (0)	ssbsync-eqx.smartadserver.com		185.86.137.121	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.567209959 CEST	8.8.8.8	192.168.2.3	0x25ba	No error (0)	ssbsync-eqx.smartadserver.com		185.86.137.107	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.567209959 CEST	8.8.8.8	192.168.2.3	0x25ba	No error (0)	ssbsync-eqx.smartadserver.com		185.86.137.108	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.567209959 CEST	8.8.8.8	192.168.2.3	0x25ba	No error (0)	ssbsync-eqx.smartadserver.com		185.86.137.122	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	emeas.vap.lijit.com	oeu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	oeu.vap.lijit.com		216.52.2.30	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	oeu.vap.lijit.com		72.251.249.13	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	oeu.vap.lijit.com		216.52.2.19	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	oeu.vap.lijit.com		216.52.2.48	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	oeu.vap.lijit.com		72.251.249.9	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	oeu.vap.lijit.com		72.251.249.14	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:08.867165089 CEST	8.8.8.8	192.168.2.3	0xf515	No error (0)	oeu.vap.lijit.com		216.52.2.39	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.694459915 CEST	8.8.8.8	192.168.2.3	0x36f2	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:09.699323893 CEST	8.8.8.8	192.168.2.3	0x755e	No error (0)	sync.hgrtb.com	a1d62eaab24bc49d6bb06f376c8bbc41-1682425342.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:09.699323893 CEST	8.8.8.8	192.168.2.3	0x755e	No error (0)	a1d62eaab24bc49d6bb06f376c8bbc41-1682425342.us-east-1.elb.amazonaws.com		18.208.43.12	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.699323893 CEST	8.8.8.8	192.168.2.3	0x755e	No error (0)	a1d62eaab24bc49d6bb06f376c8bbc41-1682425342.us-east-1.elb.amazonaws.com		52.202.119.123	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.712855101 CEST	8.8.8.8	192.168.2.3	0x2273	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:09.712855101 CEST	8.8.8.8	192.168.2.3	0x2273	No error (0)	pixel-a.sitescout.com		66.155.71.149	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.195.240.234	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.195.66.88	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.159.8.206	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.193.5.71	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.156.68.186	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.197.127.76	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:09.721786022 CEST	8.8.8.8	192.168.2.3	0x879	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.196.123.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:12.082355976 CEST	8.8.8.8	192.168.2.3	0xcd93	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:12.082355976 CEST	8.8.8.8	192.168.2.3	0xcd93	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:12.394088030 CEST	8.8.8.8	192.168.2.3	0xa146	No error (0)	facebook.com		157.240.20.35	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:13.866262913 CEST	8.8.8.8	192.168.2.3	0x1c10	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:13.978600025 CEST	8.8.8.8	192.168.2.3	0x3645	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:13.978600025 CEST	8.8.8.8	192.168.2.3	0x3645	No error (0)	global.px.quantserve.com		91.228.74.189	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:13.978600025 CEST	8.8.8.8	192.168.2.3	0x3645	No error (0)	global.px.quantserve.com		91.228.74.133	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:13.978600025 CEST	8.8.8.8	192.168.2.3	0x3645	No error (0)	global.px.quantserve.com		91.228.74.226	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:13.978600025 CEST	8.8.8.8	192.168.2.3	0x3645	No error (0)	global.px.quantserve.com		91.228.74.198	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:13.978600025 CEST	8.8.8.8	192.168.2.3	0x3645	No error (0)	global.px.quantserve.com		91.228.74.134	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:14.015973091 CEST	8.8.8.8	192.168.2.3	0xdb97	No error (0)	creativecdn.com		185.184.8.65	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:14.295774937 CEST	8.8.8.8	192.168.2.3	0x66b0	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.267640114 CEST	8.8.8.8	192.168.2.3	0x92a0	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.267640114 CEST	8.8.8.8	192.168.2.3	0x92a0	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.279175043 CEST	8.8.8.8	192.168.2.3	0x46f5	No error (0)	facebook.com		157.240.20.35	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.419328928 CEST	8.8.8.8	192.168.2.3	0xff4a	No error (0)	twitter.com		104.244.42.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.419328928 CEST	8.8.8.8	192.168.2.3	0xff4a	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.590991020 CEST	8.8.8.8	192.168.2.3	0x8385	No error (0)	image6.pubmatic.com	pugm22000nfc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.590991020 CEST	8.8.8.8	192.168.2.3	0x8385	No error (0)	pugm22000nfc.pubmatic.com	pugm22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.590991020 CEST	8.8.8.8	192.168.2.3	0x8385	No error (0)	pugm22000nf.pubmatic.com		185.64.189.115	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	ce.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	emeas.vap.lijit.com	oeu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	oeu.vap.lijit.com		216.52.2.39	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	oeu.vap.lijit.com		72.251.249.9	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	oeu.vap.lijit.com		72.251.249.13	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	oeu.vap.lijit.com		216.52.2.19	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	oeu.vap.lijit.com		216.52.2.48	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	oeu.vap.lijit.com		216.52.2.30	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.608247042 CEST	8.8.8.8	192.168.2.3	0x4a18	No error (0)	oeu.vap.lijit.com		72.251.249.14	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.615097046 CEST	8.8.8.8	192.168.2.3	0x1d12	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.615097046 CEST	8.8.8.8	192.168.2.3	0x1d12	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.616199970 CEST	8.8.8.8	192.168.2.3	0xb392	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	beacon.krxd.net	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.16.114.37	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		54.171.152.112	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		34.241.214.49	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		99.81.82.31	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.51.228.134	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.210.205.137	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.213.85.37	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.639170885 CEST	8.8.8.8	192.168.2.3	0xc75c	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.48.60.171	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.652546883 CEST	8.8.8.8	192.168.2.3	0x5ca8	No error (0)	pixel-a.sitescout.com		66.155.71.149	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.946078062 CEST	8.8.8.8	192.168.2.3	0xfd2c	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.946078062 CEST	8.8.8.8	192.168.2.3	0xfd2c	No error (0)	cs510.wpc.edgecastcdn.net		152.199.21.141	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.969490051 CEST	8.8.8.8	192.168.2.3	0x9719	No error (0)	sync.ipredictive.com		52.21.104.248	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.969490051 CEST	8.8.8.8	192.168.2.3	0x9719	No error (0)	sync.ipredictive.com		54.175.176.13	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.969490051 CEST	8.8.8.8	192.168.2.3	0x9719	No error (0)	sync.ipredictive.com		54.226.209.67	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.969490051 CEST	8.8.8.8	192.168.2.3	0x9719	No error (0)	sync.ipredictive.com		54.159.94.231	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.969490051 CEST	8.8.8.8	192.168.2.3	0x9719	No error (0)	sync.ipredictive.com		34.196.50.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.969490051 CEST	8.8.8.8	192.168.2.3	0x9719	No error (0)	sync.ipredictive.com		34.194.115.107	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.969490051 CEST	8.8.8.8	192.168.2.3	0x9719	No error (0)	sync.ipredictive.com		3.220.196.160	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.969490051 CEST	8.8.8.8	192.168.2.3	0x9719	No error (0)	sync.ipredictive.com		34.232.92.67	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.975073099 CEST	8.8.8.8	192.168.2.3	0x5685	No error (0)	api.twitter.com	tpop-api.twitter.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.975073099 CEST	8.8.8.8	192.168.2.3	0x5685	No error (0)	tpop-api.twitter.com		104.244.42.2	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.975073099 CEST	8.8.8.8	192.168.2.3	0x5685	No error (0)	tpop-api.twitter.com		104.244.42.66	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.975073099 CEST	8.8.8.8	192.168.2.3	0x5685	No error (0)	tpop-api.twitter.com		104.244.42.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.975073099 CEST	8.8.8.8	192.168.2.3	0x5685	No error (0)	tpop-api.twitter.com		104.244.42.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.980596066 CEST	8.8.8.8	192.168.2.3	0xbd8f	No error (0)	video.twimg.com	video.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.980596066 CEST	8.8.8.8	192.168.2.3	0xbd8f	No error (0)	video.twitter.map.fastly.net		199.232.136.158	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:15.982208967 CEST	8.8.8.8	192.168.2.3	0xc287	No error (0)	pbs.twimg.com	cs196.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.982208967 CEST	8.8.8.8	192.168.2.3	0xc287	No error (0)	cs196.wac.edgecastcdn.net	cs2-wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.982208967 CEST	8.8.8.8	192.168.2.3	0xc287	No error (0)	cs2-wac-eu.8315.ecdns.net	cs45.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:15.982208967 CEST	8.8.8.8	192.168.2.3	0xc287	No error (0)	cs45.wac.edgecastcdn.net		93.184.220.70	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.009524107 CEST	8.8.8.8	192.168.2.3	0x2e7f	No error (0)	t.co		104.244.42.69	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.009524107 CEST	8.8.8.8	192.168.2.3	0x2e7f	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.009524107 CEST	8.8.8.8	192.168.2.3	0x2e7f	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.009524107 CEST	8.8.8.8	192.168.2.3	0x2e7f	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.430155993 CEST	8.8.8.8	192.168.2.3	0x29d3	No error (0)	um.simpli.fi		159.253.128.183	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.430155993 CEST	8.8.8.8	192.168.2.3	0x29d3	No error (0)	um.simpli.fi		169.50.137.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.430155993 CEST	8.8.8.8	192.168.2.3	0x29d3	No error (0)	um.simpli.fi		159.253.128.188	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	i.w55c.net	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		18.158.226.176	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		18.159.182.76	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		18.185.192.106	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.123.143.157	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.125.99.7	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		52.57.110.162	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.66.135.160	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.670532942 CEST	8.8.8.8	192.168.2.3	0x1e32	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.127.92.82	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.699465036 CEST	8.8.8.8	192.168.2.3	0x4e48	No error (0)	id.sharedid.org	sharedid-prodloadbalancer-1791472238.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:16.699465036 CEST	8.8.8.8	192.168.2.3	0x4e48	No error (0)	sharedid-prodloadbalancer-1791472238.us-west-2.elb.amazonaws.com		34.216.100.107	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.699465036 CEST	8.8.8.8	192.168.2.3	0x4e48	No error (0)	sharedid-prodloadbalancer-1791472238.us-west-2.elb.amazonaws.com		35.82.71.229	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.164	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.183	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.182	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.165	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.168	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.166	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.180	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.169	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.181	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.167	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.184	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:16.878803015 CEST	8.8.8.8	192.168.2.3	0x1598	No error (0)	d5p.de17a.com		213.155.156.185	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:17.173657894 CEST	8.8.8.8	192.168.2.3	0x5bb1	No error (0)	image2.pubmatic.com	pug-lhrc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:17.173657894 CEST	8.8.8.8	192.168.2.3	0x5bb1	No error (0)	pug-lhrc.pubmatic.com	pug-lhr.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:17.173657894 CEST	8.8.8.8	192.168.2.3	0x5bb1	No error (0)	pug-lhr.pubmatic.com		185.64.190.80	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:18.948899984 CEST	8.8.8.8	192.168.2.3	0x7164	No error (0)	abs.twimg.com	cs510.wpc.