Edit tour

Windows Analysis Report
http://sub.nabprotect-livechat.com/

Overview

General Information

Sample URL:	http://sub.nabprotect-livechat.com/
Analysis ID:	1380802
Infos:

Detection

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Hides that the sample has been downloaded from the Internet (zone.identifier)

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates files inside the system directory

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded SVGs detected

HTML title does not match URL

Installs a raw input device (often for capturing keystrokes)

May sleep (evasive loops) to hinder dynamic analysis

OS version to string mapping found (often used in BOTs)

PE file contains an invalid checksum

PE file does not import any functions

PE file overlay found

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2308 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7136 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6592 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7380 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6428 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sub.nabprotect-livechat.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

AnyDesk.exe (PID: 2496 cmdline: C:\Users\user\Downloads\AnyDesk.exe MD5: 75EECC3A8B215C465F541643E9C4F484)

AnyDesk.exe (PID: 4948 cmdline: "C:\Users\user\Downloads\AnyDesk.exe" --local-service MD5: 75EECC3A8B215C465F541643E9C4F484)

AnyDesk.exe (PID: 6052 cmdline: "C:\Users\user\Downloads\AnyDesk.exe" --local-control MD5: 75EECC3A8B215C465F541643E9C4F484)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://sub.nabprotect-livechat.com/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://sub.nabprotect-livechat.com/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: http://sub.nabprotect-livechat.com/scripts/script.js	Avira URL Cloud: Label: phishing
Source: http://sub.nabprotect-livechat.com/css/style.css	Avira URL Cloud: Label: phishing
Source: http://sub.nabprotect-livechat.com/fonts/source-sans-pro-light.woff2	Avira URL Cloud: Label: phishing
Source: http://sub.nabprotect-livechat.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: http://sub.nabprotect-livechat.com/fonts/source-sans-pro-regular.woff2	Avira URL Cloud: Label: phishing

Multi AV Scanner detection for domain / URL

Source: sub.nabprotect-livechat.com

Virustotal: Detection: 16%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://sub.nabprotect-livechat.com/

Virustotal: Detection: 16%

Perma Link

Source: https://ib.nab.com.au/login	HTTP Parser: Iframe src: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner
Source: https://ib.nab.com.au/login	HTTP Parser: Iframe src: https://www.nab.com.au/appdynamics/adrum-xd.15ad9e12c414858a5e6cfdfb1f2331b1.html
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=7uxlgqc&ref=https%3A%2F%2Fib.nab.com.au%2F&upid=r2pjj86&upv=1.1.0
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=7uxlgqc&ref=https%3A%2F%2Fib.nab.com.au%2F&upid=r2pjj86&upv=1.1.0
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=7uxlgqc&ref=https%3A%2F%2Fib.nab.com.au%2F&upid=r2pjj86&upv=1.1.0
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=7uxlgqc&ref=https%3A%2F%2Fib.nab.com.au%2F&upid=r2pjj86&upv=1.1.0

Source: https://ib.nab.com.au/login	HTTP Parser: Number of links: 0
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: Number of links: 1

Source: https://ib.nab.com.au/login

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://sub.nabprotect-livechat.com/	HTTP Parser: Total embedded SVG size: 141129
Source: https://www.nab.com.au/	HTTP Parser: Total embedded SVG size: 153063
Source: https://www.nab.com.au/help-support	HTTP Parser: Total embedded SVG size: 152180

Source: https://ib.nab.com.au/login	HTTP Parser: Title: NAB Internet Banking does not match URL
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: Title: IB login banner - NAB does not match URL

Source: https://ib.nab.com.au/login

HTTP Parser: <input type="password" .../> found

Source: about:blank	HTTP Parser: No favicon
Source: https://3347639.fls.doubleclick.net/activityi;dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F?	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: https://www.nab.com.au/appdynamics/adrum-xd.15ad9e12c414858a5e6cfdfb1f2331b1.html	HTTP Parser: No favicon

Source: https://ib.nab.com.au/login	HTTP Parser: No <meta name="author".. found
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: No <meta name="author".. found
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: No <meta name="author".. found
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: No <meta name="author".. found
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: No <meta name="author".. found

Source: https://ib.nab.com.au/login	HTTP Parser: No <meta name="copyright".. found
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: No <meta name="copyright".. found
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: No <meta name="copyright".. found
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: No <meta name="copyright".. found
Source: https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.229.191.39:443 -> 192.168.2.4:50162 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.19.203.67:443 -> 192.168.2.4:50167 version: TLS 1.2

Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\dwm_dda-32\privacy_feature\privacy_feature.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.00000000016A6000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.00000000016A6000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\app-32\win_loader\AnyDesk.pdb source: AnyDesk.exe, 0000000D.00000000.2499443403.0000000001850000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2613597509.0000000001850000.00000002.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\dwm_dda-64\win_dwm\win_dwm.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.00000000016A6000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.00000000016A6000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\dwm_dda-32\win_dwm\win_dwm.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.000000000166A000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.000000000166A000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\app-32\win_app\win_app.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\app-32\win_app\win_app.pdb` source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\dwm_dda-64\privacy_feature\privacy_feature.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.0000000001744000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.0000000001744000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: SAS.pdbR source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.000000000166A000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.000000000166A000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: SAS.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.000000000166A000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.000000000166A000.00000004.00000001.01000000.00000006.sdmp

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	TCP traffic detected without corresponding DNS query: 69.164.42.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Thu, 01 Feb 2024 00:26:46 GMTcontent-type: image/svg+xmllast-modified: Thu, 08 Jun 2023 16:27:44 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 1651date: Thu, 25 Jan 2024 00:26:46 GMTData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 df 6f 1b 37 0c fe 57 84 2b 0a 6c 0f a2 25 8a d4 8f 21 0e b0 ad eb f6 90 be e6 b5 48 2f 89 6d e0 1c 07 b1 e7 64 f9 eb 07 52 3a db 49 9d 36 db 0a 0c e8 83 2d 5a a7 e3 51 1f f9 7d e2 f9 64 bd 9d 99 fb c5 e5 66 3e ed a2 eb cc fc 6a 31 9b 6f a6 5d 70 9d d9 2e ae ee 7f 59 3d 4c 3b 67 9c 89 ce c8 dc c3 72 b8 59 4f bb f9 66 73 fb d3 64 72 7f 7f 0f f7 01 56 77 b3 09 3a e7 26 eb ed ac 3b 3d b9 bc ba 5e 9f 9e 0c 8b 9b ab 8b bb df ef 2e 2e 17 57 37 1b f3 e0 a7 9d 85 e8 df 76 e6 2f 3f ed d8 81 e3 b7 9d 79 c0 69 57 0a 14 94 79 dc cf 2f 2e a7 dd cd c5 27 3b ac 66 ab 8f eb ed ec e3 c7 8b ee f4 64 bd 59 dd 1a f9 b2 fd 6a 58 dd 4d bb 37 bf bd 73 ce b9 ce ac ae af d7 57 9b 69 e7 de 76 93 a3 eb ca d3 75 09 52 78 61 e9 3b ff 74 69 24 c8 f1 85 b5 bf e6 a7 6b bd ab 01 4c 9e ee fe 28 1a b2 d5 11 8e 52 c0 61 83 63 37 8f d3 0e 28 1e 05 e3 d3 51 30 7e e6 1a 8d 4e ae 6e 2f fa c5 e6 af 69 f7 0a 74 c6 1b bf ba 8d 49 cd ed cc 5c 2f 86 61 da dd ac 6e ae ba d3 93 db 8b cd dc 5c 4e bb 0f 21 42 c6 6c 3c 43 e2 de 19 60 24 f0 0c 5c 0a 84 14 75 44 64 e3 8c fc b4 e0 12 ef 8c 2d 64 a4 5e 4d e3 2c 20 46 31 2d 30 a6 6a 10 7b b9 90 18 2d 78 b6 90 31 c9 32 ae bf 74 89 fa 0a 6d 2c 5b 8b e0 13 ce 2d 14 17 b6 72 03 cd ab e9 c1 97 32 87 92 f2 f6 c0 d4 05 b6 cd e6 14 1e 97 04 2e a2 45 88 25 f7 fa 40 e3 ac 07 74 41 36 66 3d 04 26 88 89 e4 41 ae e4 76 2f 03 a5 ea 50 9f 1f 7a 67 15 07 09 ca 83 47 92 6b cd 12 b0 9c 91 01 62 62 1d 4b a2 2d 42 c0 a0 3e ce 3d 01 73 af db f3 e0 28 2b 20 d6 03 15 f1 41 a1 9a 8f cb 02 94 8d d3 28 73 8b 92 9e 47 09 b1 85 18 a0 24 7c 7d 8c a9 c6 98 5a 8c e9 c5 18 e3 3e c6 78 24 46 1b c0 79 43 e0 a8 05 b2 ae b9 d3 24 ea 17 71 ad 80 31 e3 08 8c ac 3e d4 90 e4 eb e6 d8 91 24 ba 1a 9a c2 5a 1a 10 9d 17 cf 1a 75 8b 1f b1 55 9a 00 27 d5 98 31 eb 48 ec eb 05 2d 29 31 64 d3 72 a5 16 14 49 29 b5 01 91 e4 09 1a 96 4b 64 6b 38 c5 61 b3 82 d3 e2 2c 29 b7 41 b0 aa 95 d7 6b 36 8c 07 4c 45 91 28 c6 43 e1 0a 50 91 15 c6 19 0f d9 45 08 89 ab 65 3c 10 0a c6 ae e4 5e d9 b2 e3 91 10 83 4b 79 5c d6 4a b4 1e 0a e5 23 bc 11 be a9 b1 9b 11 38 d5 88 29 b7 35 46 f3 1e c7 e9 04 9e 2f 80 3c ca c7 38 e3 d4 a1 70 94 24 0a 62 5d cc a8 90 e9 18 1d 6a f4 1e 8b b8 6b 46 d1 6a 43 e4 b9 78 7e 5c 82 67 13 21 46 d9 8b 26 a5 66 52 b7 27 05 98 9b bd d6 1f 92 c1 66 34 00 6a 8a 35 4f 3a 63 0e ae 0a 54 82 a0 ba 91 27 9b 03 87 8a 92 e3 60 9c 54 78 94 c4 49 d6 25 17 5a 37 58 9a bd ab 2c 2f 54 ac a3 a6 8c d6 2a 3c 6a 9a 83 e9 1e 12 87 fd d6 a3 39 f0 26 c2 81 3e b4 e8 9f 53 92 77 94 e4 67 94 f4 2f 53 d2 51 69 94 14 eb 6b 94 54 e9 63 4a 15 39 81 3b 3a 14 b6 e8 ae 95 90 2c 61 b6 aa f9 36 21 be 42 35 58 43 ac ca 73 8e 1e 10 77 a
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Thu, 01 Feb 2024 00:26:47 GMTcontent-type: application/javascriptlast-modified: Thu, 08 Jun 2023 20:52:44 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 159date: Thu, 25 Jan 2024 00:26:47 GMTData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d cd c1 0a 82 40 10 c6 f1 b3 82 ef 30 98 e0 2c 84 c7 3c 58 6f d0 4b 98 3b e2 e0 b6 23 ce c6 42 e1 bb 77 10 a3 0e 45 e7 df cc f7 2f 30 b2 b7 12 4d 25 1e 73 27 ad 85 99 94 ef 04 da cd e2 5c be 87 fe e6 bb c0 e2 01 c9 c0 23 4b 13 ee 01 8b d7 5f 64 1b 06 34 70 3c 41 7d a8 d7 8b a4 c0 72 a7 a1 9d c3 99 fd a8 a5 a9 06 b6 84 a6 d9 cc 92 8e 41 a6 2f 7a 95 0b 3b da 50 07 89 2b 2e 40 4e e9 bf c2 e7 c6 ef fc 5b 21 4b 17 d3 3c 01 2f 02 f1 d5 15 01 00 00 Data Ascii: @0,<XoK;#BwE/0M%s'\#K_d4p<A}rA/z;P+.@N[!K</
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Thu, 01 Feb 2024 00:26:47 GMTcontent-type: image/svg+xmllast-modified: Thu, 08 Jun 2023 16:27:44 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 1651date: Thu, 25 Jan 2024 00:26:47 GMTData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 df 6f 1b 37 0c fe 57 84 2b 0a 6c 0f a2 25 8a d4 8f 21 0e b0 ad eb f6 90 be e6 b5 48 2f 89 6d e0 1c 07 b1 e7 64 f9 eb 07 52 3a db 49 9d 36 db 0a 0c e8 83 2d 5a a7 e3 51 1f f9 7d e2 f9 64 bd 9d 99 fb c5 e5 66 3e ed a2 eb cc fc 6a 31 9b 6f a6 5d 70 9d d9 2e ae ee 7f 59 3d 4c 3b 67 9c 89 ce c8 dc c3 72 b8 59 4f bb f9 66 73 fb d3 64 72 7f 7f 0f f7 01 56 77 b3 09 3a e7 26 eb ed ac 3b 3d b9 bc ba 5e 9f 9e 0c 8b 9b ab 8b bb df ef 2e 2e 17 57 37 1b f3 e0 a7 9d 85 e8 df 76 e6 2f 3f ed d8 81 e3 b7 9d 79 c0 69 57 0a 14 94 79 dc cf 2f 2e a7 dd cd c5 27 3b ac 66 ab 8f eb ed ec e3 c7 8b ee f4 64 bd 59 dd 1a f9 b2 fd 6a 58 dd 4d bb 37 bf bd 73 ce b9 ce ac ae af d7 57 9b 69 e7 de 76 93 a3 eb ca d3 75 09 52 78 61 e9 3b ff 74 69 24 c8 f1 85 b5 bf e6 a7 6b bd ab 01 4c 9e ee fe 28 1a b2 d5 11 8e 52 c0 61 83 63 37 8f d3 0e 28 1e 05 e3 d3 51 30 7e e6 1a 8d 4e ae 6e 2f fa c5 e6 af 69 f7 0a 74 c6 1b bf ba 8d 49 cd ed cc 5c 2f 86 61 da dd ac 6e ae ba d3 93 db 8b cd dc 5c 4e bb 0f 21 42 c6 6c 3c 43 e2 de 19 60 24 f0 0c 5c 0a 84 14 75 44 64 e3 8c fc b4 e0 12 ef 8c 2d 64 a4 5e 4d e3 2c 20 46 31 2d 30 a6 6a 10 7b b9 90 18 2d 78 b6 90 31 c9 32 ae bf 74 89 fa 0a 6d 2c 5b 8b e0 13 ce 2d 14 17 b6 72 03 cd ab e9 c1 97 32 87 92 f2 f6 c0 d4 05 b6 cd e6 14 1e 97 04 2e a2 45 88 25 f7 fa 40 e3 ac 07 74 41 36 66 3d 04 26 88 89 e4 41 ae e4 76 2f 03 a5 ea 50 9f 1f 7a 67 15 07 09 ca 83 47 92 6b cd 12 b0 9c 91 01 62 62 1d 4b a2 2d 42 c0 a0 3e ce 3d 01 73 af db f3 e0 28 2b 20 d6 03 15 f1 41 a1 9a 8f cb 02 94 8d d3 28 73 8b 92 9e 47 09 b1 85 18 a0 24 7c 7d 8c a9 c6 98 5a 8c e9 c5 18 e3 3e c6 78 24 46 1b c0 79 43 e0 a8 05 b2 ae b9 d3 24 ea 17 71 ad 80 31 e3 08 8c ac 3e d4 90 e4 eb e6 d8 91 24 ba 1a 9a c2 5a 1a 10 9d 17 cf 1a 75 8b 1f b1 55 9a 00 27 d5 98 31 eb 48 ec eb 05 2d 29 31 64 d3 72 a5 16 14 49 29 b5 01 91 e4 09 1a 96 4b 64 6b 38 c5 61 b3 82 d3 e2 2c 29 b7 41 b0 aa 95 d7 6b 36 8c 07 4c 45 91 28 c6 43 e1 0a 50 91 15 c6 19 0f d9 45 08 89 ab 65 3c 10 0a c6 ae e4 5e d9 b2 e3 91 10 83 4b 79 5c d6 4a b4 1e 0a e5 23 bc 11 be a9 b1 9b 11 38 d5 88 29 b7 35 46 f3 1e c7 e9 04 9e 2f 80 3c ca c7 38 e3 d4 a1 70 94 24 0a 62 5d cc a8 90 e9 18 1d 6a f4 1e 8b b8 6b 46 d1 6a 43 e4 b9 78 7e 5c 82 67 13 21 46 d9 8b 26 a5 66 52 b7 27 05 98 9b bd d6 1f 92 c1 66 34 00 6a 8a 35 4f 3a 63 0e ae 0a 54 82 a0 ba 91 27 9b 03 87 8a 92 e3 60 9c 54 78 94 c4 49 d6 25 17 5a 37 58 9a bd ab 2c 2f 54 ac a3 a6 8c d6 2a 3c 6a 9a 83 e9 1e 12 87 fd d6 a3 39 f0 26 c2 81 3e b4 e8 9f 53 92 77 94 e4 67 94 f4 2f 53 d2 51 69 94 14 eb 6b 94 54 e9 63 4a 15 39 81 3b 3a 14 b6 e8 ae 95 90 2c 61 b6 aa f9 36 21 be 42 35 58 43 ac ca 73 8e 1e 10 77 a
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Thu, 01 Feb 2024 00:26:48 GMTcontent-type: image/x-iconlast-modified: Thu, 08 Jun 2023 16:37:38 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 646date: Thu, 25 Jan 2024 00:26:48 GMTData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 52 4d 48 54 51 18 3d 6f 9c 37 f3 66 46 9d 19 47 9d f4 bd 37 33 da fc bd 37 65 a8 13 a2 0c 65 e6 0f 56 82 69 16 49 51 14 92 8b a4 16 2d 02 c1 5d 8b 20 22 a2 55 d0 2e 8a 48 88 36 19 15 d4 c2 55 8b 32 37 b5 68 21 54 68 32 bf 21 48 04 9d 98 67 63 e3 38 bb 3e 38 8b 7b ee 39 df 3d df bd 17 10 20 c0 e5 02 04 04 30 69 06 ea 01 44 01 b8 00 04 b0 c1 1b 65 06 6a 1c 1b 28 aa bc fc 2e 80 9f 00 58 0e 15 82 8b 82 60 2b e6 f2 da 7b 00 bc 00 6e 01 f8 b5 c1 9b 08 08 5b bd a6 6a 7a ab af d1 26 c6 4b fb e6 3d 77 00 a4 0a 9c d5 14 a5 c7 36 45 ab 39 64 f4 12 60 a6 d7 79 85 31 75 85 9e ca b3 e5 b2 65 8b d7 16 53 80 61 ef 7b 46 1a df d1 eb 9c 66 8d 63 92 51 f9 33 75 f5 07 e5 9a 9b db b2 95 c2 04 89 81 da 47 86 5e 57 52 8c ca 2b d4 94 34 35 25 c3 e6 fa 79 ba 6c e3 74 db c7 e8 b6 8f d3 21 76 1b f9 4a 7b d4 57 cd 50 57 32 d4 94 54 19 ac 52 57 93 d4 94 25 3a a5 13 25 f7 e4 a6 a7 6a 94 11 f9 25 63 be b4 a1 cf 6b 75 35 b5 89 7c 16 5d 5d 65 83 6b 9a 02 c4 bf 5e 33 3d 95 a3 ec 6a 79 c1 fe ae ef dc d7 96 63 5b 38 4d dd 97 d7 7e a5 e6 5b a0 ee 5b a6 e6 5b 34 66 f2 79 66 8d b3 fe 9d 5d 41 77 55 1f 3b 5b 67 79 f8 c0 32 07 12 39 26 5a 33 6c 8f a4 b9 2b 90 62 58 9e 67 b0 f1 15 23 ca 02 43 f2 1b 06 77 bc a6 24 86 b7 df 9d c9 4e 8f ab 97 ed fa 73 a3 47 77 3c c3 ce dd 19 c6 a3 49 46 fc f7 19 56 9f 32 d6 3c c7 58 d3 33 c6 9a 1e 50 ac a8 2b fb 06 da ce 1b 3c 36 b8 c6 a1 9e 2c 07 12 59 f6 74 64 b9 3f fe 8d 21 ff 0c 5b c2 0f 19 54 ae b3 4d 7b 4c b5 f6 aa 31 fb d6 0c 0e 1e 4c cc f1 fc c9 75 1e 3f 92 e5 a1 ee 65 0e f7 e7 38 dc b7 c6 bd b1 27 b4 8a 7e 4a 96 10 2d e6 06 4a 62 a4 f0 7e bf 0b 7e 9b 14 e4 d8 d0 47 1e 1d 7c cb a0 7f 8a 75 ee 11 0e f5 7e e2 99 b1 75 ee 09 df 2e f7 7f f2 de a5 c2 5a b2 04 a9 36 9c a3 64 95 37 35 7e f9 34 4f 8d ac b0 59 9e 28 37 ef 17 00 17 4b ff 71 31 04 41 64 53 e3 25 3a ed 1d a5 7b 39 00 97 01 58 01 4c 00 f8 00 20 59 0e 02 a4 a4 00 4b 31 b7 08 e0 02 00 09 ff 59 7f 00 ea 74 7e ac 7e 04 00 00 Data Ascii: RMHTQ=o7fFG737eeViIQ-] "U.H6U27h!Th2!Hgc8>8{9= 0iDej(.X`+{n[jz&K=w6E9d`y1ueSa{FfcQ3uG^WR+45%ylt!vJ{WPW2TRW%:%j%cku5\|]]ek^3=jyc[8M~[[[4fyf]AwU;[gy29&Z3l+bXg#Cw$NsGw<IFV2<X3P+<6,Ytd?![TM{L1Lu?e8'~J-Jb~~G\|u~u.Z6d75~4OY(7Kq1AdS%:{9XL YK1Yt~~
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=604800expires: Thu, 01 Feb 2024 00:26:50 GMTcontent-type: image/x-iconlast-modified: Thu, 08 Jun 2023 16:37:38 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encodingcontent-length: 646date: Thu, 25 Jan 2024 00:26:50 GMTData Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 52 4d 48 54 51 18 3d 6f 9c 37 f3 66 46 9d 19 47 9d f4 bd 37 33 da fc bd 37 65 a8 13 a2 0c 65 e6 0f 56 82 69 16 49 51 14 92 8b a4 16 2d 02 c1 5d 8b 20 22 a2 55 d0 2e 8a 48 88 36 19 15 d4 c2 55 8b 32 37 b5 68 21 54 68 32 bf 21 48 04 9d 98 67 63 e3 38 bb 3e 38 8b 7b ee 39 df 3d df bd 17 10 20 c0 e5 02 04 04 30 69 06 ea 01 44 01 b8 00 04 b0 c1 1b 65 06 6a 1c 1b 28 aa bc fc 2e 80 9f 00 58 0e 15 82 8b 82 60 2b e6 f2 da 7b 00 bc 00 6e 01 f8 b5 c1 9b 08 08 5b bd a6 6a 7a ab af d1 26 c6 4b fb e6 3d 77 00 a4 0a 9c d5 14 a5 c7 36 45 ab 39 64 f4 12 60 a6 d7 79 85 31 75 85 9e ca b3 e5 b2 65 8b d7 16 53 80 61 ef 7b 46 1a df d1 eb 9c 66 8d 63 92 51 f9 33 75 f5 07 e5 9a 9b db b2 95 c2 04 89 81 da 47 86 5e 57 52 8c ca 2b d4 94 34 35 25 c3 e6 fa 79 ba 6c e3 74 db c7 e8 b6 8f d3 21 76 1b f9 4a 7b d4 57 cd 50 57 32 d4 94 54 19 ac 52 57 93 d4 94 25 3a a5 13 25 f7 e4 a6 a7 6a 94 11 f9 25 63 be b4 a1 cf 6b 75 35 b5 89 7c 16 5d 5d 65 83 6b 9a 02 c4 bf 5e 33 3d 95 a3 ec 6a 79 c1 fe ae ef dc d7 96 63 5b 38 4d dd 97 d7 7e a5 e6 5b a0 ee 5b a6 e6 5b 34 66 f2 79 66 8d b3 fe 9d 5d 41 77 55 1f 3b 5b 67 79 f8 c0 32 07 12 39 26 5a 33 6c 8f a4 b9 2b 90 62 58 9e 67 b0 f1 15 23 ca 02 43 f2 1b 06 77 bc a6 24 86 b7 df 9d c9 4e 8f ab 97 ed fa 73 a3 47 77 3c c3 ce dd 19 c6 a3 49 46 fc f7 19 56 9f 32 d6 3c c7 58 d3 33 c6 9a 1e 50 ac a8 2b fb 06 da ce 1b 3c 36 b8 c6 a1 9e 2c 07 12 59 f6 74 64 b9 3f fe 8d 21 ff 0c 5b c2 0f 19 54 ae b3 4d 7b 4c b5 f6 aa 31 fb d6 0c 0e 1e 4c cc f1 fc c9 75 1e 3f 92 e5 a1 ee 65 0e f7 e7 38 dc b7 c6 bd b1 27 b4 8a 7e 4a 96 10 2d e6 06 4a 62 a4 f0 7e bf 0b 7e 9b 14 e4 d8 d0 47 1e 1d 7c cb a0 7f 8a 75 ee 11 0e f5 7e e2 99 b1 75 ee 09 df 2e f7 7f f2 de a5 c2 5a b2 04 a9 36 9c a3 64 95 37 35 7e f9 34 4f 8d ac b0 59 9e 28 37 ef 17 00 17 4b ff 71 31 04 41 64 53 e3 25 3a ed 1d a5 7b 39 00 97 01 58 01 4c 00 f8 00 20 59 0e 02 a4 a4 00 4b 31 b7 08 e0 02 00 09 ff 59 7f 00 ea 74 7e ac 7e 04 00 00 Data Ascii: RMHTQ=o7fFG737eeViIQ-] "U.H6U27h!Th2!Hgc8>8{9= 0iDej(.X`+{n[jz&K=w6E9d`y1ueSa{FfcQ3uG^WR+45%ylt!vJ{WPW2TRW%:%j%cku5\|]]ek^3=jyc[8M~[[[4fyf]AwU;[gy29&Z3l+bXg#Cw$NsGw<IFV2<X3P+<6,Ytd?![TM{L1Lu?e8'~J-Jb~~G\|u~u.Z6d75~4OY(7Kq1AdS%:{9XL YK1Yt~~

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /nab/Bootstrap.js HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=4986658252DDA4900A490D4D%40AdobeOrg&d_nsid=0&ts=1706142424109 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=Bootstrapper.aam_tnt_cb HTTP/1.1Host: nab.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=4986658252DDA4900A490D4D%40AdobeOrg&d_nsid=0&ts=1706142424109 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=74249799952676478810044664576166395424
Source: global traffic	HTTP traffic detected: GET /firstevent?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=Bootstrapper.aam_tnt_cb HTTP/1.1Host: nab.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=69949952628053946071772149917135184323
Source: global traffic	HTTP traffic detected: GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=4986658252DDA4900A490D4D%40AdobeOrg&d_nsid=0&ts=1706142424109 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=74249799952676478810044664576166395424
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&mid=74531577018668379620070530052756004963&ts=1706142425202 HTTP/1.1Host: smetrics.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.nab.com.auSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144285; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CvVersion%7C4.4.0
Source: global traffic	HTTP traffic detected: GET /nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2F HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144285; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CvVersion%7C4.4.0
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: nab.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DST=; demdex=69949952628053946071772149917135184323; nab=69949952628053946071772149917135184323
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZbGq2wAAAGFJ1wN- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DST=; demdex=74249799952676478810044664576166395424
Source: global traffic	HTTP traffic detected: GET /nab/prod/code/6860c4cf256fb9e52ec36105fa676a6d.js?conditionId0=4958178 HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
Source: global traffic	HTTP traffic detected: GET /nab/prod/code/d001cc9904eab560176cac5da2b94660.js?conditionId0=422932 HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
Source: global traffic	HTTP traffic detected: GET /nab/prod/code/15e884c3d32788d21cefeb57d775a93e.js?conditionId0=404951 HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&mid=74531577018668379620070530052756004963&ts=1706142425202 HTTP/1.1Host: smetrics.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144285; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0
Source: global traffic	HTTP traffic detected: GET /nab/prod/code/7d816e9f44d24a84e2a964434ff1f04d.js?conditionId0=396971 HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
Source: global traffic	HTTP traffic detected: GET /nab/prod/code/c1d0bcd13bbf05d268d84a1cf7be88bc.js?conditionId0=4879801 HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nab.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZbGq2wAAAGFJ1wN- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DST=; demdex=74249799952676478810044664576166395424; dextp=358-1-1706142426061; dpm=74249799952676478810044664576166395424
Source: global traffic	HTTP traffic detected: GET /nab/prod/code/d9d080c5e00417b3e1a46d592afbbb69.js?conditionId0=421109&conditionId1=416171 HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0
Source: global traffic	HTTP traffic detected: GET /nab/prod/code/35a6ab04a336312adca4bf1c25933921.js?conditionId0=505275 HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nab.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=d3MnvHeuZTXOk3s_Q6iMTu178ZYj7BNkQnU6Ny-potk3dTiv0f9F_uVI68W05ZyQSqottz15eToys7AVztrnZuUZC9XTsDHygPhrTBdWZRY.; receive-cookie-deprecation=1; uuid2=4323334077643033457
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1Host: nationalaustraliaban.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main/prod/utag.js HTTP/1.1Host: tags.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144287\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=4323334077643033457 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nab.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DST=; demdex=74249799952676478810044664576166395424; dpm=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.nab.com.au&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nab.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=4323334077643033457 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DST=; demdex=74249799952676478810044664576166395424; dpm=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037
Source: global traffic	HTTP traffic detected: GET /dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nab.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main/prod/utag.5.js?utv=ut4.49.202310240140 HTTP/1.1Host: tags.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF19S2zONAQAAn28DPgvjzPLZ+6xUPgrTRcFy1ZG4MT0O16GLpt5gIxSnoeQKsvQSigViKpuE3RNsv5wuEn/+AWl0bzh/ryxEB/kcjuEFInoHuT/ADjXIl2LS+o13GhwwbE97nNtffLu7Amcq5aIQBJg2Q7F1fO15a8TLtcSlPiVbeh6gbpbKWbbmsOe/TFnzzt0tusVNz25jm3OuXZobiJopaPhaor0i1eg3km5LNj1XWvtlmC8vjNvHs9vieYLzoi+wIYO+lu+eNh2HDTVI90qaIMx3ffUMyZQgv8vL9vhxDdcEs3JMkjIUxSRDEUtZMIZURgt9PyEe7hOkck0sQXSzslJ+voZB64z7j3Ng9EhePx/5bzMISJwM8N3ZX7qyyUPstA==~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227
Source: global traffic	HTTP traffic detected: GET /main/prod/utag.8.js?utv=ut4.49.202305090101 HTTP/1.1Host: tags.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF19S2zONAQAAn28DPgvjzPLZ+6xUPgrTRcFy1ZG4MT0O16GLpt5gIxSnoeQKsvQSigViKpuE3RNsv5wuEn/+AWl0bzh/ryxEB/kcjuEFInoHuT/ADjXIl2LS+o13GhwwbE97nNtffLu7Amcq5aIQBJg2Q7F1fO15a8TLtcSlPiVbeh6gbpbKWbbmsOe/TFnzzt0tusVNz25jm3OuXZobiJopaPhaor0i1eg3km5LNj1XWvtlmC8vjNvHs9vieYLzoi+wIYO+lu+eNh2HDTVI90qaIMx3ffUMyZQgv8vL9vhxDdcEs3JMkjIUxSRDEUtZMIZURgt9PyEe7hOkck0sQXSzslJ+voZB64z7j3Ng9EhePx/5bzMISJwM8N3ZX7qyyUPstA==~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.nab.com.au&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nab.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A1SXk2ZwEUKxjaXejNhNlO0\|t
Source: global traffic	HTTP traffic detected: GET /b/ss/nab-prd/10/JS-2.22.4/s61174878437376?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A9%204%20-60&d.&nsid=0&jsonv=1&.d&sdid=0C347103BA19F920-1361389A48D48953&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Apersonal&g=https%3A%2F%2Fwww.nab.com.au%2F&c.&getTimeParting=6.3&.c&cc=AUD&ch=nab%3Apersonal&server=www.nab.com.au&v0=Typed%2FBookmarked&events=event19%2Cevent1&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&tnt=582199%3A0%3A0%2C589365%3A0%3A0%2C584544%3A1%3A0&c1=nab&v1=D%3Dc1&h1=D%3DpageName%2B%22%3Aindex%22&l1=MH23083-P&c2=D%3Dch&v2=D%3Dch&c5=1&v5=D%3Dc5&c9=D%3DpageName&v9=D%3DpageName&c11=D%3Dg&v11=D%3Dg&c13=New&v13=D%3Dc13&c23=no-segment%20%3A%20first%20page%20visit%20-%20empty%20stuff%20array&c24=no-segment%20%3A%20first%20page%20visit%20-%20empty%20stuff%20array&c31=D%3D%22Typed%2FBookmarked%3A%22%2BpageName&v31=Typed%2FBookmarked&v32=Typed%2FBookmarked&v33=Typed%2FBookmarked&v34=n%2Fa&v35=n%2Fa&v36=Typed%2FBookmarked&v37=Typed%2FBookmarked&v38=n%2Fa&v47=582199%206086%20%20%7C%20%20POC%20%7C%20Acquisition%20%7C%20EDB%20%7C%20%20CONTROL%2C589365%206710%20%7C%20Control%2C584544%206254%20%7C%20Challenger&v60=no-segment%20%3A%20first%20page%20visit%20-%20empty%20stuff%20array&v61=no-segment%20%3A%20first%20page%20visit%20-%20empty%20stuff%20array&c72=VisitorAPI%20Present&v72=v47%20set%20via%20response%20token%20%3A%20582199%3A0%3A0%2C589365%3A0%3A0%2C584544%3A1%3A0%20%3A%20582199%206086%20%20%7C%20%20POC%20%7C%20Acquisition%20%7C%20EDB%20%7C%20%20CONTROL%2C589365%206710%20%7C%20Control%2C584544%206254%20%7C%20Challenger&v73=Thursday%7C11%3A27%20AM&v74=D%3Dt&c75=D%3Dv72&v75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v76=69949952628053946071772149917135184323&v77=https%3A%2F%2Fwww.nab.com.au%2F&v81=0.22848551443168175_1706142429071&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&AQE=1 HTTP/1.1Host: smetrics.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=3347639;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=139200&dpuuid=cl-JCtUlT92usJjdql6PEw&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nab.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DST=; demdex=74249799952676478810044664576166395424; dpm=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037\|139200-1-1706142428038
Source: global traffic	HTTP traffic detected: GET /signals/config/1349572601822987?v=2.9.142&r=stable&domain=www.nab.com.au&hme=e82209ddce2f5ef9f00773b102465283e977acad712d554991b839c35823b905&ex_m=62%2C103%2C91%2C95%2C53%2C3%2C87%2C61%2C14%2C85%2C78%2C44%2C46%2C145%2C148%2C159%2C155%2C156%2C158%2C25%2C88%2C45%2C68%2C157%2C140%2C143%2C152%2C153%2C160%2C112%2C13%2C43%2C164%2C163%2C114%2C16%2C29%2C32%2C1%2C36%2C57%2C58%2C59%2C63%2C82%2C15%2C12%2C84%2C81%2C80%2C92%2C94%2C31%2C93%2C26%2C22%2C141%2C144%2C121%2C24%2C9%2C10%2C11%2C5%2C6%2C21%2C19%2C20%2C49%2C54%2C56%2C66%2C89%2C23%2C67%2C8%2C7%2C71%2C41%2C18%2C17%2C4%2C73%2C79%2C72%2C77%2C33%2C35%2C76%2C48%2C74%2C28%2C37%2C65%2C0%2C83%2C75%2C2%2C30%2C55%2C34%2C90%2C38%2C70%2C60%2C40%2C39%2C96%2C52%2C51%2C27%2C86%2C50%2C47%2C42%2C69%2C64%2C97 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1040712916/?random=1706142429237&cv=9&fst=1706142429237&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2F&tiba=NAB%20personal%20banking%20%7C%20Loans%2C%20accounts%2C%20credit%20cards%2C%20insurance%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1Host: 3347639.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=adobe.com&id=74249799952676478810044664576166395424 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nab.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A1SXk2ZwEUKxjaXejNhNlO0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1Host: 3347639.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1040712916/?random=1706142429237&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2F&tiba=NAB%20personal%20banking%20%7C%20Loans%2C%20accounts%2C%20credit%20cards%2C%20insurance%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSGwAvHhf_gw1NI_RCsC9QZU11dpzpG-29nBhAbw&random=2650558029&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142430835&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF6lS2zONAQAAo3oDPguD+QLnkz/TweKgLOMESFryTHBvEdB6L6t1ljmyLw6sMO3pCXkdsSt/VVNkZhm/D0PRITrXiJ7LfIcRKGgg4tODnqVbcY+IweQcZN+6PvA93UhSHqBWG/rsvK7PpQvU2mMSdSMzf5tKmjKOlVcseYuoHNyRkDgBFjwa67jydNiCmoTd8Gdvi+JrU/rtchIPmaZBLJZ4TXfg+ZVgVZqcNVQRzzfy+iuulN3FaSpM1EmxOYUBYLEaJsXqVkVkc2dOUaAL/fXTkM3sKvu8fWv1RdP7xvWgGr6YXTYHyXtp3RncbHNG8lNdUKzPvHQStyLrOnFAwNZiRwsZGSaQ3d4kxWd0FHBfgiMFEJ+Gv2cYsIY/UyfAoy8gIa1QsV7vNBzdlFHzI2yZ~-1~-1~-1
Source: global traffic	HTTP traffic detected: GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142431136&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=ab08a5&ler=empty&it=1706142429433&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142431136&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=ab08a5&ler=empty&it=1706142429433&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/p/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044;~oref=https://www.nab.com.au/ HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkN2JxNRb5c3UrvjpeUWdF0h9WJAjlO4U0HnycaHxH5QRTWnr_AK8QOSAmYa1w
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3347639.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=adobe.com&id=74249799952676478810044664576166395424 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A1SXk2ZwEUKxjaXejNhNlO0; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1040712916/?random=1706142429237&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2F&tiba=NAB%20personal%20banking%20%7C%20Loans%2C%20accounts%2C%20credit%20cards%2C%20insurance%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSGwAvHhf_gw1NI_RCsC9QZU11dpzpG-29nBhAbw&random=2650558029&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/main/2/i.gif HTTP/1.1Host: collect.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1
Source: global traffic	HTTP traffic detected: GET /pageview?pid=51360&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142432&pn=1&dw=1263&dh=4308&ww=1280&wh=907&sw=1280&sh=1024&dr=&url=https%3A%2F%2Fwww.nab.com.au%2F&uc=1&la=en-US&cvars=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Apersonal%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%7D&cvarp=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Apersonal%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%7D&v=13.59.1&pvt=n&ex=&r=978019 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvar?v=13.59.1&pid=51360&pn=1&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=479557 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=7uxlgqc&ref=https%3A%2F%2Fwww.nab.com.au%2F&upid=r2pjj86&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvar?v=13.59.1&pid=51360&pn=1&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA0WPQQuCQBCF%2F8q05wiTsuimZtZBXFC6RMiQiy7pLqktSPXfGzHp8g6P933DvJjrZW6aOdbWgTdceOxf4ahrARwLQc0hPVMGRjR9jj14qO5SFWzHfgQBlO7t8ZSt7KRWw3rvUc7YfJJvlhYV52CYJmhI0EIqKwFSQSQKVGiAl9gKsAfzOPe16hpd%2FS32ekV1zFPKiZqOhaEbgWkXkHSocmxyONX0QNMPvhH0S6wqoahkny92VYhE9wAAAA%3D%3D&ct=2&r=682030 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142432916&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
Source: global traffic	HTTP traffic detected: GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142431136&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=ab08a5&ler=empty&it=1706142429433&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142431136&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=ab08a5&ler=empty&it=1706142429433&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/p/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044;~oref=https://www.nab.com.au/ HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142435001&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142437096&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|
Source: global traffic	HTTP traffic detected: GET /bundle/loader.js?v=1706142437712 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/Bootstrap.js HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-sessionIf-None-Match: "88e14e475ed3fd8df6efc3eb91cd64f5"If-Modified-Since: Tue, 23 Jan 2024 00:26:30 GMT
Source: global traffic	HTTP traffic detected: GET /branches/brand-messenger-v1.935.0/bundle.js HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_mid=74531577018668379620070530052756004963&d_cb=Bootstrapper.aam_tnt_cb HTTP/1.1Host: nab.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DST=; nab=69949952628053946071772149917135184323; demdex=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037\|139200-1-1706142428038
Source: global traffic	HTTP traffic detected: GET /nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
Source: global traffic	HTTP traffic detected: GET /personalization/accounts/nab/profiles/main/visitors/018d3e036c1f0020cd3edad10e9a0506f001706700918 HTTP/1.1Host: mps.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1040712916/?random=1706142440059&cv=9&fst=1706142440059&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&tiba=NAB%20help%20and%20support%20%7C%20Online%20help%20guides%20and%20FAQs%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkN2JxNRb5c3UrvjpeUWdF0h9WJAjlO4U0HnycaHxH5QRTWnr_AK8QOSAmYa1w
Source: global traffic	HTTP traffic detected: GET /b/ss/nab-prd/10/JS-2.22.4/s62039120039136?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A20%204%20-60&d.&nsid=0&jsonv=1&.d&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Ahelp-support&g=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&c.&getTimeParting=6.3&.c&cc=AUD&ch=nab%3Ahelp-support&server=www.nab.com.au&events=event1&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=nab&v1=D%3Dc1&h1=D%3DpageName%2B%22%3Aindex%22&c2=D%3Dch&v2=D%3Dch&c5=1&v5=D%3Dc5&c9=D%3DpageName&v9=D%3DpageName&c11=D%3Dg&v11=D%3Dg&c13=New&v13=D%3Dc13&c23=profile.omnia%3Dc%3Aunk&c24=profile.omnia_all%3Dc%3Aunk&c31=D%3DpageName&v60=profile.omnia%3Dc%3Aunk&v61=profile.omnia_all%3Dc%3Aunk&c72=VisitorAPI%20Present&v73=Thursday%7C11%3A27%20AM&v74=D%3Dt&c75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v76=74249799952676478810044664576166395424&v77=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&v81=0.22848551443168175_1706142429071&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&AQE=1 HTTP/1.1Host: smetrics.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aun
Source: global traffic	HTTP traffic detected: GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142440133&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=04fc06&ler=empty&it=1706142440082&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142440133&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=04fc06&ler=empty&it=1706142440082&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142440038&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1040712916/?random=1706142440059&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&tiba=NAB%20help%20and%20support%20%7C%20Online%20help%20guides%20and%20FAQs%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_oBxe_NAKiJkhX5OD_t4LLbamdHn6AmclC07UxhcqY9d6PacI&random=1833326355&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142440133&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=04fc06&ler=empty&it=1706142440082&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142440133&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=04fc06&ler=empty&it=1706142440082&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1040712916/?random=1706142440059&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&tiba=NAB%20help%20and%20support%20%7C%20Online%20help%20guides%20and%20FAQs%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_oBxe_NAKiJkhX5OD_t4LLbamdHn6AmclC07UxhcqY9d6PacI&random=1833326355&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/2e26ade7667aba5bf5bddead67c0395b.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1Host: mboxedge34.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pageview?pid=51360&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142441&pn=2&dw=1263&dh=3350&ww=1280&wh=907&sw=1280&sh=1024&dr=&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&uc=1&la=en-US&cvars=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Ahelp-support%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22help-support%22%5D%7D&cvarp=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Ahelp-support%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22help-support%22%5D%7D&v=13.59.1&pvt=n&ex=&r=259234 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dvar?v=13.59.1&pid=51360&pn=2&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=381217 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=7uxlgqc&ref=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&upid=r2pjj86&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/2e26ade7667aba5bf5bddead67c0395b.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142442146&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; s_nr=1706142440380-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142442438 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geo/ip HTTP/1.1Host: proactive-chat-server-ap.prod.aws.lcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142442438 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142444238&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; s_nr=1706142440380-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /branches/brand-messenger-v1.935.0/webSdk.js HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geo/ip HTTP/1.1Host: proactive-chat-server-ap.prod.aws.lcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /bundle/loader.js?v=1706142445525 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447359 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447489 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142447047&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; s_nr=1706142440380-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242
Source: global traffic	HTTP traffic detected: GET /geo/ip HTTP/1.1Host: proactive-chat-server-ap.prod.aws.lcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447359 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447489 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nab-prod/businessIconUrl-1fdf30c1-054d-4b41-9116-d0d57f9d5b59 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/nab-prd/10/JS-2.22.4/s67314964867477?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A28%204%20-60&d.&nsid=0&jsonv=1&.d&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Apersonal&g=https%3A%2F%2Fwww.nab.com.au%2F&cc=AUD&events=event22&c9=D%3Dv9&v9=nab%3Apersonal&c11=D%3Dg&v11=D%3Dg&c22=D%3Dv22&v22=6fb99a8b-1dba-452a-8453-66e78b5a2ed5&c65=chatwidget-available%3AChatbot&v65=D%3Dc65&v72=v47%20set%20via%20response%20token%20%3A%20null&pe=lnk_o&pev2=virtual-assistant-offered&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&lrt=754&AQE=1 HTTP/1.1Host: smetrics.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3
Source: global traffic	HTTP traffic detected: GET /dvar?v=13.59.1&pid=51360&pn=1&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=194594 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142448712 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /geo/ip HTTP/1.1Host: proactive-chat-server-ap.prod.aws.lcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nab-prod/businessIconUrl-1fdf30c1-054d-4b41-9116-d0d57f9d5b59 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142448712 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/nab-prd/10/JS-2.22.4/s65980185759898?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A29%204%20-60&d.&nsid=0&jsonv=1&.d&sdid=25FABC59907D0206-4402823AEA43BBBA&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Ahelp-support&g=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&cc=AUD&events=event22&c9=D%3Dv9&v9=nab%3Ahelp-support&c11=D%3Dg&v11=D%3Dg&c22=D%3Dv22&v22=66677161-7331-4103-a8e8-a0b9c6a5cfd4&c65=chatwidget-available%3AChatbot&v65=D%3Dc65&v72=widget%20type%3A%20Chatbot&pe=lnk_o&pev2=virtual-assistant-offered&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&lrt=166&AQE=1 HTTP/1.1Host: smetrics.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southe
Source: global traffic	HTTP traffic detected: GET /dvar?v=13.59.1&pid=51360&pn=2&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=967397 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bundle/loader.js?v1706142453947 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AnyDesk.exe HTTP/1.1Host: download.anydesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eval/59c45122922f080adde50ec0/eyJrZXkiOiJkNDFkOGNkOThmMDBiMjA0ZTk4MDA5OThlY2Y4NDI3ZSIsImFub255bW91cyI6ZmFsc2UsImN1c3RvbSI6eyJvcmciOiJOQUIiLCJ0eXBlIjoiY3VzdG9tZXIifX0 HTTP/1.1Host: clientstream.launchdarkly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/event-streamCache-Control: no-cachesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/95164d49967239e5c92986f94bb9d176.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /api/fl/idgib-w-nab-ib HTTP/1.1Host: fhp.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36x-cfids: -Accept: /Origin: https://ib.nab.com.auSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain.html HTTP/1.1Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain.html HTTP/1.1Host: 1.c81358859121583b7adf2ace89cb39f44.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain.html HTTP/1.1Host: 1.b406929acabac9b095f124c81bdfcf57f.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142456988 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
Source: global traffic	HTTP traffic detected: GET /geo/ip HTTP/1.1Host: proactive-chat-server-ap.prod.aws.lcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/95164d49967239e5c92986f94bb9d176.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1Host: 1.c81358859121583b7adf2ace89cb39f44.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1Host: 1.b406929acabac9b095f124c81bdfcf57f.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "f1becce0de848d615f3ea15685794ecd"
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142456988 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:b1f11799-0014-4d2c-b179-c663b4c6ca13\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; SameSite=None; ADRUM_BT1=R:0\|i:139\|e:0\|d:0
Source: global traffic	HTTP traffic detected: GET /api/fl/idgib-w-nab-ib HTTP/1.1Host: fhp.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
Source: global traffic	HTTP traffic detected: GET /geo/ip HTTP/1.1Host: proactive-chat-server-ap.prod.aws.lcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142458936 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eval/59c45122922f080adde50ec0/eyJrZXkiOiJkNDFkOGNkOThmMDBiMjA0ZTk4MDA5OThlY2Y4NDI3ZSIsImFub255bW91cyI6ZmFsc2UsImN1c3RvbSI6eyJvcmciOiJOQUIiLCJ0eXBlIjoiY3VzdG9tZXIifX0 HTTP/1.1Host: clientstream.launchdarkly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/event-streamCache-Control: no-cachesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=%2Bbmkfru%2BOVMEZ7kXWH8rjWoXBxnoC38YJjRed2TjT%2BdSnTM95VPpGzo6dEKkEzikTvo%2FRCx7JXcnVmf06a9yOD%2BBDXZKVgqNR5F0v1A5Mm%2BbDEH9nRYKrq9euNwW5dbl3ux5gaSGA179xcweXRBiEx3A HTTP/1.1Host: fhp.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
Source: global traffic	HTTP traffic detected: GET /nab/Bootstrap.js HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4If-None-Match: "88e14e475ed3fd8df6efc3eb91cd64f5"If-Modified-Since: Tue, 23 Jan 2024 00:26:30 GMT
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:8241a326-c399-460c-97e4-79a5cfa44231\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:19\|d:0
Source: global traffic	HTTP traffic detected: GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_mid=74531577018668379620070530052756004963&d_cb=Bootstrapper.aam_tnt_cb HTTP/1.1Host: nab.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: DST=; nab=69949952628053946071772149917135184323; demdex=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037\|139200-1-1706142428038
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142458936 HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner HTTP/1.1Host: tms.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
Source: global traffic	HTTP traffic detected: GET /personalization/accounts/nab/profiles/main/visitors/018d3e036c1f0020cd3edad10e9a0506f001706700918 HTTP/1.1Host: mps.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=oW6l9yHBMIy%2BOeVXaQCNVp%2B7E%2FRz5TOj%2F%2F7PTOOJfW6ts21vFbFGOdnnejUF7HUacW0%2F3Ek2DqcKPVv4Pnw5CTSN1AMdz6Qmiu48WpSuY%2FsCGG6VLmeJ0gqTJgRbKBPZ4COvZuAJBTGYYN1%2FM36Sg8GYlmM9uCjYvMMC HTTP/1.1Host: fhp.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
Source: global traffic	HTTP traffic detected: GET /pageview?pid=51360&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142460&pn=3&dw=1184&dh=367&ww=1184&wh=150&sw=1280&sh=1024&dr=https%3A%2F%2Fib.nab.com.au%2F&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&uc=1&la=en-US&cvars=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Aib-platform%3Alogin%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%2C%223%22%3A%5B%22Site%20Subsection%22%2C%22online-banking%22%5D%7D&cvarp=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Aib-platform%3Alogin%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%2C%223%22%3A%5B%22Site%20Subsection%22%2C%22online-banking%22%5D%7D&v=13.59.1&pvt=n&ex=&r=857918 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/1349572601822987?v=2.9.142&r=stable&domain=ib.nab.com.au&hme=e82209ddce2f5ef9f00773b102465283e977acad712d554991b839c35823b905&ex_m=62%2C103%2C91%2C95%2C53%2C3%2C87%2C61%2C14%2C85%2C78%2C44%2C46%2C145%2C148%2C159%2C155%2C156%2C158%2C25%2C88%2C45%2C68%2C157%2C140%2C143%2C152%2C153%2C160%2C112%2C13%2C43%2C164%2C163%2C114%2C16%2C29%2C32%2C1%2C36%2C57%2C58%2C59%2C63%2C82%2C15%2C12%2C84%2C81%2C80%2C92%2C94%2C31%2C93%2C26%2C22%2C141%2C144%2C121%2C24%2C9%2C10%2C11%2C5%2C6%2C21%2C19%2C20%2C49%2C54%2C56%2C66%2C89%2C23%2C67%2C8%2C7%2C71%2C41%2C18%2C17%2C4%2C73%2C79%2C72%2C77%2C33%2C35%2C76%2C48%2C74%2C28%2C37%2C65%2C0%2C83%2C75%2C2%2C30%2C55%2C34%2C90%2C38%2C70%2C60%2C40%2C39%2C96%2C52%2C51%2C27%2C86%2C50%2C47%2C42%2C69%2C64%2C97 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1040712916/?random=1706142461008&cv=9&fst=1706142461008&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=376635470%2C466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&ref=https%3A%2F%2Fib.nab.com.au%2F&top=https%3A%2F%2Fib.nab.com.au%2F&tiba=IB%20login%20banner%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkN2JxNRb5c3UrvjpeUWdF0h9WJAjlO4U0HnycaHxH5QRTWnr_AK8QOSAmYa1w
Source: global traffic	HTTP traffic detected: GET /b/ss/nab-prd/10/JS-2.22.4/s63861017841327?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A41%204%20-60&d.&nsid=0&jsonv=1&.d&sdid=5D01C152375B1892-720C2D1ED90D6236&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Aib-platform%3Alogin&g=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&r=https%3A%2F%2Fib.nab.com.au%2F&c.&getTimeParting=6.3&.c&cc=AUD&ch=nab%3Aib-platform&server=www.nab.com.au&events=event19%2Cevent1&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=nab&v1=D%3Dc1&h1=D%3DpageName%2B%22%3Aindex%22&l1=22110-PIBC&c2=D%3Dch&v2=D%3Dch&c3=nab%3Aib-platform%3Alogin&v3=D%3Dc3&c5=1&v5=D%3Dc5&c9=D%3DpageName&v9=D%3DpageName&c11=D%3Dg&v11=D%3Dg&c13=New&v13=D%3Dc13&c23=profile.omnia%3Dc%3Aunk&c24=profile.omnia_all%3Dc%3Aunk&c31=D%3DpageName&v60=profile.omnia%3Dc%3Aunk&v61=profile.omnia_all%3Dc%3Aunk&c72=VisitorAPI%20Present&v73=Thursday%7C11%3A27%20AM&v74=D%3Dt&c75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v76=74249799952676478810044664576166395424&v77=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&v81=0.22848551443168175_1706142429071&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1111&bh=343&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&AQE=1 HTTP/1.1Host: smetrics.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395
Source: global traffic	HTTP traffic detected: GET /dvar?v=13.59.1&pid=51360&pn=3&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=514734 HTTP/1.1Host: c.az.contentsquare.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1Host: mboxedge34.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1040712916/?random=1706142461008&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=376635470%2C466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=2&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&ref=https%3A%2F%2Fib.nab.com.au%2F&tiba=IB%20login%20banner%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_EmcDFzOUrvO06W5HF_cnm66oZeCZVzriQYEYxf47aTgnPSfS&random=2201551351&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=2DBd0CzWXSifCa1FZT580qCD1jSpkGIfa8uPVHTppbrbETalsrbjyVeNvoScnSFMzQMcWXHZcHJemN1%2BJb1j5A1SOB77l9JZMN8kAa3WMS5OrSurWH40cdDCGOEfZJVnNfSacodCBIysDXI%2FvDE8Z83Xq%2FBj%2FktRQixY HTTP/1.1Host: fhp.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; gpv_pN=nab%3Ahelp-support; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144321\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142461000&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; gpv_pN=nab%3Ahelp-support; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144321\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bex
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=7uxlgqc&ref=https%3A%2F%2Fib.nab.com.au%2F&upid=r2pjj86&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=https%3A%2F%2Fib.nab.com.au&if=true&ts=1706142461834&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=18ec4a&ler=other&it=1706142460969&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=https%3A%2F%2Fib.nab.com.au&if=true&ts=1706142461834&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=18ec4a&ler=other&it=1706142460969&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1040712916/?random=1706142461008&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=376635470%2C466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=2&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&ref=https%3A%2F%2Fib.nab.com.au%2F&tiba=IB%20login%20banner%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_EmcDFzOUrvO06W5HF_cnm66oZeCZVzriQYEYxf47aTgnPSfS&random=2201551351&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=https%3A%2F%2Fib.nab.com.au&if=true&ts=1706142461834&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=18ec4a&ler=other&it=1706142460969&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=https%3A%2F%2Fib.nab.com.au&if=true&ts=1706142461834&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=18ec4a&ler=other&it=1706142460969&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142463104&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d3339
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:b46170ed-b8fb-4a07-96ee-b7ba68ab26ea\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:0\|d:0
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142465200&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d3339
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:16ec8de3-324e-482f-91e5-bf9c8af8c77b\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:4\|d:0
Source: global traffic	HTTP traffic detected: GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142467304&tealium_cookie_domain=.nab.com.au HTTP/1.1Host: collect.nab.com.auConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d3339
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbb78b47bab713cab9e79d2ef1247f0b"If-Modified-Since: Mon, 22 Jan 2024 17:48:12 GMT
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbb78b47bab713cab9e79d2ef1247f0b"If-Modified-Since: Thu, 25 Jan 2024 00:27:22 GMT
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:dc1e4e19-604f-4dfd-8483-54060b5ead7d\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:4\|d:0
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:fdf5cce6-2755-4032-ad63-4ccbb5bf69f7\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:4\|d:1
Source: global traffic	HTTP traffic detected: GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1Host: datacloud.tealiumiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a4355f14-edc2-43ac-8f92-36cf3ee84891\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:6\|d:0
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ib.nab.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ib.nab.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6d97ffcab76ab3c807d9ccac7e6b1c81"If-Modified-Since: Thu, 25 Jan 2024 00:27:32 GMT
Source: global traffic	HTTP traffic detected: GET /nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json HTTP/1.1Host: brand-messenger.app.khoros.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6d97ffcab76ab3c807d9ccac7e6b1c81"If-Modified-Since: Thu, 25 Jan 2024 00:27:38 GMT
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1Host: wup-24f7f3c7.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=000000000000000000000000000000000000000081209BB250 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=hG%2Ff3Q0sRFPS5OhDAudxHchIyjQvj%2BAR5nUVy70s2TkTqPYcTu8GV%2F1ZTMt0VEyYKCBSRR3EPc4CNEnybP0dgtX2O9bpoESdEUelc1VWiKMVP7UDXIlvl8sjq%2BZ%2FJ%2Fu4vokNHNl1FJgrXrHV50aaSmo4fqrQO3%2BoqcVj HTTP/1.1Host: fhp.nab.com.auConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1Host: syd-col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:ede9c693-e3ad-4533-8766-f324a12c8b83\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:3\|d:0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/style.css HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://sub.nabprotect-livechat.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/nab-logo.svg HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://sub.nabprotect-livechat.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/business-woman-nab-star-2500x900.avif HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://sub.nabprotect-livechat.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/jquery-3.7.0.min.js HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://sub.nabprotect-livechat.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/script.js HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://sub.nabprotect-livechat.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/source-sans-pro-regular.woff2 HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveOrigin: http://sub.nabprotect-livechat.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://sub.nabprotect-livechat.com/css/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/source-sans-pro-light.woff2 HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveOrigin: http://sub.nabprotect-livechat.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://sub.nabprotect-livechat.com/css/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/source-sans-pro-semibold.woff2 HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveOrigin: http://sub.nabprotect-livechat.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://sub.nabprotect-livechat.com/css/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/source-sans-pro-bold.woff2 HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveOrigin: http://sub.nabprotect-livechat.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://sub.nabprotect-livechat.com/css/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/nab-logo.svg HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/business-woman-nab-star-2500x900.avif HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://sub.nabprotect-livechat.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sub.nabprotect-livechat.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://iptc.org/std/Iptc4xmpExt/2008-02-29/
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ns.useplus.org/ldf/xmp/1.0/
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2615603913.00000000023FC000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2617847012.0000000004BC0000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000D.00000002.2615603913.00000000023EA000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.gimp.org/xmp/
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.opengl.org/registry/
Source: AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/)
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.htmlEC_PRIVATEKEYpublicKeyparametersprivateKeyECPKPARAMETERSvalue
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://anydesk.com
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/
Source: AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/B
Source: AnyDesk.exe, 0000000D.00000003.2508760126.0000000004871000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2508848497.0000000004872000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/H
Source: AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/R
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/company#imprint
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/contact/sales
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/contact/sales)
Source: AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/de/datenschutz
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/en/assembly
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/en/assembly/terms
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/en/changelog/windows
Source: AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/en/privacy
Source: AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/es/privacidad
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/order
Source: AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/order3a
Source: AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/orderW
Source: AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/orderha
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/pricing/teams
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/pricing/teams)
Source: AnyDesk.exe, 0000000D.00000002.2617423775.0000000004877000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/pricing/teams).
Source: AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/pricing/teamse
Source: AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/pricing/teamse.
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/privacy
Source: AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://anydesk.com/privacy5
Source: AnyDesk.exe	String found in binary or memory: https://anydesk.com/terms
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://anydesk.com/update
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://boot.net.anydesk.comabcdefABCDEFtruefalsetfInvalid
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://datatracker.ietf.org/ipr/1524/
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://datatracker.ietf.org/ipr/1526/
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://datatracker.ietf.org/ipr/1914/
Source: AnyDesk.exe	String found in binary or memory: https://help.anydesk.co
Source: AnyDesk.exe	String found in binary or memory: https://help.anydesk.com
Source: AnyDesk.exe	String found in binary or memory: https://help.anydesk.com/
Source: AnyDesk.exe	String found in binary or memory: https://help.anydesk.com/$
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://help.anydesk.com/HelpLinkInstallLocationAnyDesk
Source: AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.anydesk.com/en/anydesk-on-macosd
Source: AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.anydesk.com/en/anydesk-on-macosk.ra
Source: AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.anydesk.com/en/anydesk-on-macoss
Source: AnyDesk.exe	String found in binary or memory: https://my.anyde
Source: AnyDesk.exe	String found in binary or memory: https://my.anydesk.com
Source: AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.anydesk.com/
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.anydesk.com/auth/realms/myanydesk/login-actions/reset-credentials
Source: AnyDesk.exe	String found in binary or memory: https://my.anydesk.com/auth/realms/myanydesk/login-actions/reset-credentials?client_id=myanydesk-fro
Source: AnyDesk.exe	String found in binary or memory: https://my.anydesk.com/auth/realms/myanydesk/protocol/openid-connect/registrations?client_id=myanyde
Source: AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://my.anydesk.com/password-generator.
Source: AnyDesk.exe	String found in binary or memory: https://my.anydesk.com/v2
Source: AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://my.anydesk.com/v2s
Source: AnyDesk.exe	String found in binary or memory: https://order.anydesk.com/trial
Source: AnyDesk.exe	String found in binary or memory: https://policies.goog
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://policies.google.com/privacy?hl=$
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.c
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/account-migration
Source: AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/account-migrationn=
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/anydesk-account
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/anydesk-for-android-chromeos#troubleshooting
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/anydesk-id-and-alias
Source: AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/anydesk-id-and-alias=
Source: AnyDesk.exe, 0000000D.00000002.2615603913.0000000002388000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/anydesk-id-and-aliasE
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/my-anydesk-ii#user-management
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/quick-start-guide
Source: AnyDesk.exe, 0000000D.00000002.2615603913.00000000023FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/quick-start-guidew
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/status-anynet_overload
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/status-desk_rt_au
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/status-desk_rt_auto_disconnect
Source: AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/status-desk_rt_auto_disconnect.
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/status-desk_rt_ipc_error
Source: AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/status-desk_rt_ipc_errorr:
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/the-session-has-ended-unexpectedly
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/u
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/users
Source: AnyDesk.exe	String found in binary or memory: https://support.anydesk.com/knowledge/waiting-for-image-bla
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/waiting-for-image-black-screen
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/what-is-full-client-management
Source: AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://support.anydesk.com/knowledge/what-is-full-client-management.
Source: AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://www.google.com/intl/$
Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	String found in binary or memory: https://www.nayuki.io/page/qr-code-generator-library