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:18.948899984 CEST	8.8.8.8	192.168.2.3	0x7164	No error (0)	cs510.wpc.edgecastcdn.net		152.199.21.141	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.561659098 CEST	8.8.8.8	192.168.2.3	0x89fc	No error (0)	www.thesun.co.uk	d1f52rifaxccal.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:19.561659098 CEST	8.8.8.8	192.168.2.3	0x89fc	No error (0)	d1f52rifaxccal.cloudfront.net		54.192.66.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.561659098 CEST	8.8.8.8	192.168.2.3	0x89fc	No error (0)	d1f52rifaxccal.cloudfront.net		54.192.66.40	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.561659098 CEST	8.8.8.8	192.168.2.3	0x89fc	No error (0)	d1f52rifaxccal.cloudfront.net		54.192.66.117	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.561659098 CEST	8.8.8.8	192.168.2.3	0x89fc	No error (0)	d1f52rifaxccal.cloudfront.net		54.192.66.102	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.762948990 CEST	8.8.8.8	192.168.2.3	0x4fc4	No error (0)	dis.criteo.com	widget.par.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:19.762948990 CEST	8.8.8.8	192.168.2.3	0x4fc4	No error (0)	widget.par.vip.prod.criteo.com		178.250.0.163	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.804297924 CEST	8.8.8.8	192.168.2.3	0xb22	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.804297924 CEST	8.8.8.8	192.168.2.3	0xb22	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:19.996592045 CEST	8.8.8.8	192.168.2.3	0xa656	No error (0)	simage2.pubmatic.com	pug22000nfc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:19.996592045 CEST	8.8.8.8	192.168.2.3	0xa656	No error (0)	pug22000nfc.pubmatic.com	pug22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:19.996592045 CEST	8.8.8.8	192.168.2.3	0xa656	No error (0)	pug22000nf.pubmatic.com		185.64.189.110	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.076371908 CEST	8.8.8.8	192.168.2.3	0xb60f	No error (0)	cmp.cdn.thesun.co.uk	cdn-259.privacy-mgmt.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:20.076371908 CEST	8.8.8.8	192.168.2.3	0xb60f	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.31	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.076371908 CEST	8.8.8.8	192.168.2.3	0xb60f	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.50	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.076371908 CEST	8.8.8.8	192.168.2.3	0xb60f	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.113	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.076371908 CEST	8.8.8.8	192.168.2.3	0xb60f	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.926879883 CEST	8.8.8.8	192.168.2.3	0xae2b	No error (0)	ads.thesun.co.uk		216.137.37.55	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.926879883 CEST	8.8.8.8	192.168.2.3	0xae2b	No error (0)	ads.thesun.co.uk		216.137.37.69	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.926879883 CEST	8.8.8.8	192.168.2.3	0xae2b	No error (0)	ads.thesun.co.uk		216.137.37.110	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:20.926879883 CEST	8.8.8.8	192.168.2.3	0xae2b	No error (0)	ads.thesun.co.uk		216.137.37.13	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.012548923 CEST	8.8.8.8	192.168.2.3	0xec2a	No error (0)	tags.tiqcdn.com	tags.tiqcdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:21.149409056 CEST	8.8.8.8	192.168.2.3	0x2f2e	No error (0)	ampcid.google.com		142.250.184.78	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.726169109 CEST	8.8.8.8	192.168.2.3	0x2171	No error (0)	ampcid.google.de		142.250.180.110	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.859281063 CEST	8.8.8.8	192.168.2.3	0xe145	No error (0)	prebid.the-ozone-project.com		216.137.37.56	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.859281063 CEST	8.8.8.8	192.168.2.3	0xe145	No error (0)	prebid.the-ozone-project.com		216.137.37.32	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.859281063 CEST	8.8.8.8	192.168.2.3	0xe145	No error (0)	prebid.the-ozone-project.com		216.137.37.49	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.859281063 CEST	8.8.8.8	192.168.2.3	0xe145	No error (0)	prebid.the-ozone-project.com		216.137.37.107	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.860529900 CEST	8.8.8.8	192.168.2.3	0x4909	No error (0)	cdn.brandmetrics.com		104.26.6.155	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.860529900 CEST	8.8.8.8	192.168.2.3	0x4909	No error (0)	cdn.brandmetrics.com		104.26.7.155	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:21.860529900 CEST	8.8.8.8	192.168.2.3	0x4909	No error (0)	cdn.brandmetrics.com		172.67.69.247	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:23.296937943 CEST	8.8.8.8	192.168.2.3	0xa85a	No error (0)	csync.loopme.me	generic-2.lb.lm5v.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:23.296937943 CEST	8.8.8.8	192.168.2.3	0xa85a	No error (0)	generic-2.lb.lm5v.com		162.55.6.210	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:23.296937943 CEST	8.8.8.8	192.168.2.3	0xa85a	No error (0)	generic-2.lb.lm5v.com		162.55.6.212	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:23.296937943 CEST	8.8.8.8	192.168.2.3	0xa85a	No error (0)	generic-2.lb.lm5v.com		162.55.6.213	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:23.296937943 CEST	8.8.8.8	192.168.2.3	0xa85a	No error (0)	generic-2.lb.lm5v.com		162.55.6.211	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.005124092 CEST	8.8.8.8	192.168.2.3	0x427e	No error (0)	htlb.casalemedia.com	htlb.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:24.028085947 CEST	8.8.8.8	192.168.2.3	0x1a21	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.028085947 CEST	8.8.8.8	192.168.2.3	0x1a21	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.035861969 CEST	8.8.8.8	192.168.2.3	0xbdcd	No error (0)	a.teads.tv	a.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:24.044533014 CEST	8.8.8.8	192.168.2.3	0x1ddd	No error (0)	elb.the-ozone-project.com	pbs.ozpr.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:24.044533014 CEST	8.8.8.8	192.168.2.3	0x1ddd	No error (0)	pbs.ozpr.net		34.255.141.211	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.044533014 CEST	8.8.8.8	192.168.2.3	0x1ddd	No error (0)	pbs.ozpr.net		176.34.188.16	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.066654921 CEST	8.8.8.8	192.168.2.3	0x22cd	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:24.157193899 CEST	8.8.8.8	192.168.2.3	0x1a50	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:24.157193899 CEST	8.8.8.8	192.168.2.3	0x1a50	No error (0)	sync.1rx.io		213.19.147.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.495590925 CEST	8.8.8.8	192.168.2.3	0x3f0b	No error (0)	js-agent.newrelic.com	newrelic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:24.495590925 CEST	8.8.8.8	192.168.2.3	0x3f0b	No error (0)	newrelic.map.fastly.net		151.101.1.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.495590925 CEST	8.8.8.8	192.168.2.3	0x3f0b	No error (0)	newrelic.map.fastly.net		151.101.65.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.495590925 CEST	8.8.8.8	192.168.2.3	0x3f0b	No error (0)	newrelic.map.fastly.net		151.101.129.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.495590925 CEST	8.8.8.8	192.168.2.3	0x3f0b	No error (0)	newrelic.map.fastly.net		151.101.193.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:24.716001987 CEST	8.8.8.8	192.168.2.3	0xa74d	No error (0)	bam-cell.nr-data.net	tls12.newrelic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:25.087564945 CEST	8.8.8.8	192.168.2.3	0xa718	No error (0)	pagead-googlehosted.l.google.com		142.250.184.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.656196117 CEST	8.8.8.8	192.168.2.3	0xc3b9	No error (0)	gum.criteo.com	gum.am5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:25.656196117 CEST	8.8.8.8	192.168.2.3	0xc3b9	No error (0)	gum.am5.vip.prod.criteo.com		178.250.2.146	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.761475086 CEST	8.8.8.8	192.168.2.3	0x5e47	No error (0)	tags.mathtag.com		185.29.132.246	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.761475086 CEST	8.8.8.8	192.168.2.3	0x5e47	No error (0)	tags.mathtag.com		185.29.135.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.761475086 CEST	8.8.8.8	192.168.2.3	0x5e47	No error (0)	tags.mathtag.com		185.29.132.242	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.764386892 CEST	8.8.8.8	192.168.2.3	0x1318	No error (0)	www.googletagservices.com		142.250.184.34	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:25.799295902 CEST	8.8.8.8	192.168.2.3	0x450b	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:26.150316000 CEST	8.8.8.8	192.168.2.3	0x6b6d	No error (0)	aorta.clickagy.com		52.7.51.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.150316000 CEST	8.8.8.8	192.168.2.3	0x6b6d	No error (0)	aorta.clickagy.com		52.21.173.249	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.150316000 CEST	8.8.8.8	192.168.2.3	0x6b6d	No error (0)	aorta.clickagy.com		52.87.48.29	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.150316000 CEST	8.8.8.8	192.168.2.3	0x6b6d	No error (0)	aorta.clickagy.com		54.163.239.172	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.150316000 CEST	8.8.8.8	192.168.2.3	0x6b6d	No error (0)	aorta.clickagy.com		52.6.250.79	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.150316000 CEST	8.8.8.8	192.168.2.3	0x6b6d	No error (0)	aorta.clickagy.com		52.72.174.10	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.150316000 CEST	8.8.8.8	192.168.2.3	0x6b6d	No error (0)	aorta.clickagy.com		34.198.192.195	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.150316000 CEST	8.8.8.8	192.168.2.3	0x6b6d	No error (0)	aorta.clickagy.com		34.194.112.31	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:26.209338903 CEST	8.8.8.8	192.168.2.3	0x67c6	No error (0)	beacon-fra2.rubiconproject.com	beacon-fra2.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:26.238944054 CEST	8.8.8.8	192.168.2.3	0xed4f	No error (0)	c.betrad.com	wildcard.betrad.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:26.240006924 CEST	8.8.8.8	192.168.2.3	0xeda0	No error (0)	ssl.connextra.com	connextra.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:26.243976116 CEST	8.8.8.8	192.168.2.3	0x327b	No error (0)	pixel.mathtag.com	pixel.mathtag.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:28.237853050 CEST	8.8.8.8	192.168.2.3	0xc787	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:28.237853050 CEST	8.8.8.8	192.168.2.3	0xc787	No error (0)	pixel-origin.mathtag.com		185.29.135.227	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:28.237853050 CEST	8.8.8.8	192.168.2.3	0xc787	No error (0)	pixel-origin.mathtag.com		185.29.132.245	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:28.237853050 CEST	8.8.8.8	192.168.2.3	0xc787	No error (0)	pixel-origin.mathtag.com		185.29.132.241	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:28.237853050 CEST	8.8.8.8	192.168.2.3	0xc787	No error (0)	pixel-origin.mathtag.com		185.29.135.233	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:28.249391079 CEST	8.8.8.8	192.168.2.3	0x6d41	No error (0)	c.evidon.com	wildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:29.940479040 CEST	8.8.8.8	192.168.2.3	0x5e65	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:29.940479040 CEST	8.8.8.8	192.168.2.3	0x5e65	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:29.943572998 CEST	8.8.8.8	192.168.2.3	0x560a	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:29.943669081 CEST	8.8.8.8	192.168.2.3	0x73de	No error (0)	sync.tidaltv.com	sync.tidaltv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.066689014 CEST	8.8.8.8	192.168.2.3	0x8021	No error (0)	match.adsby.bidtheatre.com		159.65.197.210	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.066689014 CEST	8.8.8.8	192.168.2.3	0x8021	No error (0)	match.adsby.bidtheatre.com		159.65.196.12	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.066689014 CEST	8.8.8.8	192.168.2.3	0x8021	No error (0)	match.adsby.bidtheatre.com		178.62.202.251	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.067966938 CEST	8.8.8.8	192.168.2.3	0x44f	No error (0)	b1sync.zemanta.com	zemanta-nychi.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.067966938 CEST	8.8.8.8	192.168.2.3	0x44f	No error (0)	zemanta-nychi.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.067966938 CEST	8.8.8.8	192.168.2.3	0x44f	No error (0)	nydc1.outbrain.org		70.42.32.127	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.070858002 CEST	8.8.8.8	192.168.2.3	0xe7a2	No error (0)	dsp.adkernel.com		174.137.133.49	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.074539900 CEST	8.8.8.8	192.168.2.3	0x490	No error (0)	tracking.m6r.eu	origin-tracking.m6r.eu		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.074539900 CEST	8.8.8.8	192.168.2.3	0x490	No error (0)	origin-tracking.m6r.eu		72.251.244.140	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.074539900 CEST	8.8.8.8	192.168.2.3	0x490	No error (0)	origin-tracking.m6r.eu		72.251.244.141	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.074539900 CEST	8.8.8.8	192.168.2.3	0x490	No error (0)	origin-tracking.m6r.eu		72.251.244.142	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.081634998 CEST	8.8.8.8	192.168.2.3	0x1a1b	No error (0)	rtb2-useast.e-volution.ai	e-volution.rtb-as-useast.ak-is2.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.081634998 CEST	8.8.8.8	192.168.2.3	0x1a1b	No error (0)	e-volution.rtb-as-useast.ak-is2.net		174.137.133.49	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.096648932 CEST	8.8.8.8	192.168.2.3	0x4fe1	No error (0)	ad.