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918

Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.229.191.39:443 -> 192.168.2.4:50162 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 37.19.203.67:443 -> 192.168.2.4:50167 version: TLS 1.2

Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: DirectDrawCreateEx

memstr_8061d6b9-4

Source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_1cc56b66-4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_2308_1958805723

Jump to behavior

Source: chromecache_324.2.dr	Static PE information: No import functions for PE file found
Source: d9c3f5c6-b028-46a8-b2cf-054c63dabc6e.tmp.0.dr	Static PE information: No import functions for PE file found
Source: Unconfirmed 55236.crdownload.0.dr	Static PE information: No import functions for PE file found

Source: d9c3f5c6-b028-46a8-b2cf-054c63dabc6e.tmp.0.dr

Static PE information: Data appended to the last section found

Source: classification engine

Classification label: mal84.evad.win@40/220@152/60

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\d9c3f5c6-b028-46a8-b2cf-054c63dabc6e.tmp

Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_mailbox_2496_1555455819_0_mtx
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_mailbox_6052_1570223281_0_mtx
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_4
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcstobjmtx
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_3
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_6
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_5
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_6052_5268_0
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_806_lsystem_mtx
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_mailbox_2496_1555455819_1_mtx
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_19
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_18
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Session\1\ad_connect_queue_4948_1568105276_mtx
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_13
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_12
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_4948_2288_11
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_mailbox_6052_1570223281_1_mtx
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_trace_mtx
Source: C:\Users\user\Downloads\AnyDesk.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\ad_qipcmtx_6052_6612_0

Source: C:\Users\user\Downloads\AnyDesk.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: AnyDesk.exe	String found in binary or memory: e.mobile=Your Address ad.connect.share.myid=AnyDesk-Address: ad.connect.share.password_preset=This AnyDesk uses a predefined passw
Source: AnyDesk.exe	String found in binary or memory: ad.connect.link.quick_start_guide.href=https://support.anydesk.com/knowledge/quick-start-guide ad.connect.link.anydesk_id_and_alia

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sub.nabprotect-livechat.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7136 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6592 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7380 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Users\user\Downloads\AnyDesk.exe C:\Users\user\Downloads\AnyDesk.exe
Source: C:\Users\user\Downloads\AnyDesk.exe	Process created: C:\Users\user\Downloads\AnyDesk.exe "C:\Users\user\Downloads\AnyDesk.exe" --local-service
Source: C:\Users\user\Downloads\AnyDesk.exe	Process created: C:\Users\user\Downloads\AnyDesk.exe "C:\Users\user\Downloads\AnyDesk.exe" --local-control
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7136 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6592 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7380 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Process created: C:\Users\user\Downloads\AnyDesk.exe "C:\Users\user\Downloads\AnyDesk.exe" --local-service	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Process created: C:\Users\user\Downloads\AnyDesk.exe "C:\Users\user\Downloads\AnyDesk.exe" --local-control	Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2155fee3-2419-4373-b102-6843707eb41f}\InProcServer32

Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\dwm_dda-32\privacy_feature\privacy_feature.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.00000000016A6000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.00000000016A6000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\app-32\win_loader\AnyDesk.pdb source: AnyDesk.exe, 0000000D.00000000.2499443403.0000000001850000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2613597509.0000000001850000.00000002.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\dwm_dda-64\win_dwm\win_dwm.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.00000000016A6000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.00000000016A6000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\dwm_dda-32\win_dwm\win_dwm.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.000000000166A000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.000000000166A000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\app-32\win_app\win_app.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\app-32\win_app\win_app.pdb` source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Buildbot\ad-windows-32\build\release\dwm_dda-64\privacy_feature\privacy_feature.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.0000000001744000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.0000000001744000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: SAS.pdbR source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.000000000166A000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.000000000166A000.00000004.00000001.01000000.00000006.sdmp
Source:	Binary string: SAS.pdb source: AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2612641194.000000000166A000.00000004.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2612783131.000000000166A000.00000004.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Downloads\AnyDesk.exe	Unpacked PE file: 13.2.AnyDesk.exe.5c0000.0.unpack .text:ER;.itext:W;.rdata:R;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.itext:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\Downloads\AnyDesk.exe	Unpacked PE file: 14.2.AnyDesk.exe.5c0000.0.unpack .text:ER;.itext:W;.rdata:R;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.itext:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\Downloads\AnyDesk.exe	Unpacked PE file: 15.2.AnyDesk.exe.5c0000.0.unpack .text:ER;.itext:W;.rdata:R;.data:W;.rsrc:R;.reloc:R; vs .text:ER;.itext:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;

Source: d9c3f5c6-b028-46a8-b2cf-054c63dabc6e.tmp.0.dr

Static PE information: real checksum: 0x5479da should be: 0xf2e8

Source: C:\Users\user\Downloads\AnyDesk.exe	Code function: 15_3_043654DC push eax; ret	15_3_0436551D
Source: C:\Users\user\Downloads\AnyDesk.exe	Code function: 15_3_043654DC push eax; ret	15_3_0436551D
Source: C:\Users\user\Downloads\AnyDesk.exe	Code function: 15_3_043654DC push eax; ret	15_3_0436551D
Source: C:\Users\user\Downloads\AnyDesk.exe	Code function: 15_3_043654DC push eax; ret	15_3_0436551D

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 55236.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 324	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\d9c3f5c6-b028-46a8-b2cf-054c63dabc6e.tmp	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\AnyDesk.exe (copy)	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: Chrome Cache Entry: 324

Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Hides that the sample has been downloaded from the Internet (zone.identifier)

Source: C:\Users\user\Downloads\AnyDesk.exe

File opened: C:\Users\user\Downloads\AnyDesk.exe:Zone.Identifier read attributes | delete

Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe TID: 5336	Thread sleep time: -8301034833169293s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe TID: 2304	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe TID: 4996	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe TID: 5336	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe TID: 1284	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe TID: 3396	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe TID: 6816	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe TID: 3104	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe TID: 1284	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: AnyDesk.exe, 0000000E.00000002.2615700301.0000000002238000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlll

Source: C:\Users\user\Downloads\AnyDesk.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\Downloads\AnyDesk.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Downloads\AnyDesk.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: AnyDesk.exe, 0000000E.00000002.2613597509.0000000001850000.00000002.00000001.01000000.00000006.sdmp	Binary or memory string: .itext.text.custom9292a41a800206f7d3a5e5d5722941e2release/win_8.0.xbe44929eaa9f4cd4625e8be543627ce9a1789671
Source: AnyDesk.exe, 0000000F.00000002.2614691038.000000000213F000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: release/win_8.0.x
Source: AnyDesk.exe, 0000000F.00000002.2614691038.000000000213F000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: be44929eaa9f4cd4625e8be543627ce9a1789671release/win_8.0.x9292a41a800206f7d3a5e5d5722941e2

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	2 Command and Scripting Interpreter	Path Interception	1 Process Injection	21 Masquerading	21 Input Capture	1 Security Software Discovery	Remote Services	21 Input Capture	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	2 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	21 Virtualization/Sandbox Evasion	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Process Injection	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Hidden Files and Directories	LSA Secrets	22 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://sub.nabprotect-livechat.com/	100%	Avira URL Cloud	phishing
http://sub.nabprotect-livechat.com/	16%	Virustotal		Browse
http://sub.nabprotect-livechat.com/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

Source	Detection	Scanner
C:\Users\user\Downloads\AnyDesk.exe (copy)	0%	ReversingLabs
C:\Users\user\Downloads\Unconfirmed 55236.crdownload	0%	ReversingLabs
Chrome Cache Entry: 324	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
adobetarget.data.adobedc.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
brand-messenger.app.khoros.com	0%	Virustotal	Browse
log-24f7f3c7.au.v2.we-stats.com	0%	Virustotal	Browse
wup-24f7f3c7.au.v2.we-stats.com	0%	Virustotal	Browse
dep.af.contentsquare.net	0%	Virustotal	Browse
edge-geo.nc0.co	0%	Virustotal	Browse
nab.com.au.ssl.d1.sc.omtrdc.net	0%	Virustotal	Browse
sub.nabprotect-livechat.com	16%	Virustotal	Browse
wup-24f7f3c7.nab.com.au	0%	Virustotal	Browse
ib.nab.com.au	0%	Virustotal	Browse
x.nab.com.au	0%	Virustotal	Browse
www.nab.com.au	0%	Virustotal	Browse
tms.nab.com.au	0%	Virustotal	Browse
1.c81358859121583b7adf2ace89cb39f44.com	1%	Virustotal	Browse
1.a79ab95c1589a13f8a4cab612bc71f9f7.com	0%	Virustotal	Browse
nationalaustraliaban.tt.omtrdc.net	0%	Virustotal	Browse
smetrics.nab.com.au	0%	Virustotal	Browse
log-24f7f3c7.nab.com.au	0%	Virustotal	Browse
mboxedge34.tt.omtrdc.net	0%	Virustotal	Browse
syd-col.eum-appdynamics.com	0%	Virustotal	Browse
1.b406929acabac9b095f124c81bdfcf57f.com	0%	Virustotal	Browse
c.az.contentsquare.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
http://iptc.org/std/Iptc4xmpExt/2008-02-29/	0%	URL Reputation	safe
https://tms.nab.com.au/nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner	0%	Avira URL Cloud	safe
http://sub.nabprotect-livechat.com/scripts/script.js	100%	Avira URL Cloud	phishing
https://brand-messenger.app.khoros.com/images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b	0%	Avira URL Cloud	safe
https://tms.nab.com.au/nab/prod/code/15e884c3d32788d21cefeb57d775a93e.js?conditionId0=404951	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://tms.nab.com.au/nab/prod/code/35a6ab04a336312adca4bf1c25933921.js?conditionId0=505275	0%	Avira URL Cloud	safe
https://fhp.nab.com.au/api/fl/idgib-w-nab-ib	0%	Avira URL Cloud	safe
https://brand-messenger.app.khoros.com/bundle/loader.js?v=1706142437712	0%	Avira URL Cloud	safe
https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142440038&tealium_cookie_domain=.nab.com.au	0%	Avira URL Cloud	safe
https://tms.nab.com.au/nab/prod/code/35a6ab04a336312adca4bf1c25933921.js?conditionId0=505275	0%	Virustotal		Browse
https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html	0%	Avira URL Cloud	safe
https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142461000&tealium_cookie_domain=.nab.com.au	0%	Avira URL Cloud	safe
https://c.az.contentsquare.net/dvar?v=13.59.1&pid=51360&pn=2&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=381217	0%	Avira URL Cloud	safe
https://policies.goog	0%	Avira URL Cloud	safe
https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html	0%	Virustotal		Browse
https://smetrics.nab.com.au/b/ss/nab-prd/10/JS-2.22.4/s62039120039136?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A20%204%20-60&d.&nsid=0&jsonv=1&.d&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Ahelp-support&g=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&c.&getTimeParting=6.3&.c&cc=AUD&ch=nab%3Ahelp-support&server=www.nab.com.au&events=event1&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=nab&v1=D%3Dc1&h1=D%3DpageName%2B%22%3Aindex%22&c2=D%3Dch&v2=D%3Dch&c5=1&v5=D%3Dc5&c9=D%3DpageName&v9=D%3DpageName&c11=D%3Dg&v11=D%3Dg&c13=New&v13=D%3Dc13&c23=profile.omnia%3Dc%3Aunk&c24=profile.omnia_all%3Dc%3Aunk&c31=D%3DpageName&v60=profile.omnia%3Dc%3Aunk&v61=profile.omnia_all%3Dc%3Aunk&c72=VisitorAPI%20Present&v73=Thursday%7C11%3A27%20AM&v74=D%3Dt&c75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v76=74249799952676478810044664576166395424&v77=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&v81=0.22848551443168175_1706142429071&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&AQE=1	0%	Avira URL Cloud	safe
https://c.az.contentsquare.net/dvar?v=13.59.1&pid=51360&pn=3&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=514734	0%	Avira URL Cloud	safe
http://sub.nabprotect-livechat.com/css/style.css	100%	Avira URL Cloud	phishing
https://c.az.contentsquare.net/dvar?v=13.59.1&pid=51360&pn=1&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=479557	0%	Avira URL Cloud	safe
https://smetrics.nab.com.au/b/ss/nab-prd/10/JS-2.22.4/s67314964867477?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A28%204%20-60&d.&nsid=0&jsonv=1&.d&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Apersonal&g=https%3A%2F%2Fwww.nab.com.au%2F&cc=AUD&events=event22&c9=D%3Dv9&v9=nab%3Apersonal&c11=D%3Dg&v11=D%3Dg&c22=D%3Dv22&v22=6fb99a8b-1dba-452a-8453-66e78b5a2ed5&c65=chatwidget-available%3AChatbot&v65=D%3Dc65&v72=v47%20set%20via%20response%20token%20%3A%20null&pe=lnk_o&pev2=virtual-assistant-offered&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&lrt=754&AQE=1	0%	Avira URL Cloud	safe
https://fhp.nab.com.au/api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=hG%2Ff3Q0sRFPS5OhDAudxHchIyjQvj%2BAR5nUVy70s2TkTqPYcTu8GV%2F1ZTMt0VEyYKCBSRR3EPc4CNEnybP0dgtX2O9bpoESdEUelc1VWiKMVP7UDXIlvl8sjq%2BZ%2FJ%2Fu4vokNHNl1FJgrXrHV50aaSmo4fqrQO3%2BoqcVj	0%	Avira URL Cloud	safe
https://syd-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum	0%	Avira URL Cloud	safe
https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142447047&tealium_cookie_domain=.nab.com.au	0%	Avira URL Cloud	safe
https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142458936	0%	Avira URL Cloud	safe
http://sub.nabprotect-livechat.com/fonts/source-sans-pro-light.woff2	100%	Avira URL Cloud	phishing
https://syd-col.eum-appdynamics.com/eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum	0%	Avira URL Cloud	safe
https://tags.nab.com.au/main/prod/utag.js	0%	Avira URL Cloud	safe
https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Avira URL Cloud	safe
http://sub.nabprotect-livechat.com/favicon.ico	100%	Avira URL Cloud	phishing
https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447489	0%	Avira URL Cloud	safe
https://my.anyde	0%	Avira URL Cloud	safe
https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Avira URL Cloud	safe
https://tms.nab.com.au/nab/prod/code/d9d080c5e00417b3e1a46d592afbbb69.js?conditionId0=421109&conditionId1=416171	0%	Avira URL Cloud	safe
https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142456988	0%	Avira URL Cloud	safe
https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142437096&tealium_cookie_domain=.nab.com.au	0%	Avira URL Cloud	safe
https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447359	0%	Avira URL Cloud	safe
https://nationalaustraliaban.tt.omtrdc.net/rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0	0%	Avira URL Cloud	safe
about:srcdoc	0%	Avira URL Cloud	safe
https://brand-messenger.app.khoros.com/bundle/loader.js?v1706142453947	0%	Avira URL Cloud	safe
https://wup-24f7f3c7.nab.com.au/client/v3.1/web/wup?cid=nightcrawler	0%	Avira URL Cloud	safe
https://brand-messenger.app.khoros.com/nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json	0%	Avira URL Cloud	safe
http://sub.nabprotect-livechat.com/fonts/source-sans-pro-regular.woff2	100%	Avira URL Cloud	phishing
https://c.az.contentsquare.net/pageview?pid=51360&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142432&pn=1&dw=1263&dh=4308&ww=1280&wh=907&sw=1280&sh=1024&dr=&url=https%3A%2F%2Fwww.nab.com.au%2F&uc=1&la=en-US&cvars=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Apersonal%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%7D&cvarp=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Apersonal%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%7D&v=13.59.1&pvt=n&ex=&r=978019	0%	Avira URL Cloud	safe
https://tms.nab.com.au/nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support	0%	Avira URL Cloud	safe
https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dart.l.doubleclick.net	142.251.15.149	true	false		high
relay-9739e7d3.net.anydesk.com	37.19.203.67	true	false		high
k8s-istiosys-istioing-245f3491e8-20c60ff33b9fb931.elb.ap-southeast-2.amazonaws.com	52.65.11.116	true	false		high
dep.af.contentsquare.net	20.96.87.156	true	false	0%, Virustotal, Browse	unknown
events.launchdarkly.com	52.71.237.94	true	false		high
brand-messenger.app.khoros.com	18.160.172.81	true	false	0%, Virustotal, Browse	unknown
adservice.google.com	64.233.177.155	true	false		high
wup-24f7f3c7.au.v2.we-stats.com	20.53.176.113	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com	52.63.8.134	true	false		high
d3q5vj014p5nip.cloudfront.net	18.64.174.94	true	false		high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	3.223.28.32	true	false		high
adobetarget.data.adobedc.net	63.140.38.160	true	false	0%, Virustotal, Browse	unknown
insight.adsrvr.org	15.197.193.217	true	false		high
scontent.xx.fbcdn.net	31.13.88.13	true	false		high
d3lyk6mjwds9ox.cloudfront.net	18.160.78.31	true	false		high
log-24f7f3c7.au.v2.we-stats.com	20.53.196.14	true	false	0%, Virustotal, Browse	unknown
d3hspktnnoy2e3.cloudfront.net	18.66.255.60	true	false		high
www.google.com	108.177.122.147	true	false		high
match.adsrvr.org	3.33.220.150	true	false		high
star-mini.c10r.facebook.com	31.13.66.35	true	false		high
sub.nabprotect-livechat.com	91.215.85.14	true	false	16%, Virustotal, Browse	unknown
boot.net.anydesk.com	185.229.191.39	true	false		high
accounts.google.com	142.250.9.84	true	false		high
s.amazon-adsystem.com	52.46.143.56	true	false		high
ad.doubleclick.net	142.250.105.149	true	false		high
clientstream-ga.launchdarkly.com	76.223.31.44	true	false		high
datacloud.tealiumiq.com	3.226.226.33	true	false		high
edge-geo.nc0.co	3.133.211.247	true	false	0%, Virustotal, Browse	unknown
tags.nab.com.au.greylabeldelivery.com	13.226.52.124	true	false		unknown
googleads.g.doubleclick.net	64.233.177.155	true	false		high
download.anydesk.com	188.40.104.135	true	false		high
mps.nab.com.au.greylabeldelivery.com	54.153.169.192	true	false		unknown
ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com	54.205.210.54	true	false		high
td.doubleclick.net	173.194.219.156	true	false		high
clients.l.google.com	142.251.15.139	true	false		high
nab.com.au.ssl.d1.sc.omtrdc.net	63.140.38.237	true	false	0%, Virustotal, Browse	unknown
ib.anycast.adnxs.com	68.67.161.182	true	false		high
collect.nab.com.au	15.197.224.21	true	false		unknown
proactive-chat-server-ap.prod.aws.lcloud.com	52.65.199.83	true	false		high
1.c81358859121583b7adf2ace89cb39f44.com	unknown	unknown	false	1%, Virustotal, Browse	unknown
cm.everesttech.net	unknown	unknown	false		high
mps.nab.com.au	unknown	unknown	false		unknown
www.nab.com.au	unknown	unknown	false	0%, Virustotal, Browse	unknown
wup-24f7f3c7.nab.com.au	unknown	unknown	false	0%, Virustotal, Browse	unknown
clients2.google.com	unknown	unknown	false		high
ib.nab.com.au	unknown	unknown	false	0%, Virustotal, Browse	unknown
dpm.demdex.net	unknown	unknown	false		high
x.nab.com.au	unknown	unknown	false	0%, Virustotal, Browse	unknown
clients1.google.com	unknown	unknown	false		high
www.facebook.com	unknown	unknown	false		high
clientstream.launchdarkly.com	unknown	unknown	false		high
app.launchdarkly.com	unknown	unknown	false		high
1.a79ab95c1589a13f8a4cab612bc71f9f7.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.linkedin.com	unknown	unknown	false		high
tags.nab.com.au	unknown	unknown	false		unknown
nab.demdex.net	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
px.ads.linkedin.com	unknown	unknown	false		high
tms.nab.com.au	unknown	unknown	false	0%, Virustotal, Browse	unknown
c.az.contentsquare.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
smetrics.nab.com.au	unknown	unknown	false	0%, Virustotal, Browse	unknown
nationalaustraliaban.tt.omtrdc.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
syd-col.eum-appdynamics.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
1.b406929acabac9b095f124c81bdfcf57f.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
fhp.nab.com.au	unknown	unknown	false		unknown
ib.adnxs.com	unknown	unknown	false		high
mboxedge34.tt.omtrdc.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
log-24f7f3c7.nab.com.au	unknown	unknown	false	0%, Virustotal, Browse	unknown
3347639.fls.doubleclick.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://sub.nabprotect-livechat.com/scripts/script.js	false	Avira URL Cloud: phishing	unknown
https://nab.demdex.net/firstevent?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=Bootstrapper.aam_tnt_cb	false		high
https://datacloud.tealiumiq.com/tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid	false		high
https://tms.nab.com.au/nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner	false	Avira URL Cloud: safe	unknown
https://brand-messenger.app.khoros.com/images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b	false	Avira URL Cloud: safe	unknown
https://download.anydesk.com/AnyDesk.exe	false		high
https://tms.nab.com.au/nab/prod/code/15e884c3d32788d21cefeb57d775a93e.js?conditionId0=404951	false	Avira URL Cloud: safe	unknown
http://sub.nabprotect-livechat.com/	true		unknown
about:blank	false	Avira URL Cloud: safe	low
https://tms.nab.com.au/nab/prod/code/35a6ab04a336312adca4bf1c25933921.js?conditionId0=505275	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://fhp.nab.com.au/api/fl/idgib-w-nab-ib	false	Avira URL Cloud: safe	unknown
https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142440038&tealium_cookie_domain=.nab.com.au	false	Avira URL Cloud: safe	unknown
https://brand-messenger.app.khoros.com/bundle/loader.js?v=1706142437712	false	Avira URL Cloud: safe	unknown
https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://events.launchdarkly.com/events/diagnostic/59c45122922f080adde50ec0	false		high
https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142461000&tealium_cookie_domain=.nab.com.au	false	Avira URL Cloud: safe	unknown
https://c.az.contentsquare.net/dvar?v=13.59.1&pid=51360&pn=2&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=381217	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-user-list/1040712916/?random=1706142461008&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=376635470%2C466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=2&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&ref=https%3A%2F%2Fib.nab.com.au%2F&tiba=IB%20login%20banner%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_EmcDFzOUrvO06W5HF_cnm66oZeCZVzriQYEYxf47aTgnPSfS&random=2201551351&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y	false		high
https://smetrics.nab.com.au/b/ss/nab-prd/10/JS-2.22.4/s62039120039136?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A20%204%20-60&d.&nsid=0&jsonv=1&.d&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Ahelp-support&g=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&c.&getTimeParting=6.3&.c&cc=AUD&ch=nab%3Ahelp-support&server=www.nab.com.au&events=event1&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=nab&v1=D%3Dc1&h1=D%3DpageName%2B%22%3Aindex%22&c2=D%3Dch&v2=D%3Dch&c5=1&v5=D%3Dc5&c9=D%3DpageName&v9=D%3DpageName&c11=D%3Dg&v11=D%3Dg&c13=New&v13=D%3Dc13&c23=profile.omnia%3Dc%3Aunk&c24=profile.omnia_all%3Dc%3Aunk&c31=D%3DpageName&v60=profile.omnia%3Dc%3Aunk&v61=profile.omnia_all%3Dc%3Aunk&c72=VisitorAPI%20Present&v73=Thursday%7C11%3A27%20AM&v74=D%3Dt&c75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v76=74249799952676478810044664576166395424&v77=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&v81=0.22848551443168175_1706142429071&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&AQE=1	false	Avira URL Cloud: safe	unknown
https://c.az.contentsquare.net/dvar?v=13.59.1&pid=51360&pn=3&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=514734	false	Avira URL Cloud: safe	unknown
https://events.launchdarkly.com/events/bulk/59c45122922f080adde50ec0	false		high
https://ad.doubleclick.net/ddm/activity/src=3347639;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044?	false		high
http://sub.nabprotect-livechat.com/css/style.css	false	Avira URL Cloud: phishing	unknown
https://c.az.contentsquare.net/dvar?v=13.59.1&pid=51360&pn=1&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=479557	false	Avira URL Cloud: safe	unknown
https://smetrics.nab.com.au/b/ss/nab-prd/10/JS-2.22.4/s67314964867477?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A28%204%20-60&d.&nsid=0&jsonv=1&.d&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Apersonal&g=https%3A%2F%2Fwww.nab.com.au%2F&cc=AUD&events=event22&c9=D%3Dv9&v9=nab%3Apersonal&c11=D%3Dg&v11=D%3Dg&c22=D%3Dv22&v22=6fb99a8b-1dba-452a-8453-66e78b5a2ed5&c65=chatwidget-available%3AChatbot&v65=D%3Dc65&v72=v47%20set%20via%20response%20token%20%3A%20null&pe=lnk_o&pev2=virtual-assistant-offered&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&lrt=754&AQE=1	false	Avira URL Cloud: safe	unknown
https://fhp.nab.com.au/api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=hG%2Ff3Q0sRFPS5OhDAudxHchIyjQvj%2BAR5nUVy70s2TkTqPYcTu8GV%2F1ZTMt0VEyYKCBSRR3EPc4CNEnybP0dgtX2O9bpoESdEUelc1VWiKMVP7UDXIlvl8sjq%2BZ%2FJ%2Fu4vokNHNl1FJgrXrHV50aaSmo4fqrQO3%2BoqcVj	false	Avira URL Cloud: safe	unknown
https://syd-col.eum-appdynamics.com/eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum	false	Avira URL Cloud: safe	unknown
https://www.nab.com.au/appdynamics/adrum-xd.15ad9e12c414858a5e6cfdfb1f2331b1.html	false		unknown
https://nab.demdex.net/event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=Bootstrapper.aam_tnt_cb	false		high
https://nab.demdex.net/event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_mid=74531577018668379620070530052756004963&d_cb=Bootstrapper.aam_tnt_cb	false		high
https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142447047&tealium_cookie_domain=.nab.com.au	false	Avira URL Cloud: safe	unknown
https://insight.adsrvr.org/track/up?adv=7uxlgqc&ref=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&upid=r2pjj86&upv=1.1.0	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	false		high
https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142458936	false	Avira URL Cloud: safe	unknown
http://sub.nabprotect-livechat.com/fonts/source-sans-pro-light.woff2	false	Avira URL Cloud: phishing	unknown
https://tags.nab.com.au/main/prod/utag.js	false	Avira URL Cloud: safe	unknown
https://syd-col.eum-appdynamics.com/eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum	false	Avira URL Cloud: safe	unknown
https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	false	Avira URL Cloud: safe	unknown
http://sub.nabprotect-livechat.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447489	false	Avira URL Cloud: safe	unknown
https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner	false		unknown
https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	false	Avira URL Cloud: safe	unknown
https://tms.nab.com.au/nab/prod/code/d9d080c5e00417b3e1a46d592afbbb69.js?conditionId0=421109&conditionId1=416171	false	Avira URL Cloud: safe	unknown
https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142456988	false	Avira URL Cloud: safe	unknown
https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142437096&tealium_cookie_domain=.nab.com.au	false	Avira URL Cloud: safe	unknown
https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447359	false	Avira URL Cloud: safe	unknown
https://nationalaustraliaban.tt.omtrdc.net/rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0	false	Avira URL Cloud: safe	unknown
about:srcdoc	false	Avira URL Cloud: safe	low
https://proactive-chat-server-ap.prod.aws.lcloud.com/geo/ip	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://s.amazon-adsystem.com/dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433&dcc=t	false		high
https://brand-messenger.app.khoros.com/bundle/loader.js?v1706142453947	false	Avira URL Cloud: safe	unknown
https://wup-24f7f3c7.nab.com.au/client/v3.1/web/wup?cid=nightcrawler	false	Avira URL Cloud: safe	unknown
https://brand-messenger.app.khoros.com/nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json	false	Avira URL Cloud: safe	unknown
http://sub.nabprotect-livechat.com/fonts/source-sans-pro-regular.woff2	false	Avira URL Cloud: phishing	unknown
https://c.az.contentsquare.net/pageview?pid=51360&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142432&pn=1&dw=1263&dh=4308&ww=1280&wh=907&sw=1280&sh=1024&dr=&url=https%3A%2F%2Fwww.nab.com.au%2F&uc=1&la=en-US&cvars=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Apersonal%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%7D&cvarp=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Apersonal%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%7D&v=13.59.1&pvt=n&ex=&r=978019	false	Avira URL Cloud: safe	unknown
https://tms.nab.com.au/nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support	false	Avira URL Cloud: safe	unknown
https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://support.anydesk.com/knowledge/users	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high
https://anydesk.com/update	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high
https://help.anydesk.com/en/anydesk-on-macosk.ra	AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://datatracker.ietf.org/ipr/1526/	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false		high
https://policies.google.com/privacy?hl=$	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high
https://help.anydesk.com	AnyDesk.exe	false		high
https://my.anydesk.com/	AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anydesk.com/orderW	AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.anydesk.com/knowledge/what-is-full-client-management	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high
https://my.anydesk.com/v2s	AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.anydesk.com/knowledge/account-migration	AnyDesk.exe	false		high
https://support.anydesk.com/knowledge/what-is-full-client-management.	AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://help.anydesk.com/	AnyDesk.exe	false		high
https://policies.goog	AnyDesk.exe	false	Avira URL Cloud: safe	unknown
https://support.anydesk.com/knowledge/status-anynet_overload	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high
https://anydesk.com/contact/sales)	AnyDesk.exe	false		high
https://anydesk.com/pricing/teamse	AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anydesk.com/pricing/teams).	AnyDesk.exe, 0000000D.00000002.2617423775.0000000004877000.00000004.00000020.00020000.00000000.sdmp	false		high
https://help.anydesk.com/en/anydesk-on-macoss	AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anydesk.com/en/assembly	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false		high
https://datatracker.ietf.org/ipr/1524/	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false		high
https://my.anydesk.com/v2	AnyDesk.exe	false		high
https://help.anydesk.com/en/anydesk-on-macosd	AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anydesk.com/company#imprint	AnyDesk.exe	false		high
http://www.openssl.org/)	AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anydesk.com/pricing/teams)	AnyDesk.exe	false		high
http://www.gimp.org/xmp/	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2615603913.00000000023FC000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2617847012.0000000004BC0000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000D.00000002.2615603913.00000000023EA000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anydesk.com/de/datenschutz	AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false		high
https://my.anydesk.com	AnyDesk.exe	false		high
https://my.anyde	AnyDesk.exe	false	Avira URL Cloud: safe	unknown
http://www.openssl.org/support/faq.html	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high
https://anydesk.com/pricing/teams	AnyDesk.exe	false		high
https://anydesk.com/orderha	AnyDesk.exe, 0000000D.00000003.2509250935.000000000439A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anydesk.com/en/assembly/terms	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.anydesk.com	AnyDesk.exe	false		high
https://support.anydesk.com/knowledge/waiting-for-image-black-screen	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high
https://support.anydesk.com/knowledge/anydesk-for-android-chromeos#troubleshooting	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2617423775.0000000004800000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000003.2509059059.0000000004316000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high
http://iptc.org/std/Iptc4xmpExt/2008-02-29/	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000D.00000002.2611517765.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp, AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.anydesk.com/knowledge/status-desk_rt_au	AnyDesk.exe	false		high
https://support.anydesk.com/knowledge/status-desk_rt_auto_disconnect.	AnyDesk.exe, 0000000D.00000002.2616834842.00000000042B0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anydesk.com/en/privacy	AnyDesk.exe, 0000000E.00000003.2527813349.0000000002E01000.00000004.00000020.00020000.00000000.sdmp	false		high
https://help.anydesk.com/HelpLinkInstallLocationAnyDesk	AnyDesk.exe, 0000000D.00000003.2505376495.0000000002E83000.00000004.00000020.00020000.00000000.sdmp, AnyDesk.exe, 0000000E.00000002.2611669013.0000000001005000.00000002.00000001.01000000.00000006.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.223.28.32	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
74.125.138.157	unknown	United States	15169	GOOGLEUS	false
63.140.38.104	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
63.140.38.100	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
185.229.191.39	boot.net.anydesk.com	Czech Republic	60068	CDN77GB	false
173.194.219.156	td.doubleclick.net	United States	15169	GOOGLEUS	false
172.253.124.105	unknown	United States	15169	GOOGLEUS	false
172.253.124.103	unknown	United States	15169	GOOGLEUS	false
3.215.173.68	unknown	United States	14618	AMAZON-AESUS	false
20.53.176.113	wup-24f7f3c7.au.v2.we-stats.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
91.215.85.14	sub.nabprotect-livechat.com	Russian Federation	34665	PINDC-ASRU	false
18.160.172.54	unknown	United States	3	MIT-GATEWAYSUS	false
23.20.189.8	unknown	United States	14618	AMAZON-AESUS	false
68.67.161.182	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
52.65.199.83	proactive-chat-server-ap.prod.aws.lcloud.com	United States	16509	AMAZON-02US	false
31.13.88.13	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
64.233.176.138	unknown	United States	15169	GOOGLEUS	false
54.211.243.61	unknown	United States	14618	AMAZON-AESUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
18.160.78.31	d3lyk6mjwds9ox.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
52.46.155.104	unknown	United States	16509	AMAZON-02US	false
3.133.211.247	edge-geo.nc0.co	United States	16509	AMAZON-02US	false
63.140.38.237	nab.com.au.ssl.d1.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
74.125.138.149	unknown	United States	15169	GOOGLEUS	false
74.125.138.148	unknown	United States	15169	GOOGLEUS	false
20.53.196.14	log-24f7f3c7.au.v2.we-stats.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.65.11.116	k8s-istiosys-istioing-245f3491e8-20c60ff33b9fb931.elb.ap-southeast-2.amazonaws.com	United States	16509	AMAZON-02US	false
54.205.210.54	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.24.11.8	unknown	United States	16509	AMAZON-02US	false
76.223.31.44	clientstream-ga.launchdarkly.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.9.84	accounts.google.com	United States	15169	GOOGLEUS	false
52.223.40.198	unknown	United States	8987	AMAZONEXPANSIONGB	false
142.251.15.157	unknown	United States	15169	GOOGLEUS	false
108.177.122.147	www.google.com	United States	15169	GOOGLEUS	false
52.46.143.56	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
63.140.38.160	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
13.226.52.124	tags.nab.com.au.greylabeldelivery.com	United States	16509	AMAZON-02US	false
15.197.193.217	insight.adsrvr.org	United States	7430	TANDEMUS	false
54.206.194.51	unknown	United States	16509	AMAZON-02US	false
54.153.169.192	mps.nab.com.au.greylabeldelivery.com	United States	16509	AMAZON-02US	false
64.233.177.155	adservice.google.com	United States	15169	GOOGLEUS	false
3.226.226.33	datacloud.tealiumiq.com	United States	14618	AMAZON-AESUS	false
52.63.8.134	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
34.192.24.192	unknown	United States	14618	AMAZON-AESUS	false
142.251.15.149	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.255.60	d3hspktnnoy2e3.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
31.13.66.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
18.64.174.94	d3q5vj014p5nip.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
20.96.87.156	dep.af.contentsquare.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
15.197.224.21	collect.nab.com.au	United States	7430	TANDEMUS	false
142.250.105.149	ad.doubleclick.net	United States	15169	GOOGLEUS	false
37.19.203.67	relay-9739e7d3.net.anydesk.com	Ukraine	31343	INTERTELECOMUA	false
142.251.15.139	clients.l.google.com	United States	15169	GOOGLEUS	false
159.69.19.197	unknown	Germany	24940	HETZNER-ASDE	false
18.160.172.81	brand-messenger.app.khoros.com	United States	3	MIT-GATEWAYSUS	false
52.71.237.94	events.launchdarkly.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4
127.0.0.1

General Information

Joe Sandbox version:	39.0.0 Ruby
Analysis ID:	1380802
Start date and time:	2024-01-25 01:25:51 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://sub.nabprotect-livechat.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	1
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal84.evad.win@40/220@152/60
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://sub.nabprotect-livechat.com/#login Browse: http://sub.nabprotect-livechat.com/#main-content Browse: https://www.nab.com.au/content/nabrwd/en Browse: https://www.nab.com.au/help-support Browse: https://www.nab.com.au/cgi-bin/ib/301_start.pl?browser=correct Browse: https://download.anydesk.com/AnyDesk.exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, qwavedrv.sys, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 173.194.219.94, 34.104.35.123, 40.127.169.103, 72.21.81.240, 192.229.211.108, 20.166.126.56, 23.46.200.200, 54.81.243.245, 34.206.160.227, 50.19.194.199, 3.211.33.196, 18.210.25.76, 44.213.8.123, 172.253.124.154, 172.253.124.155, 172.253.124.157, 172.253.124.156, 173.194.219.97, 13.107.42.14, 52.165.164.15, 184.87.33.109, 23.1.29.39, 172.253.124.95, 142.250.9.95, 74.125.136.95, 142.251.15.95, 108.177.122.95, 64.233.177.95, 64.233.185.95, 142.250.105.95, 64.233.176.95, 172.217.215.95, 74.125.138.95, 173.194.219.95, 23.46.200.171, 151.101.194.217, 151.101.130.217, 151.101.66.217, 151.101.2.217, 40.68.123.157, 64.233.176.94
Excluded domains from analysis (whitelisted): www.googleadservices.com, e5555.x.akamaiedge.net, slscr.update.microsoft.com, tm-dep-production-eastus2.trafficmanager.net, clientservices.googleapis.com, x.nab.com.au.edgekey.net, wu.azureedge.net, l-0005.l-msedge.net, www.nab.com.au.edgekey.net, ocsp.digicert.com, www.googletagmanager.com, e3685.x.akamaiedge.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, c3.shared.global.fastly.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, fs.microsoft.com, 9fb0bae4fa1d51cf.trafficmanager.net, content-autofill.googleapis.com, ib.nab.com.au.edgekey.net, wu.ec.azureedge.net, cm.everesttech.net.akadns.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, e7000.x.akamaiedge.net
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
01:28:10	API Interceptor	1x Sleep call for process: AnyDesk.exe modified

Process:	C:\Users\user\Downloads\AnyDesk.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	29200
Entropy (8bit):	4.372091724302164
Encrypted:	false
SSDEEP:	384:y23Ifob9HFR2ofzwmG4Lj2aGijyn/oFx2V52Eo:hIAb9HFRRnj06M0
MD5:	EDC0A96A77108DEDD1BBD10A89BA89FC
SHA1:	954C76DD699C9FEA429A4B5B18C330E06BBFEB1D
SHA-256:	B0C0E4D097B8315BE65F21D58C623AE9FB311640599B82BB01DF5F0B06102C09
SHA-512:	419EE75D86889AE2105EE14744B485FD39E9A543296FF468084B75B743DB0A47E629C245440DEAF53FFE73C940239E736B08615E881CB6C908328019A0AB95A9
Malicious:	false
Reputation:	low
Preview:	* * * * * * * * * * * * * * * * * .. info 2024-01-25 00:28:05.740 front 2496 6892 main - AnyDesk Windows Startup .. info 2024-01-25 00:28:05.740 front 2496 6892 main - Version 8.0.6 (release/win_8.0.x be44929eaa9f4cd4625e8be543627ce9a1789671).. info 2024-01-25 00:28:05.740 front 2496 6892 main - * Checksum 9292a41a800206f7d3a5e5d5722941e2.. info 2024-01-25 00:28:05.740 front 2496 6892 main - * Build 20231109084807.. info 2024-01-25 00:28:05.740 front 2496 6892 main - * Copyright (C) 2023 AnyDesk Software GmbH *.. info 2024-01-25 00:28:05.740 front 2496 6892 main - .. info 2024-01-25 00:28:05.740 front 2496 6892 main - Command Line params: "C:\Users\user\Downloads\AnyDesk.exe"

C:\Users\user\AppData\Roaming\AnyDesk\service.conf

Download File

Process:	C:\Users\user\Downloads\AnyDesk.exe
File Type:	ASCII text, with very long lines (1747)
Category:	dropped
Size (bytes):	2966
Entropy (8bit):	6.042921634422433
Encrypted:	false
SSDEEP:	48:uISTOficFQX3fP55d3q/0N+9j3wX73Coi2Nqm/64McjJKeO8TXaIEmkFWV4Z91Xh:uIST4ic6XvP55d5Cuy2rtIW+jmherFOO
MD5:	AC371B6288673D0408C42E80162D1F59
SHA1:	FBC2B6CC6C07FD83B4A31A9B63939135C0EA6B65
SHA-256:	CDAD47DA499D41BCBF51A2991A3E9B520C70E14A5A0BA0CC00A9975264314519
SHA-512:	87B40AA46AD1854408D4D4899EED6F4C54805C2EA133E0FB91958DE354A97E2BB7796B1C34F6D676A71658965CBC969C691D1F62EC8AB77D391FA07249DBF38D
Malicious:	false
Reputation:	low
Preview:	ad.anynet.cert=-----BEGIN CERTIFICATE-----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\nKhw5OVbkgmxi0EiL\n-----END CERTI

C:\Users\user\AppData\Roaming\AnyDesk\system.conf

Download File

Process:	C:\Users\user\Downloads\AnyDesk.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	802
Entropy (8bit):	4.82981846837274
Encrypted:	false
SSDEEP:	12:oqCTTWYv53y9Ow75sQiiBs7ef1Q+7lNqQHvWhQ44LroBGgFBG9hExf:/2aYR3lwNiiBsi5sAw34LtB9hG
MD5:	27F2E01F3378C39B45DF5D99C609BE8B
SHA1:	041493B7C56CEDFFFC2954EAF4F4C8D12B446900
SHA-256:	62F1F26B54989969EEEC20367BF1CFC703A1F1B476C171F2DB12D951FEE54C7E
SHA-512:	012BC628102F591876ED371D15FD576A183791A6328021704826E1BBF7C4C33FA4D9D4C172EB8804ACF39EBD5CC3B7333E968324CA8C056F4BDB83275817956D
Malicious:	false
Reputation:	low
Preview:	ad.anynet.alias=.ad.anynet.client_stats_hash=d51b703c0edddac786d463137e3d203e896131bf.ad.anynet.cur_version=34359738374.ad.anynet.fpr=dc118eaff7428dd2df0b79634441b71970683b30.ad.anynet.id=1340033188.ad.anynet.last_relay=relay-9739e7d3.net.anydesk.com:80:443:6568.ad.anynet.network_hash=560d8720cce54a06fcd046b02593e23e4d27eb01.ad.anynet.network_id=main.ad.anynet.relay.fatal_result=1.0.ad.anynet.relay.state=2.ad.license.name=free-1.ad.security.frontend_clipboard=1.ad.security.frontend_clipboard_files=1.ad.security.frontend_clipboard_version=1.ad.security.permission_profiles._default.permissions.sas=1.ad.security.permission_profiles._unattended_access.permissions.sas=1.ad.security.permission_profiles.version=1.ad.security.update_version=1.ad.wol.mac_hash=c7b95981aa4976e376d1d6bf28238487cabe669c.