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.096648932 CEST	8.8.8.8	192.168.2.3	0x4fe1	No error (0)	dart.l.doubleclick.net		216.58.209.38	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		3.250.252.43	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		63.32.159.255	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.248.156.174	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.214.168.199	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.31.176.223	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.171.168.191	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.76.54.153	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.466540098 CEST	8.8.8.8	192.168.2.3	0x3bab	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.212.101.97	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.611299992 CEST	8.8.8.8	192.168.2.3	0x944	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:30.617578983 CEST	8.8.8.8	192.168.2.3	0xab50	No error (0)	bcp.crwdcntrl.net		52.208.103.128	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.617578983 CEST	8.8.8.8	192.168.2.3	0xab50	No error (0)	bcp.crwdcntrl.net		54.194.226.253	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.617578983 CEST	8.8.8.8	192.168.2.3	0xab50	No error (0)	bcp.crwdcntrl.net		34.253.111.115	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.617578983 CEST	8.8.8.8	192.168.2.3	0xab50	No error (0)	bcp.crwdcntrl.net		52.48.137.92	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.617578983 CEST	8.8.8.8	192.168.2.3	0xab50	No error (0)	bcp.crwdcntrl.net		52.30.14.23	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.617578983 CEST	8.8.8.8	192.168.2.3	0xab50	No error (0)	bcp.crwdcntrl.net		54.171.173.220	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.617578983 CEST	8.8.8.8	192.168.2.3	0xab50	No error (0)	bcp.crwdcntrl.net		34.251.130.56	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.617578983 CEST	8.8.8.8	192.168.2.3	0xab50	No error (0)	bcp.crwdcntrl.net		52.209.129.133	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:30.954895020 CEST	8.8.8.8	192.168.2.3	0xb832	No error (0)	ssum-sec.casalemedia.com	ssum-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:31.724940062 CEST	8.8.8.8	192.168.2.3	0x908b	No error (0)	js-sec.indexww.com	js-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:32.021346092 CEST	8.8.8.8	192.168.2.3	0x26e8	No error (0)	bttrack.com		192.132.33.46	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.021764040 CEST	8.8.8.8	192.168.2.3	0x5c	No error (0)	sync.srv.stackadapt.com		34.205.3.24	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.021764040 CEST	8.8.8.8	192.168.2.3	0x5c	No error (0)	sync.srv.stackadapt.com		3.228.133.61	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.021764040 CEST	8.8.8.8	192.168.2.3	0x5c	No error (0)	sync.srv.stackadapt.com		18.210.5.212	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.021764040 CEST	8.8.8.8	192.168.2.3	0x5c	No error (0)	sync.srv.stackadapt.com		52.44.53.247	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.021764040 CEST	8.8.8.8	192.168.2.3	0x5c	No error (0)	sync.srv.stackadapt.com		34.204.22.100	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.021764040 CEST	8.8.8.8	192.168.2.3	0x5c	No error (0)	sync.srv.stackadapt.com		54.209.16.83	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.021764040 CEST	8.8.8.8	192.168.2.3	0x5c	No error (0)	sync.srv.stackadapt.com		54.87.192.123	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.021764040 CEST	8.8.8.8	192.168.2.3	0x5c	No error (0)	sync.srv.stackadapt.com		54.81.207.173	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	pm.w55c.net	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.66.135.160	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.125.99.7	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		18.158.226.176	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.127.92.82	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.123.143.157	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		18.185.192.106	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		18.159.182.76	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.028729916 CEST	8.8.8.8	192.168.2.3	0xb2dd	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		54.93.179.96	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.034681082 CEST	8.8.8.8	192.168.2.3	0x4193	No error (0)	triplelift-match.dotomi.com	afp.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:32.036323071 CEST	8.8.8.8	192.168.2.3	0xb09	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:32.036323071 CEST	8.8.8.8	192.168.2.3	0xb09	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:32.036323071 CEST	8.8.8.8	192.168.2.3	0xb09	No error (0)	global.px.quantserve.com		91.228.74.226	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.036323071 CEST	8.8.8.8	192.168.2.3	0xb09	No error (0)	global.px.quantserve.com		91.228.74.198	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.036323071 CEST	8.8.8.8	192.168.2.3	0xb09	No error (0)	global.px.quantserve.com		91.228.74.134	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.036323071 CEST	8.8.8.8	192.168.2.3	0xb09	No error (0)	global.px.quantserve.com		91.228.74.189	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.036323071 CEST	8.8.8.8	192.168.2.3	0xb09	No error (0)	global.px.quantserve.com		91.228.74.133	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.176470041 CEST	8.8.8.8	192.168.2.3	0x77af	No error (0)	rtb.adentifi.com		35.171.36.131	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.176470041 CEST	8.8.8.8	192.168.2.3	0x77af	No error (0)	rtb.adentifi.com		52.202.1.196	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.176470041 CEST	8.8.8.8	192.168.2.3	0x77af	No error (0)	rtb.adentifi.com		54.210.14.23	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.176470041 CEST	8.8.8.8	192.168.2.3	0x77af	No error (0)	rtb.adentifi.com		52.4.51.239	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.176470041 CEST	8.8.8.8	192.168.2.3	0x77af	No error (0)	rtb.adentifi.com		52.45.16.192	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.176470041 CEST	8.8.8.8	192.168.2.3	0x77af	No error (0)	rtb.adentifi.com		52.45.185.178	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.176470041 CEST	8.8.8.8	192.168.2.3	0x77af	No error (0)	rtb.adentifi.com		52.3.173.52	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.176470041 CEST	8.8.8.8	192.168.2.3	0x77af	No error (0)	rtb.adentifi.com		54.236.227.29	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.182625055 CEST	8.8.8.8	192.168.2.3	0x5308	No error (0)	match.deepintent.com	g.deepintent.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:32.182625055 CEST	8.8.8.8	192.168.2.3	0x5308	No error (0)	g.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.182625055 CEST	8.8.8.8	192.168.2.3	0x5308	No error (0)	g.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.182625055 CEST	8.8.8.8	192.168.2.3	0x5308	No error (0)	g.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:32.294019938 CEST	8.8.8.8	192.168.2.3	0xa066	No error (0)	pixel.tapad.com		35.227.248.159	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	l.betrad.com	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		18.214.101.4	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		54.174.86.56	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		23.23.140.169	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		44.193.157.209	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		52.44.38.222	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		52.1.208.65	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		34.237.236.212	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.003645897 CEST	8.8.8.8	192.168.2.3	0xf20	No error (0)	privacycollector-production-457481513.us-east-1.elb.amazonaws.com		54.172.15.170	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.095138073 CEST	8.8.8.8	192.168.2.3	0x8a59	No error (0)	s0.2mdn.net	s0-2mdn-net.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:33.095138073 CEST	8.8.8.8	192.168.2.3	0x8a59	No error (0)	s0-2mdn-net.l.google.com		216.58.208.166	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	secure.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	ib.anycast.adnxs.com		185.33.220.241	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	ib.anycast.adnxs.com		185.33.221.88	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	ib.anycast.adnxs.com		185.33.221.89	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	ib.anycast.adnxs.com		185.33.221.11	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	ib.anycast.adnxs.com		185.33.221.14	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	ib.anycast.adnxs.com		185.33.221.90	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	ib.anycast.adnxs.com		185.33.220.145	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.408198118 CEST	8.8.8.8	192.168.2.3	0x9f3d	No error (0)	ib.anycast.adnxs.com		185.33.220.240	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.532565117 CEST	8.8.8.8	192.168.2.3	0xd166	No error (0)	googleads4.g.doubleclick.net		142.250.184.34	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	static.adsafeprotected.com	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		52.48.135.146	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		52.209.62.127	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		52.18.40.16	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		54.171.159.231	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		63.34.109.205	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		52.17.241.173	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		99.80.56.168	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:33.536067009 CEST	8.8.8.8	192.168.2.3	0xec69	No error (0)	stati-stati-5vqsw3ctlefo-93594259.eu-west-1.elb.amazonaws.com		54.77.67.228	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.252934933 CEST	8.8.8.8	192.168.2.3	0x15a	No error (0)	banners.livepartners.com		104.18.27.183	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.252934933 CEST	8.8.8.8	192.168.2.3	0x15a	No error (0)	banners.livepartners.com		104.18.26.183	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.281317949 CEST	8.8.8.8	192.168.2.3	0xf769	No error (0)	dt.adsafeprotected.com	nyidt.adsafeprotected.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:34.281317949 CEST	8.8.8.8	192.168.2.3	0xf769	No error (0)	nyidt.adsafeprotected.com		104.244.36.20	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.321347952 CEST	8.8.8.8	192.168.2.3	0xade3	No error (0)	aax-eu.amazon-adsystem.com		52.95.123.167	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.360475063 CEST	8.8.8.8	192.168.2.3	0x473c	No error (0)	pixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:34.360475063 CEST	8.8.8.8	192.168.2.3	0x473c	No error (0)	global.px.quantserve.com		91.228.74.189	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.360475063 CEST	8.8.8.8	192.168.2.3	0x473c	No error (0)	global.px.quantserve.com		91.228.74.133	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.360475063 CEST	8.8.8.8	192.168.2.3	0x473c	No error (0)	global.px.quantserve.com		91.228.74.226	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.360475063 CEST	8.8.8.8	192.168.2.3	0x473c	No error (0)	global.px.quantserve.com		91.228.74.198	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.360475063 CEST	8.8.8.8	192.168.2.3	0x473c	No error (0)	global.px.quantserve.com		91.228.74.134	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.403003931 CEST	8.8.8.8	192.168.2.3	0xd9c1	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:34.577124119 CEST	8.8.8.8	192.168.2.3	0x9e8d	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.577124119 CEST	8.8.8.8	192.168.2.3	0x9e8d	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.664067984 CEST	8.8.8.8	192.168.2.3	0xf458	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.664067984 CEST	8.8.8.8	192.168.2.3	0xf458	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.817583084 CEST	8.8.8.8	192.168.2.3	0x1bb6	No error (0)	www.thescottishsun.co.uk		54.192.66.80	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.817583084 CEST	8.8.8.8	192.168.2.3	0x1bb6	No error (0)	www.thescottishsun.co.uk		54.192.66.92	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.817583084 CEST	8.8.8.8	192.168.2.3	0x1bb6	No error (0)	www.thescottishsun.co.uk		54.192.66.12	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:34.817583084 CEST	8.8.8.8	192.168.2.3	0x1bb6	No error (0)	www.thescottishsun.co.uk		54.192.66.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.677453041 CEST	8.8.8.8	192.168.2.3	0xf0d0	No error (0)	cmp.cdn.thescottishsun.co.uk	cdn-259.privacy-mgmt.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:35.677453041 CEST	8.8.8.8	192.168.2.3	0xf0d0	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.113	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.677453041 CEST	8.8.8.8	192.168.2.3	0xf0d0	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.31	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.677453041 CEST	8.8.8.8	192.168.2.3	0xf0d0	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.50	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.677453041 CEST	8.8.8.8	192.168.2.3	0xf0d0	No error (0)	cdn-259.privacy-mgmt.com		54.192.66.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.705602884 CEST	8.8.8.8	192.168.2.3	0xbda8	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:35.705602884 CEST	8.8.8.8	192.168.2.3	0xbda8	No error (0)	star-mini.c10r.facebook.com		157.240.20.35	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.712697983 CEST	8.8.8.8	192.168.2.3	0x2683	No error (0)	www-google-analytics.l.google.com		142.250.184.78	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.715370893 CEST	8.8.8.8	192.168.2.3	0x2be9	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:35.715370893 CEST	8.8.8.8	192.168.2.3	0x2be9	No error (0)	scontent.xx.fbcdn.net		157.240.17.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.771218061 CEST	8.8.8.8	192.168.2.3	0x7a1c	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.771218061 CEST	8.8.8.8	192.168.2.3	0x7a1c	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.107	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.771218061 CEST	8.8.8.8	192.168.2.3	0x7a1c	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.122	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.771218061 CEST	8.8.8.8	192.168.2.3	0x7a1c	No error (0)	d1z2jf7jlzjs58.cloudfront.net		205.251.222.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.880630970 CEST	8.8.8.8	192.168.2.3	0x20d	No error (0)	ads.thescottishsun.co.uk		216.137.37.105	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.880630970 CEST	8.8.8.8	192.168.2.3	0x20d	No error (0)	ads.thescottishsun.co.uk		216.137.37.121	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.880630970 CEST	8.8.8.8	192.168.2.3	0x20d	No error (0)	ads.thescottishsun.co.uk		216.137.37.101	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:35.880630970 CEST	8.8.8.8	192.168.2.3	0x20d	No error (0)	ads.thescottishsun.co.uk		216.137.37.39	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:36.665246010 CEST	8.8.8.8	192.168.2.3	0xbcbe	No error (0)	p1.parsely.com		52.205.167.202	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:36.665246010 CEST	8.8.8.8	192.168.2.3	0xbcbe	No error (0)	p1.parsely.com		34.194.161.83	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:36.665246010 CEST	8.8.8.8	192.168.2.3	0xbcbe	No error (0)	p1.parsely.com		54.144.144.142	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:38.998749018 CEST	8.8.8.8	192.168.2.3	0x547f	No error (0)	bidder.criteo.com	bidder.par.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:38.998749018 CEST	8.8.8.8	192.168.2.3	0x547f	No error (0)	bidder.par.vip.prod.criteo.com		178.250.0.165	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.040730953 CEST	8.8.8.8	192.168.2.3	0x649d	No error (0)	news-uk-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.040730953 CEST	8.8.8.8	192.168.2.3	0x649d	No error (0)	news-uk-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.anycast.adnxs.com		37.252.173.38	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.anycast.adnxs.com		37.252.172.37	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.anycast.adnxs.com		37.252.173.22	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.anycast.adnxs.com		37.252.172.249	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.anycast.adnxs.com		37.252.172.36	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.anycast.adnxs.com		37.252.173.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.anycast.adnxs.com		37.252.172.250	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.052088022 CEST	8.8.8.8	192.168.2.3	0xf557	No error (0)	ib.anycast.adnxs.com		37.252.173.62	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.109148979 CEST	8.8.8.8	192.168.2.3	0x3552	No error (0)	c2shb.ssp.yahoo.com	c2shb.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:39.109148979 CEST	8.8.8.8	192.168.2.3	0x3552	No error (0)	c2shb.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:39.109148979 CEST	8.8.8.8	192.168.2.3	0x3552	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		35.157.246.167	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.109148979 CEST	8.8.8.8	192.168.2.3	0x3552	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		18.156.195.47	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.109148979 CEST	8.8.8.8	192.168.2.3	0x3552	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		52.28.203.152	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.967391014 CEST	8.8.8.8	192.168.2.3	0x5005	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.967391014 CEST	8.8.8.8	192.168.2.3	0x5005	No error (0)	pixel.onaudience.com		51.210.112.236	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.967391014 CEST	8.8.8.8	192.168.2.3	0x5005	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.967391014 CEST	8.8.8.8	192.168.2.3	0x5005	No error (0)	pixel.onaudience.com		51.210.112.63	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.967391014 CEST	8.8.8.8	192.168.2.3	0x5005	No error (0)	pixel.onaudience.com		51.79.83.225	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.967799902 CEST	8.8.8.8	192.168.2.3	0xc7bd	No error (0)	image4.pubmatic.com	spug22000nfc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:39.967799902 CEST	8.8.8.8	192.168.2.3	0xc7bd	No error (0)	spug22000nfc.pubmatic.com	spug22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:39.967799902 CEST	8.8.8.8	192.168.2.3	0xc7bd	No error (0)	spug22000nf.pubmatic.com		185.64.189.114	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:39.981926918 CEST	8.8.8.8	192.168.2.3	0x5720	No error (0)	dsum-sec.casalemedia.com	dsum-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:39.983211994 CEST	8.8.8.8	192.168.2.3	0xcab9	No error (0)	pagead-googlehosted.l.google.com		142.250.184.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.412323952 CEST	8.8.8.8	192.168.2.3	0x7b40	No error (0)	ads.avct.cloud	eventd-eu.avct.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:40.412323952 CEST	8.8.8.8	192.168.2.3	0x7b40	No error (0)	eventd-eu.avct.cloud		52.17.151.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.412323952 CEST	8.8.8.8	192.168.2.3	0x7b40	No error (0)	eventd-eu.avct.cloud		34.240.2.137	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.412323952 CEST	8.8.8.8	192.168.2.3	0x7b40	No error (0)	eventd-eu.avct.cloud		54.194.211.3	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.416721106 CEST	8.8.8.8	192.168.2.3	0x89ba	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:40.416892052 CEST	8.8.8.8	192.168.2.3	0x1b9d	No error (0)	ssc-cms.33across.com	pixel.33across.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:40.416892052 CEST	8.8.8.8	192.168.2.3	0x1b9d	No error (0)	pixel.33across.com		208.100.17.175	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		202.241.208.53	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.48	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		202.241.208.100	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		202.241.208.55	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.52	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.45	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		202.241.208.56	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		202.241.208.52	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.51	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		202.241.208.54	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		202.241.208.57	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.50	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.47	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.46	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.49	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.43	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.420761108 CEST	8.8.8.8	192.168.2.3	0x7889	No error (0)	tg.dr.socdm.com		124.146.215.42	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:40.427006960 CEST	8.8.8.8	192.168.2.3	0x53aa	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:41.276472092 CEST	8.8.8.8	192.168.2.3	0x5bec	No error (0)	cs.emxdgt.com		18.195.155.181	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:41.340075970 CEST	8.8.8.8	192.168.2.3	0x7ade	No error (0)	sync.1rx.io		213.19.147.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:41.792994976 CEST	8.8.8.8	192.168.2.3	0x883e	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:41.792994976 CEST	8.8.8.8	192.168.2.3	0x883e	No error (0)	sync.1rx.io		213.19.147.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.083159924 CEST	8.8.8.8	192.168.2.3	0x1574	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.083159924 CEST	8.8.8.8	192.168.2.3	0x1574	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.083159924 CEST	8.8.8.8	192.168.2.3	0x1574	No error (0)	nydc1.outbrain.org		64.202.112.127	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.086735964 CEST	8.8.8.8	192.168.2.3	0x1407	No error (0)	sync.1rx.io		213.19.147.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.087639093 CEST	8.8.8.8	192.168.2.3	0x2482	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.087639093 CEST	8.8.8.8	192.168.2.3	0x2482	No error (0)	lga-bh.contextweb.com	lga-bh-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.087639093 CEST	8.8.8.8	192.168.2.3	0x2482	No error (0)	lga-bh-bgp.contextweb.com		198.148.27.140	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.087639093 CEST	8.8.8.8	192.168.2.3	0x2482	No error (0)	lga-bh-bgp.contextweb.com		198.148.27.139	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.091273069 CEST	8.8.8.8	192.168.2.3	0x2163	No error (0)	www.thesun.co.uk	d1f52rifaxccal.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.091273069 CEST	8.8.8.8	192.168.2.3	0x2163	No error (0)	d1f52rifaxccal.cloudfront.net		54.192.66.40	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.091273069 CEST	8.8.8.8	192.168.2.3	0x2163	No error (0)	d1f52rifaxccal.cloudfront.net		54.192.66.102	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.091273069 CEST	8.8.8.8	192.168.2.3	0x2163	No error (0)	d1f52rifaxccal.cloudfront.net		54.192.66.27	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.091273069 CEST	8.8.8.8	192.168.2.3	0x2163	No error (0)	d1f52rifaxccal.cloudfront.net		54.192.66.117	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.091315985 CEST	8.8.8.8	192.168.2.3	0x9b22	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.091315985 CEST	8.8.8.8	192.168.2.3	0x9b22	No error (0)	adserver.technoratimedia.com	v01.cap-ash1.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.091315985 CEST	8.8.8.8	192.168.2.3	0x9b22	No error (0)	v01.cap-ash1.technoratimedia.com		193.122.128.135	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	ice.360yield.com	eu2-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	eu2-ice.360yield.com		3.124.27.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	eu2-ice.360yield.com		52.29.14.143	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	eu2-ice.360yield.com		18.185.200.55	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	eu2-ice.360yield.com		35.157.249.55	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	eu2-ice.360yield.com		54.93.130.92	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	eu2-ice.360yield.com		18.196.16.240	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	eu2-ice.360yield.com		52.59.30.175	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.113146067 CEST	8.8.8.8	192.168.2.3	0x3a0e	No error (0)	eu2-ice.360yield.com		52.58.206.142	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.156980991 CEST	8.8.8.8	192.168.2.3	0x7cd0	No error (0)	loada.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.156980991 CEST	8.8.8.8	192.168.2.3	0x7cd0	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.156980991 CEST	8.8.8.8	192.168.2.3	0x7cd0	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.408483028 CEST	8.8.8.8	192.168.2.3	0x3329	No error (0)	match.prod.bidr.io		52.17.245.120	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.408483028 CEST	8.8.8.8	192.168.2.3	0x3329	No error (0)	match.prod.bidr.io		52.30.222.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.408483028 CEST	8.8.8.8	192.168.2.3	0x3329	No error (0)	match.prod.bidr.io		52.16.214.249	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.408483028 CEST	8.8.8.8	192.168.2.3	0x3329	No error (0)	match.prod.bidr.io		52.49.238.187	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.408483028 CEST	8.8.8.8	192.168.2.3	0x3329	No error (0)	match.prod.bidr.io		54.246.13.173	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.408483028 CEST	8.8.8.8	192.168.2.3	0x3329	No error (0)	match.prod.bidr.io		52.30.92.119	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.408483028 CEST	8.8.8.8	192.168.2.3	0x3329	No error (0)	match.prod.bidr.io		34.247.100.44	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.408483028 CEST	8.8.8.8	192.168.2.3	0x3329	No error (0)	match.prod.bidr.io		34.252.144.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.414228916 CEST	8.8.8.8	192.168.2.3	0xb66a	No error (0)	sync.adotmob.com		185.183.112.148	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.557909966 CEST	8.8.8.8	192.168.2.3	0x1f8d	No error (0)	casale-match.dotomi.com	afp.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.661612034 CEST	8.8.8.8	192.168.2.3	0xee39	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:43.661612034 CEST	8.8.8.8	192.168.2.3	0xee39	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		18.210.180.232	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.661612034 CEST	8.8.8.8	192.168.2.3	0xee39	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		52.86.210.192	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.661612034 CEST	8.8.8.8	192.168.2.3	0xee39	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.196.122.10	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.661612034 CEST	8.8.8.8	192.168.2.3	0xee39	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.90.144.255	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:43.865264893 CEST	8.8.8.8	192.168.2.3	0x3bc7	No error (0)	dsum.casalemedia.com	dsum.