C:\Users\user\AppData\Roaming\AnyDesk\user.conf

Download File

Process:	C:\Users\user\Downloads\AnyDesk.exe
File Type:	ASCII text, with very long lines (3197)
Category:	modified
Size (bytes):	7056
Entropy (8bit):	4.414295732256898
Encrypted:	false
SSDEEP:	192:q5p/l96H+ZcmAFeF/XhP9Y0fU4EK5s32nZI:qD/X7AF2XXYcUTK5hI
MD5:	2804BCDF77798DFA2F0B7E1F1ACEBD4B
SHA1:	3144E3B355FF2FB9A74BD523D7853A06A015B132
SHA-256:	782EE4A8AD9F75F3C79710626ACF74345734A3E11C68A1EC7B0ADA3700946E9E
SHA-512:	ECC6458BE46E090900DF23C95F78CC617CEB2BF7D8876025E8E13C20FDA081A125C3C5CB4A50DC040EF2D053A9DB3C6AE9F6DF05822288882C30CCCF36240B8D
Malicious:	false
Reputation:	low
Preview:	ad.account.auth_methods=6fa74c609a01f31f1f670668df954f4642a4aae8018a18da87a749b4f42384f9ac670ac20f1c77890ff648310f1fa2df0b53d2e90e4e008262013ecaea925ffe8dc7f98919dc058d5c45c59131865d1805b2b7c506ceb52f15dd1139f532c27374ab0862b47b212f41cf5778b89c61551070c99931670dad4388628d615f895d00780fd65c5cab186e2574d4924a5470f0d9f44e11928a7a48f213f1f547684525af806804e9e30d7f490ddee50397782f239e73a9a1a6b8c5a074c45fa821e1fae8f4932469a7de930f52f0506328de040bd1c7d2201e298b6cc6205bc9617a20dd76a9aa03.ad.account.info=6fa74c609a01f31f1f670668df954f4642a4aae8018a18da87a749b4f42384f9ac670ac20f1c77890ff648310f1fa2df0b53d2e90e4e008262013ecaea9226e1649a1c4886ca7c148db7c3c38dee30fc92ca60b89b1c6874f0826752c690c27374ab0862b47b212f41cf5778b89c5be55db079786f9ea23139f4f750e40f2f88819563c510b03567db3a1ae710e16470f0d9e7bc3c3dc19aa69aedeacd1ce6d030c589e5f5922b771cd8b9b6239bbc0226d711cc97f0adbdd94b1b757357b6651451b25407a1abb8c57873d7b5cdc2baa988b3396a7c00b40a78eddb708f63787668cce628b915bc6cb7689b2ab0dc1cd9763adcca35.ad.acc

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\75fdacd8330bac18.customDestinations-ms (copy)

Download File

Process:	C:\Users\user\Downloads\AnyDesk.exe
File Type:	data
Category:	dropped
Size (bytes):	3214
Entropy (8bit):	3.252151816562281
Encrypted:	false
SSDEEP:	24:6c2aY/8AJdmYJVO2Xdl1YWoymLc2aY/8AJknGVO2XdlqjDym+:6c2aA7nTVhl1NoyIc2aA7UGVhl6y1
MD5:	5054D4831B00F2CCF0AB4717D7B1098A
SHA1:	7A0543B3D05770409ADAB10A9DEABF344FC8A9FB
SHA-256:	6E3E0AB2B22C28766420DAF8133411164DD4AF8CEA00CD865A5312CA9130A6D8
SHA-512:	6CB0C147F1B968D36E5636265F223B42F9B67D6297DDF4E13CA01B5DD1609694DA2E611828075AAB59BC82B0549D5B79264340BFC821966D8A731F5003A59C81
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.@.. ...6..K%O..]..\%O..p._\%O..HPT..........................P.O. .:i.....+00.:....9..#..K.&].B.._&...&........v......EO%O....j]%O....b.2.HPT.9X.. .AnyDesk.exe.H......9Xs.9X......G......................m..A.n.y.D.e.s.k...e.x.e.......S...............-.......R............. ......C:\Users\user\Downloads\AnyDesk.exe....O.p.e.n. .a. .n.e.w. .A.n.y.D.e.s.k. .w.i.n.d.o.w...$.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.D.o.w.n.l.o.a.d.s.\.A.n.y.D.e.s.k...e.x.e.........%USERPROFILE%\Downloads\AnyDesk.exe.................................................................................................................................................................................................................................%.U.S.E.R.P.R.O.F.I.L.E.%.\.D.o.w.n.l.o.a.d.s.\.A.n.y.D.e.s.k...e.x.e................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IV3TIDWB1IAMI9MYJDS6.temp

Download File

Process:	C:\Users\user\Downloads\AnyDesk.exe
File Type:	data
Category:	dropped
Size (bytes):	3214
Entropy (8bit):	3.252151816562281
Encrypted:	false
SSDEEP:	24:6c2aY/8AJdmYJVO2Xdl1YWoymLc2aY/8AJknGVO2XdlqjDym+:6c2aA7nTVhl1NoyIc2aA7UGVhl6y1
MD5:	5054D4831B00F2CCF0AB4717D7B1098A
SHA1:	7A0543B3D05770409ADAB10A9DEABF344FC8A9FB
SHA-256:	6E3E0AB2B22C28766420DAF8133411164DD4AF8CEA00CD865A5312CA9130A6D8
SHA-512:	6CB0C147F1B968D36E5636265F223B42F9B67D6297DDF4E13CA01B5DD1609694DA2E611828075AAB59BC82B0549D5B79264340BFC821966D8A731F5003A59C81
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.@.. ...6..K%O..]..\%O..p._\%O..HPT..........................P.O. .:i.....+00.:....9..#..K.&].B.._&...&........v......EO%O....j]%O....b.2.HPT.9X.. .AnyDesk.exe.H......9Xs.9X......G......................m..A.n.y.D.e.s.k...e.x.e.......S...............-.......R............. ......C:\Users\user\Downloads\AnyDesk.exe....O.p.e.n. .a. .n.e.w. .A.n.y.D.e.s.k. .w.i.n.d.o.w...$.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.D.o.w.n.l.o.a.d.s.\.A.n.y.D.e.s.k...e.x.e.........%USERPROFILE%\Downloads\AnyDesk.exe.................................................................................................................................................................................................................................%.U.S.E.R.P.R.O.F.I.L.E.%.\.D.o.w.n.l.o.a.d.s.\.A.n.y.D.e.s.k...e.x.e................................................................................................................................................................

C:\Users\user\Downloads\AnyDesk.exe (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5525576
Entropy (8bit):	7.999514997229227
Encrypted:	true
SSDEEP:	98304:j5ObAu2pmits24nYhQCWQdaQQo/mJPv4KYZPKBhYI5RuN4OL2wIjcsJWNg3:IAnRu24nR5QcTvYdmPuWOL2TcQWe3
MD5:	75EECC3A8B215C465F541643E9C4F484
SHA1:	3AD1F800B63640128BFDCC8DBEE909554465EE11
SHA-256:	EC33D8EE9C3881B8FCEA18F9F862D5926D994553AEC1B65081D925AFD3E8B028
SHA-512:	B3A48230FC6F20038C938E5295B68A3F020B94E220CA2FAB6A894D126DC41F6F1021C239613BF9D6DE84370AD7DF9D9A91BAF716A87D43EB101EE3E48578E5FF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........h.}.;.}.;.}.;..";.}.;..#;.}.;...;.}.;...;.}.;Rich.}.;........................PE..L.....Le.........."..........S...(..........@....@...........................}......yT...@...........................................\|.PH............T.HF....\|.......)..............................................................................text...w(......................... ..`.itext....(..@...........................rdata........).....................@..@.data.....S...)...S..2..............@....rsrc...PH....\|..J....S.............@..@.reloc........\|.......T.............@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\Unconfirmed 55236.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5525576
Entropy (8bit):	7.999514997229227
Encrypted:	true
SSDEEP:	98304:j5ObAu2pmits24nYhQCWQdaQQo/mJPv4KYZPKBhYI5RuN4OL2wIjcsJWNg3:IAnRu24nR5QcTvYdmPuWOL2TcQWe3
MD5:	75EECC3A8B215C465F541643E9C4F484
SHA1:	3AD1F800B63640128BFDCC8DBEE909554465EE11
SHA-256:	EC33D8EE9C3881B8FCEA18F9F862D5926D994553AEC1B65081D925AFD3E8B028
SHA-512:	B3A48230FC6F20038C938E5295B68A3F020B94E220CA2FAB6A894D126DC41F6F1021C239613BF9D6DE84370AD7DF9D9A91BAF716A87D43EB101EE3E48578E5FF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........h.}.;.}.;.}.;..";.}.;..#;.}.;...;.}.;...;.}.;Rich.}.;........................PE..L.....Le.........."..........S...(..........@....@...........................}......yT...@...........................................\|.PH............T.HF....\|.......)..............................................................................text...w(......................... ..`.itext....(..@...........................rdata........).....................@..@.data.....S...)...S..2..............@....rsrc...PH....\|..J....S.............@..@.reloc........\|.......T.............@..B................................................................................................................................................................................................................................................................................................................

C:\Users\user\Downloads\d9c3f5c6-b028-46a8-b2cf-054c63dabc6e.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	32455
Entropy (8bit):	7.644663030676344
Encrypted:	false
SSDEEP:	768:pzxQLqJUoXhfmKCr6uOJ16FmVzSbJGQhclpzulJKwP5c9:p5JdfDCmuOf6Uthzo/P5i
MD5:	6658B92DEB63F822D492E6B2A490F634
SHA1:	4E1E64DC75EB49503F5FF2FBCE99BC5718A6D146
SHA-256:	7E27B95CBE7A928E851FCEA0A92F470C04B3BD976538DA54598CD9C994272371
SHA-512:	72EBCE33558230DE64D4EB98A2B65D97506A94468095CCFAE54FF35056776E0824F1CCBEEDF461CD50E7771CAEDA8960DCC73417F4493CCD81B9BCC522714CA1
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........h.}.;.}.;.}.;..";.}.;..#;.}.;...;.}.;...;.}.;Rich.}.;........................PE..L.....Le.........."..........S...(..........@....@...........................}......yT...@...........................................\|.PH............T.HF....\|.......)..............................................................................text...w(......................... ..`.itext....(..@...........................rdata........).....................@..@.data.....S...)...S..2..............@....rsrc...PH....\|..J....S.............@..@.reloc........\|.......T.............@..B................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	2870
Entropy (8bit):	7.806518659258643
Encrypted:	false
SSDEEP:	48:rGAc/j/aAXCNYyXOhdErBUs98ZC7fkGojSVGkStY1crQQVcfkViCMNINWc:rGP/awcnXIdW98ZofkOYdtY1cQsViCMi
MD5:	3E41C79208F89446115F694D781D3420
SHA1:	44CCED6D3521489E15B4446E8C6E6277DB252FC4
SHA-256:	427436C6D4644044358736FBD9D049F298E89DCC9B63F426E3D3940FB4B5D722
SHA-512:	D73271CA57A6E5990DF7139255D341FBEBE943452EEC51CF2B4E8832BBA801B36B977E0DFD3887C5ACF4E168DBF04D1FBF302DE19EAFDA970806201973BAB93E
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/dam/nab/images/types/logos/nab-app-logo-283x283.png
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................(...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma..................0mdat....."#Q....4 2..LP..n.8..NU...;.`.......{.....^.%C.....B..nW'."Uy...6.zm.Drj...S=sXD.Q..vY.0oT..M......:...........E"j)..........?SC.^.rD.1...L.se. <?..;.D...DQB.2.j..#...b....2...S..J...r[._...1.Y..QZ\....~.....cH.-...N..]..Gpz.>=...O...j.F........ ....e..{.~.~..&.....X([}c......L.w.a....Q.=f0.....>....n-4..y[....,."..\.e..8[.Nd.h..o.m(.vu)....8........5.....Y..d..I........&.i.......3\|.a.......J.Rf...~...N.>sL....GK..b.:.g.nS./>R.X...,G.......Eh.D..-.h..e...u8.kt\|%...C.{.>.......Cy?t.......Z}.cz.#et..O..~.q..N.Y.'...c.9......5..k"]..T. ..!7..j..n..6...W..o.d..@."......#.]...fN.[....._kT.r:..$....{X......:..bK.(o.r.4.z.[a..7.^.d..PE...J.f!.O...}.....`...h....0..?!:.4.....?...G4..X-.zr).....@.....

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (374)
Category:	downloaded
Size (bytes):	459
Entropy (8bit):	5.057704083852646
Encrypted:	false
SSDEEP:	12:UJXWbEkCyfik1OlvAmZ9AGmylWvKmylWFCuR4TeSahMI6lt7npNCfn:QgEkLl1OlFjvWvKvWH4TeS+MI6ltrpN+
MD5:	950FEFDFD58F91073BA612C2F00A7F72
SHA1:	846BC46AAEB9A2BA8E6D761CDD98FF241EE9716F
SHA-256:	46152DEC6279BB4729532B2A81A1E2CBE6151638DA7A9D314CFB6E7665F3DB93
SHA-512:	91791FE2C5A9C7E0F8D287A85C7306DDB475DE7400392463127FA36EBDB18BBEA6F8B7F4352B8E0E423FBDFAC8E2C67F4ABA7A5037C4CBD24ED95D90B8361675
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/webcomponentsjs/custom-elements-es5-adapter.js
Preview:	/! For license information please see custom-elements-es5-adapter.js.LICENSE.txt /.!function(){"use strict";!function(){if(void 0===window.Reflect\|\|void 0===window.customElements\|\|window.customElements.polyfillWrapFlushCallback)return;const t=HTMLElement;window.HTMLElement=function(){return Reflect.construct(t,[],this.constructor)},HTMLElement.prototype=t.prototype,HTMLElement.prototype.constructor=HTMLElement,Object.setPrototypeOf(HTMLElement,t)}()}();

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	11428
Entropy (8bit):	7.968288434073671
Encrypted:	false
SSDEEP:	192:rGxdOYLbdcMxUBhBBzAnI1gYUtf1JXb/aKe1QNQiK+f+ssPak5ySXLuCLhLGQd+F:rmOYLZcMq3UnIufjX7Le12rKy4gyhqQM
MD5:	CDC0909783709B4FEC76D5B82E1E55B6
SHA1:	6C04F6DCF48721C23CE6C1DC10A3737550D438B1
SHA-256:	89E12F101C9C2A730846E1C16D8CBA521C47E55489F9861C621CBDB11C80F375
SHA-512:	CA5E4ADE61CECE4316B7A9151D899620350685CCE3219D98C8E6CB1C67C7D020A2A2208E503F3C7F1B81A6E103484A85570921D0D57450B853AD34F41919213D
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/product/personal/international-banking-mega-menu-tile/master/_jcr_content/root/responsivegrid/section_container_co/image_1835808957.coreimg.95.512.jpeg/1702614173357/international-money-masthead-2500x900.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................+....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma.................+.mdat.....!.... h@2.W.@...A@..3..4..1.O].tc..$H...p&7..v...6..:.-.s.)4]..>...lZ..:.......<.M..B..4...56.....=S,+....Ec..k%w)...h.By..5k..HS."g.B....-j.....f]..q-kF..m.w..V..g.D.F;F}..mL&.=...1...aL..Lk7h.....F.AJ....u.V2q1K.5..P......3t..Y...t2...M..(...d{....p.3...m..n...a....<J. L@.?H.:.\|..]..#... j...sA.%.ZS...A..P...qU...+..%..M..M.B<...f2..l.F.KQU.+.\....Q..............Z.&=..^'.s........i.............x...._#0yG/.&D.{....[.~......-.. Rm..0.a?...4....;.k=.....#a...W..L.P..5A./.u...9Z.W.a....K..B!..u.....\|.o.7%..r......:..%.=.[5.....XR.{.../.yD.....V..J.,..H.q..V..mW.v6o.}...5.......Q..l....._...J6XJ5L..r..W..y.....BWio.LY.o.e+.Mc...dF.......\........6..0?...-i.....oQ.k.......@3.l..._.e..V

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7132)
Category:	downloaded
Size (bytes):	13363
Entropy (8bit):	4.818056353898822
Encrypted:	false
SSDEEP:	96:xTzWbBcGOBrdbq26j3OMWbBcGOBrdbq26j3Jw:pWbBjOjbq263OMWbBjOjbq263y
MD5:	80F70A345A5F028FF61567E310E95E02
SHA1:	76EB272264B5511A6A15D038270C87D691C4DD4C
SHA-256:	BEC85A784847945103BAF449EF6BC319A0E4ED77E4191366B2591D41EB42AAAA
SHA-512:	4CDD94151936AC0561EC98029F9FBC1AEE5A71D8B657C29DD991EE82C8483C01AA1F0E2493EC4CEF7B00DF5A349AF30A3DC8A1FF0322C264656165182E7C5866
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-accordion.80f70a345a5f028ff61567e310e95e02.css
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */..nab-accordion{margin:0;padding:0}#supports.js .nab-accordion--no-touch .nab-accordion__button:hover{text-decoration:underline;background-color:#e6e6e6}.nab-accordion__button{display:flex;justify-content:space-between;width:100%;padding:16px;text-align:left;background-color:transparent;border:none;-webkit-tap-highlight-color:transparent;color:#000}.dark-background .nab-accordion__button,.nab-accordion__button .dark-background{color:#fff}.light-background .nab-accordion__button,.nab-accordion__button .light-background{color:#000}.light-text .nab-accordion__button,.nab-accordion__button.light-text,.nab-accordion__button>.light-text{color:#fff}.dark-text .nab-accordion__button,.nab-accordion__button.dark-text,.nab-accordion__button>.dark-text{color:#000}#supports.js .nab-accordion__button{cursor:pointer}#supports.js .nab-accordion__button:ac

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	12771
Entropy (8bit):	7.972367941681349
Encrypted:	false
SSDEEP:	192:rGnnZHO/AHXUYFCBGgzfY9EUDMyrIbHj/0lWjNBJodNGtrHey33E7ZBs56lJjkv5:r+Zu/AHXUY2Zzf0Mjj/0EJaQZ0FBsus
MD5:	7CE2F2E262862DD2E7AC26FA1ECDDEF6
SHA1:	A1AC1A5A0FB7DE7CF12FF2245E25F9288098FC67
SHA-256:	A8B590D202FA62BDF9A59961F2DE56938AA246E4C1A64E302E70EA2243190B1A
SHA-512:	5D4F38FFE29C0C2DDF4FBB1E6FB6E79BF309DA81918F76140F90C5F035478DE2C4DA39E90802182F407FE5993EBA918FC1B224EE4E041709BBCF061F8207C31B
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/support_and_services/business_online_bank/related-tools-and-nab-connect-promo/master/_jcr_content/root/responsivegrid/section_container_1876757274/image.coreimg.95.512.jpeg/1676948720947/two-business-men-working-at-computer-digban-2500x900.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................0....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma.................0.mdat.....!.... h@2.a.@...A@.....:.....31.....J.<_...L.....1..S<k......#.~..$......2..!G.?H.>.t..P...`.f.)j.[H....5@.#n.h..].B...M....4.H.T.z.....b.mf.5a.?.<.k..H....`.H.>u.. ...T.9.c.#.......\.5.y...........B.\|.z..Z.;G.v.K...j........Ox.]..n..>......$..[.j]C".s.z_.\.......@*...b..\.X2.z<..6..C.p.u...C".o.),<..h:.?..Q..<T.?...V.FC'...=.I....].G..w..~....S.$.LMS)...PM^.......S......%..........Z.?;,.).eH..t...&..F^B...).P..W".....P=..(8=N....h.8.B..9U`.{."i.M.#........i..L..o.V\._.`............XaX.7.:.....+..e...JL.. ...dEa.. .f..]W.\|....v....6<Ei.`..w....8..n...D1.<c.IgN.8 s.......U.+.A.N..R".z...K...I..8R].\|.sI../7.(...s..Zo....#.i..u.R..m3..'V..n..x..j....]...fZ.?.X....l.G.......v

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 38088, version 3.393
Category:	downloaded
Size (bytes):	38088
Entropy (8bit):	7.993630237599298
Encrypted:	true
SSDEEP:	768:8YnlbAr9oQLi/aP8Lp+q99wjXr1demEzExOk/wScK62hjHYAAt:1mr9LiiP8Yq998hde3zEck/wNK3x4pt
MD5:	BAC9BB93FA5CA2B135192343B8C3B4BD
SHA1:	D2489E3C5F11A501271EA03A68F4C9EBD17CEB7A
SHA-256:	95D503C4F4B95B31F258C43E3A71F9324D06A25E06D73F46D2CC046ACDAD9948
SHA-512:	AD4328A3B6295010F6F3C495C5BC52418830983E37EC6BE438B74E04059B0A28F1EBBE4440EB59469B021D141A15F0F6B11E9548D226012AA08FAB854139607C
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-styleguide/resources/fonts/source-sans-pro-semibold.woff2
Preview:	wOF2...................[.........................F?DYNA.M..:?GDYN.........f.`......p..+.6.$.....B.. ..;..[[fgq..c......PF...>D.\|....o..... ...o..._........!08&..l..\|~......&q5...`.\|@.D.,.uBI=.b.....X.W....yiD^d..<..s_.I.E.{.......c;....;V."..B..>..y7.}.O.<.Rl.X!..i.........r.`..!.:k..o.3...#....."...q.z...<.G.!..%..j.GtC....C.%.RC...ZK.1.XK.1..K.O...ZJ.5.XK....k9..9.g../.%<hHij.Xj....U.b...Qw......g.V..R.\..~.?......9....Z...2.B...m.L.~....!....5..e."5s$..6.Q]..;OZ...&5I._........X.R.7....7.H.M..N.:.H..2L...Y.C&.l.............:.~.Ai....?C..Q.... h...Q,..K.`.8&.....U....?u~y......P4.;v..4.....$...~.R{w%pQ]Sr..,......eV.^w.......L.c...'..&...9...-q.z.(...}0fg..V.......P.(..h..).y...P.I.A..E.c..\..%..qD.3.rj.Z.....H$.\|.`.9,.B....qX...../M.~.}...MG.9...C......&.E...V..n........f.....aA....F.Y0..5.......X"d.3$;.5A..c...n..R.G..EI3.rD....m."4@ghfh....!>.OW.f.D.C.z..U..n..V..h.....;[..q%.&...u....!...p.2/E.P.\..l..........;h."i..gC.....

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	10190
Entropy (8bit):	7.959969589302811
Encrypted:	false
SSDEEP:	192:rGDBPY96CBONvidWzx2xrLDXvWlBdS6zPt8VI17ZCXn7TpWNbTZX1:rf8CBKwhxrLrvWlBdZemwX+F
MD5:	676DFE445565EF74C4206684AC3BE0DF
SHA1:	D708B7B21393DD3EE95FB48AAC0208B0683D0E00
SHA-256:	529FFD10DC7F0223307EF0D4D27C27FBBD36E0C1F34CCB4EBE5F0A5B0A1C9464
SHA-512:	BFC925C77A74A166977163ACDA0024A237915C6AEE162F4E6EAC5C2F270E2FE6A8A50FF3E90F141CFEDB76AC59A3F78B71B1E16199DC3D35B2D65AB484F1F1B9
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner/_jcr_content/root/responsivegrid/section_container_co/responsivegrid/feature_container_co/responsivegrid/feature_content_secondary/image.coreimg.95.512.jpeg/1669738874750/red-star-decorative-iblogout-500x500.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................&....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma.................&.mdat.....b>.>...4 2.M.@...A@..../H...0`.....%...zBe..dov t......>.........&T~...... .bEx.c..SRj....!.............j.-2.....gd..v.$4i.o..b>..".v..}......L_.M.`1..1....r.9...wR..X.."ME.0.\.....Jm).....0.X..i....i2..Y..b.n#bN,...]..;.....Q.I.D..L.K!i...[.:b}.i.o...<]..y.yw..Q.)...'~8....&.d....g].....(.w.}oVv.D..'SrN.m...B..N:........ ..;....]...\|]~D+.x..z..+..L..K..5........dQ.TM:Z.(..$.&.`)../t.e.....\P.;...;A................w...._..m.....5pR...&+;J.E.\^G......{......Q{k..FX.6/".-.`j....gM.r.K.o.KX.e1R.[.Ho.'e+...'='...U.W.n.._ri.,`#.$1..Xn...\.....G..x.)...?.;...2#......F..f.h......F............u.0.......0.7F..._.M...iwlj.8.N.w.v....c*c...n.l%A6........u.PkO..H.S.7;2..r."..u.R..M(..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	25
Entropy (8bit):	4.133660689688185
Encrypted:	false
SSDEEP:	3:MOSF9VLJGNQ/C0:MOSXeNQK0
MD5:	CDF27449CACE30026DDDE472940FAC0D
SHA1:	CAE28A2BEA10AB092E6EB3A755AB8718C61D08F0
SHA-256:	631441DEE24A6B6FBB684373156DAC79CB1AEBAA133EA3DB12D64701C01FD1BA
SHA-512:	5A1059D0B7495418B189E91DEFD623B87C63878A5CDD70F6108780F3E68489F8B434E9D160D884CB54EAFB81AE6A97DAAAC7759725EA32A8B7AB0D50A2A8886B
Malicious:	false
Reputation:	low
Preview:	10k7q90q6-60.lrsh5z2g.984

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	30667
Entropy (8bit):	4.466548204496417
Encrypted:	false
SSDEEP:	768:B40581b4+l+uP4FYD1JOiVWEePXuPVj8TH3wqZ7ZsGogbp0H2EHE8z2nq8/fPD2E:BR81b4+ljgu5JOiVWEePXuPVj8TXwqZf
MD5:	D31D55E65397B599DA9A48A99DD8F4AF
SHA1:	781F2C0E22C84BFBD2A10877D3BABA9D2B069556
SHA-256:	695FE3911D1406DFE25923D66EAF2546CDC99DBC7C99BB086CABBB03E8CB372E
SHA-512:	2C4588BF6BA9649955551A80B35E957630846E6B55A1F1839EEA874A58B61CB604B8E3DAC54444F46C811630EDA28DF1E9853B6A02F8CF3B54E7244EAB408FFB
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-base.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8515)
Category:	downloaded
Size (bytes):	14070
Entropy (8bit):	4.809891048201709
Encrypted:	false
SSDEEP:	192:F4ka/d9ioCdi5vhpJgYX7SYcqzZmoPDEqEn+YRSRPRq/P2FNlymD4xEWNf:CJu3+aP2FNlyw4xEkf
MD5:	2E92BA5970995615356DB67198C04C86
SHA1:	2C6CD9C62A18B6B776CEE092B0C47B9918ED9BB7
SHA-256:	87C76CEC772863B497C70555ADCCB389B62944D3EFC795193EB165E7EDDF7F6D
SHA-512:	4BEF5C976D7218212B16B86B422AA865A474F785C26934A85446120A59677F08B0744FAEE225A62D6FD8BA7A77CE4F80A7C46F349B898564DFC328052C221C01
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-mega-menu.2e92ba5970995615356db67198c04c86.css
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */..mega-menu--container{font-size:1rem;line-height:1.25rem;-webkit-overflow-scrolling:none}@media (min-width:1248px){.mega-menu--container{font-size:1.125rem;line-height:1.5rem}}.mega-menu--container ul{margin:0;padding:0}.mega-menu--container ul .mega-menu-li{margin:0}.mega-menu--container ul .mega-menu-li .mega-menu-anchor{text-decoration:none}.mega-menu--container .primary-nav>ul{font-size:0;white-space:nowrap}.mega-menu--container .primary-nav>ul>.mega-menu-li{z-index:999;display:inline-block;height:50px;transition:background-color .3s ease}.mega-menu--container .primary-nav>ul>.mega-menu-li .mega-menu-li{white-space:normal}.mega-menu--container .primary-nav>ul>.mega-menu-li>.mega-menu-anchor{display:block;padding:14px 10px;color:#fcfeff;border:none;transition:background-color .3s ease}.mega-menu--container .primary-nav>ul>.mega-menu-li

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2053)
Category:	downloaded
Size (bytes):	28615
Entropy (8bit):	5.380802662160019
Encrypted:	false
SSDEEP:	768:qy7Cg9AwrpiK2xSMqRFUY4UYtkZkrxDjUWxCvvx/i:Gg9Awrp52xLqzt4ttkZMxD40Ki
MD5:	3BFFE0B0E6D670BE6F5A33B5B138FD31
SHA1:	4CEC08380E5931CDAABD5D2FA46228A8D5FEF601
SHA-256:	C380427F3AFF5C3AA4DB8052BCF3956F16C76022A25F534D377FFD4A816B20FA
SHA-512:	0A7BA143C7A92FB0F88D295347BB4D3838FC52E1F6BCF3772BD5CF197BF2CC37F19173CDA47F75557BB3983F7422AC5660A1F8F1989E6BD4AA59D2A60D62661B
Malicious:	false
Reputation:	low
URL:	https://tags.nab.com.au/main/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202310250223, Copyright 2023 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;try{try{window.teal=window.teal\|\|{};teal.ignore_keys={};teal.replace_keys={};teal.prefix="";teal.nested_delimiter=".";teal.ignore_keys={"event":1,"dl_event":1,};teal.prefix="dl_";teal.flattener_version=1.4;Object.keys\|\|(Object.keys=function(){"use strict";var a=Object.prototype.hasOwnProperty,b=!{toString:null}.propertyIsEnumerable("toString"),c=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],d=c.length;return function(e){if("object"!=typeof e&&("function"!=typeof e\|\|null===e))throw new TypeError("Object.keys called on non-object");var g,h,f=[];for(g in e)a.call(e,g)&&f.push(g);if(b).for(h=0;h<d;h++)a.call(e,c[h])&&f.push(c[h]);return f}}());teal.ignoreKey=function(key,re){var should_ignore_key=0;if(typeof teal.ignore_keys_list==='undefined'){teal.ignore_keys

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17500, version 1.1
Category:	downloaded
Size (bytes):	17500
Entropy (8bit):	7.963144110584681
Encrypted:	false
SSDEEP:	384:Qs243IyVXxi4L9eMX8QrjzD5rLrfkf1xgFukJJ9/J9xjX:QkIyVBiI9FX80pfkf+pF
MD5:	FDC0354668675E460E18D8E6B880E634
SHA1:	29C9632B40ABE339A91D1D90EEA2880453408A62
SHA-256:	760A5ECB51AE9BEE28469D621B6604D62C8C7C4685C307AA36BCD2D7D28763B6
SHA-512:	6BB0B8CD325DBEB7AAB33E5BA49F80002680F5ABBD8EC3CECD35C94200EB06378BD648128A98BFDFEDBB0AC2B9C9D4C524583777F611AE911047D6EA916C0134
Malicious:	false
Reputation:	low
URL:	https://x.nab.com.au/static-shared/nab/fonts/v1/SourceSans-Regular.woff
Preview:	wOFF......D\................................GDEF.......6...@.D.rGPOS.......<...p..yGSUB.............g.WOS/2.......W...`Z..[cmap.......E.....0..cvt ... ...(...(....fpgm...H.......s.Y.7gasp...L............glyf...T..0...].#)..head..<....6...6....hhea..=(.......$....hmtx..=H.........&:loca..?0........8.P.maxp..A.... ... ...@name..A0........".<0post..B........9lPHoprep..D....K...K....x.....@0.....}tF`..%2j.....j......T.b...\|..Kj9V..Z....x..VUp.F.}f..a....'..033...'.x....l.z.,....Q.35%M....i.....i!.@9N....+n@..oy.A.B.H]..\......../..y"...<...;L5z.".W.=&b1j....+..w@.Qy..T.../...8...&<.....D?..LY.S...$N..S....;q..d..8....T.Tf....1......C.....w..,.m".B$N......_..1..pK...D..N.p...=..."..V.........9S.......0nA.hU#_~..Z..........(A.{.."......+....m..]*w;.g.8....:....q.HT./.....i..$.?....s#..\.....r..p........E..?...=-..&~.5..+e..mp=[.f......o.......[.M.'...2.....ll...3cm.V"...Z .=s......)..f.El'.....\..V3...0!...f........4...k[b.>...S0.s..g.hT..JXp;.,EC.i..w=.u.q>G3.X...

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	25326
Entropy (8bit):	4.255531471487437
Encrypted:	false
SSDEEP:	768:LYMj/sJd6NyhNYrSjW1LTWXnD4bw50zQtTuNn+bLpwlude72Blh2nMteAMt7FhQ9:LYbJd6NyhNYrSjW1LTWXnD4bw50zQtTB
MD5:	B4DBCCFF2AB8E7D1C03C4D81DF9DB18B
SHA1:	DE7919C6B8C4F8EFB29419C979ACE878F3936114
SHA-256:	6448462B1B61BFB6E81E0B1CCBA5D9AC1DA41FC35F3B1DCBF091F23FFFC36DAE
SHA-512:	30C33CD70506500DC50E28CA18FC2DFFCB56E1BAED1432689608DBFF5033FA3357EAC13D66622C00B2A22CBDF8008CC7DF7AA582EF3B6C4CB3D99A328C930306
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-core-components-js.js
Preview:	/******************************************************************************. Copyright 2019 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ****************************************************************************/../. * Element.matches(). * https://developer.mozilla.org/enUS/docs/Web/API/Element/matches#Polyfill. */.if (!Element.prototype.matches) {. Element.prototype.matches = Element.prototype.msMatchesSelector \|\| Element.prototype.webkitMatchesSelector;.}..//

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142467304&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3051)
Category:	downloaded
Size (bytes):	3202
Entropy (8bit):	4.803920965973317
Encrypted:	false
SSDEEP:	96:xTnwVtzb06uAuQSuRuyuZAtuLuoIuJurueucuDju/u5uGuBushubu/Wu4:9Gb063FS0R1tiIkGFdIjAUfCdh6uWB
MD5:	A38BAC3A4DD93B7925273C9A2CB580CC
SHA1:	C946BD23F77BC32DBE661BEE8385A1DFD323C8AA
SHA-256:	74BE6E6E3EE415DDF6DA4966C7533AADCE893B1AD16681EA83DFB93862D02A61
SHA-512:	5BD01F34490048D8053158512A386094E5768BB3BC6DFE5153B58A850771B8F87ABE94C84AC2D89A5B60BCE98F3926DC5B552F111A918D00FD93F2D8F6535623
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-notifications.a38bac3a4dd93b7925273c9a2cb580cc.css
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */..notification-banner{overflow:hidden;transition-delay:0;transition-timing-function:ease-out;transition-duration:.5s;transition-property:visibility,height}.notification-banner .notification-banner__content{display:flex;justify-content:space-between;padding-top:8px;padding-bottom:8px}.notification-banner .notification-banner__content .notification{flex-grow:1}.notification-banner .notification-banner__close{margin-left:auto}.notification-banner .notification-banner__close .nab-button{margin:0}.notification-banner .notification-banner__cache{display:none}.notification-banner[aria-expanded=false]{height:0;visibility:hidden;transition-delay:.2s;transition-duration:.2s}.notification-banner{background:#f5f5f5}.notification{display:flex}@media (min-width:1248px){.notification{justify-content:center}}.notification .notification__icon{height:48px;c

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13225)
Category:	downloaded
Size (bytes):	13616
Entropy (8bit):	5.231398722744479
Encrypted:	false
SSDEEP:	192:cSxBhJ0UIoNxhYtNPcXixWJRH3KF4kEDBqJCSl3nLprMak0b63x+WEz:tB70UtNbYtN0XXH65ECLHb63xJe
MD5:	51ECBFA6C74B278B8880B704E94B6D38
SHA1:	B73B0AD3B24F688119F3541D421D4CF8DDC844BA
SHA-256:	564BC24981D512EF6006155A0BE62E330A1233932C0127B23DD56A4CB0A3FBC2
SHA-512:	156D84805CE0BA20829D53E8998F0B4EC88A2F387C6E18C67FEAB4A9E8F48FC1AC09CB52E92CBDBF0F9E0606E86207B80C3EF70A9C8A1C1F9DC7FE17C52FA142
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-iFrame-resizer.js
Preview:	/! iFrame Resizer (iframeSizer.contentWindow.min.js) - v4.3.2 - 2021-10-18. Desc: Include this file in any page being loaded into an iframe. * to force the iframe to resize to the content size.. * Requires: iframeResizer.min.js on host page.. * Copyright: (c) 2021 David J. Bradshaw - dave@bradshaw.net. * License: MIT. /..!function(c){if("undefined"!=typeof window){var i=!0,o=10,r="",a=0,u="",s=null,d="",l=!1,f={resize:1,click:1},m=128,h=!0,g=1,n="bodyOffset",p=n,v=!0,y="",w={},b=32,T=null,E=!1,O=!1,S="[iFrameSizer]",M=S.length,I="",N={max:1,min:1,bodyScroll:1,documentElementScroll:1},A="child",C=!0,z=window.parent,k="",R=0,x=!1,e=null,L=16,F=1,t="scroll",P=t,D=window,j=function(){re("onMessage function not defined")},q=function(){},H=function(){},W={height:function(){return re("Custom height calculation function not defined"),document.documentElement.offsetHeight},width:function(){return re("Custom width calculation function not defined"),document.body.scrollWidth}},B={

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 202 x 202, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2328
Entropy (8bit):	7.707624625679976
Encrypted:	false
SSDEEP:	48:N/67bLvjs0T9N1mopS46//798jSnuB56btrGlvsqrWovOFQwISxOr4w/Ps:NSfpP1zpSfH798jd6UskWomFIbLs
MD5:	9476DFA6C88D21A19EE1BBC885CB0D0D
SHA1:	5B5AFBF66E59F26995F38899883ABB8B6AB4896E
SHA-256:	34FEFE5DEEAFBFCE7FA9841BBA661BCF6DEBD84030713DD300CD695F9C73FE76
SHA-512:	3435514E769B88663C02E503FD2866DB0E1BDAB4484EFFDAACB385DCD98C892794FCDB07E3C5A27F19B7BD3FB068A2673E8449F9B82992C95780B7AF7F544AB4
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b
Preview:	.PNG........IHDR..............e.....pHYs.................sRGB.........gAMA......a.....IDATx....u...........7H..Q'h:A...N`w.......R&.;....N.+......I......C..V..................................................................g'.2\..]n.]>ui........#PN,.E........K.6L...<....C.m.'C...+-^............A.6..@.A..W!.`..xj..y...!h...B.,B.=..4]mHK.* p>J..Ry."`pj7@.[....B.z.:......2.eHoT.6.+.A.z..2."\......6._...@.!..pym..0...<>v?.z....>.......v...~.K..)U.V.W.:^..Fl.(u,..i.....%fb....b.Q........V..M..s.@..z...`+.18.\|.X...p...C.2.+.....3....i...pFJ.!V%d"./a..>'N@.[.....R...g..2'..p.[r..>.J....a@..'....+...C...=s..:.R..OU.T......_+.J.......u...xJ]..uk3.3Xh..GF.....,7.z(.#......6K..1.O.O.v._..h~...\|.o.76sJ..9..r)...c.Ly...%S^iB/...W..2).m........(..ki.).a.K.&M.Fyu..S....-%Q^#.....K...%.\|.6....V..U..g...tPZ..........p...p...E.k.{....Pu..4..[...^...*Tc..8.[.}h...M.......O.[W..8oo.25..3.}kC.....[.Xc.x...!..A.Xe.k.i..mlD]'Bc.,........v...;C^c3r;..~.g.6g.._6...'.U....}`Q

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549)
Category:	downloaded
Size (bytes):	14654
Entropy (8bit):	5.147880150139441
Encrypted:	false
SSDEEP:	384:dFkEV0eVuQiqbyMzihydxi8BUrdaKl7UXoXAp:dFkEV0eVuQiqby8ihydxi8BUrwKlw7p
MD5:	C3AE46A6D8E936F554174FD23055B3E1
SHA1:	5A034657E8D517569003AC3CE7D89076A583EC05
SHA-256:	CCA53675FFDB27D666C9C362116F69B4C1CE64854FE70CF8EF83AC30E1DA9762
SHA-512:	7EDCB6DBCC885BB30E7E034E78C3204BB811151C7018D38664F156C5BB56F60A215A0C1BB70B17100C3600D953C4D8E81E7BEDF79DAD26DAB3AA105642C56787
Malicious:	false
Reputation:	low
URL:	https://tms.nab.com.au/nab/prod/code/7d816e9f44d24a84e2a964434ff1f04d.js?conditionId0=396971
Preview:	Bootstrapper.bindImmediate(function(){var ddConditions={"not":[null],"caseInsensitive":["ignore case"],"compareTo":["unknown\|nab"],"requiredData":["50587"],"comparators":["matches"]};Bootstrapper.data.resolve(ddConditions.requiredData,function(){ddConditions.values=Array.prototype.slice.call(arguments,0);var Bootstrapper=window["Bootstrapper"];if(Bootstrapper.data.checkConditions(ddConditions))Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;.var fn=function(o){return function(){window.google_trackConversion(o)}}({"google_conversion_id":1040712916,"google_conversion_label":"-v2qCJv3yGAQ1Img8AM","google_remarketing_only":true,"google_conversion_currency":"AUD","google_custom_params":window.google_tag_params});"function"!=typeof window.google_trackConversion?Bootstrapper.loadScriptCallback("//www.googleadservices.com/pagead/conversion_async.js",function(a){return a}(fn)):fn()},1509110,347472)})},-1,-1);.Boots

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (559)
Category:	downloaded
Size (bytes):	51785
Entropy (8bit):	5.397385702631991
Encrypted:	false
SSDEEP:	768:oTxvuVx1eA8l+eVzlppSjEhEbmfvmubKetC9R4n7Dd8v3Ds24hUm7kHI3N:+xvuVx1eA4vpEiWubK9E7x8v3DbU
MD5:	11C375C0956E31CC0AE2579EC18666D5
SHA1:	EB033BEE6373739AE65D8934384E1AFCA958A100
SHA-256:	DF69C91663E4636EDCBBB54E14E7763CA70C5CDB66D448279B4E16DEE8BB896A
SHA-512:	CAB6144C37DE138C541FAC2961BD1EAE779DD48B7CA73429738C3FFB917B686F65FB0A609417B839E652223DEB6334E87445436ECF2075B60BB4C8F44C962C03
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/appdynamics/adrum-ext.a5e921eab2dde2c5ab4b79ea636b8271.js
Preview:	;/* Version a5e921eab2dde2c5ab4b79ea636b8271 v:4.5.17.2890, c:91d7525d7d9982f3dd71517d3b490e781ab389c8, b:4.5.17.2890 /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var k=window.ADRUM;if(k&&k.q&&!0!==window["adrum-disable"]){var B=window.console,x=B&&"function"==typeof B.log?B:{log:function(){

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7409
Entropy (8bit):	7.9430302446412435
Encrypted:	false
SSDEEP:	192:6St8g2lyIlji5MnZpsIotwc+rOKRH0jlDohnaLnYpV1s8:1ig2lyIe7wXlUjlD3Dss8
MD5:	05D2B2F5EB34AB2AFC6A106C573A47B2
SHA1:	29F569CE08FDC5F2D1AFD98A1FD6F96C9E45C6A8
SHA-256:	01C7683CFA694A6EA7125B527CE87F21AC6C7FDBBD358B3A96846B5F517080FB
SHA-512:	2FFB53536228515363B0B415F045267967726941358D3EB7091CEDDBB427A9E4709FA92361E6283E4033D0807E0B86D0D3B4DAAD690D0A1E2237455A2ACAFD9C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......pHYs.................sRGB.........gAMA......a.....IDATx..]k.%Ey~f.....T.!.a.."....b"..T.".U..%.jHDE@."&.!..TX.Rj...e(.0A.4.H%..%^....C.w.H.`-`A...I?g....3g.e.L..S.n..\....3.{".4.X..%g.......<.m.I-.X..{Pl.+..X!".,..)....w.]. c-.).D ......#.$8.S2t.c.D9..M..F .l..#%;15.\|.1...T........l)Iz.[J..9 ..#..8...x K@c.....&E.Y....08...._.v.rP.....A[,/[H..#.7..h.({...5.1...D.....(...b._..o..1\.a$.\|".....1B...r'..6.F0.\|...h.#.s.G.B.&....... n...#Vr....A.e.A....!..}....#`a0..L......Z..L.!....U.#..j.$.!...7\|.A.4#..!<....c.E..1..!.L@.m/.z..i^...X..?$.A........D.`...m...#.#.....#1.ui..k.......&..e.. 1.9....k I.......8.h.$m. t......!%.....B.t...4%...$.(.....}.9.c.W$...~.oEi...F.{...h.md.w#.5..W....m%.G.`...f.&.....A_.sJ.;..X....)yJ.7....b..F.....>F./9~....k0......Ab.pnk..8w.9'!}...,Ey9...6..5.U1......A..^..V..j. .;b.4...\|..D.A.}7V.U;....A..f%.y>m...{..+v.W...a... 9.%?~.k8jN. .R.d.&...@..@.\|.r......10..J.*....%\..4,...!..Gn.....$V.Et.\|z..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (57925)
Category:	downloaded
Size (bytes):	421888
Entropy (8bit):	4.740514836002407
Encrypted:	false
SSDEEP:	3072:8B+PMVVdeYRHHFcT0hbXghosKYxCxhrCC4gKKBApTNsCE:kL8hos9xb2Z
MD5:	9BA6A183401C68721EE430F790644B85
SHA1:	EA1EA1E7F69D3E56D8E9A61C6A05F40CA1B97C32
SHA-256:	30DCC93C27A5AED151B8132CBF593ADE8702591BA814D619C71C6050E2E6717D
SHA-512:	76FCD118EE10CA6A6F07D99A26449E47A0CBDBF02272F4542244528E234B2FBDE635EF51052C46F00D56F5FE3533EF24F4EBFDB3523B6CD9A511DB4DD9B82247
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/help-support
Preview:	<!DOCTYPE HTML>.<html lang="en">.<head>..<meta charset="UTF-8"/>..<meta name="viewport" content="width=device-width, initial-scale=1"/>..<meta http-equiv="X-UA-Compatible" content="IE=edge"/>..<title>NAB help and support \| Online help guides and FAQs - NAB</title>....<meta name="description" content="Search our handy FAQs, find support services and explore our online help guides to assist with your questions on banking, products, services and more."/>..<meta name="template" content="help-and-support-template"/>.....<meta name="robots" content="index,follow"/>..<link rel="canonical" href="https://www.nab.com.au/help-support"/>.... .. <script>. digitalData = {"components":{},"page":{"pageInfo":{"site":"nab","siteSection":"help-support","siteSubSection":"","pageName":"nab:help-support"}},"user":{}};. digitalData.event = [];. digitalData.page.pageInfo.server = location.hostname;. digitalData.page.pageInfo.referringURL = document.referrer;. digitalDa

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x184, components 3
Category:	dropped
Size (bytes):	26415
Entropy (8bit):	7.9807625124413155
Encrypted:	false
SSDEEP:	768:6qhBQxWf66dxfG98aZjmYiAbg7A7ZdRxZfeuUGt7VuCBX:yxM66dx5atM7AtdLZf2GtpuC5
MD5:	33ED80663F282C04B9F78B4644188777
SHA1:	24C222DFA4828EAB14A23BAD8DAC014CA758173D
SHA-256:	E8BCB56B2122D801E9E6F147918E2CD073AB8E4D2A46BA0F9B176B00FC588029
SHA-512:	272F1859A6D58EE307FA8C4357F184A051C4896F427D2C00820A5D943E878365735B6B05DE774EEEA255FD5098461887C8A60DF20E929897AB1E9C7F5811B505
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8......................................................................+...D%.9..}....p.\|8.<..... ..H.....^z.....C].n.].....!#.5;. .0]........1{..7.r.5..p`...<.Y...5x.!.&">xT..m.v.}i.}.!.+t....$..\..l.....w...v..c.F..bDe.@t+!.=T.........$.d....e.......RT.9bID..iY.$1.iDwh.Ie......C. 9.:.4Ndf...6F=.E..!....'..........T...#tu..!.+a]........./V...Q6...SF.....@.ZE..\-.....l.e{......X".,.z.....Ay.._ .f..^L..NRWO...?.b..{...R...T:..(.......;.6....r.!...Z{..W..'1A......)MV.C....k]..M.......&..i$........5d.{_#e..6{.om.b...(:.{m.H<.C..O7.....y...k$_3V...bT...R..).`.....T....c...G...r......V.a..F.h.C8<..H.x9...{w.i...+.8..UF...#M...BtM..j.6.....E...nZ.,.........t.8.PG..C.qv6....X>D..NC....B...Cn....N..T^-...L9.....[.y....Cg.R.Y.V...4?D.\O..%........`.Vh.}_.$U...%....Q0.c.L8....Bb.j.W.z..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142458936
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	downloaded
Size (bytes):	1200
Entropy (8bit):	5.19908201298102
Encrypted:	false
SSDEEP:	24:1cUfsz3H4kXXUknlTBFvwhv03Rzc2z7+W1jE4VNpNTSLyR8:xdydnlTBFvwhvMiUKW1w4Tne+8
MD5:	8BEFCB089920A735B715027B57DED9B3
SHA1:	DAC9909947CC3A11A7A057EDEC2D2ED12B9DA251
SHA-256:	BF74E569D29CE327458AB7F1DC3B60EAC00A7CCCBF69263671ED95E58DE17DDA
SHA-512:	FFE792840BAE4D9C033374FF87E3A031E78A69BD170D72A8FE0113A07DE3F7C0C87A24AD7EC22D1B01A74A1AE560DBB88060C6E1E4E88C1F08EE771E54CF82BF
Malicious:	false
Reputation:	low
URL:	https://tms.nab.com.au/nab/prod/code/6860c4cf256fb9e52ec36105fa676a6d.js?conditionId0=4958178
Preview:	Bootstrapper.bindDOMParsed(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;var pixelID="1349572601822987";var locale="en_US"\|\|"en_US";var email="";var firstName="";var lastName="";var phone="";var gender="";var dob="";var city="";var state="";var zip="";var match=false;var aConfig=false;var matching={};if(email)matching.em=email.toLowerCase();if(firstName)matching.fn=firstName.toLowerCase();if(lastName)matching.ln=lastName.toLowerCase();if(phone)matching.ph=.phone.toLowerCase();if(gender)matching.ge=gender.toLowerCase();if(dob)matching.db=dob;if(city)matching.ct=city.toLowerCase();if(state)matching.st=state.toLowerCase();if(zip)matching.zp=zip.toLowerCase();(function(n){if(window.fbq)return;n=window.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!window._fbq)window._fbq=n;n.push=n;n.loaded=!0;n.version="2.0";n.queue=[];Bootstrapper.insertScript("https://connect.facebook.net/"+locale+"/fbevent