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:44.227307081 CEST	8.8.8.8	192.168.2.3	0x5297	No error (0)	ssl.connextra.com	connextra.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:44.232076883 CEST	8.8.8.8	192.168.2.3	0x844f	No error (0)	pixel.mathtag.com	pixel.mathtag.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:44.241338015 CEST	8.8.8.8	192.168.2.3	0xf24a	No error (0)	tags.mathtag.com		185.29.132.246	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.241338015 CEST	8.8.8.8	192.168.2.3	0xf24a	No error (0)	tags.mathtag.com		185.29.132.242	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.241338015 CEST	8.8.8.8	192.168.2.3	0xf24a	No error (0)	tags.mathtag.com		185.29.135.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.250689030 CEST	8.8.8.8	192.168.2.3	0x1a20	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:44.252197981 CEST	8.8.8.8	192.168.2.3	0x4405	No error (0)	www.google.com		142.250.180.164	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:44.257260084 CEST	8.8.8.8	192.168.2.3	0x30c3	No error (0)	c.evidon.com	wildcard.evidon.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:46.616962910 CEST	8.8.8.8	192.168.2.3	0xcb42	No error (0)	us.creativecdn.com		185.184.10.30	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.628875017 CEST	8.8.8.8	192.168.2.3	0x4650	No error (0)	www.storygize.net	prod-elb-ace-1350792799.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:46.628875017 CEST	8.8.8.8	192.168.2.3	0x4650	No error (0)	prod-elb-ace-1350792799.us-west-2.elb.amazonaws.com		35.164.48.168	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.628875017 CEST	8.8.8.8	192.168.2.3	0x4650	No error (0)	prod-elb-ace-1350792799.us-west-2.elb.amazonaws.com		44.241.90.205	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.628875017 CEST	8.8.8.8	192.168.2.3	0x4650	No error (0)	prod-elb-ace-1350792799.us-west-2.elb.amazonaws.com		34.214.108.84	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.628875017 CEST	8.8.8.8	192.168.2.3	0x4650	No error (0)	prod-elb-ace-1350792799.us-west-2.elb.amazonaws.com		52.88.59.72	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.628875017 CEST	8.8.8.8	192.168.2.3	0x4650	No error (0)	prod-elb-ace-1350792799.us-west-2.elb.amazonaws.com		34.210.251.235	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.628875017 CEST	8.8.8.8	192.168.2.3	0x4650	No error (0)	prod-elb-ace-1350792799.us-west-2.elb.amazonaws.com		52.33.164.254	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.916948080 CEST	8.8.8.8	192.168.2.3	0xd7d4	No error (0)	creativecdn.com		185.184.8.65	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.195.66.88	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.159.8.206	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.197.127.76	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.195.240.234	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.196.123.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.156.68.186	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.940876961 CEST	8.8.8.8	192.168.2.3	0x7942	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.193.5.71	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.948895931 CEST	8.8.8.8	192.168.2.3	0xb88b	No error (0)	aorta.clickagy.com		52.7.51.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.948895931 CEST	8.8.8.8	192.168.2.3	0xb88b	No error (0)	aorta.clickagy.com		52.21.173.249	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.948895931 CEST	8.8.8.8	192.168.2.3	0xb88b	No error (0)	aorta.clickagy.com		52.87.48.29	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.948895931 CEST	8.8.8.8	192.168.2.3	0xb88b	No error (0)	aorta.clickagy.com		54.163.239.172	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.948895931 CEST	8.8.8.8	192.168.2.3	0xb88b	No error (0)	aorta.clickagy.com		52.6.250.79	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.948895931 CEST	8.8.8.8	192.168.2.3	0xb88b	No error (0)	aorta.clickagy.com		52.72.174.10	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.948895931 CEST	8.8.8.8	192.168.2.3	0xb88b	No error (0)	aorta.clickagy.com		34.198.192.195	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.948895931 CEST	8.8.8.8	192.168.2.3	0xb88b	No error (0)	aorta.clickagy.com		34.194.112.31	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.958487988 CEST	8.8.8.8	192.168.2.3	0x481	No error (0)	sync.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:46.958487988 CEST	8.8.8.8	192.168.2.3	0x481	No error (0)	pixel-origin.mathtag.com		185.29.135.226	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.958487988 CEST	8.8.8.8	192.168.2.3	0x481	No error (0)	pixel-origin.mathtag.com		185.29.132.245	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.958487988 CEST	8.8.8.8	192.168.2.3	0x481	No error (0)	pixel-origin.mathtag.com		185.29.132.241	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.958487988 CEST	8.8.8.8	192.168.2.3	0x481	No error (0)	pixel-origin.mathtag.com		185.29.135.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	secure.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	ib.anycast.adnxs.com		185.33.220.241	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	ib.anycast.adnxs.com		185.33.221.88	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	ib.anycast.adnxs.com		185.33.221.89	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	ib.anycast.adnxs.com		185.33.221.11	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	ib.anycast.adnxs.com		185.33.221.14	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	ib.anycast.adnxs.com		185.33.221.90	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	ib.anycast.adnxs.com		185.33.220.145	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:46.959728003 CEST	8.8.8.8	192.168.2.3	0x831b	No error (0)	ib.anycast.adnxs.com		185.33.220.240	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	ce.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	emeas.vap.lijit.com	oeu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	oeu.vap.lijit.com		216.52.2.39	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	oeu.vap.lijit.com		72.251.249.9	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	oeu.vap.lijit.com		72.251.249.13	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	oeu.vap.lijit.com		216.52.2.19	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	oeu.vap.lijit.com		216.52.2.48	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	oeu.vap.lijit.com		216.52.2.30	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:47.132517099 CEST	8.8.8.8	192.168.2.3	0x481f	No error (0)	oeu.vap.lijit.com		72.251.249.14	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.366142035 CEST	8.8.8.8	192.168.2.3	0x6a44	No error (0)	rbp.mxptint.net		38.67.14.234	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	sync.extend.tv	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		54.205.198.81	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		52.86.150.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		3.228.62.17	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		34.224.231.148	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		34.233.101.234	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		54.236.220.178	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		54.198.69.15	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.367585897 CEST	8.8.8.8	192.168.2.3	0xa47c	No error (0)	cookiesyncing-1395500543.us-east-1.elb.amazonaws.com		52.71.142.200	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.370253086 CEST	8.8.8.8	192.168.2.3	0x9764	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.370253086 CEST	8.8.8.8	192.168.2.3	0x9764	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.370253086 CEST	8.8.8.8	192.168.2.3	0x9764	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.370253086 CEST	8.8.8.8	192.168.2.3	0x9764	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.370253086 CEST	8.8.8.8	192.168.2.3	0x9764	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.374053955 CEST	8.8.8.8	192.168.2.3	0xdf0a	No error (0)	a.tribalfusion.com		104.18.13.5	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.374053955 CEST	8.8.8.8	192.168.2.3	0xdf0a	No error (0)	a.tribalfusion.com		104.18.12.5	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.797102928 CEST	8.8.8.8	192.168.2.3	0x9c0a	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.797102928 CEST	8.8.8.8	192.168.2.3	0x9c0a	No error (0)	pixel.onaudience.com		51.210.112.236	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.797102928 CEST	8.8.8.8	192.168.2.3	0x9c0a	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.797102928 CEST	8.8.8.8	192.168.2.3	0x9c0a	No error (0)	pixel.onaudience.com		51.210.112.63	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.797102928 CEST	8.8.8.8	192.168.2.3	0x9c0a	No error (0)	pixel.onaudience.com		51.79.83.225	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.856092930 CEST	8.8.8.8	192.168.2.3	0x6f8a	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.856092930 CEST	8.8.8.8	192.168.2.3	0x6f8a	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.856092930 CEST	8.8.8.8	192.168.2.3	0x6f8a	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		3.126.56.137	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.856092930 CEST	8.8.8.8	192.168.2.3	0x6f8a	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		18.156.0.31	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.868593931 CEST	8.8.8.8	192.168.2.3	0xcd7e	No error (0)	image4.pubmatic.com	spug22000nfc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.868593931 CEST	8.8.8.8	192.168.2.3	0xcd7e	No error (0)	spug22000nfc.pubmatic.com	spug22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.868593931 CEST	8.8.8.8	192.168.2.3	0xcd7e	No error (0)	spug22000nf.pubmatic.com		185.64.189.114	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.888613939 CEST	8.8.8.8	192.168.2.3	0xa141	No error (0)	simage2.pubmatic.com	pug-lhrc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.888613939 CEST	8.8.8.8	192.168.2.3	0xa141	No error (0)	pug-lhrc.pubmatic.com	pug-lhr.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.888613939 CEST	8.8.8.8	192.168.2.3	0xa141	No error (0)	pug-lhr.pubmatic.com		185.64.190.80	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.900186062 CEST	8.8.8.8	192.168.2.3	0x281b	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.924632072 CEST	8.8.8.8	192.168.2.3	0x1768	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.924632072 CEST	8.8.8.8	192.168.2.3	0x1768	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.924632072 CEST	8.8.8.8	192.168.2.3	0x1768	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.937891006 CEST	8.8.8.8	192.168.2.3	0xd0d3	No error (0)	image2.pubmatic.com	pug-lhrc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.937891006 CEST	8.8.8.8	192.168.2.3	0xd0d3	No error (0)	pug-lhrc.pubmatic.com	pug-lhr.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.937891006 CEST	8.8.8.8	192.168.2.3	0xd0d3	No error (0)	pug-lhr.pubmatic.com		185.64.190.80	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.947196960 CEST	8.8.8.8	192.168.2.3	0x5214	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.973185062 CEST	8.8.8.8	192.168.2.3	0xbdb5	No error (0)	ads.creative-serving.com	elb-aws-va-clickdistrict-1246667425.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:48.973185062 CEST	8.8.8.8	192.168.2.3	0xbdb5	No error (0)	elb-aws-va-clickdistrict-1246667425.us-east-1.elb.amazonaws.com		3.212.254.152	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:48.973185062 CEST	8.8.8.8	192.168.2.3	0xbdb5	No error (0)	elb-aws-va-clickdistrict-1246667425.us-east-1.elb.amazonaws.com		3.217.101.54	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.051182985 CEST	8.8.8.8	192.168.2.3	0x48ae	No error (0)	pubmatic-match.dotomi.com	afp.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:49.103017092 CEST	8.8.8.8	192.168.2.3	0x53cb	No error (0)	match.adsby.bidtheatre.com		159.65.197.210	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.103017092 CEST	8.8.8.8	192.168.2.3	0x53cb	No error (0)	match.adsby.bidtheatre.com		159.65.196.12	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.103017092 CEST	8.8.8.8	192.168.2.3	0x53cb	No error (0)	match.adsby.bidtheatre.com		178.62.202.251	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.379383087 CEST	8.8.8.8	192.168.2.3	0x7ef8	No error (0)	pixel-sync.sitescout.com	pixel-a.sitescout.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:49.379383087 CEST	8.8.8.8	192.168.2.3	0x7ef8	No error (0)	pixel-a.sitescout.com		66.155.71.149	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.441956043 CEST	8.8.8.8	192.168.2.3	0x9985	No error (0)	um.simpli.fi		159.253.128.183	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.441956043 CEST	8.8.8.8	192.168.2.3	0x9985	No error (0)	um.simpli.fi		169.50.137.190	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.441956043 CEST	8.8.8.8	192.168.2.3	0x9985	No error (0)	um.simpli.fi		159.253.128.188	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:49.473644972 CEST	8.8.8.8	192.168.2.3	0x3986	No error (0)	loada.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:49.473644972 CEST	8.8.8.8	192.168.2.3	0x3986	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:49.473644972 CEST	8.8.8.8	192.168.2.3	0x3986	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.693550110 CEST	8.8.8.8	192.168.2.3	0xfeaf	No error (0)	nep.advangelists.com		52.205.151.180	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.693550110 CEST	8.8.8.8	192.168.2.3	0xfeaf	No error (0)	nep.advangelists.com		34.236.212.156	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.693550110 CEST	8.8.8.8	192.168.2.3	0xfeaf	No error (0)	nep.advangelists.com		34.237.15.82	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.693550110 CEST	8.8.8.8	192.168.2.3	0xfeaf	No error (0)	nep.advangelists.com		52.86.199.207	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.693550110 CEST	8.8.8.8	192.168.2.3	0xfeaf	No error (0)	nep.advangelists.com		54.165.122.193	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.693550110 CEST	8.8.8.8	192.168.2.3	0xfeaf	No error (0)	nep.advangelists.com		52.204.62.148	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.693550110 CEST	8.8.8.8	192.168.2.3	0xfeaf	No error (0)	nep.advangelists.com		52.0.35.69	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.693550110 CEST	8.8.8.8	192.168.2.3	0xfeaf	No error (0)	nep.advangelists.com		34.197.167.170	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.703613043 CEST	8.8.8.8	192.168.2.3	0xee43	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.703613043 CEST	8.8.8.8	192.168.2.3	0xee43	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.723649979 CEST	8.8.8.8	192.168.2.3	0xce57	No error (0)	sync.go.sonobi.com	lax-1-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:50.723649979 CEST	8.8.8.8	192.168.2.3	0xce57	No error (0)	lax-1-sync.go.sonobi.com		72.34.250.75	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.738954067 CEST	8.8.8.8	192.168.2.3	0x2533	No error (0)	us.ck-ie.com		88.214.194.152	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.738954067 CEST	8.8.8.8	192.168.2.3	0x2533	No error (0)	us.ck-ie.com		8.2.110.114	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.738954067 CEST	8.8.8.8	192.168.2.3	0x2533	No error (0)	us.ck-ie.com		8.2.108.175	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.738980055 CEST	8.8.8.8	192.168.2.3	0x4647	No error (0)	hbx.media.net		23.211.6.95	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.747920990 CEST	8.8.8.8	192.168.2.3	0x91b	No error (0)	p.adsymptotic.com		104.18.98.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.747920990 CEST	8.8.8.8	192.168.2.3	0x91b	No error (0)	p.adsymptotic.com		104.18.102.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.747920990 CEST	8.8.8.8	192.168.2.3	0x91b	No error (0)	p.adsymptotic.com		104.18.99.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.747920990 CEST	8.8.8.8	192.168.2.3	0x91b	No error (0)	p.adsymptotic.com		104.18.100.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.747920990 CEST	8.8.8.8	192.168.2.3	0x91b	No error (0)	p.adsymptotic.com		104.18.101.194	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.896378040 CEST	8.8.8.8	192.168.2.3	0x9f24	No error (0)	sync.adotmob.com		185.183.112.155	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		18.200.233.208	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.76.54.153	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.211.113.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.251.129.229	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.240.223.28	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.19.195.165	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.30.200.197	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.946697950 CEST	8.8.8.8	192.168.2.3	0x3e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.214.168.199	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:50.954145908 CEST	8.8.8.8	192.168.2.3	0xf521	No error (0)	dsum-sec.casalemedia.com	dsum-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:50.970376015 CEST	8.8.8.8	192.168.2.3	0xac7f	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:50.970376015 CEST	8.8.8.8	192.168.2.3	0xac7f	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:50.970376015 CEST	8.8.8.8	192.168.2.3	0xac7f	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:50.970376015 CEST	8.8.8.8	192.168.2.3	0xac7f	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.157140970 CEST	8.8.8.8	192.168.2.3	0xb34e	No error (0)	dsp.nrich.ai		51.255.68.171	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.711795092 CEST	8.8.8.8	192.168.2.3	0xaff	No error (0)	s.tribalfusion.com		104.18.12.5	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.711795092 CEST	8.8.8.8	192.168.2.3	0xaff	No error (0)	s.tribalfusion.com		104.18.13.5	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.975471973 CEST	8.8.8.8	192.168.2.3	0xc72f	No error (0)	www.thescottishsun.co.uk		54.192.66.80	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.975471973 CEST	8.8.8.8	192.168.2.3	0xc72f	No error (0)	www.thescottishsun.co.uk		54.192.66.92	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.975471973 CEST	8.8.8.8	192.168.2.3	0xc72f	No error (0)	www.thescottishsun.co.uk		54.192.66.12	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:51.975471973 CEST	8.8.8.8	192.168.2.3	0xc72f	No error (0)	www.thescottishsun.co.uk		54.192.66.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.383491993 CEST	8.8.8.8	192.168.2.3	0xa612	No error (0)	d.adroll.com	adserver-vpc-alb-3-578630024.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:54.383491993 CEST	8.8.8.8	192.168.2.3	0xa612	No error (0)	adserver-vpc-alb-3-578630024.us-west-2.elb.amazonaws.com		44.237.224.0	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.383491993 CEST	8.8.8.8	192.168.2.3	0xa612	No error (0)	adserver-vpc-alb-3-578630024.us-west-2.elb.amazonaws.com		54.200.216.228	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.386564016 CEST	8.8.8.8	192.168.2.3	0x1b2f	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:54.998177052 CEST	8.8.8.8	192.168.2.3	0xb	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:54.998177052 CEST	8.8.8.8	192.168.2.3	0xb	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.184.122.71	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.998177052 CEST	8.8.8.8	192.168.2.3	0xb	No error (0)	match-eu-central-1-ecs.sharethrough.com		35.158.223.21	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.998177052 CEST	8.8.8.8	192.168.2.3	0xb	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.124.169.141	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:54.998177052 CEST	8.8.8.8	192.168.2.3	0xb	No error (0)	match-eu-central-1-ecs.sharethrough.com		35.158.176.66	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:55.764638901 CEST	8.8.8.8	192.168.2.3	0xc6cd	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:55.764638901 CEST	8.8.8.8	192.168.2.3	0xc6cd	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:55.770813942 CEST	8.8.8.8	192.168.2.3	0x5abd	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:55.775470972 CEST	8.8.8.8	192.168.2.3	0xef7c	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:55.937516928 CEST	8.8.8.8	192.168.2.3	0x8243	No error (0)	gu.dyntrk.com	eu-level1.dyntrk.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:55.937516928 CEST	8.8.8.8	192.168.2.3	0x8243	No error (0)	eu-level1.dyntrk.com		135.125.8.70	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:55.937516928 CEST	8.8.8.8	192.168.2.3	0x8243	No error (0)	eu-level1.dyntrk.com		51.178.20.139	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:55.937516928 CEST	8.8.8.8	192.168.2.3	0x8243	No error (0)	eu-level1.dyntrk.com		51.178.20.140	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	pm.w55c.net	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		18.158.226.176	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		52.57.110.162	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.125.99.7	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.124.143.99	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.66.135.160	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		54.93.179.96	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		18.185.192.106	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:56.664499044 CEST	8.8.8.8	192.168.2.3	0x5602	No error (0)	dxedge-prod-lb-404808087.eu-central-1.elb.amazonaws.com		3.127.92.82	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.063420057 CEST	8.8.8.8	192.168.2.3	0x5ff2	No error (0)	ssbsync-global.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:57.063420057 CEST	8.8.8.8	192.168.2.3	0x5ff2	No error (0)	ssbsync-itx5.smartadserver.com		185.86.138.119	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.063420057 CEST	8.8.8.8	192.168.2.3	0x5ff2	No error (0)	ssbsync-itx5.smartadserver.com		185.86.138.120	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.063420057 CEST	8.8.8.8	192.168.2.3	0x5ff2	No error (0)	ssbsync-itx5.smartadserver.com		185.86.138.132	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.063420057 CEST	8.8.8.8	192.168.2.3	0x5ff2	No error (0)	ssbsync-itx5.smartadserver.com		185.86.138.131	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.415133953 CEST	8.8.8.8	192.168.2.3	0xdf18	No error (0)	pubmatic-match.dotomi.com	afp.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:57.606601954 CEST	8.8.8.8	192.168.2.3	0x763f	No error (0)	ssum.casalemedia.com	ssum.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:57.862773895 CEST	8.8.8.8	192.168.2.3	0x3755	No error (0)	cm.adform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:57.929482937 CEST	8.8.8.8	192.168.2.3	0xad4d	No error (0)	rtb.adentifi.com		52.45.215.106	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.929482937 CEST	8.8.8.8	192.168.2.3	0xad4d	No error (0)	rtb.adentifi.com		52.45.16.192	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.929482937 CEST	8.8.8.8	192.168.2.3	0xad4d	No error (0)	rtb.adentifi.com		54.236.227.29	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.929482937 CEST	8.8.8.8	192.168.2.3	0xad4d	No error (0)	rtb.adentifi.com		54.210.14.23	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.929482937 CEST	8.8.8.8	192.168.2.3	0xad4d	No error (0)	rtb.adentifi.com		52.202.1.196	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.929482937 CEST	8.8.8.8	192.168.2.3	0xad4d	No error (0)	rtb.adentifi.com		52.44.116.71	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.929482937 CEST	8.8.8.8	192.168.2.3	0xad4d	No error (0)	rtb.adentifi.com		52.45.11.130	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.929482937 CEST	8.8.8.8	192.168.2.3	0xad4d	No error (0)	rtb.adentifi.com		52.44.64.106	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.930643082 CEST	8.8.8.8	192.168.2.3	0x4c74	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:57.930643082 CEST	8.8.8.8	192.168.2.3	0x4c74	No error (0)	rtb.adgrx.com	rtb.adgrx.com.tech.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:57.950092077 CEST	8.8.8.8	192.168.2.3	0xc9da	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:57.970334053 CEST	8.8.8.8	192.168.2.3	0xf4a	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:57.989773989 CEST	8.8.8.8	192.168.2.3	0x91a9	No error (0)	js-sec.indexww.com	js-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.056560993 CEST	8.8.8.8	192.168.2.3	0x3017	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.056560993 CEST	8.8.8.8	192.168.2.3	0x3017	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.056560993 CEST	8.8.8.8	192.168.2.3	0x3017	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.056560993 CEST	8.8.8.8	192.168.2.3	0x3017	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.293298006 CEST	8.8.8.8	192.168.2.3	0xba4e	No error (0)	pixel.tapad.com		35.227.248.159	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.329750061 CEST	8.8.8.8	192.168.2.3	0xa974	No error (0)	simage4.pubmatic.com	spug22000nfc.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.329750061 CEST	8.8.8.8	192.168.2.3	0xa974	No error (0)	spug22000nfc.pubmatic.com	spug22000nf.pubmatic.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.329750061 CEST	8.8.8.8	192.168.2.3	0xa974	No error (0)	spug22000nf.pubmatic.com		185.64.189.114	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.399872065 CEST	8.8.8.8	192.168.2.3	0x4c57	No error (0)	nep.advangelists.com		52.204.62.148	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.399872065 CEST	8.8.8.8	192.168.2.3	0x4c57	No error (0)	nep.advangelists.com		18.235.172.182	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.399872065 CEST	8.8.8.8	192.168.2.3	0x4c57	No error (0)	nep.advangelists.com		3.208.62.189	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.399872065 CEST	8.8.8.8	192.168.2.3	0x4c57	No error (0)	nep.advangelists.com		3.90.195.16	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.399872065 CEST	8.8.8.8	192.168.2.3	0x4c57	No error (0)	nep.advangelists.com		52.205.151.180	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.399872065 CEST	8.8.8.8	192.168.2.3	0x4c57	No error (0)	nep.advangelists.com		23.23.65.200	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.399872065 CEST	8.8.8.8	192.168.2.3	0x4c57	No error (0)	nep.advangelists.com		3.232.127.49	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.399872065 CEST	8.8.8.8	192.168.2.3	0x4c57	No error (0)	nep.advangelists.com		3.208.105.70	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.428226948 CEST	8.8.8.8	192.168.2.3	0xc439	No error (0)	aa.agkn.com	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.428226948 CEST	8.8.8.8	192.168.2.3	0xc439	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		3.10.35.49	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.428226948 CEST	8.8.8.8	192.168.2.3	0xc439	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		35.176.195.187	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.428226948 CEST	8.8.8.8	192.168.2.3	0xc439	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		18.169.236.234	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.428226948 CEST	8.8.8.8	192.168.2.3	0xc439	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		3.8.243.222	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.434714079 CEST	8.8.8.8	192.168.2.3	0x9d4f	No error (0)	d.adroll.com	adserver-vpc-alb-3-578630024.