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	110341
Entropy (8bit):	5.1472440129193595
Encrypted:	false
SSDEEP:	768:jtPtHtetjtKtet/t9trtitStJtJtGt/ttt6tVCtBtutXtatBtptAtltTtAtMtntk:WucD17QVTZljk1zv7G
MD5:	2E26ADE7667ABA5BF5BDDEAD67C0395B
SHA1:	0D55FA367AAE67B394459EAD3EDC94D2EC3622B0
SHA-256:	697DF91AC866552F1DCB90B59332A065C5E81D4D4A3327448428659583C84E0C
SHA-512:	0C6C0F6499E1ECF0BA79C9AEF29512BEC00855F34FF00DEDC71D826714487EB2E4ECC74B2F4CFB74F3512B6E9C71F360A80B0C358277B169CC8B2CF11BE8E910
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/2e26ade7667aba5bf5bddead67c0395b.json
Preview:	{"id":"4fc55258-ea1e-470f-b9a2-93aae6c0a08c","enabled":true,"shouldCollectIPAddress":true,"enableWebHistory":false,"newSDKEnabled":true,"appId":"d6739cd3ce1a5d1b87c47f3b89e785d5","rules":[{"id":"07ad09b1-22c8-40dd-a81a-69b7051ed4b2","name":"Default (Green)","criteria":{"type":"OPERATOR","value":"OR","criteria":[{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal/online-banking","variable":"URL_PATH","comp

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6556)
Category:	downloaded
Size (bytes):	7695
Entropy (8bit):	5.326428284871634
Encrypted:	false
SSDEEP:	96:xTWiT7rv3qjLsp9T+YmFWqDo8wvZjsgGbi/f7HaO4uZWtLyvoQYG11:gi/rijQnXmlavtsgGbi/f76/E6Lypz
MD5:	1A67278F65F429691E80B825C0A33C03
SHA1:	5D8EE1F6DCE3C852B486ECC8E58D5AA56C7EF915
SHA-256:	52D160114563D9D63FB8EB9C4CEFBEDA89DA266B7A2D1B13A6A5D86C1E2210BD
SHA-512:	F61092A9A2335BDAED4F07B5D10093821F2EE09C1E8DC78B3F9350685A689F9CEE304E46B02A648CC654331ECB55F9C30076384ED39BA1454CD289A3D52C0B18
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-tile.js
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5206
Entropy (8bit):	7.91397107968488
Encrypted:	false
SSDEEP:	96:rGP9S/HI1b/vnEIDFD7c4mb+qh92+Jtjvc38ojp/YAdpMiDyHcuf8F:rGlS/ob/vnDFI7ojOArMiWzO
MD5:	3E03D6C92DED4F57F07FF5B77846E23A
SHA1:	A25E4D30546A2698D964A9E349AFB2A04BB9B3F2
SHA-256:	9B1A920C034FF68C2B04DDBC9DDAC139E7335A76188B649B6E3712BAC93D346D
SHA-512:	66D981EACDD3F4DEF2BB300A546818C29D5F9429272B24126161C62C564B69B934E57C81D3640621DAE0A6A14DE7CCE02585B9406898EC48346FDE31ED3702C5
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/product/business_credit_card/nab-qantas-business-signature-card-bonus-points-offer/master/_jcr_content/root/responsivegrid/section_container_co/image.coreimg.95.512.jpeg/1701218536145/nab-qantas-business-signature-card-with-background-3000x1000.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................H...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma..................Pmdat.....!..,. h@2.&LP..]..3...t...........p.......g..R.<.#..~..?.^....]........^(.p#.C.R^Hf.G.`..K...@...=ca.(...F....r#.<++.iG.(.......sOv...k]...l.s8%.....;{6...@............J..,T..T.}........0..3..6=.%.Cb...>.k.m...v..dg...Rz.:C&...n;JQka.FR)^8...nv......u`X.f.#.t..+.#...J=}....=.`.$^..A.S.....R&..mw@?!I..{.Y.....t..].....G....`3........H.+.9...0.VHG.Qx.....W.k..\|...}m..4....Ez...).Q........q..V...`..\..;.A..1..&.S+.X4......;.=.r...?.g7.[z....v.......f..!.v....9.AP..<,.3.m......[~8...it..>..../.d....v.g..C..<.P.V.?....a...WQ..h.sp.n.o...\|........].-.@~....K4N...z{..^6..=.....j$<B.J....m.l.o.....a.>.E...%...K.0....V....@...RtSAH.K~(.e..a_Lh\|z..I.s...z(_..$lX.RB.&...[..!..L..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	807
Entropy (8bit):	4.726808458541592
Encrypted:	false
SSDEEP:	12:YoCw/8QX8Ez1LpycEm2ZWkXAV8aackLqC3cEm2ZNeW28EpPoudsv1crz9OKonr:Yo/8olyZWkXqS2CrZ0W2Pzkenlor
MD5:	5E8177CB666C4174063A106764D91DA8
SHA1:	AF18EBF01418897D47A62E24700FCB9F2C65A720
SHA-256:	EF28FFD2B54495A3D9D9A9F2409F00AFF22DA84EB9271A2F7002A53AD4671579
SHA-512:	235FE9E138E5F1E9CAFC5757C37CC7FA65A3FCD2A1BF08202F49F9857FFA01266163A40D8DB6F7D3E0B1245626488D1F02E8AA012618219A643A2DBE6A2B9F98
Malicious:	false
Reputation:	low
Preview:	{"properties":{"elements":{"title":{"variations":{},"dataType":"string","name":"title","title":"Title","type":"text/plain","multiValue":false,"value":"Comparison rates are based on a secured loan of $150,000 over a term of 25 years"},"body":{"variations":{},"dataType":"string","name":"body","title":"Body","type":"text/html","multiValue":false,"value":"<p><strong>Comparison rates are based on a secured loan of $150,000 over a term of 25 years</strong></p>\n<p><strong>WARNING</strong>: This comparison rate applies only to the example or examples given. Different amounts and terms will result in different comparison rates. Costs such as redraw fees or early repayment fees, and cost savings such as fee waivers, are not included in the comparison rate but may influence the cost of the loan.</p>\n"}}}}

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142463104&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14223)
Category:	downloaded
Size (bytes):	14369
Entropy (8bit):	5.502498248337929
Encrypted:	false
SSDEEP:	192:vTQrIlnDSpRnC1L354BmtGwBlSohMqP3n+tjgid/9xQ4Og422ce:UrMTMjNqP9ixnQ4nece
MD5:	5312AE84A9AE0C721BEC065953B11706
SHA1:	57AC077F7755F6CDF5C618A4A7D38AD92264CD44
SHA-256:	1C9F6FDD3B7A1E9D11DA3A56FA48C037795E785D7D9FC2BFD4159264FDF151F7
SHA-512:	599C8F9012FA0A6682C7C3CC3B03F4A1DF9FE99107F9E6792C0BD828BF943FEDE62CBEB3F86FAD6682EB760AFF8EC731A9D8796F09C182A3CC387E0786A76040
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-accordion.js
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */!function(t){var e={};function i(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=t,i.c=e,i.d=function(t,e,n){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(i.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(n,o,function(e){return t[e]}.bind(null,o));return n},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12741)
Category:	downloaded
Size (bytes):	21629
Entropy (8bit):	5.37936446890962
Encrypted:	false
SSDEEP:	384:u3sTStlCdkPefrOf1shvvRxmZ4BGKQTSGWnG41Ruemcg9OzkWfOa3VqrpM:tJdkEOBYQOGWnG1c0OzkWfOiVqrpM
MD5:	B0F2A55C66A2980756DC238156924CB2
SHA1:	C6C7585149E50C10702839B6D6F2F494208CA2EE
SHA-256:	93A6E04AC4C0BE7C349BB91CCABD4717147C4B7D2E07210ACECC5BA8C558F554
SHA-512:	BCF203ADFECA5D2065A461E15929FE1267369F206AC595C6895D0BCC84EF66D80C37D7685A1216D5E3045C614E8FD0843195ABEDB7606535755E7218C975B1B2
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-mega-menu.js
Preview:	!function(t,n){"object"==typeof exports&&"object"==typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):"object"==typeof exports?exports["nab-aem-frontend"]=n():t["nab-aem-frontend"]=n()}(window,(function(){return function(t){var n={};function e(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,e),i.l=!0,i.exports}return e.m=t,e.c=n,e.d=function(t,n,r){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:r})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(e.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)e.d(r,i,function(n){return t[n]}.bind(null,i));return r},e.n=function(t){var n=t&&t.__esMod

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329)
Category:	downloaded
Size (bytes):	1022867
Entropy (8bit):	4.77800004128024
Encrypted:	false
SSDEEP:	768:uyaDzMlsKghZGmbipKC2uzaSjXZyhR4eUb0mOK0B1N+/cr7XzDuRrkqWFrLRDE5w:TtSc+bMzI2cv7
MD5:	67A387D05DFA55E5ADE58274EC63AEE7
SHA1:	9295E3AA46F9CCEF5B27006F2937DA201B5577A2
SHA-256:	E338E44651A05DD79DF62404B1EFB0E6ADBA07FD0CB26F41080BB87D42D21A9D
SHA-512:	1AC39867BE9CA39431A6AF88767707F64E4ACCC6F2387BBD202BDDB4422F8A0D3EBFB54517D17FFA542C2A7B3961BF01D280F3EEB3C536074052080D768B51E0
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-components.67a387d05dfa55e5ade58274ec63aee7.css
Preview:	.nab-banner--background-image img{-o-object-fit:"cover";object-fit:"cover";-o-object-position:"center center";object-position:"center center";font-family:"object-fit: cover; object-position: center center"}..responsivegrid{grid-column-end:span 12;width:100%}.responsivegrid .aem-Grid{display:grid;grid-template-columns:repeat(12,minmax(0,1fr));align-items:start;height:100%}.responsivegrid .aem-Grid.aem-Grid--default--1{grid-template-columns:repeat(1,minmax(0,1fr))}@media (max-width:767px){.responsivegrid .aem-Grid.aem-Grid--xs--1{grid-template-columns:repeat(1,minmax(0,1fr))}}@media (min-width:768px) and (max-width:991px){.responsivegrid .aem-Grid.aem-Grid--sm--1{grid-template-columns:repeat(1,minmax(0,1fr))}}@media (min-width:992px) and (max-width:1327px){.responsivegrid .aem-Grid.aem-Grid--md--1{grid-template-columns:repeat(1,minmax(0,1fr))}}.responsivegrid .aem-Grid.aem-Grid--default--2{grid-template-columns:repeat(2,minmax(0,1fr))}@media (max-width:767px){.responsivegrid .aem-Grid.ae

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x170, components 3
Category:	dropped
Size (bytes):	29096
Entropy (8bit):	7.980590133009244
Encrypted:	false
SSDEEP:	768:mtdzQ/wOz6NUMdfiQlXNANM+OsaL3SsPTJFO:i9Q/DzHMfrdANMSy3/PTu
MD5:	4E218CA30C7EFD7BD387F3973BC4DF87
SHA1:	13B8AAD09056D5BD44E3A5B9F2A594E889AD54AD
SHA-256:	28A8CDE66508F3365EC7158E42E7B905529F50BC2868CCDE00936BC8309221EF
SHA-512:	7DBD0034D1F3ABF502920D5DAF926DAEA9B10B9E73597E074E0A071D9FF011BE5967B7116641A7AA5A1E815FF021874E940C2CDCD2CC89BE282842C536906703
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7.....................................................................}&.z4...I....8..o..U.kx6e\|a.Y....\|J.....H.,G....?...;.fl\...9.....3.+a.z..wc.n.}.X....7L.$Ce.D.....J(..:.l......R.n.......k..H..m2M.F./?.Z.i...S....T.j...MR...T.bY.h..h.Zs.sm.....{..I......H......r...`.oF.9.$.n..^]..6..v.0JV...<.[..A............\f..`...3...t........~..R...%'r;D.).%.a..U..P2P......F.;.x...("f..7Djd.}.[...Ut].ie3.<.k):....I.V.=P.4g..........{.{..../H........(...8s.'ILd..u...w.u.$..W....../_5..<.nvC.tLfz..R....:...........L..!.\|.....^z.n....a.....K..X.s...D...@..L.\|..$yvd./K....&.%.Q<...,.....[..P.I..Ir..Y...l...=.zO{.$@................e:.W"~)OKQ...t...~...-.Y.0.SU...C.?%U..=..i.)U7.(!...............v..j,..r3A.>.6...k.\|.)..h/e...i...c....S.k.#...m..E..j..%U..wj...>..RI..N(...........'.. .v...

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	69589
Entropy (8bit):	5.3792713840688595
Encrypted:	false
SSDEEP:	768:Rk+pG9txWov26hJIw0WjSIjeYF6s4106JzRC9cavSQeUizeIrP0U8+a2tV:RkmoD5njDE0czR8qfeIzV
MD5:	7A877A50FC3D56C9D465EFF20A25E413
SHA1:	CF804812EAAA6E403F606BE86BA8F59B19475745
SHA-256:	982E3986BCC4D98F466B329D6CBB3F5F0AD6310F6493244075E0B6355F205274
SHA-512:	7A3549AFA8F94F2DC11CBFDB580ADF7424E5EAEEAAEBDA231C1CE27D9C66711F1E7B0F861C6E6F4E8E026AF92E8AAE5CEC3554C0338EC10478BDB3145680FA9E
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/appdynamics/adrum/adrum-4.5.2.1326.js
Preview:	;/* Version 15ad9e12c414858a5e6cfdfb1f2331b1 v:4.5.2.1326, c:e57b7d68d1801124dde4aadaf37c5078128bb80b, b:4.5.2.1326 */(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var g=window.ADRUM={},x=window.console,B=x&&"function"==typeof x.log?x:{log:function(){}};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();var u=this&&this.Zg\|\|function(){var a=Object.Wj\|\|{__proto__:[]}instanceof Array&&function(a,k){a.__proto__=k}\|\|function(a,k){for(var e in k)k.hasOwnProperty(e)&&(a[e]=k[e])};return function(b,k){function e(){this.constructor=b}a(b,k);b.prototype=null===k?Object.create(k):.(e.prototype=k.prototype,new e)}}();(function(a){(function(a){a.setUpMonitors=function(){for(var a=[],b=0;b<arguments.length;b++)a[b]=arguments[b];for(b=0;b<a.length;b++){var d=a[b];d&&d.setUp()}}})(a.monitor\|\|(a.monitor={}))})(g\|\|(g={}));(function(a){(function(b){function k(a){return b.B.slice.apply(a,b.B.slice.call(arguments,1))}function e(a,h){return d(b.B.setTim

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142442146&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5138
Category:	dropped
Size (bytes):	1651
Entropy (8bit):	7.86824646213799
Encrypted:	false
SSDEEP:	48:XmUBHZkgRzc45vIBZyJtOu05EAeYG8ZpIkh87z3No:Wm5Jzc45IBRXeYGSpIk0No
MD5:	583BC578749DF017C7E4A3851D82B94A
SHA1:	099D526CC6659C56CF1030CD78297FD7BB1ADE20
SHA-256:	95C52CFA8BA98C6B434DF175AC053112E55E4E9D47A1388C18D44D795DC1C30C
SHA-512:	B2F6D0BC2A600F168A8EBF4F013624DF0138C5C81748F8E3D55CE9115AB0F8DB0259E827EAC0D5AF8F382E8AFC446A94F5F6B9E063775B3FE02CED2CCA3E41E6
Malicious:	false
Reputation:	low
Preview:	...........X.o.7..W.+.l..%..!........H/.m.....d...R:.I.6....-Z..Q..}..d......f>....j1.o.]p......Y=L;g......r.YO..fs..dr.....Vw..:.&..;=...^.............W7......v./?...y.iW...y../.....';.f.........d.Y.....jX.M.7..s.....W.i..v.....u.Rxa.;.ti$....k...L...(.....R.a.c7...(....Q0~...N.n/...i..t.....I...\/.a..n......\N..!B.l<C...`$..\...uDd......-d.^M., F1-0.j.{...-x..1.2..t...m,[....-...r.....2................E.%..@..tA6f=.&...A..v/...P..zg....G.k......bb.K.-B..>.=.s....(+ ....A........(s...G.....$\|}...Z.....>.x$F..yC......$..q..1....>.....$....Z......u...U..'.1.H...-)1d.r...I).......Kdk8.a....,).A....k6..LE.(.C..P......E...e<....^....Ky\.J....#.......8.).5F....../.<..8..p.$.b].....j....kF.jC.x~\.g.!F.&.fR.'........f4.j.5O:c...T....'......`.Tx..I.%.Z7X...,/T.....*<j........9.&.>..S.w..g../S.Qi...k.T.cJ.9.;:....,a...6!.B5XC..s...w..{.({.2.).y2.....z&X...:..].6.......k.......u.84..8.2P.7.U.o.4+.(@...I.\.3.B......va.]..!....^.I...[.s....":.....

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	217726
Entropy (8bit):	5.456730519155343
Encrypted:	false
SSDEEP:	3072:sK3F1l0xFUncvOIy0bteuvQ+AMPpgArl0xYu5G5nM8Z:sKVv0PPfy0bvQQGArHu5G5nMu
MD5:	082271D9D44411130CCBC07CF6EAFC1D
SHA1:	78435C6A65BF85652B6E69E989B2B554D1AA7C9C
SHA-256:	74F6B2B975944800F1566E81AAED5CC5DCB7A7170EAFD4CDD3E205F88F8E1F5F
SHA-512:	478D530FE8A865C5B6DFDB17875277A321FA4C3C29804FE4963D4AEED0C5F3BC4D38D1882DE2B6532343FA317E756A8AFD6EFFD80770F60D5DFD5E8DE5D2C42A
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	5.778515961692492
Encrypted:	false
SSDEEP:	3:YWR4buWs+AGQchf+oQJKm3XuczKERTRmQcHoEYhc9rXTUkQOocD8uEWr24+AShdp:YWybu2AV7JNRhKHoEY6xXTUkCXgodcY
MD5:	352676882FFC3A6A648F5E45CB434324
SHA1:	15E6C164085B853B4AEF33CB618460F788339311
SHA-256:	01D0392EA533A0AB83CD801AD8EEC439D45933294196850C0CC5BD6C2DC8C496
SHA-512:	237B2D8AB91A2A92C7C4E8F6C5930DFE93C8AF491F3D0DA818DB0E9E89DC6D6EDFC35BCDB5CFF6319E04D2C5AC924D5365F1F713E3AF4F292ABB1D170D0C1420
Malicious:	false
Reputation:	low
URL:	https://fhp.nab.com.au/api/fl/idgib-w-nab-ib
Preview:	{"status":"success","error":null,"data":{"cfids":"+bmkfru+OVMEZ7kXWH8rjWoXBxnoC38YJjRed2TjT+dSnTM95VPpGzo6dEKkEzikTvo/RCx7JXcnVmf06a9yOD+BDXZKVgqNR5F0v1A5Mm+bDEH9nRYKrq9euNwW5dbl3ux5gaSGA179xcweXRBiEx3A"}}

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9069
Entropy (8bit):	4.298967297131459
Encrypted:	false
SSDEEP:	192:bdcgnyFrtam/CmozQX+04Ewwf1Uzp6YyFQUpf:b9GJ4EbCzEJFQUJ
MD5:	03A9540D7AE7A72C39C235F7E58679C3
SHA1:	8ED958B08B12717BAB8E7DE05A3BC19598CD6FAA
SHA-256:	CE56C017A4B04DD507163F35D6C09D6C28CA91B7D468FD808CDC3A50358CAD1C
SHA-512:	20BEA07F56B00BB297D836820FDF0B07F543B0B1CCA495EB62BBB21A4D3CFDA3BFC7B65EF3C914DDB1603B2796AC1FC94F56DB515A23C644322ABE040A9132FA
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/static/media/star_more.cce999fea58baa1188f495dd3a4bc3d9.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" id="Layer_1" x="0px" y="0px" viewBox="0 0 66 34" style="enable-background:new 0 0 66 34;" xml:space="preserve">. <rect xmlns="http://www.w3.org/2000/svg" width="66" height="34"/>. <g transform="translate(1,1)">. <path d="M39.5926 16.8766C39.5926 17.441 39.7732 17.5313 40.0103 17.5313C40.2135 17.5313 40.3828 17.4749 40.428 17.4636V18.3216C40.3715 18.3441 40.1683 18.4119 39.8748 18.4119C39.3668 18.4119 39.1185 18.2877 38.983 18.1974C38.8475 18.1184 38.5427 17.8813 38.5427 17.2266V14.9236H37.5945V14.0544H38.5427V12.7901H39.5926V14.0544H40.665V14.9236H39.5926V16.8766V16.8766ZM43.9614 13.9754C43.0808 13.9754 42.6632 14.5172 42.5164 14.7204V12.4965H41.4553V18.3329H42.5164V16.0186C42.5164 15.4203 42.8889 14.8559 43.5663 14.8559C44.4468 14.8559 44.4807 1

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (630), with no line terminators
Category:	downloaded
Size (bytes):	630
Entropy (8bit):	5.643219091606049
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHaHB4VlAcYVKvdImWJxZBTiUMGT2IWSBWl:hMiRO9nHslAcmuLkJ8G9xQ
MD5:	B4DBAB3EAA46E80C5AD73574CF7D1F69
SHA1:	B555DD4E44D06C390300C088B2055A88D90DE67B
SHA-256:	6213EF832BE305DCBA84C636915BAA9E621620162F55E823E04FC4B1F39FFD90
SHA-512:	32A1D3C74B0523F80AF39794D5D91F408FC4A36D1D1BB73833AD0D5433827454E31BD84BFDA059AEBA9B19929BD4368BF2EC87D171EF37A50E18A5E0652FE687
Malicious:	false
Reputation:	low
URL:	https://3347639.fls.doubleclick.net/activityi;dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=*;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F"/></body></html>

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16807)
Category:	downloaded
Size (bytes):	131185
Entropy (8bit):	5.325598729636108
Encrypted:	false
SSDEEP:	768:soYw5SY6nYUY9cj+DYR5j1JYlW9F7iZZZcY8Z02LKVYKYLyY+iLcyGDh/ZB2lw7N:R7z6n9aAJ1JyKTZ02LKVlEy9f2agvGX7
MD5:	12F62A0F035777CF08697736473BFECE
SHA1:	A7DCFE61EA83F5289BB805B2D893B6E3C73D9877
SHA-256:	AD9AD650EA22174A026A1FADA6198BD54F0D07A8AF178EC9BD435A4639468C01
SHA-512:	AC2C2994676506D1F46DA6FAA9958896A1C9CF0276B4D1026D2504EA0B5A846DCC2C0EB3E894FE760ACF7B450C85DF457ED3E8059520FAEF540A9436E0F703B1
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1349572601822987?v=2.9.142&r=stable&domain=www.nab.com.au&hme=e82209ddce2f5ef9f00773b102465283e977acad712d554991b839c35823b905&ex_m=62%2C103%2C91%2C95%2C53%2C3%2C87%2C61%2C14%2C85%2C78%2C44%2C46%2C145%2C148%2C159%2C155%2C156%2C158%2C25%2C88%2C45%2C68%2C157%2C140%2C143%2C152%2C153%2C160%2C112%2C13%2C43%2C164%2C163%2C114%2C16%2C29%2C32%2C1%2C36%2C57%2C58%2C59%2C63%2C82%2C15%2C12%2C84%2C81%2C80%2C92%2C94%2C31%2C93%2C26%2C22%2C141%2C144%2C121%2C24%2C9%2C10%2C11%2C5%2C6%2C21%2C19%2C20%2C49%2C54%2C56%2C66%2C89%2C23%2C67%2C8%2C7%2C71%2C41%2C18%2C17%2C4%2C73%2C79%2C72%2C77%2C33%2C35%2C76%2C48%2C74%2C28%2C37%2C65%2C0%2C83%2C75%2C2%2C30%2C55%2C34%2C90%2C38%2C70%2C60%2C40%2C39%2C96%2C52%2C51%2C27%2C86%2C50%2C47%2C42%2C69%2C64%2C97
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2531), with no line terminators
Category:	downloaded
Size (bytes):	2531
Entropy (8bit):	5.880368212013898
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08mwp19jI/jjxBuKa1b6:wsbSUtJfxrqLWWWdV6j1F79jwTS2
MD5:	A1508CD869468DD2103C55AD9CD259EE
SHA1:	047019E39E77BBA973E7938E0297810D0886A1F1
SHA-256:	ED0676E3A96BC74F81FCA621201F9606167CB905B2984A5D4F03BD278F965B83
SHA-512:	B2C70457A479BEF4BC9B3DCCFD84A73D77C95F0CAFEC574B1C5DDC3042CF042AF843D7E3563082522DE6FAB8E82E36C4E0A49B059EB6F83E6DD59B93E351DC68
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1040712916/?random=1706142461008&cv=9&fst=1706142461008&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=376635470%2C466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&ref=https%3A%2F%2Fib.nab.com.au%2F&top=https%3A%2F%2Fib.nab.com.au%2F&tiba=IB%20login%20banner%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5121
Entropy (8bit):	7.91435739113105
Encrypted:	false
SSDEEP:	96:rGPbnofc5yBIm3qodA1YiVGCwXxEdC3pnQkwwF0SxNPxkqz+86DhSqE5At:rGznBHgOYOC3pQQFtnPmbhSB5At
MD5:	079148135604BEAD40BB1358C0836117
SHA1:	46FA14EC6EFDEF04A38576FD37455E5D461E7DAF
SHA-256:	6C8CB22EC20538B76CA7132DB4098F7BAA452FAC4FC76859B6A363888AA65B8E
SHA-512:	7E119863F78303851B9407A6610699A3C05FBD8B49BD70F9ACDEB87353BD64FFB16C7F62FFE1096EF9A6B4F7BD66D115D22731CFF2BD6EB0515104F6D1F42EB0
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/product/business_industry/small-biz-explorer-mega-menu-tile/master/_jcr_content/root/responsivegrid/section_container_co/image.coreimg.95.512.jpeg/1677039682753/small-biz-explorer-masthead-banner-1920x690.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma...................mdat.....!.... h@2.%.@...A@.^.a)..=Y.X...........NlmJ..+\|....O...u..2XBh....s.N- .g....(F......Z.Q].9..j.....}../m.q..qq..v....._.......'Nb...y.4.F.(.....P%....^i.8........v..,........z[._.^.6-....A.ox.A.qk.Q.R.6.k6y.....x....3$...H.c.t...Q.(..o..m,...~TW.~..+....mO....JFi..A....X..."..\|$LnOh.V...d.....;.)....v1X..4.a.U8d^13..b.-6......M.....9...%Nga.N...."..#...:d.ta.[..9.7.....u &...a.O...n..!.M.[...\.,^......\|......,...?H...JR......d.#c.\......xj.c..%/.A.D...q....;C.MV...r...E...<.Q...].C.p-U........]..+..5.N..#..w..#....i.9`.(...2...E..Lfr.e.:.(....`.7.<....D..3...P....d0.....^.#..JO...@..........4..E..`a.@b.r.~.yb..(....C..J.....\|....(.....*.RP-....GO"..#b..Y.9....\|b}UOG........4

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (51692)
Category:	downloaded
Size (bytes):	451190
Entropy (8bit):	4.773338095378042
Encrypted:	false
SSDEEP:	3072:VI+PqVVdeYRHHFcT0hbXghosKYxCxhrDC7eZwB0bcUgNsCE:YL8hos9xo1VHL
MD5:	350599AB99CC2FA4D0143EB1264D7F01
SHA1:	46F63F13CA0D2738A5ECB3D63B039ADA479B78B6
SHA-256:	C9B0098962AEAC2D077417E46F5F6CB5F6C2900821F026BFCF18BD7627CE5F49
SHA-512:	26E241827EBB9B44ED9662277C6297A14196171830560A9A20223717DE488FD6CEA552880396D5807435C63678599C1B45104A7930BEDB7E59827E7BEFCB64B4
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/
Preview:	<!DOCTYPE HTML>.<html lang="en">.<head>..<meta charset="UTF-8"/>..<meta name="viewport" content="width=device-width, initial-scale=1"/>..<meta http-equiv="X-UA-Compatible" content="IE=edge"/>..<title>NAB personal banking \| Loans, accounts, credit cards, insurance - NAB</title>....<meta name="description" content="NAB personal banking financial solutions include online banking, bank accounts, credit cards, home loans and personal loans. But we.re here to support you with more than money."/>..<meta name="template" content="homepage-template"/>.....<meta name="robots" content="index,follow"/>..<link rel="canonical" href="https://www.nab.com.au/"/>.... .. <script>. digitalData = {"components":{},"page":{"pageInfo":{"site":"nab","siteSection":"personal","siteSubSection":"","pageName":"nab:personal"}},"user":{}};. digitalData.event = [];. digitalData.page.pageInfo.server = location.hostname;. digitalData.page.pageInfo.referringURL = document.referrer;.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1185
Entropy (8bit):	7.385665618848463
Encrypted:	false
SSDEEP:	24:rGA0X/jcP1TAhTcv5RGREMYCLaaJMKs9MXbTd9ujQ0DC6U9peD:rGAc/jEAMUR/YCVq5MX/uLDireD
MD5:	F74DDCD34CC8AEF687FACC0BD5679D4B
SHA1:	439F3CE90FD19A0599E9654608B6B9B572D6C842
SHA-256:	8BB88A66C638A971AB0DD08B7458E330FF3A2B90D8DE50B8FCADC4268FE4E48F
SHA-512:	524792EF1465F4B1294648A4E4C2FFD862ED275E03418E4ACC8D3D5CEA131982C55CA4DC1A31FFD59434F7D79F75C0EEBE3F95325C4526563B0657A2E4E84449
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/product/business_loans/quickbiz-unsecured-banner-tile/master/_jcr_content/root/responsivegrid/section_container/image.coreimg.95.512.jpeg/1670819594891/quickbiz-clock-masthead-banner-image-1920x690.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma...................mdat.....!.... h@2...@...A@.^.a./H..cy.:BN....^..h..yo.M(.O.....3......7.....E...a..[.].!..._.A.&\6....\|..LZf8.l..n.YF..._..=.l52.{......\.^.4V\.{.L......D.........s..'vi\...1..St.yc..7C.X.4.\|.".^j..M.}....g,x.........._.C.A..n.....E...U_.tZ.Z..R9$>.....G..../q.8.y.o.<.....lE....VL}.5^y..\|......$..7..2..8.....m.......n.xf.Ur...s....N..>..L.#..."m...K.`w..(8......A......:...S..\|bC'.....s.K4..o5l.....^..Zq...N..G...$............+.+K.r 5&.n.&5#..U_$.?..F&.W........{7......F[58...v].../..)......sem.....mu.u)..G...O_..ksx=.%.U....8.1..*.."..@..D...j........+....(..7..Fq.0..7.k.r:B(..=.+.:F...gd....)E})..%H!I..H.v.......Sy,.v~....xH./..Q ...k..3V.i..I..w.a.A..UP...>..>._.T..7!...f..'......l

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16807)
Category:	downloaded
Size (bytes):	131185
Entropy (8bit):	5.325598729636108
Encrypted:	false
SSDEEP:	768:soYw5SY6nYUY9cj+DYR5j1JYlW9F7iZZZcY8Z02LKVYKYLyY+iLcyGDh/ZB2lw7N:R7z6n9aAJ1JyKTZ02LKVlEy9f2agvGX7
MD5:	12F62A0F035777CF08697736473BFECE
SHA1:	A7DCFE61EA83F5289BB805B2D893B6E3C73D9877
SHA-256:	AD9AD650EA22174A026A1FADA6198BD54F0D07A8AF178EC9BD435A4639468C01
SHA-512:	AC2C2994676506D1F46DA6FAA9958896A1C9CF0276B4D1026D2504EA0B5A846DCC2C0EB3E894FE760ACF7B450C85DF457ED3E8059520FAEF540A9436E0F703B1
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1349572601822987?v=2.9.142&r=stable&domain=ib.nab.com.au&hme=e82209ddce2f5ef9f00773b102465283e977acad712d554991b839c35823b905&ex_m=62%2C103%2C91%2C95%2C53%2C3%2C87%2C61%2C14%2C85%2C78%2C44%2C46%2C145%2C148%2C159%2C155%2C156%2C158%2C25%2C88%2C45%2C68%2C157%2C140%2C143%2C152%2C153%2C160%2C112%2C13%2C43%2C164%2C163%2C114%2C16%2C29%2C32%2C1%2C36%2C57%2C58%2C59%2C63%2C82%2C15%2C12%2C84%2C81%2C80%2C92%2C94%2C31%2C93%2C26%2C22%2C141%2C144%2C121%2C24%2C9%2C10%2C11%2C5%2C6%2C21%2C19%2C20%2C49%2C54%2C56%2C66%2C89%2C23%2C67%2C8%2C7%2C71%2C41%2C18%2C17%2C4%2C73%2C79%2C72%2C77%2C33%2C35%2C76%2C48%2C74%2C28%2C37%2C65%2C0%2C83%2C75%2C2%2C30%2C55%2C34%2C90%2C38%2C70%2C60%2C40%2C39%2C96%2C52%2C51%2C27%2C86%2C50%2C47%2C42%2C69%2C64%2C97
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37968, version 3.393
Category:	downloaded
Size (bytes):	37968
Entropy (8bit):	7.99334596102484
Encrypted:	true
SSDEEP:	768:llf4eRL3jpR3AdrCzyilExUEwIPN08OU9qo2cae+qz5LH:lZ4eNlm4zytxUE9N08OcqRR2z5LH
MD5:	72C55E6B8359DEB96396385075314691
SHA1:	617E951548243787CD9106AA7E1DF0FE8574EDB6
SHA-256:	E6146CD34801478284F6DB6927DCC7D18F19FC5698FF41F63EF5411DF630D9E4
SHA-512:	B9163912F695B3D6115344BE27EB66E0AC7FE59FDB06BDCADA7A33282BB84E9A9DCAD3D930C191C32C0CFF39385F923E0E0807BB4FE4F9223C727A6C8BF79424
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/fonts/source-sans-pro-bold.woff2
Preview:	wOF2.......P.......8.............................F?DYNA.M..:?GDYN.....`...f.`.........).6.$.....B.. ..x..[[.fq....q...>.U!E...1......&.w... .._..w..._........!08&..l..\|~.....s.i..E..0..#..F.-V1.+{..Z@w...,3X..Cl.z3[.~.k....#1/....a......V..L.z..uC<I%6.^..d.......Kyd..E...9..8.8.5..Qc..<b.+.......k....c....c,...C.5.Rc...R..b(...c.!.Rc.1.Z."~..;.Kx...R.Z*.Zjn\|.{U...53j.........Ij..R....~...S.gd....j.@I]`x..$.C.O oG..U1%r...j.(.....]........n&...`$..R.&>...Z.k.,....Y..kc.......!~N.>.....q!...DHB. ...^ .i........Y;1..].ms&..ux~.......5..)V..r.6.]..f.{.r.....U.(]..E.e.]m..$.........}.SD...i....].h.q....b........Y...-..P.77D.... esA.........S._......c......P%YI\..}.Ok..vZ......6.L...(...>D.....H!..C...j...%[=r..?.Y.24I#.Y...,...9r9%.r.2.$.#...7..:t.;..C...v..e1&.8g....-E.X..I...M..Vx..iJ....Gn:...p...I:$..V...nZ.i..Jc.i........BPc...T...1....[..V/.?[a..B..9Qz.VO..U..o...q&.X.....L.....2.........#..Ue#3"2....._j....kTUDd.LdF.lV..V..,v..WU..\.p.......:...

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	4.8033119969689535
Encrypted:	false
SSDEEP:	24:u+WSR1h3TpS/5ld1FQs29FM/DlUWAXFDsimj96cV6ecR9si7ybYihUz:uqap29y/cFDza56h9RubFE
MD5:	7E5E674ED231565FFB430B4B8E165773
SHA1:	4C978400195B6BB93FC098217529A021622751ED
SHA-256:	FD4ECC91ED644AA9E36317C36417006B2B6A2924B616C8B212431C0F0534BAF0
SHA-512:	7A5999B9E3ADF49373C07294526A9134BEC591E3CC6F89837F413B48E274CF217E8E490CA36766D9DB57632772E729FF2F615C1CBED531796352383BFFFC0369
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-analytics.js
Preview:	var AnalyticsEngine = /#__PURE__/function () {. function AnalyticsEngine() {}. AnalyticsEngine.ingestEvent = function ingestEvent(detail) {. var digitalData = window.digitalData;. if (digitalData) {. var _digitalData$event;. var options = {. eventType: detail == null ? void 0 : detail.action,. data: detail == null ? void 0 : detail.data. };. (_digitalData$event = digitalData.event) == null ? void 0 : _digitalData$event.push(options);. }. };. AnalyticsEngine.ingestComponent = function ingestComponent(detail) {. var digitalData = window.digitalData;. var componentType = detail == null ? void 0 : detail.component;. if (digitalData && digitalData.components) {. if (!digitalData.components[componentType]) {. digitalData.components[componentType] = [];. }. var digitalDataComponents = digitalData.components[componentType];. digitalDataComponents.push(detail == null ? void 0 : detail.data);. }. };. return

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2051993
Category:	downloaded
Size (bytes):	91974
Entropy (8bit):	7.988548678330719
Encrypted:	false
SSDEEP:	1536:iEwEzw6eGBGnq7XTqcNNRn3skB4RsvSRuy6q9WqL1xXuSIyHdpdZPSk:FeVqb2oR3L636yJL1ktgdpT
MD5:	1A73AAF70C96D48D2F39213162AE69CC
SHA1:	161762C476B9662FC699AAC00576C4220C008F61
SHA-256:	2ECD13DB001AAB39B8FEF80358C3A03E6DB13B91B5689F76F44255DE4AD5BD89
SHA-512:	B018F0F51670E86624C3945150CA7E6721DA1B95AA67A5E61A89ABFD22FC08E1DA70C0861AFD1635A6B62ABEB97401911C675C25623B6B31EB58AED92EBB1CF4
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/css/style.css
Preview:	...........ko.I.`.y.....E.Y..xGP..j......e..1..P.[\|hI.R....E<$..f..v..0f....i~H......c.......^.......W....W....o........r...........z4.y..............r.x?{?..{?Y.g..\|....]..N'....r1]M/.t......>.~................0..x{..}.z..............?.............~....f......7......?..~........O7W.g.^]>~x}~>...._.].7...........\\_.r{v...y..mn/.~.5......>^..z.............\|.\|..................g..q....5W.u._n.>....g.?......w...__O.n..........5z..........t......n....\|.!W.U..F.....2........./g...\~y{..o...}..<{ww}w....7.....hs....N}...z1{...../.7./.]../.......}..6...x.c....?\...l....._...u....k~.m.....}.._.7.8......=..U.....{.u...m.../...._n....&...\l......x...=......w.O.... .......?../..g...g...t..Z$I.\|..\|~9.........o.....}.w.x.......O7W..x.My......7.........W...w.?._.4..e.W...^.j..._................?...c_....\|...}\|\|..?...OW.\=^\..o..>......9{.}O......7.t........c?....w........w...~..g.._>]_...T........../..i.....^?.S...+....C.O..;........

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	6173
Entropy (8bit):	5.2063040677886585
Encrypted:	false
SSDEEP:	192:1bFnNojImVVMbu8U3GPrEiyeKDgiZKhrEiyeyNnlErsXM0N:1lNsImVVMbu8U3OrEiyeSvUrEiyeCEI
MD5:	935DFC0E42ABEDB1DA18CED5CD9E6A85
SHA1:	58A861F79F1C9253A50DB5A11AD7F90368B5FE95
SHA-256:	E9CE6386C218FD261A2226E5343278E23A5F222A025B7D0F7D4689D43ADBB4B1
SHA-512:	FC340B6361BDC00EF96B15125E4FD30F83A1BAFBD1BF6EFEC186DDB2497FD8701734A9C4B1CA32CBE4F3A8FDCD264B944E9A84986582FF18DE311EC313CDDBA9
Malicious:	false
Reputation:	low
URL:	https://tags.nab.com.au/main/prod/utag.8.js?utv=ut4.49.202305090101
Preview:	//tealium universal tag - utag.8 ut4.0.202310250223, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechang

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1796x800, components 3
Category:	dropped
Size (bytes):	199853
Entropy (8bit):	7.984584317221943
Encrypted:	false
SSDEEP:	3072:ReKv8emdQSc3QBtR1+Uomce9IxXqHrmBP+Y96MrTYtHmdzZx58h091j:RcPf+CcemxXqikWfrTYGjt9h
MD5:	558416852690B3B74C0CEB132552FEB9
SHA1:	C49DE9E9A59124F3CE8457D4CB1D67243EA948D4
SHA-256:	02DE1F52CD99150184F0D6220900F86A724FE4366F096D280FB12E7A1E44B389
SHA-512:	613AB89B2D6F4760CA141A9FD7EDE0170FFF0C8EF2D3FABC9C4A718ABB168CD2999EA6089EF1EA2142CA21DDCDBE649F89D58EF122D61E8A21E2CAD3EF8F26BE
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..II*.................Ducky.......B......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.dee3a7703, 2022/08/18-16:50:30 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3c0cd938-5ec7-4701-a391-1302da1e4fea" xmpMM:DocumentID="xmp.did:C21478FEEC6F11EDA907DABADEDD6C0A" xmpMM:InstanceID="xmp.iid:C21478FDEC6F11EDA907DABADEDD6C0A" xmp:CreatorTool="Adobe Photoshop 24.4 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e846ef12-7171-47f8-81bc-c72557c380bb" stRef:documentID="adobe:docid:photoshop:e1148e71-4179-a24c-966a-331ae51de1bd"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	207419
Entropy (8bit):	5.838856248336352
Encrypted:	false
SSDEEP:	3072:UzUUC0o9oUBQNSPyYH/wjfZTul9H5E2/xckyPh9uykqREw/zalFx3:UzUUC0GoUl9H5f/zMjt5r/zap
MD5:	E0084AE9AE6DF868B9844807B7B5DDF0
SHA1:	CAC7766434C5D034846438D9FE0E5FE04BF78E23
SHA-256:	31D723294C248135B7A6FE4FA340197B3802EA8247E16036FD7CBEB718F65B0E
SHA-512:	785335FBCE74BB4B37F9A46B284B999AE1EE6955BD8DF7BA61877CBB103B96CD7181B0BDD0526D00ED9110D1160EA925A0325A98B577E43D930C6DB7CDC4BC84
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/288gk/w/S-/fAKx/jqJUxdaP/auba0btLiJEt3Q/MkcUAQ/LB/lcCDt3Fmc
Preview:	(function QrXjrsfzxf(){fx();Ytx();function Xtx(){kz=FZ+xG+CZxGxG,Eh=MZ+CZxG+dZxGxG,UX=mZ+dZxG+WZxGxG+xGxGxG,XX=LZ+WZxG+xGxG+xGxGxG,xh=MZ+mZxG,Th=AZ+CZxG+mZxGxG,lh=LZ+LZxG+VZxGxG,Oh=MZ+sGxG+VZxGxG,tG=mZ+xG,sX=VZ+LZxG+mZxGxG,Xh=MZ+VZxG+dZxGxG,mh=AZ+dZxG+CZxGxG,YR=CZ+WZxG+VZxGxG,cG=MZ+WZxG+xGxG+xGxGxG,WO=MZ+mZxG+CZxGxG,Fn=AZ+FZxG+CZxGxG,Wh=MZ+sGxG+CZxGxG,qn=MZ+LZxG+xGxG,KR=mZ+sGxG+FZxGxG,ph=sG+WZxG+AZxGxG,ZR=FZ+sGxG+dZxGxG,lO=LZ+LZxG+mZxGxG,Jn=mZ+xG+AZxGxG,tz=AZ+mZxG+AZxGxG,wh=sG+xG+AZxGxG,EO=CZ+sGxG+CZxGxG,Rh=mZ+mZxG+AZxGxG,Cz=VZ+FZxG+AZxGxG,qR=FZ+VZxG+mZxGxG,Ntx=dZ+xG+sGxGxG+WZxGxGxG+CZxGxGxGxG+WZxGxGxGxGxG+xGxGxGxGxGxG+sGxGxGxGxGxGxGxG+LZxGxGxGxGxGxGxGxG,hz=CZ+dZxG+xGxG,nO=VZ+dZxG+mZxGxG,wG=MZ+dZxG+CZxGxG,CG=CZ+AZxG,DX=FZ+VZxG+WZxGxG+xGxGxG,Qh=sG+xG+CZxGxG,gn=mZ+CZxG+FZxGxG+FZxGxGxG+mZxGxGxGxG,QO=CZ+VZxG+xGxG,dO=dZ+VZxG+mZxGxG,w7=VZ+AZxG+dZ

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	24705
Entropy (8bit):	4.2931008171536496
Encrypted:	false
SSDEEP:	768:utfb7zjPCZ68lI+k5M9R413vZvrPQ01/wUlx3M/didLRz1n0L:UfbLC3
MD5:	A22EFEDF7E7BFAD40ECFE59978AED7E2
SHA1:	A3173963C5832EEE22AEBD703ABB02F4AB39A869
SHA-256:	701E4274FAD0B378331EE688A1A86B17DF3C29021A238EC2504CF2664B67743E
SHA-512:	9176DCA0D3775877DAD1BFB7083C696E3937E7E786531705921D806917A82A8A1BC3F2F35F00C6438CDEC240547BD3A183BF5F2C7FA7F0169182E620FEF34986
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/cq/testandtarget/clientlibs/testandtarget/atjs-integration.js
Preview:	/******************************************************************************. ADOBE CONFIDENTIAL. * __________________. . Copyright 2016 Adobe Systems Incorporated. * All Rights Reserved.. . NOTICE: All information contained herein is, and remains. * the property of Adobe Systems Incorporated and its suppliers,. * if any. The intellectual and technical concepts contained. * herein are proprietary to Adobe Systems Incorporated and its. * suppliers and are protected by trade secret or copyright law.. * Dissemination of this information or reproduction of this material. * is strictly forbidden unless prior written permission is obtained. * from Adobe Systems Incorporated.. *****************************************************************************/..if (!window.CQ_Analytics) {. window.CQ_Analytics = {};.}..(function ($, ns) {.. ns.mboxes = ns.mboxes \|\| [];.. var atjsIntegrator = function ($, ns) {.. / -- INIT code -- /.. /. The regular

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37968, version 3.393
Category:	downloaded
Size (bytes):	37968
Entropy (8bit):	7.99334596102484
Encrypted:	true
SSDEEP:	768:llf4eRL3jpR3AdrCzyilExUEwIPN08OU9qo2cae+qz5LH:lZ4eNlm4zytxUE9N08OcqRR2z5LH
MD5:	72C55E6B8359DEB96396385075314691
SHA1:	617E951548243787CD9106AA7E1DF0FE8574EDB6
SHA-256:	E6146CD34801478284F6DB6927DCC7D18F19FC5698FF41F63EF5411DF630D9E4
SHA-512:	B9163912F695B3D6115344BE27EB66E0AC7FE59FDB06BDCADA7A33282BB84E9A9DCAD3D930C191C32C0CFF39385F923E0E0807BB4FE4F9223C727A6C8BF79424
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-styleguide/resources/fonts/source-sans-pro-bold.woff2
Preview:	wOF2.......P.......8.............................F?DYNA.M..:?GDYN.....`...f.`.........).6.$.....B.. ..x..[[.fq....q...>.U!E...1......&.w... .._..w..._........!08&..l..\|~.....s.i..E..0..#..F.-V1.+{..Z@w...,3X..Cl.z3[.~.k....#1/....a......V..L.z..uC<I%6.^..d.......Kyd..E...9..8.8.5..Qc..<b.+.......k....c....c,...C.5.Rc...R..b(...c.!.Rc.1.Z."~..;.Kx...R.Z*.Zjn\|.{U...53j.........Ij..R....~...S.gd....j.@I]`x..$.C.O oG..U1%r...j.(.....]........n&...`$..R.&>...Z.k.,....Y..kc.......!~N.>.....q!...DHB. ...^ .i........Y;1..].ms&..ux~.......5..)V..r.6.]..f.{.r.....U.(]..E.e.]m..$.........}.SD...i....].h.q....b........Y...-..P.77D.... esA.........S._......c......P%YI\..}.Ok..vZ......6.L...(...>D.....H!..C...j...%[=r..?.Y.24I#.Y...,...9r9%.r.2.$.#...7..:t.;..C...v..e1&.8g....-E.X..I...M..Vx..iJ....Gn:...p...I:$..V...nZ.i..Jc.i........BPc...T...1....[..V/.?[a..B..9Qz.VO..U..o...q&.X.....L.....2.........#..Ue#3"2....._j....kTUDd.LdF.lV..V..,v..WU..\.p.......:...

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	4.899622532871285
Encrypted:	false
SSDEEP:	6:YSM5BjAGKEW/mHnWWEKAvXjkXHxHKAvXjkXHOjKAvXrnmKEW/aC/8/HJd/aCfW5s:YSABjAGS/mHnRbTXHZKTXHOjKSnmS/7w
MD5:	6D97FFCAB76AB3C807D9CCAC7E6B1C81
SHA1:	12867BE2315476EC70259855AD885141B78BBCD8
SHA-256:	84B5483545C17278E8D711856D0A6E573BAB8322815486FD8017A51B7D56C6A4
SHA-512:	60DFE61D0D2C7337100C87DBCCE13BEC94945C72EC2DFBAC4F5FF78C74DAF9182627D0E45F18AF47AE1670EFFC2CE80F4F9624AC02583A7C19DD2623995AB25F
Malicious:	false
Reputation:	low
Preview:	{"widgetHash":"95164d49967239e5c92986f94bb9d176","displayConditions":[{"typeId":"BH1","satisfied":true},{"typeId":"TA1","satisfied":true},{"typeId":"OA1","satisfied":true}],"ruleDisplayConditions":[],"openBusinessHoursGroups":[],"cobrowseConfig":{"enabled":false,"licenseKey":"","fullScreenEnabled":false}}

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	6747
Entropy (8bit):	5.364383952922167
Encrypted:	false
SSDEEP:	96:zxc4ByRq8EFE5+evfp5oUvXWxc4BTObCyXngyMYMpxc4BlKnueGeiy6CzyA2Bv:NR8EFyboUv4TOuU6y6CzyA2Bv
MD5:	2D6DCA0E905E99EFF3A42A8552512A11
SHA1:	E92DA26DA97F20A166CEA315E81D12D1ACD0D4A7
SHA-256:	73D73EE2FF8C1BD9EA1C0D9871E5027FA20A18828631E97CB225647F6E21B472
SHA-512:	9C2E60E61B712516DEE2DE3271676682CF04817883A32601A0208094441654BF3741527E223B63DAA8B1FD7714AE70640FD1E15B4700249F72ECA0864D9F23D7
Malicious:	false
Reputation:	low
URL:	https://tms.nab.com.au/nab/prod/code/c1d0bcd13bbf05d268d84a1cf7be88bc.js?conditionId0=4879801
Preview:	Bootstrapper.bindImmediate(function(){var ddConditions={"not":[null],"caseInsensitive":["ignore case"],"compareTo":["unknown\|nab"],"requiredData":["50587"],"comparators":["matches"]};Bootstrapper.data.resolve(ddConditions.requiredData,function(){ddConditions.values=Array.prototype.slice.call(arguments,0);var Bootstrapper=window["Bootstrapper"];if(Bootstrapper.data.checkConditions(ddConditions))Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;.try{window.TTDUniversalPixelApi=window.TTDUniversalPixelApi\|\|function(L){this.getVersion=function(){return"1.1.0"},this.init=function(e,r,t,n){if("string"==typeof n&&(n=null,4<arguments.length))for(var o=4;o<arguments.length;o++)arguments[o-1]=arguments[o];if(e&&""!=e&&r&&!(r.length<=0)){var i=document.getElementsByTagName("body")[0];if(i){var a="",d={MonetaryValue:"v",MonetaryValueFormat:"vf"},c=[];if("undefined"!=typeof _pixelParams)for(var o in _pixelParams){var u=_

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3227), with no line terminators
Category:	downloaded
Size (bytes):	3227
Entropy (8bit):	5.126059073717022
Encrypted:	false
SSDEEP:	48:h6Fac7OxwusRHHHD2dLkmttJ75cEC8Xn7LrKWkI8aWNrTQsHa5eaL/3VMGb55csJ:hiSqbQgmokN5fLNDJ
MD5:	9EE48A4DA9C402E8A23AD085FB71F28F
SHA1:	F0C59306D6313F9BEE02B53CA8903991BD24BFD7
SHA-256:	9CDAD69A4B967C882C3D8E9CB054E7334B7F8870E96427A5D20AE2D17EFF2622
SHA-512:	2C25A0BA0B95622DA682D5F1D238C77A3858D621655ECF352BD49BE5FA7D92C6417410ACCF16F50E039FE1C2863C575FA725C23A6F3587AC95A061E53B90E6D3
Malicious:	false
Reputation:	low
URL:	https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
Preview:	var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a,__webpack_require__.d=function(e,r,t){__webpack_require__.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},__webpack_require__.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},__webpack_require__.t=function(r,e){if(1&e&&(r=__webpack_require__(r)),8&e)return r;if(4&e&&"object"==typeof r&&r&&r.__esModule)return r;var t=Object.create(null);if(__webpack_require__.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:r}),2&e&&"string"!=typeof r)for(var a in r)__webpack_require__.d(t,a,function(e){return r[e]}.bind(null,a));return t},__webpack_require__.n=function(e){var r=e&&e.__esModule?function getDef

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3227), with no line terminators
Category:	downloaded
Size (bytes):	3227
Entropy (8bit):	5.126059073717022
Encrypted:	false
SSDEEP:	48:h6Fac7OxwusRHHHD2dLkmttJ75cEC8Xn7LrKWkI8aWNrTQsHa5eaL/3VMGb55csJ:hiSqbQgmokN5fLNDJ
MD5:	9EE48A4DA9C402E8A23AD085FB71F28F
SHA1:	F0C59306D6313F9BEE02B53CA8903991BD24BFD7
SHA-256:	9CDAD69A4B967C882C3D8E9CB054E7334B7F8870E96427A5D20AE2D17EFF2622
SHA-512:	2C25A0BA0B95622DA682D5F1D238C77A3858D621655ECF352BD49BE5FA7D92C6417410ACCF16F50E039FE1C2863C575FA725C23A6F3587AC95A061E53B90E6D3
Malicious:	false
Reputation:	low
URL:	https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
Preview:	var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a,__webpack_require__.d=function(e,r,t){__webpack_require__.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},__webpack_require__.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},__webpack_require__.t=function(r,e){if(1&e&&(r=__webpack_require__(r)),8&e)return r;if(4&e&&"object"==typeof r&&r&&r.__esModule)return r;var t=Object.create(null);if(__webpack_require__.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:r}),2&e&&"string"!=typeof r)for(var a in r)__webpack_require__.d(t,a,function(e){return r[e]}.bind(null,a));return t},__webpack_require__.n=function(e){var r=e&&e.__esModule?function getDef

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550)
Category:	downloaded
Size (bytes):	1595
Entropy (8bit):	4.967369655348228
Encrypted:	false
SSDEEP:	24:yyUDWx2zIzt4To425yr4T6syUDWx2zItWoWguMjZY+0Mj66Xeyg:AlzIWTz25ylylzHcu4ZPfmkg
MD5:	CEE085F14C373FAD4818DCC9AFFA4100
SHA1:	29FAF80BDF46A153FC685B2FC46D838769C5AFDA
SHA-256:	652F333F3EF65EFF57DDD2C41AAFDBB19775A46279210FFFD096847DD68F49E1
SHA-512:	F2C62280A02DBE7887F23AF262E78753CD22CAAC92F3A119E4E9C9E956E03F00C2678AF8264CABB86D6DAB32738DB509F151AACCFEC562177E8C385C98945DDE
Malicious:	false
Reputation:	low
URL:	https://tms.nab.com.au/nab/prod/code/d9d080c5e00417b3e1a46d592afbbb69.js?conditionId0=421109&conditionId1=416171
Preview:	Bootstrapper.bindImmediate(function(){Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.registerDataDefinition(function(){Bootstrapper.data.define({extract:function(){try{if(typeof window.digitalData!="undefined"&&typeof window.digitalData.page!="undefined"&&typeof window.digitalData.page.pageInfo!="undefined"){var a=window.digitalData.page.pageInfo.datePublished;if(typeof a!="undefined"&&a!=="")return a;else return""}else return""}catch(err){return""}},.load:"page",trigger:Bootstrapper.data.bottomOfBodyTrigger,dataDefName:"DDL - datePublished",collection:"Digital Data Layer",source:"Manage",priv:"false"},{id:"12404"})},12404)},-1,-1)},-1,-1);.Bootstrapper.bindImmediate(function(){Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.registerDataDefinition(function(){Bootstrapper.data.define({extract:function

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.nab.com.au&ttd_tpi=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	193781
Entropy (8bit):	7.998992985252707
Encrypted:	true
SSDEEP:	3072:2K8k7vPvgpTem2ACztrsjBI2BqyPJVrauDxCC3kgICljVKk3src/02BqRGct8xtw:2K8k7HvgpTem2ACztrsjBLq0raYIC3kL
MD5:	3490963E97742270262815EE3D4E04FC
SHA1:	063D01C29558B1ABD2B91A7EB0CA97F5C4D0A8CE
SHA-256:	BC69EB8D57194340D0C90D1ADAEF81BE561534603869DA760CB82B14EA790457
SHA-512:	C4AA48C8732536F1A8C5A2EF4E043F061E32B3680BF386CCC32AB66FCAFE2253589F72B76271EFEF0CF0809BCD5AA23160F42B464CAAACBFA1CA85D05F734306
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/dam/nabrwd/images/types/backgrounds/ib-login-banner3-1797x800.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe........... ....pixi............ipma...................mdat.....x.?.....2....@...A@..H.;.]...%^5.be.EMv.A.\|......@.ne...4H..$S..p.GN.2qBy.\|.b...e.x.P.s.ow.......xk...n.....\|..cp)..v..;.!W6.`...........@.\|.a5..........T3.1F...v...?.q.....j\.....^1/.<..K...~\|.s..;U..p...,......p...x...F..q...9..../.!r._..[..v.L?..,....tw.n[.8....(..:..[.(q.....E9..O...<.......YO.8......:0....6x.aN._Oo.B..X7G.{p ('T.............'........F....h....."? ..U.....b.."....ciC...r..:.>......D;.<BK+.8.z..R.5/ym...y6:....n.*E4..Q.e\|...('Z."...I..gN......p...7&.Dg..,S.r...VN..P.u"...Z.&./......v.i...Uh..f../...]r.%.I.u.R.....Y.0:,...... .....n.R.-......m.@.q.e.G.a[...@.I....W.lT.L.....T,F..S..-.....Ey..w..dP...%E..2E.&.$SA4..1\o...<X.H.........V...`.w...\..%!`[.......

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x184, components 3
Category:	dropped
Size (bytes):	12384
Entropy (8bit):	7.931286009131827
Encrypted:	false
SSDEEP:	192:B7sijfF3v9icfcXKUfrUz2rGcWoZVjlma+cxnq8d2g5cNMk0HHLd3c:a2fJ9iRozJ2XIYnqmTm50Lpc
MD5:	94DBF5E90D0A52A577242727952959C5
SHA1:	F1229D9FCE4205E18086AA3441E0330E0845E021
SHA-256:	B6962216CA0226D779CF34B5955C6241E2A0306D4C7558F68805286FAD81A522
SHA-512:	15B268CC78064287C3DD9DBB13A979D10B27596F8CACBB4A24ED5F82842ABC47BD499F33070B80BFBF9323F375408750454400AFFE720DEA249BFFA7EFC52EA7
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9..........................................................................G}.L......."...../"...w....~^.c@..T!.."..8...+.f.^.....`T.s...J..6,........98.....>...ak.{..?..........B..........Y..W%...c.....P...U.\.I.s.2.~......I.&'"....A^....76..........,v..d..b.......l.Ru......Dx..[x.+....=..Xl.R.]. $...E..P..8.......!.O.?.q..2...p..mj.L..~.b..Q..x....2....W.~.fR........e..B..b.g...3.q.....\|?...}}.6.@..s............;Q..H.$R:.....9d2:...CG..(`.17..W+F.<.;vM....h...n[q(~...G..................^PbHF....../..@.\|..z.....r%.vsPO[."......wu@.G.......'.........\|O...@V...............m.. #.L1..x.=.}.... T..qz7<%m#min..x...!..z$..G..u...[..5.....Y5.fC.'T....%..O..........0.....ZR.0......f.....Fx..f........L2...l.v....Z...J...X...R# .4...G....@..j...F........-......S..x@......$d{:....B..

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1233946
Entropy (8bit):	4.323938959739617
Encrypted:	false
SSDEEP:	6144:eWUpxqpz1kwTxNMbc2ysG497aKNwvXXgQI2UsCdR/XKW6blCy7EqXEfPewXDFxEk:lPbldcJX
MD5:	AE7A6501F4CBEA6B12AEE40FEB08CDEB
SHA1:	C2252A9AA47BADFEE5B58D8600DB118A2574E895
SHA-256:	287D04568A9412418201EBD0747554C033682BD139F70E0D1E6780F1C586C75E
SHA-512:	81CD8402EEDDBC3F91C78FC9BF0F797B4711E1408D775DCB71F05C20DC99865270B46D602F5FAAF3A2F9F1C999BF08F6F77AD5EA6F939C76FC7169A85F7808C6
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/ns/scripts/ef564aedcb04d7fcbcc6d9f153feb5b4/ef564aedcb04d7fcbcc6d9f153feb5b4.js
Preview:	/* dd: 2022-09-16__03-18-27 */.!(function (e) {. "use strict";. (self.cdApi = {. _eventListeners: {},. configurationKeys: {. wupServerURL: "wupServerURL",. logServerURL: "logServerURL",. enableFramesProcessing: "enableFramesProcessing",. enableCustomElementsProcessing: "enableCustomElementsProcessing",. },. onMessage: function (e) {. var n = cdApi._eventListeners[e.data.type];. //If there are no listeners we abort at this point. if (n) for (var s = 0; s < n.length; s++) n[s](e.data.event);. },. listenToEvents: function () {. window.addEventListener. ? window.addEventListener("message", cdApi.onMessage, !0). : window.attachEvent("onmessage", cdApi.onMessage);. },. getConfigurations: function (e) {. var n = {};. (n[cdApi.configurationKeys.wupServerURL] = "https://wup-24f7f3c7.nab.com.au/client/v3/web/wup?cid=nightcrawler"),. (n[cdApi.configurationKeys.logServerURL] = "https://log-24f7f3c7.nab

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "loader.js", last modified: Tue Jan 23 17:31:23 2024, from Unix, original size modulo 2^32 428
Category:	downloaded
Size (bytes):	261
Entropy (8bit):	7.0998708796272165
Encrypted:	false
SSDEEP:	6:XWAYuwibfoCTXWj/EF/eP1PsQEXBbARgVfbNEbQKK6:X9wCTXW8R1Xe20e6
MD5:	203466A85E12BCE0B869DF3D13CF52EE
SHA1:	EF1B3ED2036858AA6B326ECF29E5FFB18F778205
SHA-256:	7C3676E01E9634ED3FE7E4A1C621B7C115A70EED171D3B63CB3F256F5FC1DA0D
SHA-512:	8C05DC35469A5AB50B31903BC63C355A6AECE1E43C77188FF7BDC0F25A406BD25FDFC6B3E9FE4E707A84BC63ECFBDE29CADEAD1A7F43F901CE54ABF17AD210E1
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/bundle/loader.js?v=1706142445525
Preview:	.......e..loader.js.m..N.0...}.s.s..BH...V.z../.z7.!.-.TB..m.P}Zigv.1...A.M[.!.#..-..lIst\..z.zD...&\|.N..<......#.:....y.}...Km=_#...u....}_R...0n-.......ZH..u..=....X.._.j./.o\|Li+.p.......4.su1.Dr&.KK...V.$..;.!7.a.....0.9.a/..t./@...i........

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect?pid=2270004&fmt=gif&cookiesTest=true&liSync=true
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14672)
Category:	downloaded
Size (bytes):	27319
Entropy (8bit):	5.471301638157042
Encrypted:	false
SSDEEP:	384:u50eyuYvdVvL20xShWvdqByRB48Rhd5AqAFXw:ay11hnSo1S2hRv5AqYw
MD5:	F8052C06E267983EF8B3F4B92FEF2D49
SHA1:	6E26D52CE59041A3F55EB27EC835952DEE2DDD44
SHA-256:	1D635FB88EF7742A6BCA1AD798C4455700E6D7FA28B3433F675C55AB8DDBDE1D
SHA-512:	96FC9C31DD7D704E7445DB28F41970B87031C89893B5ACDF0589C64B4912C2A30231D237860FD827E32E51D6053D9278AA91042555F260275C162EBF0D3BBE4A
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-notifications.js
Preview:	!function(t,n){"object"==typeof exports&&"object"==typeof module?module.exports=n():"function"==typeof define&&define.amd?define([],n):"object"==typeof exports?exports["nab-aem-frontend"]=n():t["nab-aem-frontend"]=n()}(window,(function(){return function(t){var n={};function e(i){if(n[i])return n[i].exports;var r=n[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,e),r.l=!0,r.exports}return e.m=t,e.c=n,e.d=function(t,n,i){e.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:i})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,n){if(1&n&&(t=e(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(e.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var r in t)e.d(i,r,function(n){return t[n]}.bind(null,r));return i},e.n=function(t){var n=t&&t.__esMod

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3227), with no line terminators
Category:	downloaded
Size (bytes):	3227
Entropy (8bit):	5.126059073717022
Encrypted:	false
SSDEEP:	48:h6Fac7OxwusRHHHD2dLkmttJ75cEC8Xn7LrKWkI8aWNrTQsHa5eaL/3VMGb55csJ:hiSqbQgmokN5fLNDJ
MD5:	9EE48A4DA9C402E8A23AD085FB71F28F
SHA1:	F0C59306D6313F9BEE02B53CA8903991BD24BFD7
SHA-256:	9CDAD69A4B967C882C3D8E9CB054E7334B7F8870E96427A5D20AE2D17EFF2622
SHA-512:	2C25A0BA0B95622DA682D5F1D238C77A3858D621655ECF352BD49BE5FA7D92C6417410ACCF16F50E039FE1C2863C575FA725C23A6F3587AC95A061E53B90E6D3
Malicious:	false
Reputation:	low
URL:	https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
Preview:	var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a,__webpack_require__.d=function(e,r,t){__webpack_require__.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},__webpack_require__.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},__webpack_require__.t=function(r,e){if(1&e&&(r=__webpack_require__(r)),8&e)return r;if(4&e&&"object"==typeof r&&r&&r.__esModule)return r;var t=Object.create(null);if(__webpack_require__.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:r}),2&e&&"string"!=typeof r)for(var a in r)__webpack_require__.d(t,a,function(e){return r[e]}.bind(null,a));return t},__webpack_require__.n=function(e){var r=e&&e.__esModule?function getDef

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447359
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x460, components 3
Category:	dropped
Size (bytes):	130823
Entropy (8bit):	7.99181848217726
Encrypted:	true
SSDEEP:	3072:0CACZ0v3wDvA378fK55uXmM3mEi05UAaCCi5DAYCq:0pCZC3wDI3IwYUARCivh
MD5:	76E61DF9E3224713F2E07BB9143D7A60
SHA1:	7B8B70FE96F1492AA2D04241D62D2564D906B1F7
SHA-256:	D07BF81A1CF63872C3B6DCA87BF4612899519422E50368DFE503C1C42F05844D
SHA-512:	9A1DA3941E049EDE24D8F5E99DBDDD0F55BCD9837638134BC4FF8AC7865F2A8BA7A9D3F1E86A011CB5F26265EB56353930AF64F904EB39786E76787A60FCA540
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8.....................................................................X..Ap...Q.0....dBv...l..3...SP..MM....}G.....1s4<.c......m..2..=.)mzvC._..K...VhrK91..[E.fK....u+.F....,...MA..N...1......sZ(..5%^.R1N.F.K(.e......D.L.A...,.GnJ-""CrGC..2...g...}h.+.{8L.-..6.Ky..;.......\i..D.......,..?+l.(G0}".yy.......C.).:d..:BL..a.,.I....Qv.w.D(Y....t.......&.<...c......*yI..I.......)f..z.:)...h..I..^{>".........H...9%V...i..0D..#6.....=...o.b...1Y...=2p...dg....9`.dE..o...g...HGq8^..HNHn.}Ldm.-..P.g.r..D.~...eQ...&6....l!...2.zg.(....W.'...L.#[...t3...v..s<Sd.k<KDZ:.Q1..+R#.FQH..D...g....X....r6%"F<.$e/.&\m.u^R.t-..vd:..y...uR!.)..78..x..q1..}!9.%..P.YY.....1.h......P..I<jX..z.f.q.$4.NW ..}P....G.g[.$#Q41B.q.....8+.2..l....7!=.(d .q.K.P.jr..g.q..<0..fe.....G..o.j!.wt.]...c:....].t.L..NP

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	48228
Entropy (8bit):	7.9770212985054405
Encrypted:	false
SSDEEP:	768:yp28zf9O0xBJiwkEjPlJ+cP+ZtcRaYNoT9wdkF87pKCduukTfntW72zrNbjqWB/3:yp2WOgBJ9bjPlJFhaYNom+u7TCt3pjqc
MD5:	FC2E2BE47D41DB430105D2CB4631D711
SHA1:	D518FBA62308F3A8BFFE0E01C2DF85515C6FE859
SHA-256:	27D97BEFED999B14CAFFF7A189D41F01730BE76922E1A755B166DD7AD3D4EB62
SHA-512:	D83D6CE775E8E8BCCBC31267EDD84CA4B9540C60244B829B61DDCD49AAD0928A1828571DD3C54B8865AB88CB29FB76C41F9BB0A86D1EBA99229FB4FA1C218E71
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9......................................................................................".%..U..v.........p.5...,9....;/..U\.l....i?wc....6d.F9.N.l....s..,..)..C.P.>..8>....;X...........................J...Z.....}0m.=./..z.u..^#.Q.";G..QJ............:.!j.tU.L....7#2.[..my...L.3.wG.og.....:.=~(....................g.5.m....Cr../.......j..B.L..."1jZ.?.}n...j:4.A.5.X.Y.1.b../.,....>IX...X.d..E.......o../.{.>..?.f. ................N<.<..z.5i.M<.......Vx...j..Z+..kl....X..].f.:....\|5.U.b.U.%sTD.7r....s.-.t<.4.....G.uBi".j..MB.\|]..O._Rzw.{..s...............<.0.S...W..Y....H<~....d..T4..raJ..$.UIP.+....x.'e...........FU.V4.[-d....A.....i,,...O...\|....$.7.[+..x.....D.{.a....}.!.z...@...........!\|.........P_.JE.YXy.ed.T..I<.f.cT..\4.....A..$.T.x..(..Q.7Je.R.<.6.[.8s#.<..i.>.P.b.z...8feMD

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6360
Entropy (8bit):	4.84964804779088
Encrypted:	false
SSDEEP:	96:3qAgdwBVtKL4YwwZKyC+YjAw+y7HM7cXYTaq2F7KqMODQNOFO:Y4c5bWHjTxHgTMdMODWOk
MD5:	E80E2AF311B05EB27A20F54211AA8DC1
SHA1:	8261C30BECF28D47DB1BF498AF3E00DDDFF11DD4
SHA-256:	3C70A061D70A01624A134CF39AFB7EF1FC176D0A247D5562D5D07B41726D8B21
SHA-512:	71B97AA5193D2139E6FDFBB63DE69BF41CE0D9FF286287D6CBD593154552FBEA738BA94C756512A1CB84542A7B76F4CC7EA14FF49CD1ACD2C95FDD2F685B4304
Malicious:	false
Reputation:	low
URL:	https://app.launchdarkly.com/sdk/evalx/59c45122922f080adde50ec0/users/eyJrZXkiOiJkNDFkOGNkOThmMDBiMjA0ZTk4MDA5OThlY2Y4NDI3ZSIsImFub255bW91cyI6ZmFsc2UsImN1c3RvbSI6eyJvcmciOiJOQUIiLCJ0eXBlIjoiY3VzdG9tZXIifX0
Preview:	{"IB_RESET_PASSWORD":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":467},"adv-trans-hist-hide-category":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":467},"analyticsMomentsActionsPrefix":{"flagVersion":3,"trackEvents":false,"value":"ib:accounts-transaction-history","variation":0,"version":467},"cardsCCDueDateEnabled":{"flagVersion":4,"trackEvents":false,"value":true,"variation":0,"version":467},"cardsDueDateGracePeriodConfig":{"flagVersion":3,"trackEvents":false,"value":2.0,"variation":0,"version":467},"dekstop-login":{"flagVersion":3,"trackEvents":false,"value":false,"variation":1,"version":467},"domestic-payments-npp-disabled":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":467},"domestic-payments-scam-disabled":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":467},"domestic-payments-scam-enabled":{"flagVersion":6,"trackEvents":false,"value":true,"variation":0,"version":467},

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://app.launchdarkly.com/sdk/goals/59c45122922f080adde50ec0
Preview:	[]

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2599)
Category:	downloaded
Size (bytes):	5290
Entropy (8bit):	5.033120235337808
Encrypted:	false
SSDEEP:	96:xTsYOYv3ZjcBem35AeqeNIpsbBE+QmjTK9mWsk2jI:+YBZjcBempAeqeHE9mjTursk2jI
MD5:	5EAB388D5A7999FCCDD87239AA61BA4E
SHA1:	7D416D9F57B900DE8C607A49160E37EA29044466
SHA-256:	5FAF2ED78EAEA542DB806B2D3FF37788A752C5213BBEEBB3DB72AF353CE967C2
SHA-512:	8DAF28893BF96A6F72EAF30E32CE1E4B8681FF862CF78B1AC892A64B8029D2FEE2EFFB92ECF94721E690F38DFC4D7270C42701C5F7C2CCEF0E5EF65DD9CE95D0
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-header-bar.5eab388d5a7999fccdd87239aa61ba4e.css
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */..nab-header-bar{width:100%;height:50px}.nab-header-bar--inner{position:relative;z-index:1030;width:100%;background-color:#000;box-shadow:0 1px 3px 0 rgba(0,0,0,.6)}@media (min-width:1248px){.nab-header-bar{height:64px}}.nab-header-bar a:focus{outline:3px solid transparent}.nab-header-bar a:active,.nab-header-bar a:focus{border-radius:4px;box-shadow:0 0 0 3px hsla(0,0%,100%,.65)}.nab-header-bar__header{display:flex;align-items:center;max-width:1280px;height:100%;margin:0 auto}@media (min-width:1248px){.nab-header-bar__header{height:64px}}.nab-header-bar__header.faded .nab-header-bar__help a,.nab-header-bar__header.faded .nab-header-bar__mega-menu--desktop .primary-nav>ul>li>a,.nab-header-bar__header.faded .nab-header-bar__search a{opacity:.3}@media (min-width:768px){.nab-header-bar__mega-menu{display:none!important;visibility:hidden!import

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	657
Entropy (8bit):	4.883853352872434
Encrypted:	false
SSDEEP:	12:U/6AZI4IXFhMFj27rYCQrU0E+oGoprHQknd70psUy2:lr4IVhfCU0E+o9HQk10psUx
MD5:	4FF0D0D35842D7D5741606B9822DF811
SHA1:	6DFF94E6E05C15C2E49BF9EF218E7F130E70A863
SHA-256:	11E3453C013458DD1EE6329C462BD42A80E2BD8D3F23D8F400F94BE1C2C0CDDF
SHA-512:	F3DF2288FADEA8365C082B9A5C32C7AC9FC2AA8E1ECC96A77B3F8965E607FD65ABE4830AD623483DAE42CCD0E23C09D775F47B76FC74B83844084CD4B1D3E29F
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-base.4ff0d0d35842d7d5741606b9822df811.css
Preview:	/. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. /./* @define image */..cmp-image__image {. width: 100%;.}.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "loader.js", last modified: Tue Jan 23 17:31:23 2024, from Unix, original size modulo 2^32 428
Category:	downloaded
Size (bytes):	261
Entropy (8bit):	7.0998708796272165
Encrypted:	false
SSDEEP:	6:XWAYuwibfoCTXWj/EF/eP1PsQEXBbARgVfbNEbQKK6:X9wCTXW8R1Xe20e6
MD5:	203466A85E12BCE0B869DF3D13CF52EE
SHA1:	EF1B3ED2036858AA6B326ECF29E5FFB18F778205
SHA-256:	7C3676E01E9634ED3FE7E4A1C621B7C115A70EED171D3B63CB3F256F5FC1DA0D
SHA-512:	8C05DC35469A5AB50B31903BC63C355A6AECE1E43C77188FF7BDC0F25A406BD25FDFC6B3E9FE4E707A84BC63ECFBDE29CADEAD1A7F43F901CE54ABF17AD210E1
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/bundle/loader.js?v=1706142437712
Preview:	.......e..loader.js.m..N.0...}.s.s..BH...V.z../.z7.!.-.TB..m.P}Zigv.1...A.M[.!.#..-..lIst\..z.zD...&\|.N..<......#.:....y.}...Km=_#...u....}_R...0n-.......ZH..u..=....X.._.j./.o\|Li+.p.......4.su1.Dr&.KK...V.$..;.!7.a.....0.9.a/..t./@...i........

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37939), with no line terminators
Category:	downloaded
Size (bytes):	37939
Entropy (8bit):	5.3155477370761615
Encrypted:	false
SSDEEP:	768:hgpcw8D70PNYviNe7BIlzyChGot8nk8NRq7hvyQnm6nql1Zn:Cl87f2zyChGoIkORq7hvyQnm6nuPn
MD5:	3D0BEE5055B340688F1535C772FDEEC7
SHA1:	078F064450B4613D80874ABDF2225E41C2B60686
SHA-256:	EC94DA373A8734EB87715B5C364EBA645EED9052770D34B90350AF692DC65B84
SHA-512:	721B736AD78928672E2360CDF99056F948ACFF7D6F03AB072AE6C9294B595026CEE4C9E5E481E237533B6A81DE2BFBE932AECD98D6742EDA7B84756B1FD37830
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-components.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports["nab-aem-frontend"]=e():t["nab-aem-frontend"]=e()}(window,(function(){return function(t){function e(e){for(var i,a,c=e[0],s=e[1],u=e[2],d=0,f=[];d<c.length;d++)a=c[d],Object.prototype.hasOwnProperty.call(r,a)&&r[a]&&f.push(r[a][0]),r[a]=0;for(i in s)Object.prototype.hasOwnProperty.call(s,i)&&(t[i]=s[i]);for(l&&l(e);f.length;)f.shift()();return o.push.apply(o,u\|\|[]),n()}function n(){for(var t,e=0;e<o.length;e++){for(var n=o[e],i=!0,c=1;c<n.length;c++){var s=n[c];0!==r[s]&&(i=!1)}i&&(o.splice(e--,1),t=a(a.s=n[0]))}return t}var i={},r={4:0},o=[];function a(e){if(i[e])return i[e].exports;var n=i[e]={i:e,l:!1,exports:{}};return t[e].call(n.exports,n,n.exports,a),n.l=!0,n.exports}a.m=t,a.c=i,a.d=function(t,e,n){a.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},a.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStri

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (771), with no line terminators
Category:	downloaded
Size (bytes):	771
Entropy (8bit):	5.031389880269871
Encrypted:	false
SSDEEP:	24:0E0rZkfALdmiA0E9kLAVe5jvi1VnwWgsZWI:0EmkfALd4XkLlRqQUB
MD5:	F470984D082740FDDC9BCFA073406C5C
SHA1:	47E0771A95C97E9D8951A546698F7622749D2C72
SHA-256:	80DC559830198E26C72F270014F3CB3E1796501F534F862F9CE487F8AFE5C1BE
SHA-512:	434345DA03C9F190E8B6A4D28E7F429012FC39D683702C44296507104CB2E5C300BC6A6A04AA93724D9CF05485404DF6295764BC9B5DC4C8236A0CFAE669AC38
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/login?error=201015
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><link id="favicon" rel="icon" href="./favicon.svg" sizes="any" type="image/svg+xml"/><title>NAB Internet Banking</title><meta name="description" content="Enjoy secure and convenient online banking anytime, anywhere with NAB Internet Banking."><link rel="manifest" href="manifest.json"><script src="webcomponentsjs/custom-elements-es5-adapter.js"></script></head><body><div id="appRoot"></div><noscript>You need to enable JavaScript to run this app.</noscript><script src="static/js/main.997e438e.js"></script><script type="text/javascript" src="/SK_yoN/-dP/-WJ/dM9tLw/aJmatQpmcu/BCxDFUhs/Gh/dhCWlSJig"></script></body></html>

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6360
Entropy (8bit):	4.84964804779088
Encrypted:	false
SSDEEP:	96:3qAgdwBVtKL4YwwZKyC+YjAw+y7HM7cXYTaq2F7KqMODQNOFO:Y4c5bWHjTxHgTMdMODWOk
MD5:	E80E2AF311B05EB27A20F54211AA8DC1
SHA1:	8261C30BECF28D47DB1BF498AF3E00DDDFF11DD4
SHA-256:	3C70A061D70A01624A134CF39AFB7EF1FC176D0A247D5562D5D07B41726D8B21
SHA-512:	71B97AA5193D2139E6FDFBB63DE69BF41CE0D9FF286287D6CBD593154552FBEA738BA94C756512A1CB84542A7B76F4CC7EA14FF49CD1ACD2C95FDD2F685B4304
Malicious:	false
Reputation:	low
Preview:	{"IB_RESET_PASSWORD":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":467},"adv-trans-hist-hide-category":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":467},"analyticsMomentsActionsPrefix":{"flagVersion":3,"trackEvents":false,"value":"ib:accounts-transaction-history","variation":0,"version":467},"cardsCCDueDateEnabled":{"flagVersion":4,"trackEvents":false,"value":true,"variation":0,"version":467},"cardsDueDateGracePeriodConfig":{"flagVersion":3,"trackEvents":false,"value":2.0,"variation":0,"version":467},"dekstop-login":{"flagVersion":3,"trackEvents":false,"value":false,"variation":1,"version":467},"domestic-payments-npp-disabled":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":467},"domestic-payments-scam-disabled":{"flagVersion":2,"trackEvents":false,"value":false,"variation":1,"version":467},"domestic-payments-scam-enabled":{"flagVersion":6,"trackEvents":false,"value":true,"variation":0,"version":467},

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	864024
Entropy (8bit):	5.439401594417559
Encrypted:	false
SSDEEP:	12288:Gm/g4YDBBpVyceCHhEFmsPByxzS3rH85LV27pg5JuKY:Gm/GcFCHhEFmsPByxz+H85LWpg5Ji
MD5:	A8A1DB315277323BD0BC2CFDBBD7A608
SHA1:	85FA4B0B4AB2F3C39F912AD7EBED7DE8D79B05F8
SHA-256:	946ECA9C7B22419C2F5E3B2036E75CEE5C4B48A7068E68D725064E053F966610
SHA-512:	7FED5D4B285055C682BB923C02F9154C70A00AFCDA665219B71869D5B508AECCF5D0B3EE834D84A5A97F0A4A64E3AE922328A39B740E5081069D6E10978C949E
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/static/js/main.997e438e.js
Preview:	/! For license information please see main.997e438e.js.LICENSE.txt /.!function(){var e={4253:function(e){e.exports=function(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}},3177:function(e){e.exports=function(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}},4418:function(e){function t(){return e.exports=t=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},t.apply(this,arguments)}e.exports=t},9292:function(e,t,n){var r=n(2129);e.exports=function(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,r(e,t)}},2328:function(e){e.exports=function(e,t){if(null==e)return{};var n,r,o={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0\|\|(o[n]=e[n]);return o}},2129:function(e){function t(n,r){return e.exports=t=Object.setPrototype

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37860, version 3.393
Category:	downloaded
Size (bytes):	37860
Entropy (8bit):	7.993178995451927
Encrypted:	true
SSDEEP:	768:StNNFEUN1gCENKy2E/Hlmi2a1+aYyAdOMO3EAbxkTGdx2w9p2lH/oHh:S5VgCQNHlmi7RUOMOUAbxsENXh
MD5:	4582E89D8746A83940FC8BDD43EF95CC
SHA1:	84AF334E9EB40E28E595143EE7037C0E77726D20
SHA-256:	89422A822BD5CAA699BCCE06AA0FB9567CE9124C58EAD7941CEA413B70513009
SHA-512:	10766F486DD9DF8C61B220085E7A7F2565D2DDF22BD90666D568FCC8DCCEB94B459FFA29AC68F9C3ED4C46B4D004C63BCEE611C74176BC41BAD9F156526D8E1A
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/fonts/source-sans-pro-regular.woff2
Preview:	wOF2...............d...w.........................F?DYNA.M..:?GDYN.........f.`......p..F.6.$.....B.. .....[[Vgq..C....f..2.h..!".........U;...~..............?....\|....ox...;w.V.$.f.P.L..h..Y.%.N(..Cl.z3[.~.k....#1/.....tf......o..........4..y.................@E.......I......Qb.hC...9=.[.s.<...x.....+"....".....9.......#....;dff.........q.#3#.q....cDd.8.8fF....k.....{!.9...Fl...{..4.......3IJ...+.........oF..{.Hq.....H....{K .t.~......i.(.`...2I..Tff.S...P.&.e{p.......7..o{/...s...)...`...`....oc..4.$,<..,...<.B...R/J{x~..gr. RT@........K.9EE....p.no....h.3...rQ.....gS....R...Y....,...b.1.ME.......s..d.i.&P.%.BJ.B...V..j...8...T.i.....~...c'.m.p\|C3.G.H...I.6K....-<.o.2..w.5..@..^..........._]..O...JZ..iz...9.j....#s/.L...........7.4r..yh.>...?...8".L..s....CU..M....m....<..4..u...#7.....@gv....'..o.6.\4iM)MqJ]..[CAf)........``.n...`....-K.....S.......4.7.g.........sJq.w..$..C6.......H.!.$ag&........_..../!.S7@jNT,.....Ww.`.f&.8..X.K

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	4.830968103541126
Encrypted:	false
SSDEEP:	6:YSM5B4sf42cQJ6SGKEW/mHnWWEKAvXjkXHxHKAvXjkXHOjKAvXrnmKEW/aC/8/HX:YSAB4sf4lQNGS/mHnRbTXHZKTXHOjKSK
MD5:	BBB78B47BAB713CAB9E79D2EF1247F0B
SHA1:	02FC2A723E9F7601FB38E0433B85B43EE4DE6054
SHA-256:	E782D0B08DABB42DC3A3DDE984C6B26A4DAD20E86FB30345224E856471686437
SHA-512:	25F18F958ECBFB388C93029A7A4C05FDF27947C02DA7FF7E19E49F7BB0916829FC75CFBC0ECBEFAA0D0C64BCD3CF03E60599764007044DE53B49586939E554D3
Malicious:	false
Reputation:	low
Preview:	{"widgetHash":"2e26ade7667aba5bf5bddead67c0395b","displayConditions":[{"typeId":"BH1","satisfied":true},{"typeId":"TA1","satisfied":true},{"typeId":"OA1","satisfied":true}],"ruleDisplayConditions":[],"openBusinessHoursGroups":[],"cobrowseConfig":{"enabled":false,"licenseKey":"","fullScreenEnabled":false}}

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18637)
Category:	downloaded
Size (bytes):	18783
Entropy (8bit):	5.496394540265104
Encrypted:	false
SSDEEP:	384:NRiCn2Tq+RifXbG5pZAZ5AJP7g9QypanMiUTxs:NRp2TBRWXbGyUYds
MD5:	1189A26638EB4F91CA87ADE4D5D367E3
SHA1:	369C100C67661036B63D5CAF994387631BFEDD7F
SHA-256:	7B30D02E91718CF25E0E1BF747424907DB6DE1201AD7AF56F251EE80A9FBD8AF
SHA-512:	B647B4D4F93EA8EC2662884B8F2E863FEC211036CB2ED361673CC8C0A2ACF6C6C8A9DE117537255DE55B335D77EE6F8AF4BBBB7EB7A57CA1FB4528D6C6D51A12
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-header-bar.js
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */!function(t){var e={};function n(i){if(e[i])return e[i].exports;var o=e[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)n.d(i,o,function(e){return t[e]}.bind(null,o));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5138
Entropy (8bit):	4.379046086718005
Encrypted:	false
SSDEEP:	96:JpQHJEYjBcQQuwJLyvet4xKYb+YVVkzQwOsFAvet4aOS51nQgGKWJAiUWJFXSdm3:4HJzBcQ+CxH3wJFs3sQVLqoTXUC
MD5:	797750A318CA00B638A751D405CDB6A7
SHA1:	2FDB73F8A07CAE9D276537CE1887CEA3BEE7B58C
SHA-256:	780AEF6C7CD78E89B30EBABCC7AE0E3CB97E19D8D238378517DA656ABD317A04
SHA-512:	D25F2642C2E3B5FAC0C17534A91BF58A00684D51E80B356321349A23DCEC6DBAE9A6FA93A236731C84D1404611C5CC89D350E15895309B92695B729EEBAAB514
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-styleguide/resources/images/svg/nab-logo.svg
Preview:	<svg width="60" height="30" viewBox="0 0 60 30" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="-.61%" y1="50.05%" x2="99.92%" y2="50.05%" id="nab-logo_svg__a"><stop stop-color="#ED0000" offset="0%"/><stop stop-color="#E90000" offset="7.73%"/><stop stop-color="#D10000" offset="64.86%"/><stop stop-color="#C80000" offset="100%"/></linearGradient><linearGradient x1="50.01%" y1="99.02%" x2="50.01%" y2=".46%" id="nab-logo_svg__b"><stop stop-color="#A50000" stop-opacity="0" offset="0%"/><stop stop-color="#A50000" offset="100%"/></linearGradient></defs><g fill="none"><path d="M36.828 15.75c0 .524.15.599.376.599.225 0 .376-.075.376-.075v.824c-.075 0-.226.075-.527.075-.451 0-.752-.15-.827-.225-.15-.075-.376-.3-.376-.9v-2.172h-.903v-.824h.903v-1.199h.978v1.199h.978v.824h-.978v1.873zm4.062-2.698c-.827 0-1.203.524-1.354.674v-2.098h-.978v5.47h.978v-2.173c0-.524.376-1.124.978-1.124.828 0 .828.675.828.974v2.323h.978V14.55c.075-1.048-.527-1.498-1.43-1.498zm9.48 0c-.828 0-1.204.524-1.354.6

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x184, components 3
Category:	dropped
Size (bytes):	23214
Entropy (8bit):	7.977481265579478
Encrypted:	false
SSDEEP:	384:mem9FjjC3deV7T/iTF3Cs8WvLDDwWwltQ6R+OdsTnsrwKODP7oe8Y0o/1Px8oGpV:meSUuvOFSs8Wv3DwlU6oOdG02L7o008i
MD5:	608982E1E23B931CD77BB30E8F20413A
SHA1:	CF9B90BE4F777AB102E1BE851B23F8C20C676138
SHA-256:	DD9ADA7B629353A16422DA66D99D37431C3599B1A3A4400DBF2E3893C1DD0FB9
SHA-512:	D39D9C170E24804909D43E22948C671690F054733B95038816DAE169B452D7C11463FC940BAE1B565B4DF336F0FF0E29D4476BEF03527D030DE8C8DD5A64D785
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7....................................................................F.[.n.z.......c.$.<0..J..Cj........U..[B.Sz...B.<.VNU..Ik@........T.....)..S..Rh:.,.~.c.k./.5.I......0}..pI\.s=f.K..5mff.......[...nb.#q.G6.dNJ.......O.........8.n...B}P.b...G.B...A.(.R.g.j...j.z.....RWKVx.`..+O.4...e-.J.....7Ox.9..D..J.].Ik.............../.=...k.....x.q......\.....:.c.[7.D.w.I....kS.S.&{45....~.Fl3Y...2...1.K<E.M.j8..Pr(...6+.8UTK1..M_....E....8....._h!....r.......r8.E..o.~.*....1...$..u{._.....r4..t.Z'^IEN.3.v.f...E...6W..a"25.ZQ..txP..'.G}3Q.n+Y(...Xo3A..(.z.&.`..)....!.). ......T.'.D..#xz..V.}/L.............[..h.6.q.N4..w ..R--T)G.?F...a....tn.S..s..S4..nD..N...G...6..1Y..rU........7h...+...^.Go#I A..3qc.!..X.h..ia......h...&..%........=I.5....M+..6....ST..Z.G.......m......\|;.?Q.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	805
Entropy (8bit):	5.189307647919268
Encrypted:	false
SSDEEP:	24:YLNBdKv5SuE0SFJUAKmorEmJ2+g4v5SuE0SFJUAK8:YJUcuE/bUAKm3Q2+gScuE/bUAK8
MD5:	BF7C186F4AC819DA9399281A655A890D
SHA1:	CCAE5B31095C550626BFB71CBEB4EEE0F268B44C
SHA-256:	FD9C2F6E1DE475D60CE7E2AC25EF775FDD0DD332952FAEE63EBE37540B88B734
SHA-512:	46B34C2CFAD4EAA5E3A509A5E939695CEE8B57D536451CB9ADE7A3ECBA16E2F55F321E7F3B9D3E4D5F31F87AC9DE1F6F7BB3AF5B8855FCBDEEC1691568A09AA3
Malicious:	false
Reputation:	low
URL:	https://proactive-chat-server-ap.prod.aws.lcloud.com/geo/ip
Preview:	{"ip":"81.181.57.74","geoIp":{"continent":{"code":"EU","names":{"de":"Europa","ru":"......","pt-BR":"Europa","ja":".....","en":"Europe","fr":"Europe","zh-CN":"..","es":"Europa"},"geoname_id":6255148},"country":{"is_in_european_union":true,"names":{"de":"Rum.nien","ru":".......","pt-BR":"Rom.nia","ja":".....","en":"Romania","fr":"Roumanie","zh-CN":"....","es":"Ruman.a"},"iso_code":"RO","geoname_id":798549},"location":{"accuracy_radius":200,"time_zone":"Europe/Bucharest","latitude":46.0,"longitude":25.0},"registered_country":{"is_in_european_union":true,"names":{"de":"Rum.nien","ru":".......","pt-BR":"Rom.nia","ja":".....","en":"Romania","fr":"Roumanie","zh-CN":"....","es":"Ruman.a"},"iso_code":"RO","geoname_id":798549}}}

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	5609
Entropy (8bit):	7.914792066081307
Encrypted:	false
SSDEEP:	96:rGPCs8cPYY3BKK4nv9H+I32chEb2aZFDEBrKaT+uDaA0Y7iGyfFCD6rIEK5VM:rGas8cPYOEKiH+IlaIrKaCkaA0YuZfo4
MD5:	CC2954FDCF8C51B496DB04193DC5AB86
SHA1:	8C028A5D300EBA7F52D99637BA27A66BB13BB6A8
SHA-256:	CA12AF44EBA6056BF9EA674F7E7E8673FB802955385FF3230993D96D59C6853E
SHA-512:	F08B9726B434813182AF19EA5C3CE1D553D2AB5D3B387EA8AD14385F6B9D3DCA0B5D6BEDDE0C623150168B54BEE22A9ED0D364F2DBCA236DCC6278A4FC7EF35D
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/support_and_services/morning-call-podcast/master/_jcr_content/root/responsivegrid/section_container_18/image.coreimg.95.512.jpeg/1685512462037/headphones-banner-2500x900.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma...................mdat.....!.... h@2.).@...A@.;..^M.^P.1Hh..].wM.v..5-..q.q....:..ay.&.M8..I..W.T{z......H...~i.%].l.n.H...?.G.$.\`....q....XAC..l...`=".B.pWH.....>.............^...._..A.......)...5.[.....O2mz.=..7.3.sW.x.Z.w.._.I.f....37......hh\Qdam......u.h_....U..u.p..N..zi......^.C.....=.._....[c...u!.d.$..s.0..1d1..+..`8!....q...%..c..>} ....1a.te.,..}.6..[../n.Y..9.1S..vl...R".S..s:s.N....5x^3O....Z.$.......f\|..........g1Ny.wJ.k..PC+C{....x<.aOSW:....~..#.!.~..]p.x......"z....3...j...S.......5v..1S..5a..W..]..YoN...[.^...@v....k..m.-.M......8.~l...wb..J&}.L...W.?$s.......S..X...\9r.......,nR..N.j.TV.}..HV..O...+.\|h...R.l...............'....ri%b..H...P)..~Dx....Q..>F.n.~CxH*..k....{s...Q#{/

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (579)
Category:	downloaded
Size (bytes):	912059
Entropy (8bit):	5.4208298180062
Encrypted:	false
SSDEEP:	12288:veHHXJe1jH7e1jHee1jHpe1jHVe1jHWMEhS7J:veHgpqpJpQpkpWBhS7J
MD5:	88E14E475ED3FD8DF6EFC3EB91CD64F5
SHA1:	577B964D3A0CBA8015B9879F296641F1AD611946
SHA-256:	169B361E648F71C6C952A398EB83D640928591D39D6C520276323B3B589FE426
SHA-512:	9FF914EABE238EE8BBC53A944127C531C5A318F46E9FD06EA4911F0C83E940A99575E9CD84BBDDEA0299B0674A62FAE7B2DAB253CF2457B5AE66084E5700B238
Malicious:	false
Reputation:	low
URL:	https://tms.nab.com.au/nab/Bootstrap.js
Preview:	(function ensightenInit(){var ensightenOptions = {client: "nab", clientId: 1169, publishPath: "prod", isPublic:1, serverComponentLocation: "tms.nab.com.au/nab/prod/serverComponent.php", staticJavascriptPath: "tms.nab.com.au/nab/prod/code/", ns: 'Bootstrapper', nexus:"tms.nab.com.au", scUseCacheBuster: "true", enableTagAuditBeacon : "true", enablePagePerfBeacon : "true", registryNs : "ensBootstraps", generatedOn : "Tue Jan 23 00:26:27 GMT 2024", beaconSamplingSeedValue: 11};.if ( !window[ensightenOptions.ns] ) {.window[ensightenOptions.registryNs]\|\|(window[ensightenOptions.registryNs]={});.window[ensightenOptions.registryNs][ensightenOptions.ns]=window[ensightenOptions.ns]=function(l){function m(a){this.name="DependencyNotAvailableException";this.message="Dependency with id "+a+"is missing"}function n(a){this.name="BeaconException";this.message="There was an error durring beacon initialization";a=a\|\|{};this.lineNumber=a.lineNumber\|\|a.line;this.fileName=a.fileName}function q(){for(var a=

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	4.256626910314702
Encrypted:	false
SSDEEP:	24:X3cM5iWSCl2qgyOOOZ0AEa2OIAAwiq4JDhf6IhYI:XRUWpayOOOZ5Ea2vLNN63
MD5:	E127A7BD1F76174C61BEEC90A8DA511B
SHA1:	2A7A73EDEBCAA69409AB36C45497D80965271E61
SHA-256:	B2CAFE2039B6D95B20736E5B0F384267B45251E701D9D5F1C8966DAAC16683C2
SHA-512:	1F6E954BFC6ED83B61FD2CA8CAF4F466545120989A05891A1577992DEB64DD235CD428308659A57F08C00E311581F72AF4B739DC00B8AE35D5225702ECF648D2
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-site/resources/images/favicon.ico
Preview:	............ .h.......(....... ..... ...................................................................................................................................4...................................(...m...%...........t.+.....`................................... .&...'.....{...h.(.............................................. .........(...)...)...".....Z...U...Z...@.......................~....)...)...)...)...)...)......).....W...................S.'...+...)...............)........{...............S.:...F:..>2..2&........)......)............................E.91..KA..G<..<1..3'.., ..&...$...'...%...$.....&.......................D.3*..G<..@4..9-..4(..'...&...+"..+!..+!..........................)#..TI..MB..G<..B7..?4..%.~..&..$...2)....x.....................C<..cY..VL..J@..PF..PE..5+........%.......'...................$.UM..QI..$.m...R.MD.._U../&....................................$...b...............].\R..".e........................l................................!.o...