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.434714079 CEST	8.8.8.8	192.168.2.3	0x9d4f	No error (0)	adserver-vpc-alb-3-578630024.us-west-2.elb.amazonaws.com		44.237.224.0	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.434714079 CEST	8.8.8.8	192.168.2.3	0x9d4f	No error (0)	adserver-vpc-alb-3-578630024.us-west-2.elb.amazonaws.com		54.200.216.228	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.443854094 CEST	8.8.8.8	192.168.2.3	0x2cda	No error (0)	gu.dyntrk.com	eu-level1.dyntrk.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.443854094 CEST	8.8.8.8	192.168.2.3	0x2cda	No error (0)	eu-level1.dyntrk.com		135.125.8.70	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.443854094 CEST	8.8.8.8	192.168.2.3	0x2cda	No error (0)	eu-level1.dyntrk.com		51.178.20.139	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.443854094 CEST	8.8.8.8	192.168.2.3	0x2cda	No error (0)	eu-level1.dyntrk.com		51.178.20.140	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.531850100 CEST	8.8.8.8	192.168.2.3	0x519a	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	ad2.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	ice.360yield.com	eu2-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	eu2-ice.360yield.com		18.156.133.101	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	eu2-ice.360yield.com		52.29.14.143	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	eu2-ice.360yield.com		18.193.213.131	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	eu2-ice.360yield.com		3.124.27.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	eu2-ice.360yield.com		3.123.215.135	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	eu2-ice.360yield.com		3.68.1.143	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	eu2-ice.360yield.com		18.158.114.108	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.736864090 CEST	8.8.8.8	192.168.2.3	0x7f37	No error (0)	eu2-ice.360yield.com		52.57.38.160	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.830323935 CEST	8.8.8.8	192.168.2.3	0xcac8	No error (0)	bcp.crwdcntrl.net		34.251.130.56	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.830323935 CEST	8.8.8.8	192.168.2.3	0xcac8	No error (0)	bcp.crwdcntrl.net		52.208.103.128	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.830323935 CEST	8.8.8.8	192.168.2.3	0xcac8	No error (0)	bcp.crwdcntrl.net		52.18.12.237	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.830323935 CEST	8.8.8.8	192.168.2.3	0xcac8	No error (0)	bcp.crwdcntrl.net		54.194.226.253	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.830323935 CEST	8.8.8.8	192.168.2.3	0xcac8	No error (0)	bcp.crwdcntrl.net		34.253.111.115	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.830323935 CEST	8.8.8.8	192.168.2.3	0xcac8	No error (0)	bcp.crwdcntrl.net		52.30.14.23	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.830323935 CEST	8.8.8.8	192.168.2.3	0xcac8	No error (0)	bcp.crwdcntrl.net		34.253.109.165	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:58.830323935 CEST	8.8.8.8	192.168.2.3	0xcac8	No error (0)	bcp.crwdcntrl.net		52.48.137.92	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.022866964 CEST	8.8.8.8	192.168.2.3	0xd764	No error (0)	dmx.districtm.io		104.16.68.69	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.022866964 CEST	8.8.8.8	192.168.2.3	0xd764	No error (0)	dmx.districtm.io		104.16.190.66	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	ice.360yield.com	eu2-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	eu2-ice.360yield.com		52.58.57.174	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	eu2-ice.360yield.com		18.158.114.108	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	eu2-ice.360yield.com		18.157.193.56	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	eu2-ice.360yield.com		35.157.156.128	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	eu2-ice.360yield.com		52.58.167.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	eu2-ice.360yield.com		3.124.27.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	eu2-ice.360yield.com		18.197.249.149	A (IP address)	IN (0x0001)
Aug 3, 2021 23:20:59.909835100 CEST	8.8.8.8	192.168.2.3	0x1a4f	No error (0)	eu2-ice.360yield.com		52.29.14.143	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.353655100 CEST	8.8.8.8	192.168.2.3	0xaabe	No error (0)	sync.srv.stackadapt.com		54.175.198.118	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.353655100 CEST	8.8.8.8	192.168.2.3	0xaabe	No error (0)	sync.srv.stackadapt.com		52.44.53.247	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.353655100 CEST	8.8.8.8	192.168.2.3	0xaabe	No error (0)	sync.srv.stackadapt.com		34.205.3.24	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.353655100 CEST	8.8.8.8	192.168.2.3	0xaabe	No error (0)	sync.srv.stackadapt.com		34.204.22.100	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.353655100 CEST	8.8.8.8	192.168.2.3	0xaabe	No error (0)	sync.srv.stackadapt.com		34.204.19.158	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.353655100 CEST	8.8.8.8	192.168.2.3	0xaabe	No error (0)	sync.srv.stackadapt.com		54.81.207.173	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.353655100 CEST	8.8.8.8	192.168.2.3	0xaabe	No error (0)	sync.srv.stackadapt.com		18.210.5.212	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.353655100 CEST	8.8.8.8	192.168.2.3	0xaabe	No error (0)	sync.srv.stackadapt.com		3.228.133.61	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.394839048 CEST	8.8.8.8	192.168.2.3	0x2287	No error (0)	bh.contextweb.com	lga-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.394839048 CEST	8.8.8.8	192.168.2.3	0x2287	No error (0)	lga-bh.contextweb.com	lga-bh-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.394839048 CEST	8.8.8.8	192.168.2.3	0x2287	No error (0)	lga-bh-bgp.contextweb.com		198.148.27.140	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.394839048 CEST	8.8.8.8	192.168.2.3	0x2287	No error (0)	lga-bh-bgp.contextweb.com		198.148.27.139	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.396137953 CEST	8.8.8.8	192.168.2.3	0x55e8	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.396137953 CEST	8.8.8.8	192.168.2.3	0x55e8	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.396137953 CEST	8.8.8.8	192.168.2.3	0x55e8	No error (0)	nydc1.outbrain.org		64.202.112.127	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.401655912 CEST	8.8.8.8	192.168.2.3	0xb2b4	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.401655912 CEST	8.8.8.8	192.168.2.3	0xb2b4	No error (0)	ssp.ads.betweendigital.com		96.46.186.57	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.401655912 CEST	8.8.8.8	192.168.2.3	0xb2b4	No error (0)	ssp.ads.betweendigital.com		96.46.183.20	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430659056 CEST	8.8.8.8	192.168.2.3	0xcc04	No error (0)	sync.ipredictive.com		34.196.50.33	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430659056 CEST	8.8.8.8	192.168.2.3	0xcc04	No error (0)	sync.ipredictive.com		54.159.94.231	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430659056 CEST	8.8.8.8	192.168.2.3	0xcc04	No error (0)	sync.ipredictive.com		54.175.176.13	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430659056 CEST	8.8.8.8	192.168.2.3	0xcc04	No error (0)	sync.ipredictive.com		34.194.115.107	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430659056 CEST	8.8.8.8	192.168.2.3	0xcc04	No error (0)	sync.ipredictive.com		52.71.206.53	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430659056 CEST	8.8.8.8	192.168.2.3	0xcc04	No error (0)	sync.ipredictive.com		52.205.83.58	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430659056 CEST	8.8.8.8	192.168.2.3	0xcc04	No error (0)	sync.ipredictive.com		52.21.104.248	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.430659056 CEST	8.8.8.8	192.168.2.3	0xcc04	No error (0)	sync.ipredictive.com		34.239.198.206	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.448124886 CEST	8.8.8.8	192.168.2.3	0x27c1	No error (0)	sync.technoratimedia.com	adserver.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.448124886 CEST	8.8.8.8	192.168.2.3	0x27c1	No error (0)	adserver.technoratimedia.com	v08.cap-ash1.technoratimedia.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.448124886 CEST	8.8.8.8	192.168.2.3	0x27c1	No error (0)	v08.cap-ash1.technoratimedia.com		129.159.70.95	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.458559036 CEST	8.8.8.8	192.168.2.3	0xde3d	No error (0)	match.deepintent.com	g.deepintent.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.458559036 CEST	8.8.8.8	192.168.2.3	0xde3d	No error (0)	g.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.458559036 CEST	8.8.8.8	192.168.2.3	0xde3d	No error (0)	g.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.458559036 CEST	8.8.8.8	192.168.2.3	0xde3d	No error (0)	g.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	ice.360yield.com	eu2-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	eu2-ice.360yield.com		3.124.27.129	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	eu2-ice.360yield.com		52.29.14.143	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	eu2-ice.360yield.com		18.185.200.55	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	eu2-ice.360yield.com		35.157.249.55	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	eu2-ice.360yield.com		54.93.130.92	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	eu2-ice.360yield.com		18.196.16.240	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	eu2-ice.360yield.com		52.59.30.175	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.477633953 CEST	8.8.8.8	192.168.2.3	0xf407	No error (0)	eu2-ice.360yield.com		52.58.206.142	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.494062901 CEST	8.8.8.8	192.168.2.3	0x3129	No error (0)	rtb.gumgum.com		52.208.210.171	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.494062901 CEST	8.8.8.8	192.168.2.3	0x3129	No error (0)	rtb.gumgum.com		54.77.19.59	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.494062901 CEST	8.8.8.8	192.168.2.3	0x3129	No error (0)	rtb.gumgum.com		34.251.173.19	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.494062901 CEST	8.8.8.8	192.168.2.3	0x3129	No error (0)	rtb.gumgum.com		52.208.41.69	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.494062901 CEST	8.8.8.8	192.168.2.3	0x3129	No error (0)	rtb.gumgum.com		34.254.122.11	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.494062901 CEST	8.8.8.8	192.168.2.3	0x3129	No error (0)	rtb.gumgum.com		54.194.104.251	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.494062901 CEST	8.8.8.8	192.168.2.3	0x3129	No error (0)	rtb.gumgum.com		52.48.175.241	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.494062901 CEST	8.8.8.8	192.168.2.3	0x3129	No error (0)	rtb.gumgum.com		54.77.47.243	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.501739979 CEST	8.8.8.8	192.168.2.3	0xd4b8	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.501739979 CEST	8.8.8.8	192.168.2.3	0xd4b8	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.501739979 CEST	8.8.8.8	192.168.2.3	0xd4b8	No error (0)	ssbsync-itx4.smartadserver.com		185.86.139.104	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.501739979 CEST	8.8.8.8	192.168.2.3	0xd4b8	No error (0)	ssbsync-itx4.smartadserver.com		185.86.139.94	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.501739979 CEST	8.8.8.8	192.168.2.3	0xd4b8	No error (0)	ssbsync-itx4.smartadserver.com		185.86.139.103	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.501739979 CEST	8.8.8.8	192.168.2.3	0xd4b8	No error (0)	ssbsync-itx4.smartadserver.com		185.86.139.93	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.585202932 CEST	8.8.8.8	192.168.2.3	0x3f79	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.585202932 CEST	8.8.8.8	192.168.2.3	0x3f79	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.585202932 CEST	8.8.8.8	192.168.2.3	0x3f79	No error (0)	adizio.geo.iponweb.net		35.210.53.219	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:05.923002958 CEST	8.8.8.8	192.168.2.3	0x4d92	No error (0)	pbs.twimg.com	cs196.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.923002958 CEST	8.8.8.8	192.168.2.3	0x4d92	No error (0)	cs196.wac.edgecastcdn.net	cs2-wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.923002958 CEST	8.8.8.8	192.168.2.3	0x4d92	No error (0)	cs2-wac-eu.8315.ecdns.net	cs45.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:05.923002958 CEST	8.8.8.8	192.168.2.3	0x4d92	No error (0)	cs45.wac.edgecastcdn.net		93.184.220.70	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:06.719907999 CEST	8.8.8.8	192.168.2.3	0x66a9	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 3, 2021 23:21:06.719907999 CEST	8.8.8.8	192.168.2.3	0x66a9	No error (0)	plus.l.google.com		142.250.180.110	A (IP address)	IN (0x0001)
Aug 3, 2021 23:21:09.797205925 CEST	8.8.8.8	192.168.2.3	0x3388	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)