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6457)
Category:	downloaded
Size (bytes):	29596
Entropy (8bit):	5.373775857719581
Encrypted:	false
SSDEEP:	768:8zA6zNAFgKhOE/o74SIHTafw/TafMeuWX:76hAOKhOEEfVfMjWX
MD5:	F79421E13B5858AFEC62CFA8CAE6C49D
SHA1:	D62A8D316BD8CD532DABBD4EA252374ECFAC60EA
SHA-256:	8ABF32501BF30C4DA248AD43D69F561201B52994134C80D3B41D65C0ED58D55D
SHA-512:	DB47219E8E5612101D4CF9970FD6B3724274077CA0510C05A84F2E0EEAB8E3F164D8A30B721CED99627B0C43995D9C7808DBACAD3313F0FDD5BE3810D2351555
Malicious:	false
Reputation:	low
URL:	https://tags.nab.com.au/main/prod/utag.5.js?utv=ut4.49.202310240140
Preview:	//tealium universal tag - utag.5 ut4.0.202310250223, Copyright 2023 Tealium.com Inc. All Rights Reserved..if(typeof JSON!=='object'){JSON={};}.(function(){'use strict';var rx_one=/^[\],:{}\s]$/,rx_two=/\\(?:["\\\/bfnrt]\|u[0-9a-fA-F]{4})/g,rx_three=/"[^"\\\n\r]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,rx_four=/(?:^\|:\|,)(?:\s\[)+/g,rx_escapable=/[\\\"\u0000-\u001f\u007f-\u009f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g,rx_dangerous=/[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]/g;function f(n){return n<10?'0'+n:n;}.function this_value(){return this.valueOf();}.if(typeof Date.prototype.toJSON!=='function'){Date.prototype.toJSON=function(){return isFinite(this.valueOf())?this.getUTCFullYear()+'-'+.f(this.getUTCMonth()+1)+'-'+f(this.getUTCDate())+'T'+f(this.getUTCHours())+':'+f(this.getUTCMinutes())+':'+.f(this.getUTCSeconds())+'Z':null;};Boolean.prototype.toJSON=t

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 22452, version 1.0
Category:	downloaded
Size (bytes):	22452
Entropy (8bit):	7.977481107181023
Encrypted:	false
SSDEEP:	384:tWXzubFUwFFa9XXcQQ1EoL/TSQbstCO6J9X3cEX+OScjeMEVx9qiicfuNhEWrV0V:tWXyb2wFucykb1OIlqWeMEVx9qiicfqO
MD5:	B2F0C1D01872740479F68315743C220E
SHA1:	C3728CF27FAB054601D907E1D1CB17F80BD4DD48
SHA-256:	67D388DD39127840CA765AF955CB892125B87D271E49DE699778DE98FF527689
SHA-512:	0055C03E0A780ED31DD29DEE4D7DBAD81117D693EFE59D102F17FC4951FD5BC0888B03FD2C3F5D98317C9F4D735994144AB13E1BF97D6D1434E1F00F4752C4DE
Malicious:	false
Reputation:	low
URL:	https://x.nab.com.au/static-shared/nab/fonts/v1//SourceSans-Semibold.woff
Preview:	wOFF......W........p........................BASE.......>...P.%.1FFTM............l.>oGDEF.......8...B....GPOS...P......:4\...GSUB...T.......&.d.OS/2.......V...`[..ncmap...X.........(scvt .......,...,....fpgm...<.......s.Y.7gasp...@............glyf...H..1...[..A:Ehead..EX...5...6.a..hhea..E........$....hmtx..E....R.....#.loca..H.........._.lmaxp..J.... ... ...0name..J ......(`wr.post..T.............prep..W`...K...K^..webf..W.........jyW.x.c`d``..b..>........<.&.7......<...6..`d`...a`.....U.....p...........=..............)..x......!....A(.....u..<.#+F@1...2..."...Ga....\|....v.Ox..[.pU..>.x....3>CH...J..J@ .E.-Z....h.#....Z..NkE-.T.;..L.C..vZ..Re.u...C1V.).@...<B..#..n.=w._r..%.dwv.f...=.{.7$.(F..Z.,Xx..x..'..2....._A..BE4.....h..%..,..u.1...W=F%+.\...V.X..&..;O/.J.1.u.[.x5.!2S.p.R.....o..r0A...!-C..[..Q_O.4...g.E.9..6.i+......E.i...Ct.NP.%....."b"..D.(..E...3.<.P.&..e.~...x\<)~$..k.:.Al.........7.[.N....h !..lE.....z...........^........~..#..z..].....\..u>...#y..n

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17856)
Category:	downloaded
Size (bytes):	253215
Entropy (8bit):	5.358077300745685
Encrypted:	false
SSDEEP:	3072:Nd28cu0fOByWg5pPwoJeVDPiC2LvAT1f+cjCgc9O6PkJBb7/Q:YfiboKGPLk+c69O/o
MD5:	433F6E4EE3987DCDE0C6E3A5421260FB
SHA1:	A9BF73C4B248BC32DD7BFDEA9F58E887CB582FE3
SHA-256:	3CAE6D2FAFCE877BDDE0B27ECFD33AECA1EF3B0186C9D722C91FB014272A1488
SHA-512:	3C40DD2060AF8FC3B20367305BD486603C66CCC287205E6A77EEA326F54D97A9AE597F6E11759D1EDA34A309F012D9CB3B5F2A4D5149CA894D1B2A438EBF31A0
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-vendors.js
Preview:	(window.wpJsonpNabAemFrontend=window.wpJsonpNabAemFrontend\|\|[]).push([[0],[,function(t,e,n){var r=n(6),o=n(70).f,i=n(49),u=n(27),a=n(134),c=n(177),s=n(105);t.exports=function(t,e){var n,f,l,p,h,v=t.target,d=t.global,g=t.stat;if(n=d?r:g?r[v]\|\|a(v,{}):(r[v]\|\|{}).prototype)for(f in e){if(p=e[f],l=t.dontCallGetSet?(h=o(n,f))&&h.value:n[f],!s(d?f:v+(g?".":"#")+f,t.forced)&&void 0!==l){if(typeof p==typeof l)continue;c(p,l)}(t.sham\|\|l&&l.sham)&&i(p,"sham",!0),u(n,f,p,t)}}},,function(t,e){t.exports=function(t){try{return!!t()}catch(t){return!0}}},function(t,e,n){var r=n(6);t.exports=r},function(t,e,n){var r=n(98),o=Function.prototype,i=o.call,u=r&&o.bind.bind(i,i);t.exports=r?u:function(t){return function(){return i.apply(t,arguments)}}},function(t,e,n){(function(e){var n=function(t){return t&&t.Math==Math&&t};t.exports=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof e&&e)\|\|function(){return this}()\|\|Function("r

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9069
Entropy (8bit):	4.298967297131459
Encrypted:	false
SSDEEP:	192:bdcgnyFrtam/CmozQX+04Ewwf1Uzp6YyFQUpf:b9GJ4EbCzEJFQUJ
MD5:	03A9540D7AE7A72C39C235F7E58679C3
SHA1:	8ED958B08B12717BAB8E7DE05A3BC19598CD6FAA
SHA-256:	CE56C017A4B04DD507163F35D6C09D6C28CA91B7D468FD808CDC3A50358CAD1C
SHA-512:	20BEA07F56B00BB297D836820FDF0B07F543B0B1CCA495EB62BBB21A4D3CFDA3BFC7B65EF3C914DDB1603B2796AC1FC94F56DB515A23C644322ABE040A9132FA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" id="Layer_1" x="0px" y="0px" viewBox="0 0 66 34" style="enable-background:new 0 0 66 34;" xml:space="preserve">. <rect xmlns="http://www.w3.org/2000/svg" width="66" height="34"/>. <g transform="translate(1,1)">. <path d="M39.5926 16.8766C39.5926 17.441 39.7732 17.5313 40.0103 17.5313C40.2135 17.5313 40.3828 17.4749 40.428 17.4636V18.3216C40.3715 18.3441 40.1683 18.4119 39.8748 18.4119C39.3668 18.4119 39.1185 18.2877 38.983 18.1974C38.8475 18.1184 38.5427 17.8813 38.5427 17.2266V14.9236H37.5945V14.0544H38.5427V12.7901H39.5926V14.0544H40.665V14.9236H39.5926V16.8766V16.8766ZM43.9614 13.9754C43.0808 13.9754 42.6632 14.5172 42.5164 14.7204V12.4965H41.4553V18.3329H42.5164V16.0186C42.5164 15.4203 42.8889 14.8559 43.5663 14.8559C44.4468 14.8559 44.4807 1

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1139
Entropy (8bit):	4.577728900016909
Encrypted:	false
SSDEEP:	12:UW5R679DHb1LEjhJgyC2jsMc1B7RHCERiueMlYM5DPqcVd6gX1vJN1IYXYaARiuz:tv6HLE9JU2fxg7z5LlvJnIYXsRi93SP
MD5:	A16FFFACB27C809CFA4BE81FE0C78255
SHA1:	BBCF9ECB00DC6EC2A62C76154C05368F537730EE
SHA-256:	AC47D43D85ECB18EF89C0F1BA17ECCA0B2B18D29E266345E549DA0425BAA9208
SHA-512:	33DDEB879E949BB4AB944BB7CCE2B01034B199FB639E6A68795398894BD0B3AF89F10FEF51D9F4B7985405BE627747E50B81A614ED2C1C146CFD2C923503A583
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/cq/testandtarget/clientlibs/testandtarget/parameters.js
Preview:	/******************************************************************************. ADOBE CONFIDENTIAL. * __________________. . Copyright 2015 Adobe Systems Incorporated. * All Rights Reserved.. . NOTICE: All information contained herein is, and remains. * the property of Adobe Systems Incorporated and its suppliers,. * if any. The intellectual and technical concepts contained. * herein are proprietary to Adobe Systems Incorporated and its. * suppliers and are protected by trade secret or copyright law.. * Dissemination of this information or reproduction of this material. * is strictly forbidden unless prior written permission is obtained. * from Adobe Systems Incorporated.. ******************************************************************************/..(function(ns){.. var clientcode = ns.clientCode;. var server = clientcode + '.tt.omtrdc.net';. var currentPagePath = ns.currentPagePath;.. // set the target parameters here. window.targetGlobalSettings = {.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (771), with no line terminators
Category:	dropped
Size (bytes):	771
Entropy (8bit):	5.031389880269871
Encrypted:	false
SSDEEP:	24:0E0rZkfALdmiA0E9kLAVe5jvi1VnwWgsZWI:0EmkfALd4XkLlRqQUB
MD5:	F470984D082740FDDC9BCFA073406C5C
SHA1:	47E0771A95C97E9D8951A546698F7622749D2C72
SHA-256:	80DC559830198E26C72F270014F3CB3E1796501F534F862F9CE487F8AFE5C1BE
SHA-512:	434345DA03C9F190E8B6A4D28E7F429012FC39D683702C44296507104CB2E5C300BC6A6A04AA93724D9CF05485404DF6295764BC9B5DC4C8236A0CFAE669AC38
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><link id="favicon" rel="icon" href="./favicon.svg" sizes="any" type="image/svg+xml"/><title>NAB Internet Banking</title><meta name="description" content="Enjoy secure and convenient online banking anytime, anywhere with NAB Internet Banking."><link rel="manifest" href="manifest.json"><script src="webcomponentsjs/custom-elements-es5-adapter.js"></script></head><body><div id="appRoot"></div><noscript>You need to enable JavaScript to run this app.</noscript><script src="static/js/main.997e438e.js"></script><script type="text/javascript" src="/SK_yoN/-dP/-WJ/dM9tLw/aJmatQpmcu/BCxDFUhs/Gh/dhCWlSJig"></script></body></html>

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2464
Entropy (8bit):	4.736131854413083
Encrypted:	false
SSDEEP:	48:c7SGSOCMvifQRljPUqNYKYooh7lwN1a+NSOJjH26EAYrlnL+:GSOPvhxPAqSOl2fx+
MD5:	F598F6DFA7D258E5806A26D2286F8175
SHA1:	792F398D58E9374E85E7D7886E67EA10BB72F0AB
SHA-256:	3ED69889F46D58F0D4D0711FF8D50538490A28587BFD98B727FA213AA3861C45
SHA-512:	42D44CFCBFCDA977A2D484CD0C0FFFDCC8540A2722E5F3F2665CEB1343F74EAB95F3622992451A1EBDAE6B10FBAC23B12882D398505602CD86ED3A3E0ACA1EC7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="72px" height="72px" viewBox="0 0 72 72" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>nab-app-icon</title>. <defs>. <path d="M32.8877533,16.7311233 L44.5296389,2.27514153 C44.8788954,1.80502831 45.228152,1.6875 45.4609897,1.6875 C45.8102463,1.80502831 46.043084,2.15761323 46.1595028,2.74525476 L50.1177439,20.7270857 C50.2341628,21.0796706 50.0013251,21.4322555 49.6520685,21.7848404 L35.0997116,39.6491431 C34.8668738,39.8841997 35.0997116,40.2367846 35.4489681,39.8841997 L52.6789588,21.3147272 C53.0282153,20.9621423 53.261053,20.844614 53.7267285,20.844614 L59.8969278,20.844614 C60.4790221,20.844614 60.4790221,21.3147272 60.2461844,21.5497838 L45.4609897,39.6491431 C45.228152,39.8841997 45.4609897,40.2367846 45.8102463,39.8841997 L63.1566558,21.1971989 C63.3894935,20.9621423 63.6223312,20.844614 63.9715877,20.844614 L68.628342,20.844614 C69.7925305,20.844614 70.0253682,

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	downloaded
Size (bytes):	1167828
Entropy (8bit):	5.64988580708799
Encrypted:	false
SSDEEP:	24576:VrCCDI5UimsPeyxzQrCCZmquHJBnHwciPpma6xf3U9MkqPpmaSelDofeylLk7gL8:65UimsPeyxzkCCZm7txfU9BxfeyZiT
MD5:	250DF15C69DABAC3254675BF743A7EBA
SHA1:	C9E6F010CA6D30CFA16B3850CCDDE37EAABDC371
SHA-256:	FE7D95DDF7CD745F4AE7FBE4ACC7778A94B120F9443B524A7AD11D26D839ACFA
SHA-512:	6EEDB0684E189BEE9274CCED8F39582886366BE1844FE1BFC1CAD48F9EC30C848B6AF20EB64C09F3B4C5FD3656BC8636CAB1448726E9BD2D7A449B116F56CC57
Malicious:	false
Reputation:	low
URL:	https://x.nab.com.au/daf/authn/v1/static/js/nab-idp-password.f4130636.js
Preview:	/! For license information please see nab-idp-password.f4130636.js.LICENSE.txt /.!function(){var e={1690:function(e,t,r){"use strict";function n(e){var t=Object.create(null);return function(r){return void 0===t[r]&&(t[r]=e(r)),t[r]}}r.r(t),r.d(t,{default:function(){return a}});var o=/^((children\|dangerouslySetInnerHTML\|key\|ref\|autoFocus\|defaultValue\|defaultChecked\|innerHTML\|suppressContentEditableWarning\|suppressHydrationWarning\|valueLink\|abbr\|accept\|acceptCharset\|accessKey\|action\|allow\|allowUserMedia\|allowPaymentRequest\|allowFullScreen\|allowTransparency\|alt\|async\|autoComplete\|autoPlay\|capture\|cellPadding\|cellSpacing\|challenge\|charSet\|checked\|cite\|classID\|className\|cols\|colSpan\|content\|contentEditable\|contextMenu\|controls\|controlsList\|coords\|crossOrigin\|data\|dateTime\|decoding\|default\|defer\|dir\|disabled\|disablePictureInPicture\|download\|draggable\|encType\|enterKeyHint\|form\|formAction\|formEncType\|formMethod\|formNoValidate\|formTarget\|frameBorder\|headers\|height\|hidden\|high\|href\|hrefLang\|ht

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.173729213216515
Encrypted:	false
SSDEEP:	6:hxLchdxkGXbv+EQtNVkA7G86XIGYNGY4HX4Qb:hwxkOgNVkA7GXXIVV4IQb
MD5:	21E34CF6A03F570DF49E212018A567D0
SHA1:	F0BE4058936850AE0163F5137600D14B6632BBB3
SHA-256:	0A23512EA579554AF1F2614D6DEA6120D38660028FC7624C71A978478FAE0EB6
SHA-512:	85F32EA67B64F49CB438A32C9F77D2D746CF67D3387C4C9D5E78EE181B7FB11F444D6DC17DEA19A69F8EFA5D4D52AC016E6EEA78A741A6658CF86C15B7FDACE9
Malicious:	false
Reputation:	low
URL:	https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
Preview:	<!DOCTYPE html>.<head>.</head>.<body>.<script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script>.<script>. var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};.</script>.</body>.</html>

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7409
Entropy (8bit):	7.9430302446412435
Encrypted:	false
SSDEEP:	192:6St8g2lyIlji5MnZpsIotwc+rOKRH0jlDohnaLnYpV1s8:1ig2lyIe7wXlUjlD3Dss8
MD5:	05D2B2F5EB34AB2AFC6A106C573A47B2
SHA1:	29F569CE08FDC5F2D1AFD98A1FD6F96C9E45C6A8
SHA-256:	01C7683CFA694A6EA7125B527CE87F21AC6C7FDBBD358B3A96846B5F517080FB
SHA-512:	2FFB53536228515363B0B415F045267967726941358D3EB7091CEDDBB427A9E4709FA92361E6283E4033D0807E0B86D0D3B4DAAD690D0A1E2237455A2ACAFD9C
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/images/nab-prod/businessIconUrl-1fdf30c1-054d-4b41-9116-d0d57f9d5b59
Preview:	.PNG........IHDR..............X......pHYs.................sRGB.........gAMA......a.....IDATx..]k.%Ey~f.....T.!.a.."....b"..T.".U..%.jHDE@."&.!..TX.Rj...e(.0A.4.H%..%^....C.w.H.`-`A...I?g....3g.e.L..S.n..\....3.{".4.X..%g.......<.m.I-.X..{Pl.+..X!".,..)....w.]. c-.).D ......#.$8.S2t.c.D9..M..F .l..#%;15.\|.1...T........l)Iz.[J..9 ..#..8...x K@c.....&E.Y....08...._.v.rP.....A[,/[H..#.7..h.({...5.1...D.....(...b._..o..1\.a$.\|".....1B...r'..6.F0.\|...h.#.s.G.B.&....... n...#Vr....A.e.A....!..}....#`a0..L......Z..L.!....U.#..j.$.!...7\|.A.4#..!<....c.E..1..!.L@.m/.z..i^...X..?$.A........D.`...m...#.#.....#1.ui..k.......&..e.. 1.9....k I.......8.h.$m. t......!%.....B.t...4%...$.(.....}.9.c.W$...~.oEi...F.{...h.md.w#.5..W....m%.G.`...f.&.....A_.sJ.;..X....)yJ.7....b..F.....>F./9~....k0......Ab.pnk..8w.9'!}...,Ey9...6..5.U1......A..^..V..j. .;b.4...\|..D.A.}7V.U;....A..f%.y>m...{..+v.W...a... 9.%?~.k8jN. .R.d.&...@..@.\|.r......10..J.*....%\..4,...!..Gn.....$V.Et.\|z..

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (771), with no line terminators
Category:	downloaded
Size (bytes):	771
Entropy (8bit):	5.031389880269871
Encrypted:	false
SSDEEP:	24:0E0rZkfALdmiA0E9kLAVe5jvi1VnwWgsZWI:0EmkfALd4XkLlRqQUB
MD5:	F470984D082740FDDC9BCFA073406C5C
SHA1:	47E0771A95C97E9D8951A546698F7622749D2C72
SHA-256:	80DC559830198E26C72F270014F3CB3E1796501F534F862F9CE487F8AFE5C1BE
SHA-512:	434345DA03C9F190E8B6A4D28E7F429012FC39D683702C44296507104CB2E5C300BC6A6A04AA93724D9CF05485404DF6295764BC9B5DC4C8236A0CFAE669AC38
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/login
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"/><link id="favicon" rel="icon" href="./favicon.svg" sizes="any" type="image/svg+xml"/><title>NAB Internet Banking</title><meta name="description" content="Enjoy secure and convenient online banking anytime, anywhere with NAB Internet Banking."><link rel="manifest" href="manifest.json"><script src="webcomponentsjs/custom-elements-es5-adapter.js"></script></head><body><div id="appRoot"></div><noscript>You need to enable JavaScript to run this app.</noscript><script src="static/js/main.997e438e.js"></script><script type="text/javascript" src="/SK_yoN/-dP/-WJ/dM9tLw/aJmatQpmcu/BCxDFUhs/Gh/dhCWlSJig"></script></body></html>

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=*;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.173729213216515
Encrypted:	false
SSDEEP:	6:hxLchdxkGXbv+EQtNVkA7G86XIGYNGY4HX4Qb:hwxkOgNVkA7GXXIVV4IQb
MD5:	21E34CF6A03F570DF49E212018A567D0
SHA1:	F0BE4058936850AE0163F5137600D14B6632BBB3
SHA-256:	0A23512EA579554AF1F2614D6DEA6120D38660028FC7624C71A978478FAE0EB6
SHA-512:	85F32EA67B64F49CB438A32C9F77D2D746CF67D3387C4C9D5E78EE181B7FB11F444D6DC17DEA19A69F8EFA5D4D52AC016E6EEA78A741A6658CF86C15B7FDACE9
Malicious:	false
Reputation:	low
URL:	https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
Preview:	<!DOCTYPE html>.<head>.</head>.<body>.<script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script>.<script>. var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};.</script>.</body>.</html>

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	14276
Entropy (8bit):	7.9766357727474215
Encrypted:	false
SSDEEP:	384:rhTgAlwwDWDXK6OAP9PQbjIu14ybuusFxTg8catA1GCcucS:1Jx2XK49PJu+ybYzRTKsCcA
MD5:	CE7E4CCCA31B21064C518C7C6B1BC114
SHA1:	A3C430C971D5E16D5014AA890B596AFD49F2E049
SHA-256:	A572EDCF1156DC021DEA8128BE10AA723F29DA753157BCC4D7630E312586C98E
SHA-512:	DE29F3201DC045236A6FF4F1040430B0166C62DF04E3F10087BF9FDD38E86638359AF0344C097C35782E270D6B95E088DBA87AEE2CC8BE3B911986089EA3FBB1
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/support_and_services/security/improve-your-cyber-security/master/_jcr_content/root/responsivegrid/section_container/image.coreimg.95.512.jpeg/1696824479107/woman-and-man-on-ipad-3000x1000.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................6....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma.................6.mdat.....!..,. h@2.m.@...A@.....RPN_.[D.^l...A.I..N&.#.^a.+{q.v...r.UN.!j..w[...Y.......L!LE....R^..!..8...E..fU......L........o....{......{..........d..._k...W....v...s.T.)<.8a..S...H.9@..0..5.{........%Wn.G#..j....[$.....O"S...T...z..r.Uk-7R.x...U.A.1...~....{....H.eT.,P.4#../.B..[#,....f...j.......a.a~.....w20v...Hr..y$.........D............qj...n....\|M...K......F=.4.pp................?.`5)..&;.....2XF....]G..QG=..W0.@..y.....0:/..'..h.".$.>.... ..:\.B..E..ySW...H3....._..........I..O.pxIU...#I....._.#.5.]K.&..H.M:.`d.Cn.'......Rb...@.B+..8..V.....18.p?4...\S..2.+.....F]4......o..w0.W..;.3..n...C.$).H...x.....y...A6F....1e.P1@....._..........(V.a8.J..%.\z6X....TJ.7..z..0Y.L....h.-D)W

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x184, components 3
Category:	dropped
Size (bytes):	3204
Entropy (8bit):	7.538577421354709
Encrypted:	false
SSDEEP:	96:VTpSWzij4n5y1lt3cS3Sjc3UsnFrt0sA64gjyX:Vcfj45ecIoncFKsANgjyX
MD5:	92EABBD2B29A0857C2DC26FF99887C42
SHA1:	2154879D4BF3876F3EE37301D323F9562F97A5E4
SHA-256:	58896A04763C24AD9964E941237F243E47D7B50565170DC0E82D066224154A77
SHA-512:	B05A739FDEE0B4522923971084D4DA502238B522C756B630DE83FF26AC7D2102901FABB10811115ED31D10797D528B1C0C27606C8F6122EC1CC1923F1B42E178
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........5..............................................................................................................................................................6.w8@........................3........5.;.0.j.....!;.P{<...'...................:\.......tc`M+.r.Q@...&....l....................N.[j...[85.H..\|......}..Tm.J6y..@................kMnj.z. ..[.'.....&5.{...d.................i.I.ukb............=..OE:.....................S..S.Nwd.......X[%F..E.....................F..~.:............m......................o........:..ZNm.....c.........2...........................!Q "1AP..0#a...2.@B..........?.....:E<n....d>....W....~z.[tT..c".NW..9..m_.....Kt....4..C......Z...J.*..`e@.Fr.Q.}.....9....`J.p:..r...wG.....2(.E..Q............+..ZJ....$.@.>....b.-5...TgY...=:g.P..m{.M..wA..o..=....I[}.... .........w%

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	110341
Entropy (8bit):	5.1472440129193595
Encrypted:	false
SSDEEP:	768:jtPtHtetjtKtet/t9trtitStJtJtGt/ttt6tVCtBtutXtatBtptAtltTtAtMtntk:WucD17QVTZljk1zv7G
MD5:	2E26ADE7667ABA5BF5BDDEAD67C0395B
SHA1:	0D55FA367AAE67B394459EAD3EDC94D2EC3622B0
SHA-256:	697DF91AC866552F1DCB90B59332A065C5E81D4D4A3327448428659583C84E0C
SHA-512:	0C6C0F6499E1ECF0BA79C9AEF29512BEC00855F34FF00DEDC71D826714487EB2E4ECC74B2F4CFB74F3512B6E9C71F360A80B0C358277B169CC8B2CF11BE8E910
Malicious:	false
Reputation:	low
Preview:	{"id":"4fc55258-ea1e-470f-b9a2-93aae6c0a08c","enabled":true,"shouldCollectIPAddress":true,"enableWebHistory":false,"newSDKEnabled":true,"appId":"d6739cd3ce1a5d1b87c47f3b89e785d5","rules":[{"id":"07ad09b1-22c8-40dd-a81a-69b7051ed4b2","name":"Default (Green)","criteria":{"type":"OPERATOR","value":"OR","criteria":[{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal/online-banking","variable":"URL_PATH","comp

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	306
Entropy (8bit):	4.830968103541126
Encrypted:	false
SSDEEP:	6:YSM5B4sf42cQJ6SGKEW/mHnWWEKAvXjkXHxHKAvXjkXHOjKAvXrnmKEW/aC/8/HX:YSAB4sf4lQNGS/mHnRbTXHZKTXHOjKSK
MD5:	BBB78B47BAB713CAB9E79D2EF1247F0B
SHA1:	02FC2A723E9F7601FB38E0433B85B43EE4DE6054
SHA-256:	E782D0B08DABB42DC3A3DDE984C6B26A4DAD20E86FB30345224E856471686437
SHA-512:	25F18F958ECBFB388C93029A7A4C05FDF27947C02DA7FF7E19E49F7BB0916829FC75CFBC0ECBEFAA0D0C64BCD3CF03E60599764007044DE53B49586939E554D3
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json
Preview:	{"widgetHash":"2e26ade7667aba5bf5bddead67c0395b","displayConditions":[{"typeId":"BH1","satisfied":true},{"typeId":"TA1","satisfied":true},{"typeId":"OA1","satisfied":true}],"ruleDisplayConditions":[],"openBusinessHoursGroups":[],"cobrowseConfig":{"enabled":false,"licenseKey":"","fullScreenEnabled":false}}

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://adservice.google.com/ddm/fls/p/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044;~oref=https://www.nab.com.au/"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 22452, version 1.0
Category:	downloaded
Size (bytes):	22452
Entropy (8bit):	7.977481107181023
Encrypted:	false
SSDEEP:	384:tWXzubFUwFFa9XXcQQ1EoL/TSQbstCO6J9X3cEX+OScjeMEVx9qiicfuNhEWrV0V:tWXyb2wFucykb1OIlqWeMEVx9qiicfqO
MD5:	B2F0C1D01872740479F68315743C220E
SHA1:	C3728CF27FAB054601D907E1D1CB17F80BD4DD48
SHA-256:	67D388DD39127840CA765AF955CB892125B87D271E49DE699778DE98FF527689
SHA-512:	0055C03E0A780ED31DD29DEE4D7DBAD81117D693EFE59D102F17FC4951FD5BC0888B03FD2C3F5D98317C9F4D735994144AB13E1BF97D6D1434E1F00F4752C4DE
Malicious:	false
Reputation:	low
URL:	https://x.nab.com.au/static-shared/nab/fonts/v1/SourceSans-Semibold.woff
Preview:	wOFF......W........p........................BASE.......>...P.%.1FFTM............l.>oGDEF.......8...B....GPOS...P......:4\...GSUB...T.......&.d.OS/2.......V...`[..ncmap...X.........(scvt .......,...,....fpgm...<.......s.Y.7gasp...@............glyf...H..1...[..A:Ehead..EX...5...6.a..hhea..E........$....hmtx..E....R.....#.loca..H.........._.lmaxp..J.... ... ...0name..J ......(`wr.post..T.............prep..W`...K...K^..webf..W.........jyW.x.c`d``..b..>........<.&.7......<...6..`d`...a`.....U.....p...........=..............)..x......!....A(.....u..<.#+F@1...2..."...Ga....\|....v.Ox..[.pU..>.x....3>CH...J..J@ .E.-Z....h.#....Z..NkE-.T.;..L.C..vZ..Re.u...C1V.).@...<B..#..n.=w._r..%.dwv.f...=.{.7$.(F..Z.,Xx..x..'..2....._A..BE4.....h..%..,..u.1...W=F%+.\...V.X..&..;O/.J.1.u.[.x5.!2S.p.R.....o..r0A...!-C..[..Q_O.4...g.E.9..6.i+......E.i...Ct.NP.%....."b"..D.(..E...3.<.P.&..e.~...x\<)~$..k.:.Al.........7.[.N....h !..lE.....z...........^........~..#..z..].....\..u>...#y..n

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	207419
Entropy (8bit):	5.838856248336352
Encrypted:	false
SSDEEP:	3072:UzUUC0o9oUBQNSPyYH/wjfZTul9H5E2/xckyPh9uykqREw/zalFx3:UzUUC0GoUl9H5f/zMjt5r/zap
MD5:	E0084AE9AE6DF868B9844807B7B5DDF0
SHA1:	CAC7766434C5D034846438D9FE0E5FE04BF78E23
SHA-256:	31D723294C248135B7A6FE4FA340197B3802EA8247E16036FD7CBEB718F65B0E
SHA-512:	785335FBCE74BB4B37F9A46B284B999AE1EE6955BD8DF7BA61877CBB103B96CD7181B0BDD0526D00ED9110D1160EA925A0325A98B577E43D930C6DB7CDC4BC84
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/SK_yoN/-dP/-WJ/dM9tLw/aJmatQpmcu/BCxDFUhs/Gh/dhCWlSJig
Preview:	(function QrXjrsfzxf(){fx();Ytx();function Xtx(){kz=FZ+xG+CZxGxG,Eh=MZ+CZxG+dZxGxG,UX=mZ+dZxG+WZxGxG+xGxGxG,XX=LZ+WZxG+xGxG+xGxGxG,xh=MZ+mZxG,Th=AZ+CZxG+mZxGxG,lh=LZ+LZxG+VZxGxG,Oh=MZ+sGxG+VZxGxG,tG=mZ+xG,sX=VZ+LZxG+mZxGxG,Xh=MZ+VZxG+dZxGxG,mh=AZ+dZxG+CZxGxG,YR=CZ+WZxG+VZxGxG,cG=MZ+WZxG+xGxG+xGxGxG,WO=MZ+mZxG+CZxGxG,Fn=AZ+FZxG+CZxGxG,Wh=MZ+sGxG+CZxGxG,qn=MZ+LZxG+xGxG,KR=mZ+sGxG+FZxGxG,ph=sG+WZxG+AZxGxG,ZR=FZ+sGxG+dZxGxG,lO=LZ+LZxG+mZxGxG,Jn=mZ+xG+AZxGxG,tz=AZ+mZxG+AZxGxG,wh=sG+xG+AZxGxG,EO=CZ+sGxG+CZxGxG,Rh=mZ+mZxG+AZxGxG,Cz=VZ+FZxG+AZxGxG,qR=FZ+VZxG+mZxGxG,Ntx=dZ+xG+sGxGxG+WZxGxGxG+CZxGxGxGxG+WZxGxGxGxGxG+xGxGxGxGxGxG+sGxGxGxGxGxGxGxG+LZxGxGxGxGxGxGxGxG,hz=CZ+dZxG+xGxG,nO=VZ+dZxG+mZxGxG,wG=MZ+dZxG+CZxGxG,CG=CZ+AZxG,DX=FZ+VZxG+WZxGxG+xGxGxG,Qh=sG+xG+CZxGxG,gn=mZ+CZxG+FZxGxG+FZxGxGxG+mZxGxGxGxG,QO=CZ+VZxG+xGxG,dO=dZ+VZxG+mZxGxG,w7=VZ+AZxG+dZ

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (645)
Category:	downloaded
Size (bytes):	98435
Entropy (8bit):	5.388981067135196
Encrypted:	false
SSDEEP:	1536:3hMiRsbuIyZnxMkRATNCmM7lCckYEN7eqKhEUi:aZKnvATNC4cLO7Chi
MD5:	9A5AD93A863D5640B323492CA8F1CD3C
SHA1:	ACB3535C2F8C35CE98F2DE9192F1A8B78E57EBAA
SHA-256:	3A7A992929B0AF019D45D0B1707BE3CFEE029FB7C760300F9727FFB1E5FAE507
SHA-512:	81B56DA2A97912072D1B622CD9FB72E760DCBDFF049CE18C1FF01B1FBCFDC98CA08DEBF8A82A48CE6A63F181B5BEC55FF7ED4A10F53FDBBE5F804C44FA7C8EAF
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/appdynamics/adrum/adrum-4.5.17.2890.js
Preview:	;/* Version a5e921eab2dde2c5ab4b79ea636b8271 v:4.5.17.2890, c:91d7525d7d9982f3dd71517d3b490e781ab389c8, b:4.5.17.2890 */(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var k=window.ADRUM={},B=window.console,x=B&&"function"==typeof B.log?B:{log:function(){}};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();var v=this&&this.Ac\|\|function(){var a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(a,l){a.__proto__=l}\|\|function(a,l){for(var e in l)l.hasOwnProperty(e)&&(a[e]=l[e])};return function(b,l){function e(){this.constructor=b}a(b,l);b.prototype=null===l?Object.create(l):.(e.prototype=l.prototype,new e)}}();(function(a){(function(a){a.setUpMonitors=function(){for(var a=[],b=0;b<arguments.length;b++)a[b]=arguments[b];for(b=0;b<a.length;b++){var c=a[b];c&&c.setUp()}}})(a.monitor\|\|(a.monitor={}))})(k\|\|(k={}));(function(a){(function(b){function l(a){return b.refs.slice.apply(a,b.refs.slice.call(arguments,1))}function e(a,m)

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5138
Entropy (8bit):	4.379046086718005
Encrypted:	false
SSDEEP:	96:JpQHJEYjBcQQuwJLyvet4xKYb+YVVkzQwOsFAvet4aOS51nQgGKWJAiUWJFXSdm3:4HJzBcQ+CxH3wJFs3sQVLqoTXUC
MD5:	797750A318CA00B638A751D405CDB6A7
SHA1:	2FDB73F8A07CAE9D276537CE1887CEA3BEE7B58C
SHA-256:	780AEF6C7CD78E89B30EBABCC7AE0E3CB97E19D8D238378517DA656ABD317A04
SHA-512:	D25F2642C2E3B5FAC0C17534A91BF58A00684D51E80B356321349A23DCEC6DBAE9A6FA93A236731C84D1404611C5CC89D350E15895309B92695B729EEBAAB514
Malicious:	false
Reputation:	low
Preview:	<svg width="60" height="30" viewBox="0 0 60 30" xmlns="http://www.w3.org/2000/svg"><defs><linearGradient x1="-.61%" y1="50.05%" x2="99.92%" y2="50.05%" id="nab-logo_svg__a"><stop stop-color="#ED0000" offset="0%"/><stop stop-color="#E90000" offset="7.73%"/><stop stop-color="#D10000" offset="64.86%"/><stop stop-color="#C80000" offset="100%"/></linearGradient><linearGradient x1="50.01%" y1="99.02%" x2="50.01%" y2=".46%" id="nab-logo_svg__b"><stop stop-color="#A50000" stop-opacity="0" offset="0%"/><stop stop-color="#A50000" offset="100%"/></linearGradient></defs><g fill="none"><path d="M36.828 15.75c0 .524.15.599.376.599.225 0 .376-.075.376-.075v.824c-.075 0-.226.075-.527.075-.451 0-.752-.15-.827-.225-.15-.075-.376-.3-.376-.9v-2.172h-.903v-.824h.903v-1.199h.978v1.199h.978v.824h-.978v1.873zm4.062-2.698c-.827 0-1.203.524-1.354.674v-2.098h-.978v5.47h.978v-2.173c0-.524.376-1.124.978-1.124.828 0 .828.675.828.974v2.323h.978V14.55c.075-1.048-.527-1.498-1.43-1.498zm9.48 0c-.828 0-1.204.524-1.354.6

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	306
Entropy (8bit):	4.899622532871285
Encrypted:	false
SSDEEP:	6:YSM5BjAGKEW/mHnWWEKAvXjkXHxHKAvXjkXHOjKAvXrnmKEW/aC/8/HJd/aCfW5s:YSABjAGS/mHnRbTXHZKTXHOjKSnmS/7w
MD5:	6D97FFCAB76AB3C807D9CCAC7E6B1C81
SHA1:	12867BE2315476EC70259855AD885141B78BBCD8
SHA-256:	84B5483545C17278E8D711856D0A6E573BAB8322815486FD8017A51B7D56C6A4
SHA-512:	60DFE61D0D2C7337100C87DBCCE13BEC94945C72EC2DFBAC4F5FF78C74DAF9182627D0E45F18AF47AE1670EFFC2CE80F4F9624AC02583A7C19DD2623995AB25F
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json
Preview:	{"widgetHash":"95164d49967239e5c92986f94bb9d176","displayConditions":[{"typeId":"BH1","satisfied":true},{"typeId":"TA1","satisfied":true},{"typeId":"OA1","satisfied":true}],"ruleDisplayConditions":[],"openBusinessHoursGroups":[],"cobrowseConfig":{"enabled":false,"licenseKey":"","fullScreenEnabled":false}}

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3828
Entropy (8bit):	5.457113109370427
Encrypted:	false
SSDEEP:	96:Wmxm+3qTkMeBCJU43gROO9OOcl4JgLt3V5d3fUKre:AD3i43gRxo4JgLBzxzre
MD5:	95164D49967239E5C92986F94BB9D176
SHA1:	EC2B6864D8650747EE421BA6AF43195ACAA8BB0C
SHA-256:	B3516FD94CCF6BF65D44335A5C65A7C184260E0594504656D66D7C984445BAFF
SHA-512:	CB94FC39C45DFEA435724F56210FBF6798C0FAC30E96CEA21035486CFE04914DA76380DC6D979B88716FA0407BC811494935A7328C8C7488CA398196D45C6529
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/95164d49967239e5c92986f94bb9d176.json
Preview:	{"id":"8112728a-97e4-4b85-8f62-851a438d7e95","enabled":true,"shouldCollectIPAddress":true,"enableWebHistory":false,"newSDKEnabled":true,"appId":"d6739cd3ce1a5d1b87c47f3b89e785d5","rules":[{"id":"972e4cde-3713-4121-8f32-f215c8b88f8f","name":"Default","criteria":{"type":"OPERATOR","value":"OR","criteria":[{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"ib.nab.com.au","variable":"URL_HOST","comparator":"EQ"}]}]},"actions":[{"action":"SHOW_INVITATION","messages":[{"languageId":"default","text":"","prechatFormId":null}]}],"enabled":true,"brandStyleId":null,"prechatForm":null,"prechatFormVariants":null,"chatWindowOpen":false,"hideFirstChatMessage":false,"includeFirstMessageChatInConvo":true,"displayConditions":{"ipWhitelist":null,"ipBlacklist":null,"throttle":null,"enabled":false},"welcomeScreenSettings":{"enabled":true,"introductionLanguageVariants":[{"languageCode":"default","translation":"<p style=\"text-align:center;\"><span style=\"font-size:24px;\">Me

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37860, version 3.393
Category:	downloaded
Size (bytes):	37860
Entropy (8bit):	7.993178995451927
Encrypted:	true
SSDEEP:	768:StNNFEUN1gCENKy2E/Hlmi2a1+aYyAdOMO3EAbxkTGdx2w9p2lH/oHh:S5VgCQNHlmi7RUOMOUAbxsENXh
MD5:	4582E89D8746A83940FC8BDD43EF95CC
SHA1:	84AF334E9EB40E28E595143EE7037C0E77726D20
SHA-256:	89422A822BD5CAA699BCCE06AA0FB9567CE9124C58EAD7941CEA413B70513009
SHA-512:	10766F486DD9DF8C61B220085E7A7F2565D2DDF22BD90666D568FCC8DCCEB94B459FFA29AC68F9C3ED4C46B4D004C63BCEE611C74176BC41BAD9F156526D8E1A
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-styleguide/resources/fonts/source-sans-pro-regular.woff2
Preview:	wOF2...............d...w.........................F?DYNA.M..:?GDYN.........f.`......p..F.6.$.....B.. .....[[Vgq..C....f..2.h..!".........U;...~..............?....\|....ox...;w.V.$.f.P.L..h..Y.%.N(..Cl.z3[.~.k....#1/.....tf......o..........4..y.................@E.......I......Qb.hC...9=.[.s.<...x.....+"....".....9.......#....;dff.........q.#3#.q....cDd.8.8fF....k.....{!.9...Fl...{..4.......3IJ...+.........oF..{.Hq.....H....{K .t.~......i.(.`...2I..Tff.S...P.&.e{p.......7..o{/...s...)...`...`....oc..4.$,<..,...<.B...R/J{x~..gr. RT@........K.9EE....p.no....h.3...rQ.....gS....R...Y....,...b.1.ME.......s..d.i.&P.%.BJ.B...V..j...8...T.i.....~...c'.m.p\|C3.G.H...I.6K....-<.o.2..w.5..@..^..........._]..O...JZ..iz...9.j....#s/.L...........7.4r..yh.>...?...8".L..s....CU..M....m....<..4..u...#7.....@gv....'..o.6.\4iM)MqJ]..[CAf)........``.n...`....-K.....S.......4.7.g.........sJq.w..$..C6.......H.!.$ag&........_..../!.S7@jNT,.....Ww.`.f&.8..X.K

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142448712
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 38088, version 3.393
Category:	downloaded
Size (bytes):	38088
Entropy (8bit):	7.993630237599298
Encrypted:	true
SSDEEP:	768:8YnlbAr9oQLi/aP8Lp+q99wjXr1demEzExOk/wScK62hjHYAAt:1mr9LiiP8Yq998hde3zEck/wNK3x4pt
MD5:	BAC9BB93FA5CA2B135192343B8C3B4BD
SHA1:	D2489E3C5F11A501271EA03A68F4C9EBD17CEB7A
SHA-256:	95D503C4F4B95B31F258C43E3A71F9324D06A25E06D73F46D2CC046ACDAD9948
SHA-512:	AD4328A3B6295010F6F3C495C5BC52418830983E37EC6BE438B74E04059B0A28F1EBBE4440EB59469B021D141A15F0F6B11E9548D226012AA08FAB854139607C
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/fonts/source-sans-pro-semibold.woff2
Preview:	wOF2...................[.........................F?DYNA.M..:?GDYN.........f.`......p..+.6.$.....B.. ..;..[[fgq..c......PF...>D.\|....o..... ...o..._........!08&..l..\|~......&q5...`.\|@.D.,.uBI=.b.....X.W....yiD^d..<..s_.I.E.{.......c;....;V."..B..>..y7.}.O.<.Rl.X!..i.........r.`..!.:k..o.3...#....."...q.z...<.G.!..%..j.GtC....C.%.RC...ZK.1.XK.1..K.O...ZJ.5.XK....k9..9.g../.%<hHij.Xj....U.b...Qw......g.V..R.\..~.?......9....Z...2.B...m.L.~....!....5..e."5s$..6.Q]..;OZ...&5I._........X.R.7....7.H.M..N.:.H..2L...Y.C&.l.............:.~.Ai....?C..Q.... h...Q,..K.`.8&.....U....?u~y......P4.;v..4.....$...~.R{w%pQ]Sr..,......eV.^w.......L.c...'..&...9...-q.z.(...}0fg..V.......P.(..h..).y...P.I.A..E.c..\..%..qD.3.rj.Z.....H$.\|.`.9,.B....qX...../M.~.}...MG.9...C......&.E...V..n........f.....aA....F.Y0..5.......X"d.3$;.5A..c...n..R.G..EI3.rD....m."4@ghfh....!>.OW.f.D.C.z..U..n..V..h.....;[..q%.&...u....!...p.2/E.P.\..l..........;h."i..gC.....

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3828
Entropy (8bit):	5.457113109370427
Encrypted:	false
SSDEEP:	96:Wmxm+3qTkMeBCJU43gROO9OOcl4JgLt3V5d3fUKre:AD3i43gRxo4JgLBzxzre
MD5:	95164D49967239E5C92986F94BB9D176
SHA1:	EC2B6864D8650747EE421BA6AF43195ACAA8BB0C
SHA-256:	B3516FD94CCF6BF65D44335A5C65A7C184260E0594504656D66D7C984445BAFF
SHA-512:	CB94FC39C45DFEA435724F56210FBF6798C0FAC30E96CEA21035486CFE04914DA76380DC6D979B88716FA0407BC811494935A7328C8C7488CA398196D45C6529
Malicious:	false
Reputation:	low
Preview:	{"id":"8112728a-97e4-4b85-8f62-851a438d7e95","enabled":true,"shouldCollectIPAddress":true,"enableWebHistory":false,"newSDKEnabled":true,"appId":"d6739cd3ce1a5d1b87c47f3b89e785d5","rules":[{"id":"972e4cde-3713-4121-8f32-f215c8b88f8f","name":"Default","criteria":{"type":"OPERATOR","value":"OR","criteria":[{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"ib.nab.com.au","variable":"URL_HOST","comparator":"EQ"}]}]},"actions":[{"action":"SHOW_INVITATION","messages":[{"languageId":"default","text":"","prechatFormId":null}]}],"enabled":true,"brandStyleId":null,"prechatForm":null,"prechatFormVariants":null,"chatWindowOpen":false,"hideFirstChatMessage":false,"includeFirstMessageChatInConvo":true,"displayConditions":{"ipWhitelist":null,"ipBlacklist":null,"throttle":null,"enabled":false},"welcomeScreenSettings":{"enabled":true,"introductionLanguageVariants":[{"languageCode":"default","translation":"<p style=\"text-align:center;\"><span style=\"font-size:24px;\">Me

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (586)
Category:	downloaded
Size (bytes):	503747
Entropy (8bit):	5.319961517529826
Encrypted:	false
SSDEEP:	3072:sjfacBDLkmCcA/OECLk2fQsEDnmzv39TxW6GhZNqs/Z3Eq0FjKNnOnao3bMu9+U+:yYuP9UjhZNqsGq0Fraehhdfv1zA1DZv
MD5:	B4EC13E736330ABB31373F6FB86F6A7D
SHA1:	0009E094B957E9F21B0D869742D60FDB68B5E98C
SHA-256:	80091110F4526ACFCF3D304387036BFDFFB6878BB0860E1917EFF35CF26A2F10
SHA-512:	E78DB761D344D66CC1374C1DDB3C067A3BA297FA62B365C87908ECF0A86B72BF90FD3AE535D069C8E66F51FDE6E6589190DB2D79C4D19500DE498244FF8FCC59
Malicious:	false
Reputation:	low
URL:	https://tms.nab.com.au/nab/prod/code/d001cc9904eab560176cac5da2b94660.js?conditionId0=422932
Preview:	Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.registerDataDefinition(function(){Bootstrapper.data.define({extract:function(){try{var decision_status="";if(window.digitalData.event[window.digitalData.event.length-1].data.decision_status&&window.digitalData.event[window.digitalData.event.length-1].data.decision_status.length>0)decision_status=window.digitalData.event[window.digitalData.event.length-1].data.decision_status;.else decision_status=window.digitalData.event[window.digitalData.event.length-1].data.transaction_result;if(/^(APPROVE)$/.test(decision_status))return"Appoved";else if(/^((NON_)?BUREAU_DECLINE)$/.test(decision_status))return"Declined";else if(/^(REFER\|DEDUPE\|CUSTOMER_TO_CONTACT)$/.test(decision_status))return"Referred";else return""}catch(err){return""}},transform:function(val){return val?val:""},load:"instance",trigger:Bootstrapper.data.whenValueExistsTrigger,dataDefName:"D

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 202 x 202, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2328
Entropy (8bit):	7.707624625679976
Encrypted:	false
SSDEEP:	48:N/67bLvjs0T9N1mopS46//798jSnuB56btrGlvsqrWovOFQwISxOr4w/Ps:NSfpP1zpSfH798jd6UskWomFIbLs
MD5:	9476DFA6C88D21A19EE1BBC885CB0D0D
SHA1:	5B5AFBF66E59F26995F38899883ABB8B6AB4896E
SHA-256:	34FEFE5DEEAFBFCE7FA9841BBA661BCF6DEBD84030713DD300CD695F9C73FE76
SHA-512:	3435514E769B88663C02E503FD2866DB0E1BDAB4484EFFDAACB385DCD98C892794FCDB07E3C5A27F19B7BD3FB068A2673E8449F9B82992C95780B7AF7F544AB4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............e.....pHYs.................sRGB.........gAMA......a.....IDATx....u...........7H..Q'h:A...N`w.......R&.;....N.+......I......C..V..................................................................g'.2\..]n.]>ui........#PN,.E........K.6L...<....C.m.'C...+-^............A.6..@.A..W!.`..xj..y...!h...B.,B.=..4]mHK.* p>J..Ry."`pj7@.[....B.z.:......2.eHoT.6.+.A.z..2."\......6._...@.!..pym..0...<>v?.z....>.......v...~.K..)U.V.W.:^..Fl.(u,..i.....%fb....b.Q........V..M..s.@..z...`+.18.\|.X...p...C.2.+.....3....i...pFJ.!V%d"./a..>'N@.[.....R...g..2'..p.[r..>.J....a@..'....+...C...=s..:.R..OU.T......_+.J.......u...xJ]..uk3.3Xh..GF.....,7.z(.#......6K..1.O.O.v._..h~...\|.o.76sJ..9..r)...c.Ly...%S^iB/...W..2).m........(..ki.).a.K.&M.Fyu..S....-%Q^#.....K...%.\|.6....V..U..g...tPZ..........p...p...E.k.{....Pu..4..[...^...*Tc..8.[.}h...M.......O.[W..8oo.25..3.}kC.....[.Xc.x...!..A.Xe.k.i..mlD]'Bc.,........v...;C^c3r;..~.g.6g.._6...'.U....}`Q

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (880)
Category:	downloaded
Size (bytes):	10311
Entropy (8bit):	5.608344765598707
Encrypted:	false
SSDEEP:	192:3Z8jlnRHsGm4WCG8wD28gDh65+R9Z3WU2sUmewSolF20m5XXq97/I:ijlRHsGm4WCpk63smewSolF20z9w
MD5:	1056486F7CB212C764642403D1681BD2
SHA1:	E57F92DE74B8AFB42FF8705B8C1BACFA9FEDB8BB
SHA-256:	E46C94FB95F486C7566E9E1559FCA0E79EEC9EC32A239735050CA1C0D93985E2
SHA-512:	2BA7570A6FD4E6D886DA043B2AE75E8F89638A15204F14E7249687DF5D8198DE55F0EA323A50C8771E7DB201FD72FB63263144F87648F020CCBB3FF3E17AC02B
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/ns/scripts/gbd/getBrowserData-5.1.65.js
Preview:	var getBrowser=function(){function h(a,f,d){var b=0,c=a.length-1;if(0!==f&&""!==f&&(!d\|\|c<d-1)){for(;b<=c;){d=b+c>>>1;if(a[d]===f)return;a[d]<f?b=d+1:c=d-1}a.splice(b,0,f)}}function C(a){var f,d,b="";for(f=0;f<a.length;){var c=0;for(d=16;0<=d&&f<a.length;d-=8)c\|=a.charCodeAt(f++)<<d;var e=d+3;for(d=18;d>e;d-=6)b+="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(c>>d&63)}return b}function y(a){for(var f="";a;)f="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ.-".charAt(a&.63)+f,a=a>>6&67108863;return f}function D(a){var f;0<=(f=a.indexOf("?"))&&(a=a.substr(0,f));0<=(f=a.indexOf("#"))&&(a=a.substr(0,f));0>(f=a.indexOf("://"))\|\|a.substr(0,p.length)===p?h(N,g(0,a),e.mxLhashes):8>f&&h(O,a.substr(f+3),e.mxEnames)}function z(a){var f,d=0;var b=0;for(f=a.length;b<f;b++){var c=a.charCodeAt(b);33<c&&45!==c&&60!==c&&62!==c&&127!==c&&d++}return d}function g(a,f){var d;var b=0;for(d=f.length;b<d;b++){var c=f.charCodeAt(b);33<c&&45!==c&&60!==c&&62!==c&&127!==

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35822)
Category:	downloaded
Size (bytes):	35968
Entropy (8bit):	5.493288185881372
Encrypted:	false
SSDEEP:	768:fewg8rUlMkOFzb3E9Mt7WUwdAyBuky/P42RVPXy:fenYvwWcukp2RVPXy
MD5:	555949EB318EFBAF41C183B8E6ABBC0E
SHA1:	DF9AF912C1D9E00AA84F13B6053421F5493CF40A
SHA-256:	E0B639989F5145DAD75CDE13A62690B8F0AE8AE5AF401B127F1501CCF7001473
SHA-512:	C184919755AEB733F929DBB4B9630694050B70FA7FCBA3E8BCB9C59059B154F6612BC1249DD3F3C1BED58172E001037FD37DE99AC95D2DB2E8CF9EF1391DB00C
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-styleguide.js
Preview:	/!. NAB Living Styleguide version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */!function(t){var e={};function n(i){if(e[i])return e[i].exports;var s=e[i]={i:i,l:!1,exports:{}};return t[i].call(s.exports,s,s.exports,n),s.l=!0,s.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var s in t)n.d(i,s,function(e){return t[e]}.bind(null,s));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.pro

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	dropped
Size (bytes):	117830
Entropy (8bit):	7.998149018421363
Encrypted:	true
SSDEEP:	3072:eQeLvhJ13IolTvoR7kNb/yfDTzmZEyQEzZMLlnOS:ezLvTvg7YufDPmDXzZA
MD5:	1E1490D14027B98C9AD7F51B0C7B48FC
SHA1:	0F7C2D2E74F5206A13BDE5EBB2C7B05223CE23F8
SHA-256:	CE6B55BA1D26E83567F1400720351EB493863B6427BFD3F86ED29B24938FFF15
SHA-512:	9EA6EDD794E28E324FA658900B4421DA08CDF772DEC02BA8353404BB7EBC4EAE719E8C7F82396095A58857C07D9030DFB87AA194156F8CE26BA491CC4E67691E
Malicious:	false
Reputation:	low
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................8...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma..................@mdat......g......B2....@...A@.;O..7.;.....8...'.s..4...X.L>"......[.....E..I4j.c.i.^q......L...QK..3\|..........N...N.y.....I.........~l...n...j.0"...O.....P...-i3H..B@I.B..'.U.$.a@aU....{S.3:...:G_....f.n.^.[.e.........+...f..r.o..8.%.W=!..)./...../Z+.8Om..q.I..>!...rm.....Gd...y}vM6.....5..w........OVbr"..P.....'.^.OE8.....7.Sf..1...(.....Hz....z:..GGC^.....>.JjWp......k...b.0E.@.qY+...W...h..4.F^.2.O.W@v.{.T:\.......c..6...v........$/\|{...f..... ..t......B.a..~..@...i_1.;.\]..AQ..^G.@.4.....0....6i`..+...{.YL&_...?a'...}>..@..C4i...a%.@.......}....s0i.~...x......V.CV.P..4.@.S.....C...._.x...kt.....V.......C.g.X.u.M.k.};.s..g.?.[.N.....=`/.4.`^.L....I.e...d....t.q4.QU..cI....2.......#.w5.......B

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.429936107700023
Encrypted:	false
SSDEEP:	3:YWR4bL29RAXxQAfB4xCxKRTiAen:YWybLSUH6qKRe3
MD5:	8A9E551B5CB11639113E37C4A828F43E
SHA1:	B6A26E9482ADAEAF4DED233C774751432B937D6E
SHA-256:	43A54008C947CEC1F6DFDB40C58E0112CB3F7F49175D57576CED014D5BBD1CF0
SHA-512:	86312DCD97D01EC696B624244FD2FAC67EAB21F72BF5164E55AD6B2075DE50CC7DB6E4BB27308B0078F53D9CACE3969A4484C8998B243C9FAEEAE4CFB41834A2
Malicious:	false
Reputation:	low
Preview:	{"status":405,"message":"Request method 'GET' not supported"}

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	805
Entropy (8bit):	5.189307647919268
Encrypted:	false
SSDEEP:	24:YLNBdKv5SuE0SFJUAKmorEmJ2+g4v5SuE0SFJUAK8:YJUcuE/bUAKm3Q2+gScuE/bUAK8
MD5:	BF7C186F4AC819DA9399281A655A890D
SHA1:	CCAE5B31095C550626BFB71CBEB4EEE0F268B44C
SHA-256:	FD9C2F6E1DE475D60CE7E2AC25EF775FDD0DD332952FAEE63EBE37540B88B734
SHA-512:	46B34C2CFAD4EAA5E3A509A5E939695CEE8B57D536451CB9ADE7A3ECBA16E2F55F321E7F3B9D3E4D5F31F87AC9DE1F6F7BB3AF5B8855FCBDEEC1691568A09AA3
Malicious:	false
Reputation:	low
Preview:	{"ip":"81.181.57.74","geoIp":{"continent":{"code":"EU","names":{"de":"Europa","ru":"......","pt-BR":"Europa","ja":".....","en":"Europe","fr":"Europe","zh-CN":"..","es":"Europa"},"geoname_id":6255148},"country":{"is_in_european_union":true,"names":{"de":"Rum.nien","ru":".......","pt-BR":"Rom.nia","ja":".....","en":"Romania","fr":"Roumanie","zh-CN":"....","es":"Ruman.a"},"iso_code":"RO","geoname_id":798549},"location":{"accuracy_radius":200,"time_zone":"Europe/Bucharest","latitude":46.0,"longitude":25.0},"registered_country":{"is_in_european_union":true,"names":{"de":"Rum.nien","ru":".......","pt-BR":"Rom.nia","ja":".....","en":"Romania","fr":"Roumanie","zh-CN":"....","es":"Ruman.a"},"iso_code":"RO","geoname_id":798549}}}

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "bundle.js", last modified: Tue Jan 23 17:31:14 2024, from Unix, original size modulo 2^32 734864
Category:	downloaded
Size (bytes):	192849
Entropy (8bit):	7.998398456373975
Encrypted:	true
SSDEEP:	3072:BK3Eoc4p1HbHmZY7W1xFQ7FbPEuU52TKQ89993UxbLBzU/W3sb6ILzrsOKNCLXdX:eZcM1H217QpbPoO8n93U5hU/S/IDmCLJ
MD5:	4F948AA65A8255CAB9CBFFC1A09E4F69
SHA1:	17B6845137BEB4ACAC59AE67961B94E3DD813F6B
SHA-256:	BE0EAA17F2520FBFD1670A8A0C5795B88C70379436B47116FD550422634B5334
SHA-512:	47F30B3DF16F1AC100833CD6D5F204D12C6475FA53C4C5C454BF853842DC9F6AD6ABC38D15F05533DC3070E6D6797F2174ADCFB8A886B5530B9583DC7D649A13
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/branches/brand-messenger-v1.935.0/bundle.js
Preview:	.......e..bundle.js..[kw.......y..l`Z.-.d..8N.n.g7.....!...PH.j.....HYNrN....1...g.l.e.y%3'M.\..I.Pf.H%R8.G..9w.Y$...s.F<.:..a0ID.g..=?={..,P.....O.....O...Q......2.!.z...3.f.p.9..S...G 2...!.f,.nt...}(...R.4...%,.l.,\|...F{9V.`.&.A..g..Ie....Hz......\|.......gr.35.....Mx..S....W.........0........a>...2....T....h.j=....lMg..^.x.r...S.......l.m.U..k.tZ...TH...A...R=\|....K.a.'.j...r.%..2.-q..G.{b..>....O..1.#.,U.....v....5_.LV>t..j.}.+$.\|.U..f+%..E.OD..b..K..G"\|..+.=.f,.......c..D.gn....rrE$v.e.4.J.&.q._..Y....pLCw..4.nm..F#0g..Xf2...4...9.r....pwg./....v.a....\.8.....{...#...;.....@..A..[..A....C:.>.....h......o..X....v.`..{U....xN.{;.sxX...}..y...f..kW...+..}...#..`.....{.....3.......p.!..&.t..vL.=\|..0.0...P..3..P.P.T.X..'.'B.....)$..F5....z......o.\q(...8...Y..=...Y.~.}DKk.rs8....0..$[-.Lg..s=.m....../...jS.;..]0.c.d....Z.rj.....wZ.V....K?...k`.......Dx..H.~A....{.>.hM.}6..L.g1...\.N.n7.....<.X...KG..v...A..V....._.1.(..Y.]..{e..s.e...t..

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	downloaded
Size (bytes):	5525576
Entropy (8bit):	7.999514997229227
Encrypted:	true
SSDEEP:	98304:j5ObAu2pmits24nYhQCWQdaQQo/mJPv4KYZPKBhYI5RuN4OL2wIjcsJWNg3:IAnRu24nR5QcTvYdmPuWOL2TcQWe3
MD5:	75EECC3A8B215C465F541643E9C4F484
SHA1:	3AD1F800B63640128BFDCC8DBEE909554465EE11
SHA-256:	EC33D8EE9C3881B8FCEA18F9F862D5926D994553AEC1B65081D925AFD3E8B028
SHA-512:	B3A48230FC6F20038C938E5295B68A3F020B94E220CA2FAB6A894D126DC41F6F1021C239613BF9D6DE84370AD7DF9D9A91BAF716A87D43EB101EE3E48578E5FF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
URL:	https://download.anydesk.com/AnyDesk.exe
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........h.}.;.}.;.}.;..";.}.;..#;.}.;...;.}.;...;.}.;Rich.}.;........................PE..L.....Le.........."..........S...(..........@....@...........................}......yT...@...........................................\|.PH............T.HF....\|.......)..............................................................................text...w(......................... ..`.itext....(..@...........................rdata........).....................@..@.data.....S...)...S..2..............@....rsrc...PH....\|..J....S.............@..@.reloc........\|.......T.............@..B................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2462), with no line terminators
Category:	downloaded
Size (bytes):	2462
Entropy (8bit):	5.872151199489266
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08m8p1lp/jj/b9aZab6:wsbSUtJfxrqLWWWdV6j1R7l1xEa2
MD5:	9549BE755FA3AACFFAB503A5EB1E4034
SHA1:	C55378A581D9C0F493DF6EC67A35777FEBF8CC99
SHA-256:	3FEEA6481C6E85C1BB16A0E1C08A0EE5818439A3A517BEF6589E4A2FEAE58E57
SHA-512:	61B4BC95AD620A2FAD24AE322726B754E7A500B43EA8D3E3DE793C05349BA6202740885CDDE51C9696570FA478239F4F0D361E5B7DB80A71347D95481D30B05D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1040712916/?random=1706142429237&cv=9&fst=1706142429237&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2F&tiba=NAB%20personal%20banking%20%7C%20Loans%2C%20accounts%2C%20credit%20cards%2C%20insurance%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142437096&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "loader.js", last modified: Tue Jan 23 17:31:23 2024, from Unix, original size modulo 2^32 428
Category:	downloaded
Size (bytes):	261
Entropy (8bit):	7.0998708796272165
Encrypted:	false
SSDEEP:	6:XWAYuwibfoCTXWj/EF/eP1PsQEXBbARgVfbNEbQKK6:X9wCTXW8R1Xe20e6
MD5:	203466A85E12BCE0B869DF3D13CF52EE
SHA1:	EF1B3ED2036858AA6B326ECF29E5FFB18F778205
SHA-256:	7C3676E01E9634ED3FE7E4A1C621B7C115A70EED171D3B63CB3F256F5FC1DA0D
SHA-512:	8C05DC35469A5AB50B31903BC63C355A6AECE1E43C77188FF7BDC0F25A406BD25FDFC6B3E9FE4E707A84BC63ECFBDE29CADEAD1A7F43F901CE54ABF17AD210E1
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/bundle/loader.js?v1706142453947
Preview:	.......e..loader.js.m..N.0...}.s.s..BH...V.z../.z7.!.-.TB..m.P}Zigv.1...A.M[.!.#..-..lIst\..z.zD...&\|.N..<......#.:....y.}...Km=_#...u....}_R...0n-.......ZH..u..=....X.._.j./.o\|Li+.p.......4.su1.Dr&.KK...V.$..;.!7.a.....0.9.a/..t./@...i........

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11025
Entropy (8bit):	4.069069599482538
Encrypted:	false
SSDEEP:	192:kQBQoug2LT1L/sItN7onGL6HCPBI7R+6y+Dl/KfZ8AyfBowHlFIj+SE6+FbLZUZ9:YSe7bQ9NjIjCUZ9
MD5:	1983805A11973FDC19EBBEFA99E262C4
SHA1:	FDCEE7B3B126EE3175B67F66FC76B1D631640AAC
SHA-256:	562DD9FB8F097EFA241313CC14B8FB9056BF112043A2CBD87A600457625D2F32
SHA-512:	601107F826D4E307649E25DB68413A754CA48471C4B6E349FB98BB169D1B28AFCB1E5BA9D79DF1E4C4A7ACC8B53760A9437F41AFF7DFC23F92BB4B85E0CFD12F
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/cq/personalization/clientlib/personalization/integrations/commons.js
Preview:	/************************************************************************. . * ADOBE CONFIDENTIAL. * __________________. . Copyright 2016 Adobe Systems Incorporated. * All Rights Reserved.. . NOTICE: All information contained herein is, and remains. * the property of Adobe Systems Incorporated and its suppliers,. * if any. The intellectual and technical concepts contained. * herein are proprietary to Adobe Systems Incorporated and its. * suppliers and are protected by trade secret or copyright law.. * Dissemination of this information or reproduction of this material. * is strictly forbidden unless prior written permission is obtained. * from Adobe Systems Incorporated.. ************************************************************************/../. * The <code>CQ_Analytics</code> library contains all analytics component classes and utilities.. * @static. * @class CQ_Analytics. /..if (!window.CQ_Analytics) {. window.CQ_Analytics = {};.}../****************************

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17500, version 1.1
Category:	downloaded
Size (bytes):	17500
Entropy (8bit):	7.963144110584681
Encrypted:	false
SSDEEP:	384:Qs243IyVXxi4L9eMX8QrjzD5rLrfkf1xgFukJJ9/J9xjX:QkIyVBiI9FX80pfkf+pF
MD5:	FDC0354668675E460E18D8E6B880E634
SHA1:	29C9632B40ABE339A91D1D90EEA2880453408A62
SHA-256:	760A5ECB51AE9BEE28469D621B6604D62C8C7C4685C307AA36BCD2D7D28763B6
SHA-512:	6BB0B8CD325DBEB7AAB33E5BA49F80002680F5ABBD8EC3CECD35C94200EB06378BD648128A98BFDFEDBB0AC2B9C9D4C524583777F611AE911047D6EA916C0134
Malicious:	false
Reputation:	low
URL:	https://x.nab.com.au/static-shared/nab/fonts/v1//SourceSans-Regular.woff
Preview:	wOFF......D\................................GDEF.......6...@.D.rGPOS.......<...p..yGSUB.............g.WOS/2.......W...`Z..[cmap.......E.....0..cvt ... ...(...(....fpgm...H.......s.Y.7gasp...L............glyf...T..0...].#)..head..<....6...6....hhea..=(.......$....hmtx..=H.........&:loca..?0........8.P.maxp..A.... ... ...@name..A0........".<0post..B........9lPHoprep..D....K...K....x.....@0.....}tF`..%2j.....j......T.b...\|..Kj9V..Z....x..VUp.F.}f..a....'..033...'.x....l.z.,....Q.35%M....i.....i!.@9N....+n@..oy.A.B.H]..\......../..y"...<...;L5z.".W.=&b1j....+..w@.Qy..T.../...8...&<.....D?..LY.S...$N..S....;q..d..8....T.Tf....1......C.....w..,.m".B$N......_..1..pK...D..N.p...=..."..V.........9S.......0nA.hU#_~..Z..........(A.{.."......+....m..]*w;.g.8....:....q.HT./.....i..$.?....s#..\.....r..p........E..?...=-..&~.5..+e..mp=[.f......o.......[.M.'...2.....ll...3cm.V"...Z .=s......)..f.El'.....\..V3...0!...f........4...k[b.>...S0.s..g.hT..JXp;.,EC.i..w=.u.q>G3.X...

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2026), with no line terminators
Category:	downloaded
Size (bytes):	2026
Entropy (8bit):	5.197716513796487
Encrypted:	false
SSDEEP:	48:YozhSHc6G5K1euMY69cQiSd07kj/lK0s+hvx87vlmeie9w/WAa:3hlnXf6QzCqeyta
MD5:	C8B61B86885FE14BC8F8AC01180FF9D6
SHA1:	E8A78B4217067BF28398C0078A0A1D30AE6F5DD9
SHA-256:	C64DDC14367FDFF15EE4E940B5061AD3F89F559DA65558877A570048737DE50A
SHA-512:	A246D8C4985232C8E294D0D6F3B50AE9AE1E08DE209392F49DDECEBAF7F1884A557C30183ECB7EBACA03A7A35F6FBE20B4C2A1AC3EA88FB17E5D862E94A9CF3D
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-head.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports["nab-aem-frontend"]=t():e["nab-aem-frontend"]=t()}(window,(function(){return function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esMod

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1150
Category:	downloaded
Size (bytes):	646
Entropy (8bit):	7.584468473867593
Encrypted:	false
SSDEEP:	12:XXYlTpgTqsdSqQwuukiInV5/fBGGg9DDfMXHcCGgdzJeyqhUCzB0FzFr:XIlb8S0XbInV5nVglDMXh9qmie
MD5:	65BBC91376D3012CA93E6D58865E4528
SHA1:	55116F35D6B7F632686F02146F7816B6BEA87A83
SHA-256:	7195AC0C1BD760736D11E45C70078ADAEF3C33EFB9D928348F8357B86928B366
SHA-512:	46CEAA54EE9BEF7C1B24B4892896D4106DB1F38773BE8D63C3B7563E132225D18341418A7EA9A7A908ABF9458995A8264C4C5A14F581D14DD0785B2BDA1A8FAC
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/favicon.ico
Preview:	...........RMHTQ.=o.7.fF..G...73...7e....e..V.i.IQ.....-..]. ".U...H.6....U.27.h!Th2.!H...gc.8.>8.{.9.=... .....0i...D.......e.j..(.......X.....`+...{...n.......[..jz...&.K..=w........6E.9d..`..y.1u....e...S.a.{F....f.c.Q.3u..........G.^WR..+.45%...y.l.t....!v..J{.W.PW2.T..RW..%:..%..j...%c....ku5..\|.]]e.k...^3=...jy......c[8M..~..[..[..[4f.yf....]AwU.;[gy..2..9&Z3l...+.bX.g...#..C...w..$....N.....s.Gw<.....IF...V.2.<.X.3..P..+.....<6...,..Y.td.?..!..[...T..M{L...1.....L....u.?...e...8...'..~J..-..Jb..~..~.....G..\|...u....~.u.........Z...6..d.75~.4O...Y.(7....K.q1.AdS.%:...{9...X.L... Y.....K1.......Y...t~.~...

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 193979
Category:	downloaded
Size (bytes):	51376
Entropy (8bit):	7.994068631459501
Encrypted:	true
SSDEEP:	768:24WODlinZ3Hn4kOy6P24pk6lbrKEO3GUAwfa7ZQqKHKSrNkLQ5sLFfii+R:nlgZ3HROTON6lf0lfa7EKSx2Q5s1s
MD5:	C9B5B4AE06DF6BA4DAC74CAD87184230
SHA1:	B88C8328955EFEB5090629F852B63E4146A43E0F
SHA-256:	E4AF6FED34E73DDDE893FE1EA8D8FDC817B3BDBF85896D274F902FCD318FCE6E
SHA-512:	A1A56F209EAD344EE14D517ABCC26844F33C2FC2FA7113D7F03DCFFE38F22853F83FD95E9D4494B187EF67891D9B6901308200EBBB59138A8A208C65DD4675E1
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/
Preview:	...........[o.I....@...\|>ne.Kw..t4=....N71.4..13....TT.0?~........1Y.......ssw....k...._...................w..7ww.~.....?........[........?~...o..?..i....6......L..................w...............}3mo?._}.........O?.....<w........>]............O.....W'.......?^.......?.tz......{.......q....O...O..........Y...t....z......I}........Ow......7..p........n>..........?M..l7...M....W.<..o.....zN*._.....j..7w..._...v..~........m..4.........z{.a...?.........?..............x?\|i.Z?m~.....]oU..w.....aR.......O..........>=Kg..~..t..@o....?..w..............ww...^eW.....Z.c............?}.........T.O....C...z..?~.1..W.n....'.....B.Bv.\.....e.Zq.L~......./.E=....0G.....]..+....W&...0\..bs.w^....N......M.S..W..e...p..f.rr..S............O.....xr.=..?..m.....w9...g_..........-..+.........=....l...yyk..h.:.N.<.o....w!Nt.Msej...s.?....FM.i...............?..\&.94W..v..#..).v......q.p..r..>s.u..o...y.~...........e7...5.{..w."..hVIS.....:..l

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6776
Entropy (8bit):	5.195141413070407
Encrypted:	false
SSDEEP:	96:IVNMQIeCuS6F+A296zXt728ZnhLz91oLxbPu1VIWFV1OZ0aEFvpgLRu:IVpLCuS6F+JQzXl28phLJilbMgZ0aEio
MD5:	F1BECCE0DE848D615F3EA15685794ECD
SHA1:	D80748D690C1064D60C6679145885AAFC13099E1
SHA-256:	E6E54CF318ED247DA84F03F1A1620E65259293915C29A98874B8C40A706F83EF
SHA-512:	D6DAA2CFE7E3C2B0DEBE4EB23C07EF01C3A57919BC3A7DA666A7811FE11231255165446A4E013B8B7D5309D9A0CB288D778372861A0957FD18DDB7E95781E1C7
Malicious:	false
Reputation:	low
Preview:	{"id":"a7666be5-364e-4234-9590-4b32b02933d5","brandColor":"#C20000","conversationColor":"#000000","actionColor":"#C20000","displayStyle":"button","headerText":"NAB Messaging","introductionText":"Message us 24/7","backgroundImageUrl":null,"buttonIconUrl":"https://brand-messenger.app.khoros.com/images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b","businessName":"NAB","businessIconUrl":"https://brand-messenger.app.khoros.com/images/nab-prod/businessIconUrl-1fdf30c1-054d-4b41-9116-d0d57f9d5b59","defaultAvatarUrl":"https://brand-messenger.app.khoros.com/images/nab-prod/defaultAvatarUrl-3db642ac-c75a-4170-b546-adc9ba2035a9","buttonHeight":"58","buttonWidth":"58","mobileButtonHeight":"58","mobileButtonWidth":"58","headerTextLanguageVariants":[],"introductionTextLanguageVariants":[],"systemMessageLanguageVariants":[],"fixedIntroPane":true,"mobilePositioning":{"right":"14px","bottom":"20px"},"desktopPositioning":{"right":"14px","bottom":"20px"},"advancedCss":"/*\n theme-advanc

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	302072
Entropy (8bit):	5.400455562846007
Encrypted:	false
SSDEEP:	6144:sobGOUUjIDCFS8pVKLY0iu0GLJUoTU8gxBTC9gz4OE17jOdBzP5k5B1/+e5bo:NGGzwwdBSt/+Sbo
MD5:	F380391E0FE440A9B8FF2C8C3B359226
SHA1:	0164CE7C34FB245F10E6CACF44580E56BDF21621
SHA-256:	4844020AFEBCE653D6A90C44BE58F8DC9DD117AFE32BEFBF48E29CB54D3ECAA6
SHA-512:	80544968BF06E270D0508F805BFDA442197BDA62E9CE5A7854C17E5E51EDB900C1898B7DCC59B7A3430C0F310316A90AC5F140DE78959BD3BBCCCE1F4ABA51A6
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/ns/scripts/fhp/main_212270_d5fb1401_624_2168_v2.js
Preview:	(function(){var evaledobjects,getEvalableObject,compiledLiterals,mapping,literalShift,fca,rb032,P846,Q9372,U066,peed0,L7046,_ebaa,Y1f5,zb24,p4f9fc,Lfec46,Scfffd,_764bd,Z37b,F4fcf,Uda7ba,Zca53a,z9be7,Y7a3d9,_fb3,_34166,y7af2,R309f6,U6b23,Rfbfc,Qeae,l4c436,Rc5e,y21c,_e0c5,u45b,z060d,R4a9b0,Le409,s2b82,_4f2,I0e5c1,ib28f,y301,_71b6,u14ad6,Q3b2,pc251,q151,_2933,_5bb,Z2990,Q69fc3,I44f33,Uf7c,Q907,Y18540,l2fb,z0a936,Y420,iac81,R82c,Z5a52,_d2e95,p24567,i782,L7980,ib32c,Pf2076,Udc274,Fd52,s437,Iecb0,Ief94,ua4d5f,R715f3,R61c07,_66f97,q478d,z49d7b,p1978,y450,Rdf9fb,q748fd,r01b5,Z9763,Ud3a07,y68b94,rb928,f1faf,ya868,qcba00,R6ae0,Lce6c,Facdfd,L631b,r7ad,y9d5,P924,za3fe,Ibf3f,f05248,ld02a,rf27,p00c9b,f24f,l696,fb0d,Uc26,se3c1,P32d,_fcfa1,Q3ba4,Sdc0,fa89,sdee6,Z463f7,Lae04,L731,U8eee,rc1d,Qe43c,Sd31,r4094,_397,Yd201,l78f,I25a1,Z0a6,Rb26,zd75,fbf42,scdab,r697,Q24f,_be7,pe7899,i719c,f4ef,ua82,fe1969,_5de2,u37eab,U291e,Rcd46f,y5dc86,fac1f4,qf67f6,L9b07,Ib58cb,ydcdfa,L451e0,p9585f,P51a,R203,z8e6,Q19d,Z91

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1199
Entropy (8bit):	4.762697214785345
Encrypted:	false
SSDEEP:	24:Yo/8oA885CqAipXwcU8inXNIDMIpX96cr:Yo/8oAZ9AYwQ8T2AQ
MD5:	6F89E7CD3B4229021880AA0A001F1AC2
SHA1:	4C14239443270943939088FCCEDF2A6F4B343F78
SHA-256:	9D627819294F5471ACC13B134F721ACE61968AF1562594ECBAF1E739821CFD72
SHA-512:	C2CF20105232D4E279B244E1C8BEA397C69E5853972C037F9FA64174829217F2A200F114A625499427AB37C1BCA9691470FCD5FA1DAB20F15E5A15BF336A40F5
Malicious:	false
Reputation:	low
Preview:	{"properties":{"elements":{"title":{"variations":{"channels_variation":{"value":"Debit interest"},"app_channel_variation":{"value":"Debit interest charge"}},"dataType":"string","name":"title","title":"Title","type":"text/plain","multiValue":false,"value":"Debit interest"},"body":{"variations":{"channels_variation":{"value":"<p>Debit interest may apply to overdrawn amounts. Learn more about our <a href=\"/content/nabrwd/en/personal/interest-rates-fees-and-charges/indicator-rates-deposit-products.html\" target=\"external\">personal account default rates</a>.</p>\n"},"app_channel_variation":{"value":"<p>Debit interest may apply to overdrawn amounts. <a href=\"/content/nabrwd/en/personal/interest-rates-fees-and-charges/indicator-rates-deposit-products.html\" target=\"_blank\">Learn more about Personal account default rate</a>.</p>\n"}},"dataType":"string","name":"body","title":"Body","type":"text/html","multiValue":false,"value":"<p>Debit interest may apply to overdrawn amounts.&

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780), with no line terminators
Category:	downloaded
Size (bytes):	780
Entropy (8bit):	4.8040539336961805
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQSeR455AcpSnLmLvesK6+B+0P1edATM3s16HLGj2VTSQH5/dH1DLQDE:Eo2g4155VhLGj6y+m4uMVLEwrwY/jXo6
MD5:	4597C3211C29FB7BEA96B41E06196138
SHA1:	F4A06D60E0C34BC7AE0676B88D6EB5E18550A0FA
SHA-256:	9759BA56AA6D49FC3761D413371C0CE70283CD1B50363A2796391848335D8FA0
SHA-512:	793E319A7CEEAA3D2231B6BB6CB26D3DE5967555CBCD1B3F83250CDB7ABAD71559D2D18B323DA6F73359A3A98F60761E68946887E8892D6C15BBAF168B16AE61
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142430835&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142431640},"properties":{"5330":"view","17":"https://www.nab.com.au/","profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0,"5291":0.8963145438935203},"dates":{"11":1706142431640,"10":1706142431640},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome","5":"https://www.nab.com.au/"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":true,"5024":false,"5219":true},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"5125":true}});

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 283x283, components 3
Category:	dropped
Size (bytes):	9898
Entropy (8bit):	7.820245738422155
Encrypted:	false
SSDEEP:	192:N8OWofF7rEeSC4505grsCbc2jixxO6H4rKbTum0n:rNf9rhl4Hbc2YYrKPum0n
MD5:	634E8967B41CA58807A6D6A434274605
SHA1:	926CA70B26CF8EEE98D6DCBF2EAE13ABD56DF52F
SHA-256:	28770D945A973C491E885835B72F1793EE05889C93127BDC87BC0B1D5FA837B3
SHA-512:	4EF5CA27BAA7DACF1CB8B13DF02529BFCFBAF310806355C4489172F8D772F95040DEE58083B28D6C737365369843FA9D5DD14BD031C58666020803594316E1F5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......jcprt...h....wtpt...t....bkpt........rXYZ........gXYZ........bXYZ........rTRC.......@bTRC.......@gTRC.......@desc........sRGB MozJPEG....................................................................................text....PD..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........9........................................................................A.H...8H...8H...8H...8H...8H...8H...8H...8H...t.p...........\....9..*X......t.p.....>.T...2p..t...43y......Ur}.fbOB..A/..%N..b+..............2U....9.'.\.F3w....t.......[f)./..)..>mR..x..L..

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 126132, version 0.0
Category:	downloaded
Size (bytes):	126132
Entropy (8bit):	7.992210983859341
Encrypted:	true
SSDEEP:	3072:1TS3xN4A3bVlK3PpGj3EzKIkqZKOL9pbeiwZWiGraIqFDk:1TS393bnK3Pp0+oa9paXfUaI8A
MD5:	AF2998D63BA49F46BE5721E31D480A87
SHA1:	908F504F023F3D81C7F3FCE2EF57197E0F3D1CAE
SHA-256:	ADFCB007326055DFC42F35BDA68FABF69CFB5F3A7C2B57BA3FD013BE78D12F53
SHA-512:	F89DD0F82304D463993668DA2D44A0B3800F634444925BDC72D4DF1A6210C6DFCBDF013223D861EFC97B8EC582036DB1552BC5D6D14BCA2433846112BAC1DB5F
Malicious:	false
Reputation:	low
URL:	https://x.nab.com.au/static-shared/nab/fonts/v1/SourceSans-Light.woff
Preview:	wOFF.............wH........................BASE..p....F...Fe.].DSIG......0.......GDEF..pH...u.....zGPOS..r...N.....`m..GSUB..........<Z...+OS/2...$...Y...`]v.cmap...,......5.m~..cvt ..,...........fpgm..+H.......s.Y.7gasp..o.............glyf..?.......T..~..head.......6...6....hhea.......!...$...Yhmtx...........X..3.loca..,........\.j..maxp....... ... ...~name..HP.......K...7post..MP.."...K...Hrprep..,L...R...V2..6.......`(.V._.<..................?\..;...p..............x.c`d``...=.......9...".}....................{...............s....x.c`f.........................,..,.LL,..L....P..........?..l...7.........0M.R....b7.)...x..ypV..../ P......@....!B.$.A."Z\(e.D.Z).T.2..Bk]F\jq,.`.....b.;h.......F6QH......}.}\|.$....o.7.n..s.g....^.v...Jf.R.m..@f.w..Nf.^.d.-F.A.sp..J}.......v.>v..ovKZ`%.'....lo).l..+......H..N>].R+.ImXc.Fz.$.!..= .O.o.....I.......>._H..t6wK.[..@0H2c.d.M.YSt.c.I.....=....Jr..qv..[.7..o@.4R6%..p6.!.7>....L=./..r.MIs..\.N.....S..wrl.D.....-.Hf

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	4.726808458541592
Encrypted:	false
SSDEEP:	12:YoCw/8QX8Ez1LpycEm2ZWkXAV8aackLqC3cEm2ZNeW28EpPoudsv1crz9OKonr:Yo/8olyZWkXqS2CrZ0W2Pzkenlor
MD5:	5E8177CB666C4174063A106764D91DA8
SHA1:	AF18EBF01418897D47A62E24700FCB9F2C65A720
SHA-256:	EF28FFD2B54495A3D9D9A9F2409F00AFF22DA84EB9271A2F7002A53AD4671579
SHA-512:	235FE9E138E5F1E9CAFC5757C37CC7FA65A3FCD2A1BF08202F49F9857FFA01266163A40D8DB6F7D3E0B1245626488D1F02E8AA012618219A643A2DBE6A2B9F98
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/dcapi/cf/nab/content-fragments/disclaimer/personal/home-loans/comparison-rate-disclaimer.json
Preview:	{"properties":{"elements":{"title":{"variations":{},"dataType":"string","name":"title","title":"Title","type":"text/plain","multiValue":false,"value":"Comparison rates are based on a secured loan of $150,000 over a term of 25 years"},"body":{"variations":{},"dataType":"string","name":"body","title":"Body","type":"text/html","multiValue":false,"value":"<p><strong>Comparison rates are based on a secured loan of $150,000 over a term of 25 years</strong></p>\n<p><strong>WARNING</strong>: This comparison rate applies only to the example or examples given. Different amounts and terms will result in different comparison rates. Costs such as redraw fees or early repayment fees, and cost savings such as fee waivers, are not included in the comparison rate but may influence the cost of the loan.</p>\n"}}}}

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (354), with no line terminators
Category:	downloaded
Size (bytes):	354
Entropy (8bit):	5.047150331409021
Encrypted:	false
SSDEEP:	6:BwNKbu3h837gbwuqm0wYGxZNuPkQEhE6GyGXeBwu+MqyqZ7iVe:yKOaS/bUWFYe7+yqZ7P
MD5:	BC9850D4B364BC315496543907F16039
SHA1:	93F5F2F73368110D8CA3CE5DFD52C69BA2F41972
SHA-256:	FF989FC0995DA53EF7738F6A92A91C2CF3D77948FF73521DEE3AADF08B2AC2F7
SHA-512:	4A978095B032543AE7197973753DE337B2C963F33CC8D76361E0FB78AFCBD00D8C0DA4AD4613BBB7DAF786251BBD1F323ADA89B10AF04C876B07A08E16EB49C9
Malicious:	false
Reputation:	low
URL:	https://tms.nab.com.au/nab/prod/code/35a6ab04a336312adca4bf1c25933921.js?conditionId0=505275
Preview:	Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.on("click","#_content_mlc_en_personal_home_jcr_content_par-col-body-2_bootstrap_row_0_col1 .media-body .text-image p a1"+' ss2"+"s3',function(){Bootstrapper.ensEvent.trigger("TEST MLC EVENT",this)},true)},-1,-1);

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	51340
Entropy (8bit):	5.379371958075572
Encrypted:	false
SSDEEP:	768:0TxvtA6XBIMppRp+oGIMAw7l2zOCWCJZhZkn/TidJHvqxUdWmqyaKd:CxvtA6XBFn0oG9J7MzOCZ7IuOmNd
MD5:	DE362600E5E006E3AE0FBE729B273CF4
SHA1:	6CAD8B3FD3A4A8B60D63CAA90418B9E11DA73E35
SHA-256:	BEDE9F244748B115D6AB456C90D8973ECCD99E3CE4314DC3FBB0BF18A423C7A6
SHA-512:	B9A455C7ED7075F9879C1F425C4224A0D38BD32A655D492BF4C279A858FF41DBE1A295F6C9927FA757324121D4EBAD87FA40EFE2BFB89FF258343E9E3472E02D
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/appdynamics/adrum-ext.15ad9e12c414858a5e6cfdfb1f2331b1.js
Preview:	;/* Version 15ad9e12c414858a5e6cfdfb1f2331b1 v:4.5.2.69, c:9de6426bbc282a262d15b465236ed56fa8caa304, b:4.5.2.69 /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){var x=window.console,B=x&&"function"==typeof x.log?x:{log:function(){}},u=t

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "webSdk.js", last modified: Tue Jan 23 17:30:58 2024, from Unix, original size modulo 2^32 2702506
Category:	downloaded
Size (bytes):	650550
Entropy (8bit):	7.999331295859693
Encrypted:	true
SSDEEP:	12288:5nd/DgBuPGzNpeRgWSlieJWbuCPX3hMZcVw2aBn4d/B/V/HsnKzLcjQymlqug:5+OGXRpmueAcVw7J4BgKzLckymlVg
MD5:	BEEAC5455FC4CB817F59266F55B80946
SHA1:	D1D0C27798B9D7105109AC6A01962F09E11F82E9
SHA-256:	8B7C2C75E03BDCD09BD634E4B5BA301AC3CB3FB47228EE3462E1A5AF655C25F1
SHA-512:	22E0B3B11D2F285D1403F72B30FBF20891EC65CFEAAB81EE1173F295D5824D4C83E52E090C96125DCB287591070E5B8AA15F00D6905C4BBB27C947074078209C
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/branches/brand-messenger-v1.935.0/webSdk.js
Preview:	.......e..webSdk.js..[ks.F.........71x?.`U."..E;..g..."["".P. %E...s....);r2;..HV.....<.v3..7/..E.d...W...(.I...r...]....?.0.2~...........V...i..\|F.5.~......^'...e1_e.:;....6.q?.......".u..ju..s.f.W..`..U.+....=.w..._{...V.{.o.......U.{...K...?k..zO.m....e..^.....}..M.OH.e.k..:.>.5'.<Wg......F.;O..%.bn....U>..i..j..w..Pn.\|^.<<.......<.w{.Y...g...I..h\......xN/h.N..<N.KA.22._...!..aY&wZ..46'..$}.J/O.....L....uv...b..x....i7...DM..U=.Z;..Ur.....2........m.@.=C\|y.m15.(.%.Cq....!9Y......9_.u..tR'.P(..KV.8..y].YE=.t.{....2MF[4.....>Ok.>UO......F/.%.I.m...4.....).1n,yU%...._....:,.wo.}8\|}\|..._..r.c......?....%.?s.D=....h.d....m..F{E]!.....cV....lRU.e..0....:.&...=tR....y.I}:.!.r%......(..ER.p..gY\.3fI.i9\|..K....q.F.<..d....7.G...ErU&.U:....\p6.'.....Y...iU...\|\../.5..M#.5.U.....j4+...U..Bz...].......8.=.H`T.].K^w.~L.....h.....U...IR..k.&..v...Bq_`..0......i2.>..s......^h...]..@.E....$.g...< .Aa.-.......w.1..;..qV.yZ...5_jK..[B@.}P.y3K..B.{.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	60941
Entropy (8bit):	7.996669425748526
Encrypted:	true
SSDEEP:	1536:dt6TtI5t3Lga6xujWoBe4UtZB/pwsAinp6dyD5VJ2RJr9rtPpLWWSV:dtStI5tzHtBrUtZBhwqp6kQNJWWy
MD5:	DE6E26CF3409407945EE68808BC18A08
SHA1:	8BE46CB95F677AB6EDD9CEA9E1D3F76588CD2CDA
SHA-256:	0AC746495EAEA5DCDBB3E7F82C6F34E8B9FB7E9E0128CF0C863D123203C00E1F
SHA-512:	BA2CB5C0E07A32BB606DEBE7B48AFA63ED935A2C9FCC4D62C5413BC029475DFC2133D799D4D4B1085FC6A5F6B1D669C56C1B925229E04A4A6D3F80A43A7455DE
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/personal/_jcr_content/root/banner/image.coreimg.90.1280.jpeg/1702962556437/more-than-money-experts-1920x690.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma...................mdat.....'.-.....2....@...A@...4H...).y...\.Od..~.w..Df=......)..3. .B....v...-.&.L..<.P....p.D..H...... .h....+..k.{nw......\|.%F\.D..sB.+O....m)L.J]Z.\...sD..3m..&2&~h. v../.^.)JV.$.K{....6I...{].".......Ch~...........V.%W:<..zT....0n..$}b$...N..........m..;..)..d..O...H......\|P+.{H.J..-d_.Lr.XO.L.Q..{....my....G..-.C...8....L.R.r..=..%.+\|(.I3[Q....)&2.%.....D....z.%~..,......G......N..eJ.d.....+.....V......y.[.Nn...f4.hU....N.....a..W..xs~.........b]...j.`.?.{.&.U.D...?b..f.....j...;(..(...h.Wf..;.U...C....: ec.#....r^R.Z]\eF....V.J..,..8?..E.)...ra...v.^.)Q.5....q.IH..D....8.k../...Y.;...4k.>%.W.P...T.}....4......r$....ur..).)..5..(.$...\......J.._.._...z..~.......ma.....@..'

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	386000
Entropy (8bit):	7.9994613577940115
Encrypted:	true
SSDEEP:	6144:L1oOw1p6xSMH5DIK1pDAFgnYTPOrkcdJkWM/Hc38sPDC1PhQKDzV4MVmOKL/qnaS:L1Dw1p6UkDZ2unMOrZS8386u1KKd44KS
MD5:	C704249D17E501ECEE273B3526EE1416
SHA1:	D35B6BA70AE27CF75E6E45FB7D9D8383C18A2378
SHA-256:	A1A8EECAC00B722B7DD55889ED3F4F94395F25EEC3EA8996BCD38BA45A0DB344
SHA-512:	9B51E353F7E8931BB84FEA1CC7084D3F8BF6D46E7920CF0CEBCB4561AAD903278B81F9C8E3B762AA9611A05A1D63B2208D09609CEB30238B2A075035FBDEC991
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/dam/nab/target/classic-banking-lady-infrontof%20-flying-child-3000x1000.jpg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@.......................#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma...................mdat......n......B2....@...A@..c.t.oL...v.6.n^.p.....C......F...^x......Y1/....dIS.I?MLA......_...X.).5..E...Sl......43FO.V...}i.....o.a\|..:.....T..c.SA}3.+V..#.v..6...\.......K.V......BC.g..%......r...\..v.PD..C..c7..2w.IgL.#RY4Q..E......d.B.M...OS......<.OI.r^b..Y..rd.;.#.k.EX..../..e...=..f."...VA.9...S...s..a/0c..V.i.d.A...X....c..MhI...U}.!...k......f.IoWO..1...%7.N.8L.dYT...(Ux....5G.4.`=...4m%W.d.by.9.mH...%x.?x..Yz...wj..,.b......z..o.-.N.......H...P...T.........`..U4.g$...Z..'.......m..Yo...).....x.{6z.&...\..Y./....tj,_....7.Z..M."D.e.3[...(...2...S}...x..<Z_......e...]....D.N...sC.y...u.-.6...)..J......6.........T<^..x.Y{.."#.P..`.82..0............?..r....B...q..O......<l/...

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1150
Category:	dropped
Size (bytes):	646
Entropy (8bit):	7.584468473867593
Encrypted:	false
SSDEEP:	12:XXYlTpgTqsdSqQwuukiInV5/fBGGg9DDfMXHcCGgdzJeyqhUCzB0FzFr:XIlb8S0XbInV5nVglDMXh9qmie
MD5:	65BBC91376D3012CA93E6D58865E4528
SHA1:	55116F35D6B7F632686F02146F7816B6BEA87A83
SHA-256:	7195AC0C1BD760736D11E45C70078ADAEF3C33EFB9D928348F8357B86928B366
SHA-512:	46CEAA54EE9BEF7C1B24B4892896D4106DB1F38773BE8D63C3B7563E132225D18341418A7EA9A7A908ABF9458995A8264C4C5A14F581D14DD0785B2BDA1A8FAC
Malicious:	false
Reputation:	low
Preview:	...........RMHTQ.=o.7.fF..G...73...7e....e..V.i.IQ.....-..]. ".U...H.6....U.27.h!Th2.!H...gc.8.>8.{.9.=... .....0i...D.......e.j..(.......X.....`+...{...n.......[..jz...&.K..=w........6E.9d..`..y.1u....e...S.a.{F....f.c.Q.3u..........G.^WR..+.45%...y.l.t....!v..J{.W.PW2.T..RW..%:..%..j...%c....ku5..\|.]]e.k...^3=...jy......c[8M..~..[..[..[4f.yf....]AwU.;[gy..2..9&Z3l...+.bX.g...#..C...w..$....N.....s.Gw<.....IF...V.2.<.X.3..P..+.....<6...,..Y.td.?..!..[...T..M{L...1.....L....u.?...e...8...'..~J..-..Jb..~..~.....G..\|...u....~.u.........Z...6..d.75~.4O...Y.(7....K.q1.AdS.%:...{9...X.L... Y.....K1.......Y...t~.~...

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2475), with no line terminators
Category:	downloaded
Size (bytes):	2475
Entropy (8bit):	5.882720326468432
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08mSNp1UE/jj/gaUN1b6:wsbSUtJfxrqLWWWdV6j1RN7U8onr2
MD5:	1AE3B98158924081D0DF23E3A396C27B
SHA1:	2CD5FEBD494ABE34851C61552D6DCA1D6574B466
SHA-256:	5F2FE303D17F044178BC0ABE3BEA68D5EDDE7E40D3D1B8A8633D76196E0432C9
SHA-512:	340746DB54AC9703E5E1B6906AA4091E57D4C1BE67FFC2FFA61A98296190D1A8CC778299E495C5A8E6654950ABCD78DE656546B97970155C00AD00A9888767D2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1040712916/?random=1706142440059&cv=9&fst=1706142440059&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&tiba=NAB%20help%20and%20support%20%7C%20Online%20help%20guides%20and%20FAQs%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	16700
Entropy (8bit):	7.9802899983107105
Encrypted:	false
SSDEEP:	384:rTZTFo7aTWMV2/WaaQIKIgCVD5hEn0ujRnmpXlXsj9:JaOd2gvJFqnjQBdi
MD5:	EF06B36EB0404A352FC804CDEFEDB306
SHA1:	1935E246C9A4FAD5531BA13543B43050C3B92D16
SHA-256:	91B08528925109EA85CBCFD9FCA81D97D8F2D6E9A358C19C3A40632EDAEF9917
SHA-512:	8929AE75D718739DC1FDF4C8D08064FFD3AAF3ACD17217ED1946AA03680A5443167BBDA468337CA2FB2B779B0369C13C43861B722514A135BEDAA115ECDBDEF2
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/product/business_industry/international-transfers-business/master/_jcr_content/root/responsivegrid/section_container/image_1835808957_cop.coreimg.95.512.jpeg/1702531635915/corporate-city-skyline-3000x1000.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................@....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma.................@6mdat.....!..,. h@2....@...A@..]:......q......^...z&A....w.p.......7=I..Z.-.d.w`.Q<] 2@.s1...A._.>. C2...:...2j.\r.<.u....z..ABcG ......m....D...>%...b..ka..........i.6...S.;7..CnmO\|u[...'%.$.w.cB/.Fj.]..\5J-.".-oi..J..><..\|&.....w...s..3BO...63p...J.X..a.;[....\...cF...O..~6f .{.OX......\..\Z..#.<`..V.}.-..W.. Y.rA..'3.V2...q.......c.\.2~.j..#!.>j .1.....\|.....b.Y.v..G...Rf;6.."......gt...c...UfKc..r...P`a.. ....K....S....E.EW\....C...vx:..Iy..`.[W.E.....4..%.Z).!.`..zx..../...4........$.....>i.hcf.Mu..sD.0S.VZB...q..z.!X/5..'%l.D-.Z....L.o^.......G.E..;*:.F7S2A.u..4 ..k.........#%....9.b....r.H.u4.1F.f.H...-.....+..."...`.L......z...L..<..K.GHm....).s.~zL......?......S.........

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142456988
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142447047&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6776
Entropy (8bit):	5.195141413070407
Encrypted:	false
SSDEEP:	96:IVNMQIeCuS6F+A296zXt728ZnhLz91oLxbPu1VIWFV1OZ0aEFvpgLRu:IVpLCuS6F+JQzXl28phLJilbMgZ0aEio
MD5:	F1BECCE0DE848D615F3EA15685794ECD
SHA1:	D80748D690C1064D60C6679145885AAFC13099E1
SHA-256:	E6E54CF318ED247DA84F03F1A1620E65259293915C29A98874B8C40A706F83EF
SHA-512:	D6DAA2CFE7E3C2B0DEBE4EB23C07EF01C3A57919BC3A7DA666A7811FE11231255165446A4E013B8B7D5309D9A0CB288D778372861A0957FD18DDB7E95781E1C7
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f.json
Preview:	{"id":"a7666be5-364e-4234-9590-4b32b02933d5","brandColor":"#C20000","conversationColor":"#000000","actionColor":"#C20000","displayStyle":"button","headerText":"NAB Messaging","introductionText":"Message us 24/7","backgroundImageUrl":null,"buttonIconUrl":"https://brand-messenger.app.khoros.com/images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b","businessName":"NAB","businessIconUrl":"https://brand-messenger.app.khoros.com/images/nab-prod/businessIconUrl-1fdf30c1-054d-4b41-9116-d0d57f9d5b59","defaultAvatarUrl":"https://brand-messenger.app.khoros.com/images/nab-prod/defaultAvatarUrl-3db642ac-c75a-4170-b546-adc9ba2035a9","buttonHeight":"58","buttonWidth":"58","mobileButtonHeight":"58","mobileButtonWidth":"58","headerTextLanguageVariants":[],"introductionTextLanguageVariants":[],"systemMessageLanguageVariants":[],"fixedIntroPane":true,"mobilePositioning":{"right":"14px","bottom":"20px"},"desktopPositioning":{"right":"14px","bottom":"20px"},"advancedCss":"/*\n theme-advanc

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12696, version 1.0
Category:	downloaded
Size (bytes):	12696
Entropy (8bit):	7.983549064238712
Encrypted:	false
SSDEEP:	384:OifPTeSs9eMequgf+IvSRx3Ium5AhP/ASzMXFzOiJIII:nHbfqugGIvS/3Nt6lCiJIII
MD5:	277829CAEDF33FA33E47D9C481D2FB10
SHA1:	969F882DCDFE2CDEA0E01F1E51D7C4433137CC20
SHA-256:	F951333E6474D4B7F9CD23D5AFEA66130B4175F40B88F3B0979D545663D391EC
SHA-512:	65828A4CFD3C2902584509CC31C61189C6346EC972273EBBC56CEEC3EE460D101750343402A454508BDA76997C62F39CC81FEFEB8B40617D9EFD9CB5168C9206
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/static/fonts/epilogue-Semibold.woff2
Preview:	wOF2......1.......ol..15.........................."..J....`?STATD........(..1..L..6.$.... ..~. ...._E.b.80 .7W......K..c.o;Pkb.1........."..:.:5..K.S..P=..,P.t......b.Q.`....r.a.cY>Bc..........yr..._..:..$0....i..m.=Zg....f......Q..b$.Z.s..(..2~..<<].{n..o%..vM.l.1`..P..@..)7.7X.GH........$.K......./....7./..hs.....D..]s`OK.f..\6}.....6.5.`...Pl.P....tv...e._.Z.3.....>.P/.}...F.@.D..\|.....`......s.Y..H.o.%y..G..n.\|.;..c.".6u.M..2..Sg. P.S...i.K..r.gi.......o..q...t.#....W.u..z_...7...uh....P.1.,.\...q.........T.... .\|.1.d...........f...]P....../........z..!@v.o...@.l.+...h.2J.......H.. nY.........@./H\8X.0....\|..$...J..j.6.V......M..5.'....U?..4..V...GS...K.7(1.$6>.+.KgQK........e.....AaFT...[..C2.A3......dp...@W<\|..6.w]......3Z.X.0..Z...m.C.Z#...^..<.^.)..U.....)...Z4..5.S.../..$f.o.o......RpZ_....U..{.x..wH.c...R....^..M.x~:s../..K...s...Jc...S.e...2..o.N....k....X..A.\|...aV....5...m...h.8G.......Z5....e?.<w.e.......2....k.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780), with no line terminators
Category:	downloaded
Size (bytes):	780
Entropy (8bit):	4.8040539336961805
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQSeR455AcpSnLmLvesK6+B+0P1edATM3s16HLGj2VTSQH5/dH1DLQDE:Eo2g4155VhLGj6y+m4uMVLEwrwY/jXo6
MD5:	4597C3211C29FB7BEA96B41E06196138
SHA1:	F4A06D60E0C34BC7AE0676B88D6EB5E18550A0FA
SHA-256:	9759BA56AA6D49FC3761D413371C0CE70283CD1B50363A2796391848335D8FA0
SHA-512:	793E319A7CEEAA3D2231B6BB6CB26D3DE5967555CBCD1B3F83250CDB7ABAD71559D2D18B323DA6F73359A3A98F60761E68946887E8892D6C15BBAF168B16AE61
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142432916&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142431640},"properties":{"5330":"view","17":"https://www.nab.com.au/","profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0,"5291":0.8963145438935203},"dates":{"11":1706142431640,"10":1706142431640},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome","5":"https://www.nab.com.au/"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":true,"5024":false,"5219":true},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"5125":true}});

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:HUWyYn:Dn
MD5:	F06A8B62AA4266C5D6526B83F8F008F8
SHA1:	E82CA319046187253E68CAB2A55A961C3E7A823F
SHA-256:	F7CD6EF118680F9B5550C2F5D8E89B1416E3E102624C72939883AD98C4FEBFC5
SHA-512:	FDDC460D7AE53DF717C9D58981019AFF8A100503F324B9536C5233FFD5AA5796509899C140F1D2E6080D5E6C8C5B6C8E9F86F0E9CC9F1E5DB576DAD6AB60FEAF
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn_4i42c7e9IRIFDV_EAGw=?alt=proto
Preview:	CgkKBw1fxABsGgA=

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	14326
Entropy (8bit):	7.979540023797982
Encrypted:	false
SSDEEP:	384:rz5cEEkwspMIsypfgMOyH7RfKU7XgsFK4hglpvetz60uvU:X+Kjmyp4MOE7VnmfeF6g
MD5:	AEDF55EE1D9C4BC1B81BF44525BD1479
SHA1:	6C9CE52753B6BB1B93510D0DF97A5D8454DDE702
SHA-256:	D1C898E72D9D262EC47F908A11AFF57C7D0283818F7BD76193EB1C31B5DDD5D0
SHA-512:	E2F73DD96B79C26EC9E23D06CF855DE4E7FA5BE5E890F31D0D1770051F0464BF88EE6A4C2108F887F92F384CDF8A2C773B8ABC4257D46208F3434969C7CA37F6
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/product/personal_bank_accoun/nab-classic-banking-account/master/_jcr_content/root/responsivegrid/section_container/image.coreimg.95.512.jpeg/1698378048495/classic-banking-banner-3000x1000.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@..................6....#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma.................6.mdat.....!..,. h@2.m.@...A@.+E..@?.C..6...k0.~....Oy....U.+..u,....s...u......G.}i.kxV...N.....R....i.j.J.l.LO.c.v.0.'..H..)...1....o..%..'....v..r....S.w.t...?..}.24K^...9O.D.I7.....8.....;.2..:.....6..@f.w......1...5..a,..k+....hq..7.....}o.....W..@q.........]S.....}?..s.)....i:E...zt...D..%.(K......g..IiR.a,........`...}8.Yl.......M.M.'..yB.6.....x.S.<.bEB....p]..<..k.s...?Li_<...^.@.E..T.Yq........km......%..].w..b.4.L...&f....{..T=...r..;C.qa.._....N...l.@. .,..&..(zLC.I5..2..30\....}.0Q. .L..4...f.....~..M.t"R/.Xz..Y.j.h..BVg.p`.......H.'5....6+...>.}nZ-...M-..B.....W.E.`..."..6.....?Q'U.U.%k/..6..[.&.....{)....&.+.T.......]v.%.y(WSRZ...-.B.......c+..{J...9E.s7i........%...9...)I

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 277
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	6.5956559111503275
Encrypted:	false
SSDEEP:	3:FttuQQWOv6olTGrbRiA7WCdPhX6OyqcXV7mk/knhqDNl:XtE16HHN7WClhX6OyZ0ksnhU3
MD5:	3DEF6BA5D6A384DD50041EEB01803D3E
SHA1:	D6B18ACFD8379A8A3358470D6FA31919FA614301
SHA-256:	C28B712A2D38674E02E3ADBEE9927E4C2818F44A02B7508561D0240D3EFE1FE1
SHA-512:	58643CC58FA36455AED68A5CB9A7E00C3AD83E170332C9B752F9A9CEA26FDFFF15AAD5A363BABD72F46904B1BBBBB9BFB3C7C668E997434641AC1E6D730E3766
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/scripts/script.js
Preview:	...............@....0..,..<Xo.K.;..#..B.w...E..../0...M%.s'.........\.........#K....._d..4p<A}....r...............A./z..;.P..+.@N......[!K..<./.......