HTTP Request Dependency Graph

www.the-sun.com

eb2.3lift.com

Code Manipulations

Statistics

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exe PID: 2996 Parent PID: 3476

General

Start time:	23:19:36
Start date:	03/08/2021
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --start-maximized --enable-automation 'http://www.the-sun.com'
Imagebase:	0x7ff77b960000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: chrome.exe PID: 160 Parent PID: 2996

General

Start time:	23:19:38
Start date:	03/08/2021
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1544,8885377070788844635,1437694784848484457,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1700 /prefetch:8
Imagebase:	0x7ff77b960000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Analysis Process: chrome.exe PID: 1788 Parent PID: 2996

General

Start time:	23:20:34
Start date:	03/08/2021
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files\Google\Chrome\Application\chrome.exe' --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1544,8885377070788844635,1437694784848484457,131072 --lang=en-US --service-sandbox-type=audio --enable-audio-service-sandbox --mojo-platform-channel-handle=9508 /prefetch:8
Imagebase:	0xd70000
File size:	2150896 bytes
MD5 hash:	C139654B5C1438A95B321BB01AD63EF6
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report http://www.the-sun.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Jbx Signature Overview

Phishing:

Compliance:

Networking:

System Summary:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

Code Manipulations

Statistics

Behavior

System Behavior

Analysis Process: chrome.exe PID: 2996 Parent PID: 3476

General

Analysis Process: chrome.exe PID: 160 Parent PID: 2996

General

Analysis Process: chrome.exe PID: 1788 Parent PID: 2996

General

Disassembly