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x184, components 3
Category:	dropped
Size (bytes):	15484
Entropy (8bit):	7.943971345631066
Encrypted:	false
SSDEEP:	384:GQFMY8jT9y4C68Nv2+gdxzZjHNOxMW7Hj7cgx5TwxSq3K3bYW3SUlO:X8jaBNv2+gdxz/OxNj7dx9wQ9szP
MD5:	457CAF4870A8E4FFDA04D5DBAC840E14
SHA1:	34D2B8749E7786E08E337720C33000A55ABE1FAD
SHA-256:	D443471DB69277383D51EEE9EA302F4C57F8430177F9461BEC62704526D4385D
SHA-512:	54A0CAA27A729EE27B0EBB940916A70AA5A76C39F973328936597AAECE9D069244208E8C5B34B6F4CCF9845C361408D5EE234F68E45D128BC3C2B03DCDBB80B3
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8................................................................................................N.6.VZ.1......35.vvb.#.n....+l.ZW..z..7.R...m}.<!..O.@..I.._(...]...w...i]{w...v...5..........g^ ..........n`.g(s>0.........2S......O`I{....I....u..2r@Y...._xs.L......L.j...dY...;...._Y....k/..../.R.....U@.."bT....,...v...w..ex.u7.K>.l..<\|.x./=.d...j.Z.]m.G......QQ.QR...{.gZ..N@.8s....#.. b......).gJ.kZ.M.......Y.0/B.......bp&\|..a.............).....~...m..B....-..\|I....@..NG6..v.7!]A........................^.4.#.wYYOS.......E..;.{.o.}o...0-..e..q..2c.fY3.B...mh........"o.....{k.y".s.........N..3wV5e.V.sX.E~.E.k..v.]sx1.....*.....q.k-x.CJ...h....S.g.H.._?..gs.a.}....].Dp..'.v=..[[.........h....L.D_.+...`..?l.6c.......'.6.]...C.v.x.(......;..%.U.k..)J......[.-..vz.....h.`......%.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 3000x1000, components 3
Category:	dropped
Size (bytes):	787346
Entropy (8bit):	7.988735415701071
Encrypted:	false
SSDEEP:	12288:wUUDVWv8fpRHxFJBWZJtCP6ei/IBzeZTDTpSDHlLEn97125ZFtrO+7+hV01G0X8F:gQyp1xFWVMpeVTpGLIEFtrneV01nuie
MD5:	2BE6E593256989A8B6B6A14848C68BC2
SHA1:	F69EEC0CF8C54A6419E6BBA92DB8E02D8A70596B
SHA-256:	D748750AB7D82FFF00BFD22E5B877EBC96F6733C6D4858327BD56929B8DEA6A7
SHA-512:	8E3CD376512E3FC895BAFEA703C0386EBDD4350ACEA238E0ADFAA5C34E09F4ED0BB7DEBAE42AC28C0DAEB37078CEB3F1A51B74A416EA889B8176F905D547A870
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9..........................................................................Y $.H!..@..! Fi..S`...H.a$.#H. .I..$..i..9.$.)$.-)T..IZ.iq2.....S...'.6...$....hh!DD.........H.........D..$..IIb.H)"4..[iI..)...M$(4H.$..F.&$..$(.d.:.&.. I.. .& ......$a@.P.$.e...E$.8...4(..`8.V.........+$ ...$ju..@..2.$..L..I-.6.b@JJ...(.........n..)"HR.......$.".R....M:.!F$!.....iC...@.F..T.$..a(..J.....&.6F.h.....-. M.a...Y...6..K.R.I6.96.........P..%...IR..B....pH.pH..2.i$..0..h4.....ZI.)CA.....K..!lJ..k..2.H5.(Q...M...K..I.".yD9C.&...I>.@R.....N.d..m-.66...0o!...cA....i[f.'....I.@.. I..BVi..&..2..$.I6.64..mf..Y.....y .u.m... ..t.....'.RH.......... ....`...ZH.$... .....0.1A$.....Xi...$..n....S@....qRH4De$....`..qq.dR....%...$.02#.@.$......."....X ......1.e$.m..I...$.3cf..... ..<M4.D...rI0$$.BI,.IRFJR..... J..h..&.J...m...`.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142444238&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37556, version 3.393
Category:	downloaded
Size (bytes):	37556
Entropy (8bit):	7.9934507941592505
Encrypted:	true
SSDEEP:	768:AGndznZwDlf169GxCNamXBWA3g7iRLL133K6oS1DalUzntcl3d6QP5Eg1xQSC:AmTv9LamIAwEVnKoAEtclZ5EGO
MD5:	9A10A890625B9D0F65807CB899646A7D
SHA1:	6C52ECA74F8B90CF11491C1C82D98DF2E21130AD
SHA-256:	C20F9BD9921AA033D0B40A2C8646748E74D9B958A9951F2082B798C1D30E1718
SHA-512:	437341FCCA7CAA36A808663AE71B3462155E8A3CA151D7C5F800C8BFD8C2789638607E7CC7FB8F01F976EAE2DB92F69B9E7AA2C067DFC37C605CA03AEAAA6924
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-styleguide/resources/fonts/source-sans-pro-light.woff2
Preview:	wOF2...................G.........................F?DYNA.M..:?GDYN.........f.`......\|....6.$.....B.. .. ..[[.fq....q...>.E.,Z?\|........5!.{...._..7........?.....1...e;...........0....T.....%z.d...J......V.....D.H.K#."....53{..`#b.m4F7..~.....6..w....m..?5..3c!`..V.WY.u..}....%....o.5...9...1..c..uz.....y9/.^.K.....>..9/HN.....B..C..$. !..!.. A$..!..B..$...A4]3.[K.(!.,..+bj.....<....I=I.P...r..1.....9!....c...2.W."@F......X.=.m;.T...'..!......,.. e.6....lj.%.@(].a....%......w...5k=.Z....W..m...>.9.I.u.Y.)w......U.H......e....#z..W%..3'v.....s...s.j..o;...z....auIi..H...$@.E.u.6..x.......P......?wZ..g...8mM.a.....1q2y}vL1.gO..WB...."...M.-..3O=..J..Dr..R..C9..$.....hBB..%{...a(;...f... )g=..3.\.M...6.7...E.t.h....n.m.m.+.6....=.S'w.X.5..]....U....H.......3....S........JC.s.H..../..&.IN..J.[G.qo,1Li(..SjaKhJ.$0.........vv.....Yu......f.gw.6w..c...s).n.E...k.!.....r.....k.s......~.[@.J.........]q.;.....R..IJNR.5C.#.2.r...A.!......Tn]......u

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142440038&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59053)
Category:	downloaded
Size (bytes):	153076
Entropy (8bit):	4.645149786163083
Encrypted:	false
SSDEEP:	3072:LJ+Pq8VVdeYRHHFcT0hbXghosKYxCxhrrsNsCE:qL8hos9xoP
MD5:	4E70133DC9B736496C8B1BFFB3BE64EF
SHA1:	D2E0496C0888063D675ECFE4FA9C8D529884A955
SHA-256:	94A0273E9996DFE5B2BC9B3803813642A1CCE9BE750B9C0F071F21076D5903F3
SHA-512:	F0B5FB48D6697E417A1BBD8EF4DBE679C3B5E5B292ACEF83ABF93DE7DC00C30C3C253CD1F922D5EF0C1DB84B8EC8F52D4234F8F657A333826BD7DFF224E10E30
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner
Preview:	<!DOCTYPE HTML>.<html lang="en">.<head>..<meta charset="UTF-8"/>..<meta name="viewport" content="width=device-width, initial-scale=1"/>..<meta http-equiv="X-UA-Compatible" content="IE=edge"/>..<title>IB login banner - NAB</title>......<meta name="template" content="channels-iframe-template"/>.....<meta name="robots" content="noindex,nofollow"/>..<link rel="canonical" href="https://www.nab.com.au/personal/online-banking/nab-internet-banking/ib-login-banner"/>.... .. <script>. digitalData = {"components":{},"page":{"pageInfo":{"site":"nab","siteSection":"personal","siteSubSection":"online-banking","pageName":"nab:ib-platform:login"}},"user":{}};. digitalData.event = [];. digitalData.page.pageInfo.server = location.hostname;. digitalData.page.pageInfo.referringURL = document.referrer;. digitalData.page.pageInfo.siteType = "responsive";. digitalData.page.pageInfo.sysEnv = window.navigator.userAgent;. digitalData.page.pageInfo.templateN

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1199
Entropy (8bit):	4.762697214785345
Encrypted:	false
SSDEEP:	24:Yo/8oA885CqAipXwcU8inXNIDMIpX96cr:Yo/8oAZ9AYwQ8T2AQ
MD5:	6F89E7CD3B4229021880AA0A001F1AC2
SHA1:	4C14239443270943939088FCCEDF2A6F4B343F78
SHA-256:	9D627819294F5471ACC13B134F721ACE61968AF1562594ECBAF1E739821CFD72
SHA-512:	C2CF20105232D4E279B244E1C8BEA397C69E5853972C037F9FA64174829217F2A200F114A625499427AB37C1BCA9691470FCD5FA1DAB20F15E5A15BF336A40F5
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/dcapi/cf/nab/content-fragments/disclaimer/debit-interest-charge.json
Preview:	{"properties":{"elements":{"title":{"variations":{"channels_variation":{"value":"Debit interest"},"app_channel_variation":{"value":"Debit interest charge"}},"dataType":"string","name":"title","title":"Title","type":"text/plain","multiValue":false,"value":"Debit interest"},"body":{"variations":{"channels_variation":{"value":"<p>Debit interest may apply to overdrawn amounts. Learn more about our <a href=\"/content/nabrwd/en/personal/interest-rates-fees-and-charges/indicator-rates-deposit-products.html\" target=\"external\">personal account default rates</a>.</p>\n"},"app_channel_variation":{"value":"<p>Debit interest may apply to overdrawn amounts. <a href=\"/content/nabrwd/en/personal/interest-rates-fees-and-charges/indicator-rates-deposit-products.html\" target=\"_blank\">Learn more about Personal account default rate</a>.</p>\n"}},"dataType":"string","name":"body","title":"Body","type":"text/html","multiValue":false,"value":"<p>Debit interest may apply to overdrawn amounts.&

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55331)
Category:	downloaded
Size (bytes):	968535
Entropy (8bit):	4.888963896609446
Encrypted:	false
SSDEEP:	768:03oHCyibTcVkK4JxeeziByqe+ziSz/hC5JAmUD8uWyU5ltG3cr7nb7+5bcSul7DL:AOVqsWDMjAm0vFbodxjZ+Mh/FcYTfiz
MD5:	069E38324FCBEEFF98ADDE5C8A1BBE1F
SHA1:	816D0E596B7E3738EB1739B9D7B38ABE683620A3
SHA-256:	4C1F9CDBDF3C60B63889F352D9A9C2C94823DC48782F0A178148D9A6673689AE
SHA-512:	C971273AD905B0E67826A2F8EB67B553DDE15AC766D9B8B0F923CDBD609CC36CC4C3A34F28F4F78A1BAB6C16BFDA2A12855DAEDE04EE9FF4D5706AC2ED3388F9
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-styleguide.069e38324fcbeeff98adde5c8a1bbe1f.css
Preview:	/!. NAB Living Styleguide version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */..nab-quick-select .nab-quick-select__selector{display:flex;flex-direction:column}@media (min-width:992px){.nab-quick-select .nab-quick-select__selector{flex-direction:row;gap:24px;align-items:flex-end}}.nab-quick-select .nab-quick-select__selector .nab-dropdown:first-of-type{margin-bottom:16px}@media (min-width:992px){.nab-quick-select .nab-quick-select__selector .nab-dropdown:first-of-type{margin-bottom:0}}@media (min-width:768px){.nab-quick-select .nab-quick-select__selector .nab-dropdown{max-width:343px}}@media (min-width:992px){.nab-quick-select .nab-quick-select__selector .nab-dropdown{flex-grow:1}}.nab-quick-select .nab-quick-select__selector .nab-call-to-action .button{min-width:128px;margin-top:24px}@media (max-width:767px){.nab-quick-select .nab-quick-select__selector .nab-call-to-action .button .nab-button{width:100%}}..bg-nab-red{backgro

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447489
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 25244, version 1.0
Category:	downloaded
Size (bytes):	25244
Entropy (8bit):	7.981124522053015
Encrypted:	false
SSDEEP:	384:ij56AFjhDYV8iL0329Voer5kvW0GBJbFKu4thUdlPMOceRZjWx1li5mTtpTgvs5A:45TyV8CO2zrWvWdxFNmKdKJe3R5ZH
MD5:	6D996A0EFDA7C236B094E013F6EAE109
SHA1:	843155CA14E43EC7D1A6F099734942FF33720F08
SHA-256:	C7E96542CB7C5E6455B76D3645823956BA90BFA5591F79B17528DE5F95E78483
SHA-512:	7676F2BB8DA98B42936AA1B979D46303A12F3A67FEDADE6E122A6FEAAA4DEFDDA6B67918E574E4BDD903BA04D599EB0B0E4C1FABEB1C39BD669B0D53999215DE
Malicious:	false
Reputation:	low
URL:	https://x.nab.com.au/static-shared/nab/fonts/v1/SourceSans-Bold.woff
Preview:	wOFF......b.................................BASE.......>...P.s..FFTM............j8..GDEF......."...(...$GPOS...<......2.rn..GSUB...4.......vX.}5OS/2.......X...`j..icmap...X...k........cvt .......8...8.;..fpgm...........eS./.gasp................glyf......A...}..1. head..RD...4...6..y.hhea..Rx.......$...+hmtx..R...........:.loca..Tl...v.....A. maxp..U.... ... ....name..V.......'\.Lb.post..`........\..C.prep..b ...s......webf..b...........T=x.c`d``..b..>........<.&.7......<...6..`d`...a`.......(................=..............c.rx.c`d``..b... ..........c``.`.......x..Z}h.....cE...UR..j...q.FvU..RcGQ..uE.Z.H?PJ.6)nZ\R.O....A.5...1F..#..5...".!.Gj.q.C.#..8......o>.vvowoN..f.....y...*"J.+..U.{....~..M_...O.T.S..m/....v...c...q4.W....Mu.....({H.0Ln...[.......<A...C'.....L...t.O..nz...c..ez..h.........=..O/.'C........w.4F{0...F0.........w.%.ep.c...{..a6G.]..P7_..n.).........z..i..0._..=)vr`....Sz.8..gx...N.Q-m...6q.4....L.{<..Ol.h...j....'S.7.....Q.-.p9.xr.Gp..1\].$...

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3035)
Category:	downloaded
Size (bytes):	186827
Entropy (8bit):	5.527064902056375
Encrypted:	false
SSDEEP:	3072:LIbPBREyVmbNtdTWN8ywFOGFUxwJlINWfrjmxFCIGTJeq:EAyYbjIMANWfrjY8LTJH
MD5:	1118B1000E2C4BBC1539F9C240EF13DA
SHA1:	E08BF2171580885639B34294284C8CDEF25596E1
SHA-256:	9C0997BEDE1FE3AAC4EEBC5AEC603AC954E569CDF20A183D67C171883C2F56C4
SHA-512:	B6BB129D68ABF655473B7ECA957DD4F8D5BCC787D3E06CEBCFC6F3739A071751B39629DCBC7404739E08D5CDE290E373B84EC3A3D38C7802D9B8B2F125E595A6
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=DC-3347639&l=gDataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},da=function(a){return a.raw=a},ea=function(a,b){a.raw=b;return a},ha=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ca(a)};throw Err

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	117830
Entropy (8bit):	7.998149018421363
Encrypted:	true
SSDEEP:	3072:eQeLvhJ13IolTvoR7kNb/yfDTzmZEyQEzZMLlnOS:ezLvTvg7YufDPmDXzZA
MD5:	1E1490D14027B98C9AD7F51B0C7B48FC
SHA1:	0F7C2D2E74F5206A13BDE5EBB2C7B05223CE23F8
SHA-256:	CE6B55BA1D26E83567F1400720351EB493863B6427BFD3F86ED29B24938FFF15
SHA-512:	9EA6EDD794E28E324FA658900B4421DA08CDF772DEC02BA8353404BB7EBC4EAE719E8C7F82396095A58857C07D9030DFB87AA194156F8CE26BA491CC4E67691E
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/img/business-woman-nab-star-2500x900.avif
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................8...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma..................@mdat......g......B2....@...A@.;O..7.;.....8...'.s..4...X.L>"......[.....E..I4j.c.i.^q......L...QK..3\|..........N...N.y.....I.........~l...n...j.0"...O.....P...-i3H..B@I.B..'.U.$.a@aU....{S.3:...:G_....f.n.^.[.e.........+...f..r.o..8.%.W=!..)./...../Z+.8Om..q.I..>!...rm.....Gd...y}vM6.....5..w........OVbr"..P.....'.^.OE8.....7.Sf..1...(.....Hz....z:..GGC^.....>.JjWp......k...b.0E.@.qY+...W...h..4.F^.2.O.W@v.{.T:\.......c..6...v........$/\|{...f..... ..t......B.a..~..@...i_1.;.\]..AQ..^G.@.4.....0....6i`..+...{.YL&_...?a'...}>..@..C4i...a%.@.......}....s0i.~...x......V.CV.P..4.@.S.....C...._.x...kt.....V.......C.g.X.u.M.k.};.s..g.?.[.N.....=`/.4.`^.L....I.e...d....t.q4.QU..cI....2.......#.w5.......B

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5138
Category:	downloaded
Size (bytes):	1651
Entropy (8bit):	7.86824646213799
Encrypted:	false
SSDEEP:	48:XmUBHZkgRzc45vIBZyJtOu05EAeYG8ZpIkh87z3No:Wm5Jzc45IBRXeYGSpIk0No
MD5:	583BC578749DF017C7E4A3851D82B94A
SHA1:	099D526CC6659C56CF1030CD78297FD7BB1ADE20
SHA-256:	95C52CFA8BA98C6B434DF175AC053112E55E4E9D47A1388C18D44D795DC1C30C
SHA-512:	B2F6D0BC2A600F168A8EBF4F013624DF0138C5C81748F8E3D55CE9115AB0F8DB0259E827EAC0D5AF8F382E8AFC446A94F5F6B9E063775B3FE02CED2CCA3E41E6
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/img/nab-logo.svg
Preview:	...........X.o.7..W.+.l..%..!........H/.m.....d...R:.I.6....-Z..Q..}..d......f>....j1.o.]p......Y=L;g......r.YO..fs..dr.....Vw..:.&..;=...^.............W7......v./?...y.iW...y../.....';.f.........d.Y.....jX.M.7..s.....W.i..v.....u.Rxa.;.ti$....k...L...(.....R.a.c7...(....Q0~...N.n/...i..t.....I...\/.a..n......\N..!B.l<C...`$..\...uDd......-d.^M., F1-0.j.{...-x..1.2..t...m,[....-...r.....2................E.%..@..tA6f=.&...A..v/...P..zg....G.k......bb.K.-B..>.=.s....(+ ....A........(s...G.....$\|}...Z.....>.x$F..yC......$..q..1....>.....$....Z......u...U..'.1.H...-)1d.r...I).......Kdk8.a....,).A....k6..LE.(.C..P......E...e<....^....Ky\.J....#.......8.).5F....../.<..8..p.$.b].....j....kF.jC.x~\.g.!F.&.fR.'........f4.j.5O:c...T....'......`.Tx..I.%.Z7X...,/T.....*<j........9.&.>..S.w..g../S.Qi...k.T.cJ.9.;:....,a...6!.B5XC..s...w..{.({.2.).y2.....z&X...:..].6.......k.......u.84..8.2P.7.U.o.4+.(@...I.\.3.B......va.]..!....^.I...[.s....":.....

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2464
Entropy (8bit):	4.736131854413083
Encrypted:	false
SSDEEP:	48:c7SGSOCMvifQRljPUqNYKYooh7lwN1a+NSOJjH26EAYrlnL+:GSOPvhxPAqSOl2fx+
MD5:	F598F6DFA7D258E5806A26D2286F8175
SHA1:	792F398D58E9374E85E7D7886E67EA10BB72F0AB
SHA-256:	3ED69889F46D58F0D4D0711FF8D50538490A28587BFD98B727FA213AA3861C45
SHA-512:	42D44CFCBFCDA977A2D484CD0C0FFFDCC8540A2722E5F3F2665CEB1343F74EAB95F3622992451A1EBDAE6B10FBAC23B12882D398505602CD86ED3A3E0ACA1EC7
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/favicon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="72px" height="72px" viewBox="0 0 72 72" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>nab-app-icon</title>. <defs>. <path d="M32.8877533,16.7311233 L44.5296389,2.27514153 C44.8788954,1.80502831 45.228152,1.6875 45.4609897,1.6875 C45.8102463,1.80502831 46.043084,2.15761323 46.1595028,2.74525476 L50.1177439,20.7270857 C50.2341628,21.0796706 50.0013251,21.4322555 49.6520685,21.7848404 L35.0997116,39.6491431 C34.8668738,39.8841997 35.0997116,40.2367846 35.4489681,39.8841997 L52.6789588,21.3147272 C53.0282153,20.9621423 53.261053,20.844614 53.7267285,20.844614 L59.8969278,20.844614 C60.4790221,20.844614 60.4790221,21.3147272 60.2461844,21.5497838 L45.4609897,39.6491431 C45.228152,39.8841997 45.4609897,40.2367846 45.8102463,39.8841997 L63.1566558,21.1971989 C63.3894935,20.9621423 63.6223312,20.844614 63.9715877,20.844614 L68.628342,20.844614 C69.7925305,20.844614 70.0253682,

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2031)
Category:	downloaded
Size (bytes):	46791
Entropy (8bit):	5.511594957733498
Encrypted:	false
SSDEEP:	768:uwtKspZtBR10Ukvhlq62MVfnaCWHwjeFjIwCEj8:uwEsz510bJl1baXHwj8jIw38
MD5:	94494036E1A706191C42F41FF66C0DDB
SHA1:	659A71B35B5E534329F04B830ADC29414AD70C69
SHA-256:	66D9C0CF63B9DBEF9D6ED99B19EF6FAB7BA3E371CB2DA6779EDDA8119E1673A9
SHA-512:	AB28F3A1D71405950DC5D16E49F79716939665744840540605A41A06E09BF48786C8B8F381294747E8CD84EC5FCFFDBA1D9CC1399AACF26290D969C9841643FE
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion_async.js
Preview:	(function(){var l,aa;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ha(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ia=ha(this),ja="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},ka={};function u(a,b,c){if(!c\|\|null!=a){c=ka[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function v(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in r?f=r:f=ia;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ja&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?ca(r,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.501989214144077
Encrypted:	false
SSDEEP:	3:YHU126JyfcsQd7EBw0WPzWkpRGlDlHUylJn:Y0ccsQd7R0gYlRUylJn
MD5:	DF763C70F54036C3E400525C9A7AA45E
SHA1:	F358FBCC323299BAD81ACD39C87FBF37ECF58C50
SHA-256:	EE52FDC82792EBAD670B687F3A97BA054DDAA09EEF54D5D4BD72B3B1797FE048
SHA-512:	5832D15D11A0FAEBA93B07A873C2080EE7721B92EA5C5B88008DCCBA694851BC2749173A591634854F163F5A0E1422F7933C708BDF978142D8263A89808A3C01
Malicious:	false
Reputation:	low
URL:	https://brand-messenger.app.khoros.com/nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142442438
Preview:	{"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.173729213216515
Encrypted:	false
SSDEEP:	6:hxLchdxkGXbv+EQtNVkA7G86XIGYNGY4HX4Qb:hwxkOgNVkA7GXXIVV4IQb
MD5:	21E34CF6A03F570DF49E212018A567D0
SHA1:	F0BE4058936850AE0163F5137600D14B6632BBB3
SHA-256:	0A23512EA579554AF1F2614D6DEA6120D38660028FC7624C71A978478FAE0EB6
SHA-512:	85F32EA67B64F49CB438A32C9F77D2D746CF67D3387C4C9D5E78EE181B7FB11F444D6DC17DEA19A69F8EFA5D4D52AC016E6EEA78A741A6658CF86C15B7FDACE9
Malicious:	false
Reputation:	low
URL:	https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
Preview:	<!DOCTYPE html>.<head>.</head>.<body>.<script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script>.<script>. var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};.</script>.</body>.</html>

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 87462
Category:	downloaded
Size (bytes):	30381
Entropy (8bit):	7.9924112830760645
Encrypted:	true
SSDEEP:	384:aYrgbg04BXuLxSJz9PKT48kFi79ntmLqcKdCpoyS5zRiAVTJJLBrhbSCa8aETvFQ:07gJzcaKzmsylS5IAVdJTv5mJzRp
MD5:	1A174FE9CCAF907F4C9196C1EC0F4D88
SHA1:	7DC019D53AD9510499A5812466D8F0DD3DE17DB2
SHA-256:	3FA1EACA0002EA342036F7908333DDA0B328904038B1CC400CE3859BF6B0D081
SHA-512:	E049D2B04FF041C8D165C7F45B8551B80FAECF1047D80E8178BF716C0CB34ACC318D59B71AF078E37DFF874F19EBDB53F9130528F6AEA08CF1FFD2034729707D
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/scripts/jquery-3.7.0.min.js
Preview:	............y..6.....z...0...%;.C5.J.L.I.$v.a3)..u3f.....Q.._... E....&5n......,.s.xt..[Q..<...tv...=y...7'/..R...$..I..Du.......9..w.\|ZV..E....'.O...g....\|I.St.lkqR._.`.......8W..Q.O..l[.0<.b.6e..e...iV...B.."..f4jk..\|MFm......D...UUV$0.......Izr...=....Izb....j[..E..G./..2..\.,......O......8..I)x.....O/...U...^.T.RLk.Xv.?.E..~'M...-.l.p.U)W....MqO...g5....W...r....k&.n.r...\|..\^...rz..o.7U....g%.6G.K.............6..mX.r{}!.vH.T..x{......u.......p".E1."...\L....3...m...F3VW+.#K....W...l...\.f..`......e.<..U%R%^...&A......\|M..w..nX...Nry..$.......T.%..LJ...4...^.4...2{v...).t.VB...LL+q]...f.q..(..R.. :..i.&k)....i.g.}...Q<@.....~.../...l%x.:.f......4...W........VC!..r..GL.#..zfv......{.C......s....\5.]q.c.gg..d.s$.1[.N{...:......,oE.,...PI7e.].+1...w..F..JY.j.Re.....fL..B..}.Z..=.@n.].5....wrG.l.._....3.I..=...F..w.2.,...ZT...z.'...fN7....#IT{&...P+Wb...D$N...']>...@K.......2..)(.....:0...Sa.%..V.H4j(a.W.:V.......Y&s.g.F

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142465200&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x170, components 3
Category:	dropped
Size (bytes):	26791
Entropy (8bit):	7.981435951489877
Encrypted:	false
SSDEEP:	768:06DG8HA8vYl5tGLGzrjG8IHtOWg0r6uHV+YRveZdjgC:NNgpl5tGSnjpIcc6uHVdRvCdjgC
MD5:	000354C5966381895003A5854CD328CE
SHA1:	8B15B9A8F81CC63B4A2415A2CB8DA91F5917B3DE
SHA-256:	2F5B40831370ECFE2DEF55B7B0DB9FCCE3FAF9EDE3E6667F4FE1A55E806A3630
SHA-512:	B0E3E52360028CF6E905BADBB8260180A2E07400D19CA5A484E58A5BFA4A00165BF4ACB10FAFEF828356D4699310B9A12CC05C3C8D55A2A2FD60F9CA470D21AF
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........8.......................................................................{.,....,S...'....v..z..61..O...J.v.2.L0[..m.?k........-W(.......:KI..i.a......eV..{$..H>.K.pmH'.mZ.,.jZ...:...6..Q..j.e.O..F...\|.6......a.....L0....t.....%..v....r...n..2M.:.....2.F).EY.!.0..&......8V...f:.n.~..?&'C..&..cN..^....!......'.gv....].I...A..-...t8g..zs}...$^.U+kH.?.F.h...XlM.`nM..M).L.6.M...d.j9V.\|.%.3G......9f.r9f.[..w%vj......p......!]}.Z.....G_...W?..b.<,.....j...n....K...S.=hr.Z.mN.>...U.....x+.....iC...K..6Ft=&."...2lP.....z..y.&...h...".2..........K..M..(..~S.&t.oTp...F.+gj..w.....U?..(....!..Q..LX.}..U..J.J..I.u.^.tZ..y....fwg.....N..y~.?.9....h<......6..m....L..O].=....wb.[./..M@.,..eF#.zw.._....U._G.....CH9....6..G..b_5..Ckh.G..,.}.UvD......J.<..Z..>':1a.(m>...].x.c.~m... .].S.g9Js

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x184, components 3
Category:	dropped
Size (bytes):	18577
Entropy (8bit):	7.973789990121832
Encrypted:	false
SSDEEP:	384:iFce3YxWRCQS+y50MJbZhA0kOw4gNILEmHSXbbK1neSiDf6I0XNP4fzuK:V5WRo13hAu6Ni7SPK5eSi+I0I
MD5:	905E01B7605FDF4B0689972EC9F0C887
SHA1:	1C6303E5F1BB2F10215509020B64FC30247296B9
SHA-256:	48D6DE75DDDEB754E841AE592D877CA790535C5BF80794D190330C83DC49926D
SHA-512:	8A19E02366A5FD1EBB79B4D87139E0E2EF7EDEAF8CD1411B09E0B1B6D1A9523761402C1A18A7B2B2BAE07BC37810C594AD8EE2EA6DA4CFD4A887B906D228C000
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........6....................................................................f.7..;...Ao".t.. )Y..C../.7.Gfi...R.I...VP.L#V.ah#.qI.Iv.......z...z..G....8m...Y7..<T.PX..jh..(....U..............m. i_....9..>~.....}7u...Yk.&Z..a........zJ..1...5.d..A.l8.-t.?...6...P......tT0:.L,w.=..Q.k...\|.....h./.VZ...@.B.....<-,j..]-...U.8.Uz..!e...R.U.L.u.b....3...7...".........O.........-l...^-.}......K..xB.C.....D..a.Z ..r.c..o..........y........}..g.s.{p.E...a......J..............P.>..........!]i...(.n.Yu....y;6.H._[...o.%-'.c.k.?[y...giZi7a-)(nj.Sk 1..P2..Q.7.l@....h....I..[&F.)..".........>]'...8l....-z.......7:..^E..>....b....:..E7.y..R.:..~T..=}.}k./z{w...m.......W.7_Y..^..;.,.\|.8.....Mx..b...Y..FI,..d3.6.EC.5i.......J.]...C..d..4.Q..!.u.1".*.z`.'.<W.y.....\|F{..........^..n..w..{n._.z....

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x170, components 3
Category:	dropped
Size (bytes):	12970
Entropy (8bit):	7.947069405120865
Encrypted:	false
SSDEEP:	384:p3dabi8WBEWtAWiKVK6um2hbQ5xG5n+J/lEuejghNAU:pNjtZPTVKDhQGp+UjgIU
MD5:	78185F04AD3EC4AFBA40885EE16F8239
SHA1:	7E8261D3BD92BE167947D368EA75DC3189E5DB2C
SHA-256:	CD77D3298639956DB6214F84ACB8597857A9CAA673A1CDC1983D228B7F158074
SHA-512:	0A3B718B5553C7A2A45827744037C63A54410CE6900885111F825E31C107782C7DAA14561FC9FF333F6948E33302F72303FC8AE1E781B032918EE8EB121F1C4E
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........9......................................................................`...........<......HDHy9C....pD.D.D.D. .FM.2..T)U".T)UB.T)UCb...............1...e.._....K.p...&ni.OA.yJ.i....I....5.\|...s...........G..SA...4t..5b.U...\|w...r.IK.l.F.T.:UP.U..........7.....U..I..I)....BD.b..5..H..>....a..jT...e..D.\.....m_...{yS8....H...V.}.Amm{...e[=....".R2...>.M..L.6=.........c......M...~..z..>Y/.y!...9.(#.M.0.>TE.C.)...eY.~.....0.U.EX.U.?.g.v..j....V).b.V2`.E.ny.Z.:.U........?..3@.=..uz.y[....lb)<."...&.A.$.":.I..i.....>I.gV.......S..0.T.eH.T.k....1..R..ZeH.T.eH...9[Z.v....fsx......../...!..."..2..k.U...0T...5'....#.u..`....P.,.jM5.m..[.q../q).Y.l.p.or<9."Y.d3.i.Z`....9..}n..o.\|...]=f22K...i....f=E..6........l..........-..h,0F_w.#..w^.K;,........C8a.9\W.9..7n...nD....4.2f..VSq......r

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37556, version 3.393
Category:	downloaded
Size (bytes):	37556
Entropy (8bit):	7.9934507941592505
Encrypted:	true
SSDEEP:	768:AGndznZwDlf169GxCNamXBWA3g7iRLL133K6oS1DalUzntcl3d6QP5Eg1xQSC:AmTv9LamIAwEVnKoAEtclZ5EGO
MD5:	9A10A890625B9D0F65807CB899646A7D
SHA1:	6C52ECA74F8B90CF11491C1C82D98DF2E21130AD
SHA-256:	C20F9BD9921AA033D0B40A2C8646748E74D9B958A9951F2082B798C1D30E1718
SHA-512:	437341FCCA7CAA36A808663AE71B3462155E8A3CA151D7C5F800C8BFD8C2789638607E7CC7FB8F01F976EAE2DB92F69B9E7AA2C067DFC37C605CA03AEAAA6924
Malicious:	false
Reputation:	low
URL:	http://sub.nabprotect-livechat.com/fonts/source-sans-pro-light.woff2
Preview:	wOF2...................G.........................F?DYNA.M..:?GDYN.........f.`......\|....6.$.....B.. .. ..[[.fq....q...>.E.,Z?\|........5!.{...._..7........?.....1...e;...........0....T.....%z.d...J......V.....D.H.K#."....53{..`#b.m4F7..~.....6..w....m..?5..3c!`..V.WY.u..}....%....o.5...9...1..c..uz.....y9/.^.K.....>..9/HN.....B..C..$. !..!.. A$..!..B..$...A4]3.[K.(!.,..+bj.....<....I=I.P...r..1.....9!....c...2.W."@F......X.=.m;.T...'..!......,.. e.6....lj.%.@(].a....%......w...5k=.Z....W..m...>.9.I.u.Y.)w......U.H......e....#z..W%..3'v.....s...s.j..o;...z....auIi..H...$@.E.u.6..x.......P......?wZ..g...8mM.a.....1q2y}vL1.gO..WB...."...M.-..3O=..J..Dr..R..C9..$.....hBB..%{...a(;...f... )g=..3.\.M...6.7...E.t.h....n.m.m.+.6....=.S'w.X.5..]....U....H.......3....S........JC.s.H..../..&.IN..J.[G.qo,1Li(..SjaKhJ.$0.........vv.....Yu......f.gw.6w..c...s).n.E...k.!.....r.....k.s......~.[@.J.........]q.;.....R..IJNR.5C.#.2.r...A.!......Tn]......u

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142435001&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	296094
Entropy (8bit):	5.084906159584867
Encrypted:	false
SSDEEP:	6144:RqLfh6nicf8Z5wPTdpM4mDiz1EsnFyTyxh3zOxPnS8kVLkIVfzYAK6r1Pp:R3w4mD8TFyd6TVfMAKMZp
MD5:	1FC733054DDB2E2FCD4A0F763671047B
SHA1:	876901983BC060337CB9D7A6196266E87948CE54
SHA-256:	B9DD2080AB9F46659B9CEB72FD93DEF941195E854CCFA6B5409A20C40A0425BD
SHA-512:	D32CD655A243F1BA22836FC2100615142492AFB0AD91CDE984D500FCBB240A29DC6CB3F647C728A9C3801B11740F60BC9FF47CEFB874D7704EA0BC4A0CB68599
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/clientlibs/granite/jquery.js
Preview:	/!. jQuery JavaScript Library v1.12.4-aem. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright jQuery Foundation and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2016-05-20T17:17Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	4.251629167387823
Encrypted:	false
SSDEEP:	3:LA1cBUgffSk:3bfSk
MD5:	22266ED023BF395949366B853B9ED701
SHA1:	2B24F57AD8B644E5214B3F7415625D69FCA0BE1C
SHA-256:	095DD5DF7729CBFFB1C2968ACB0064E59114A485377DAC9194D629EF4A280D25
SHA-512:	1269B77B68E4E608860597612C83BB2BDD8D9DFB8348E30374FC0B5E16F5516F115AA1528E0DBB620FA87B11C48AF102CD7B77995AC9A15BE8A3068CEF1BEFBA
Malicious:	false
Reputation:	low
URL:	https://ib.nab.com.au/nabib/tag.jsp
Preview:	17ev0n.lrsh6105.9p3zwcie

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (666), with no line terminators
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	4.741939168907409
Encrypted:	false
SSDEEP:	12:EBe/+gxOtQ2aOpSnLmLvessBCVp7dATM3s16HL5LVT7yodH1DLQD6H//LJZd:Eo2gKhLGBBWHuMVL5hTwY/jXd
MD5:	E520927634DDE7A378730BFC8C626E8A
SHA1:	43059DE0C7A178A595F1322DBC9E0E70864E8D41
SHA-256:	5367DDEF67DF73A2666AA9312B5B92094591C605B2166EE837C4A7E05B1A0B93
SHA-512:	15EE8714EEC3515D677B37065CD6DE4D568E068221940C83E5A5972C61C2C94CBA6D08FBDA127CA6188DC34377EE889A6E46F1F1695CD7DFD01CAEDB796CE569
Malicious:	false
Reputation:	low
URL:	https://collect.nab.com.au/nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142461000&tealium_cookie_domain=.nab.com.au
Preview:	utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"current_visit":{"metrics":{"12":0.0,"7":1.0,"80":0.0},"dates":{"11":1706142434408,"10":1706142434408},"properties":{"44":"Chrome","45":"Windows","46":"Windows desktop","47":"browser","48":"Chrome"},"flags":{"5030":false,"5275":false,"14":true,"5540":false,"5221":false,"5024":false},"property_sets":{"49":["Chrome"],"50":["Windows"],"51":["Windows desktop"],"52":["browser"],"53":["Chrome"]}},"badges":{"32":true}});

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10638)
Category:	downloaded
Size (bytes):	11923
Entropy (8bit):	5.5403361243723275
Encrypted:	false
SSDEEP:	192:Npz4J0QSUYS8MkvgnQ2kv5tQmltMQbG+TQpdi/rT:Npz4/x8Mkvcu5tzltMkG+TqdyrT
MD5:	57D9B52D8B424FE89D6262CB31CC2D18
SHA1:	0145C3DE18A24D0C5830471D3D76C15CB5D9D7D0
SHA-256:	615B6DAD2A7677D0464E9C8CA11558E143B1F964D9FDD1B547D8805A90094D1B
SHA-512:	0A5702A9BF427A3D898AAF4E47E88A9448ADEB05D9069A6E547519C629B79177104FF8C74A036E043E88673BBF24B65182BA473F2E851936C61D5D6B83924B12
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-login-options.js
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */!function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(i,o,function(t){return e[t]}.bind(null,o));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.153055907333275
Encrypted:	false
SSDEEP:	3:tWLPMiSNDrMPobI:tWoLB7bI
MD5:	CA9BB12154AFA435E22BC0CB0AEFA756
SHA1:	D766863774DBCC2E29FE56E9B1EF645796D6DFE9
SHA-256:	CE12B2906458FFB3648EA889F2BE28C5757EE21CF323C0BC9EA8EEE28A0FFA8F
SHA-512:	961BDDBD7FA9C285461C6E0DCDEA17D235432013E70473EF6D21FF518AFDD7BEC65838AEF7B13522D1FE99879E5CC3ED968EF7D9766AAB728FF85A149292B4CC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlG2bR8umE3fBIFDeeNQA4SBQ3OQUx6?alt=proto
Preview:	ChwKDQ3njUAOGgQIVhgCIAEKCw3OQUx6GgQISxgC

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	downloaded
Size (bytes):	951
Entropy (8bit):	5.232555692005074
Encrypted:	false
SSDEEP:	24:1lUdjGWpElL7p8bsIL7p8bBQsrmeQsnQs9AG9W22PFPIjPEWDeaz:6jZpcxqBxqBxmetTAQW22P1IjT
MD5:	7186B3F10226536406735607D2408546
SHA1:	10A6F18581A2DED390D376D4C2C25368983591EA
SHA-256:	789502239F473FBEA29AFF8E45747D822E0484506F9BACFEC4EF16EC8D681D22
SHA-512:	73B05B568401D902DFD2FF513418F04DF5C8BC0047B0453489CA5AF6AD29C33E6934C2BB330DEE9206BCBB6ABDCEF2115447B12C201690A1F82471511B0FAFB5
Malicious:	false
Reputation:	low
URL:	https://tms.nab.com.au/nab/prod/code/15e884c3d32788d21cefeb57d775a93e.js?conditionId0=404951
Preview:	Bootstrapper.bindDependencyImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;var countingMethod="standard";var dl="gDataLayer";var floodLightId="DC-3347639";var send_to=[];if(floodLightId){var receiver=floodLightId+"/"+"brand839"+"/"+"NABHo0"+"+"+countingMethod;send_to.push(receiver)}else{var ids=[];for(var i in ids){var receiver=ids[i]+"/"+"brand839"+"/"+"NABHo0"+"+"+countingMethod;send_to.push(receiver)}}var allow_custom_scripts="true"==."true"?true:false;var eventObj={"allow_custom_scripts":allow_custom_scripts,"send_to":send_to};if(countingMethod==="per_session")if("")eventObj.session_id="";if(countingMethod==="transactions"){if("")eventObj.value="";if("")eventObj.transaction_id="";if("")eventObj.quantity=""}window[dl]=window[dl]\|\|[];window.gtag=window.gtag\|\|function gtag(){window[dl].push(arguments)};gtag("event","conversion",eventObj)},3037106,[2977562],620824,[564146]);

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/collect/?pid=2270004&fmt=gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	4.256626910314702
Encrypted:	false
SSDEEP:	24:X3cM5iWSCl2qgyOOOZ0AEa2OIAAwiq4JDhf6IhYI:XRUWpayOOOZ5Ea2vLNN63
MD5:	E127A7BD1F76174C61BEEC90A8DA511B
SHA1:	2A7A73EDEBCAA69409AB36C45497D80965271E61
SHA-256:	B2CAFE2039B6D95B20736E5B0F384267B45251E701D9D5F1C8966DAAC16683C2
SHA-512:	1F6E954BFC6ED83B61FD2CA8CAF4F466545120989A05891A1577992DEB64DD235CD428308659A57F08C00E311581F72AF4B739DC00B8AE35D5225702ECF648D2
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ...................................................................................................................................4...................................(...m...%...........t.+.....`................................... .&...'.....{...h.(.............................................. .........(...)...)...".....Z...U...Z...@.......................~....)...)...)...)...)...)......).....W...................S.'...+...)...............)........{...............S.:...F:..>2..2&........)......)............................E.91..KA..G<..<1..3'.., ..&...$...'...%...$.....&.......................D.3*..G<..@4..9-..4(..'...&...+"..+!..+!..........................)#..TI..MB..G<..B7..?4..%.~..&..$...2)....x.....................C<..cY..VL..J@..PF..PE..5+........%.......'...................$.UM..QI..$.m...R.MD.._U../&....................................$...b...............].\R..".e........................l................................!.o...

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6713)
Category:	downloaded
Size (bytes):	11891
Entropy (8bit):	4.9998522793128926
Encrypted:	false
SSDEEP:	192:zE9mjTursk2jdu8S88U0ReUyJtO7ZWvvM:Desk2jdx/BU
MD5:	50A1BD955D3AC5166867D6655195DA55
SHA1:	B275E7E8A9F16C8B85F02D34496CFB74B5592A1C
SHA-256:	0B859A5476757EA8032B390165D82DBF75597C507583453142371FBC6CF21D33
SHA-512:	773C25A695C418F00A106EE2E51595CFDAADA8FBF567FB32B2F00CA5761987D5618B60A9DE7F0E816AF244CCE87F7D79196BB1AF52BBD6ED721C49FE49F7EC77
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-login-options.50a1bd955d3ac5166867d6655195da55.css
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */..show-main-nav header #menu-logo-container #menu #top-bar{transform:translateY(0) translateX(3px) rotate(45deg)}.show-main-nav header #menu-logo-container #menu #bottom-bar{transform:translateY(2px) translateX(2px) rotate(-45deg)}.show-main-nav header #menu-logo-container #menu #middle-bar{transform:rotateY(90deg)}.show-main-nav header #menu-logo-container #menu svg{position:relative;left:calc(50% - 14px)}header{position:relative}header #menu-logo-container{height:50px}header #menu-logo-container #menu{position:relative;float:left;width:50px;height:100%;min-height:1px;border-bottom:none;transition:width .3s}header #menu-logo-container #menu svg{width:20px;height:20px;margin-top:15px}header #menu-logo-container #menu #hamburger{width:20px;height:100%;margin:0 auto;padding-top:18px}header #menu-logo-container #menu .hamburger-layer{width:20

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	6755
Entropy (8bit):	7.929914860535792
Encrypted:	false
SSDEEP:	192:rG8vzZ/xmmvdYDqnnEuPJtPcY/idlJsk0yyivGf:rd/xmmlvEyUY/izJsfKGf
MD5:	9E5980E25720D8967093061FCD22D45A
SHA1:	B2D8B91A1E51F3440F6EBE42A18F599DA83A5BED
SHA-256:	F282F4E9406D9D4560B71F2097A836F11F98A4796CF6C0C8ACA9A8B25DB80E5B
SHA-512:	E329EF9D893D1CB44ABF87495099E53A48590E1991D87D7FD513B3E7AFBF9C77F79571EF011CEA5F7E7DB4696D546A758D0F78753B0CDF398678396A41E813E4
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/content/experience-fragments/nab/en/mega-menu-widget/product/business-accounts/discount-benefits/master/_jcr_content/root/responsivegrid/section_container/image.coreimg.95.512.jpeg/1690259669443/discounts-benefits-rewards-2500x900.jpeg
Preview:	....ftypavif....avifmif1miaf....meta.......!hdlr........pict.................pitm........."iloc....D@...................U...#iinf..........infe........av01....jiprp...Kipco....colrnclx...........av1C........ispe................pixi............ipma..................]mdat.....!.... h@2.2DP.A..P.^..^~6%{....P....m..........7.er(......^(F...6!.......4...7....Y.2=.. '..M..Z.,..A.h.c....d.Jg....!....0B.G....(....#..."WLA..S;.\|.D...5F..!xU..=..$2.....,..qU.....AV..q......mF%.=...W.....[..+^.m....C......q.G...8: 4(.m.8.CI.j8... ..;.X..H......o...6.....,...(...5.m.q.>..C.....\|....GV.......]...h8k..+..L..%...Z.4.z.Ip8pV.......1{Y.7....:.\rds..C.....Ms^Oz..S.ST...w.P5G7.w.u.TV.%...<J..Q8..B...@.M....Ad..[.7.u.xm. ...h.d.f.p.j"..V;<.4P[..............J$...5%>...)...=.F......?.....4..)J.B.U...a.BR.k ..*K.^...G n{...xTi.!..a.'......../r.b(p...%.7...j.l"......KX....(..6.3..P.3.@............G....~e.ne...N.....( YX.[....aCd..#....J...#."Q..6.N..&..^..nW.."..z5...N.!G...

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	2018
Entropy (8bit):	5.606327672778399
Encrypted:	false
SSDEEP:	48:YgrxuSCntacegeDVG6F0Tc0+D8f1+TOO4zwyEC1D95NvG:YgKgF+c0hTOkZTe
MD5:	7B0A3AB1D5F295A969B82CF8AF77B2C5
SHA1:	98BD5361C523F3C261AABD50AF78254263D416B9
SHA-256:	19A0C3FE12B43070D1A403EF04B1F72C0B339927DC3C956516E4D5A8A5BE55BD
SHA-512:	FCF4AF33F6AE93672C3BBFA6F36ED7F49774E77255F6678330F256A76198D891113A01BD8AAD21432962B6A7F73CD321ADC873F6F01E906983E1A28226753241
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/appdynamics/adrum-xd.15ad9e12c414858a5e6cfdfb1f2331b1.html
Preview:	<!DOCTYPE html>.<html>.<head>. <script>. //./* Version 15ad9e12c414858a5e6cfdfb1f2331b1 v:4.5.2.69, c:9de6426bbc282a262d15b465236ed56fa8caa304, b:4.5.2.69 /var g;.(function(e){(function(e){(function(e){var f=function(){function b(){}b.addEventListener=function(a,b,d){function h(){try{return d.apply(this,Array.prototype.slice.call(arguments))}catch(a){}}a.addEventListener?a.addEventListener(b,h,!1):a.attachEvent&&a.attachEvent("on"+b,h)};b.e=function(){var a=b.b(window.crypto)&&b.c(window.crypto.getRandomValues)?window.crypto:b.b(window.msCrypto)&&b.c(window.msCrypto.getRandomValues)&&window.msCrypto;if(a){var c=new Uint16Array(8);a.getRandomValues(c);a=function(a){a=.a.toString(16);return"0000".substr(a.length)+a};return a(c[0])+a(c[1])+"_"+a(c[2])+"_"+a(c[3])+"_"+a(c[4])+"_"+a(c[5])+a(c[6])+a(c[7])}return"xxxxxxxx_xxxx_4xxx_yxxx_xxxxxxxxxxxx".replace(/[xy]/g,function(a){var b=16Math.random()\|0;return("x"==a?b:b&3\|8).toString(16)})};b.b=function(a){return"undefined"!==typeo

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5742)
Category:	downloaded
Size (bytes):	18880
Entropy (8bit):	4.951940263135908
Encrypted:	false
SSDEEP:	192:+YBZjcBempAeqe7EIRmRgI4oX+rMxZR6H6YM6c+tI38rmcMW0EWdm+jI3Ej:+pAym+2X7CepJDevK
MD5:	E13474E62C031FD2FEAB28D58FDA5477
SHA1:	35298AC532593155178F5E035775123D2834C88C
SHA-256:	88594F8836603E411EA1F4441551B1F06DEDAA90351B16E190C51D9069F5C4E8
SHA-512:	793095A873222DEB1C0CC74A0C9729439B3E58EC333388DDCFEFD3C45F95A993BC9ED52D1F6358890B41EED84752241DF3FB7FD886CDCC92EA2304AAD0C70C98
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-search-bar.e13474e62c031fd2feab28d58fda5477.css
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */..nab-header-bar{width:100%;height:50px}.nab-header-bar--inner{position:relative;z-index:1030;width:100%;background-color:#000;box-shadow:0 1px 3px 0 rgba(0,0,0,.6)}@media (min-width:1248px){.nab-header-bar{height:64px}}.nab-header-bar a:focus{outline:3px solid transparent}.nab-header-bar a:active,.nab-header-bar a:focus{border-radius:4px;box-shadow:0 0 0 3px hsla(0,0%,100%,.65)}.nab-header-bar__header{display:flex;align-items:center;max-width:1280px;height:100%;margin:0 auto}@media (min-width:1248px){.nab-header-bar__header{height:64px}}.nab-header-bar__header.faded .nab-header-bar__help a,.nab-header-bar__header.faded .nab-header-bar__mega-menu--desktop .primary-nav>ul>li>a,.nab-header-bar__header.faded .nab-header-bar__search a{opacity:.3}@media (min-width:768px){.nab-header-bar__mega-menu{display:none!important;visibility:hidden!import

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H8n:cn
MD5:	4C36154FD0D0D16CCC7512CE0CCEE396
SHA1:	0150D5B6142119ECE1369435FCAC1B0518833871
SHA-256:	D75F2411FAF6B4E71ED7678874A0B3326FCA60499931FDD90BDC0FF03B8F0AFB
SHA-512:	571FB28A05238DF27363173725E2D38ED962AC175AA7C86BD73709E6F6D76251D9C83DE5FB31B08207212C7C50714B95DE05F148CE40CB9E9763CE3E0A4D1D0B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn4u19bzRg1mRIFDfkFoqc=?alt=proto
Preview:	CgkKBw35BaKnGgA=

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26008)
Category:	downloaded
Size (bytes):	52147
Entropy (8bit):	5.313875802978942
Encrypted:	false
SSDEEP:	768:/7JMYYBCLIypQMBoTMYn6q6oVgDEO6z2doDBpeBdYASAHv27gksGWCOs14nAnij9:/7e/yvHECDEO6z2dojitPd5j0XaGm
MD5:	F67F9FA1F794259F145A2D0E246DA2C5
SHA1:	A87AB25E6A3F9D7BC80AE31D61DA64C1AA5AE8B5
SHA-256:	656EEAE9DF1716096AE5E451368E7E10AEB6B7F9807F1178FECE331F534B6807
SHA-512:	C0A850CAC6C4387D06C0BBDABFFCE58C0D8DAA4ECE2826C27F55A06B7BBE934522E1BE9D905F53ADBE679DEFD3CC530FB33DC5EF5FE1937C8798C31471A8A59C
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-search-bar.js
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 512x170, components 3
Category:	dropped
Size (bytes):	24361
Entropy (8bit):	7.97321514455274
Encrypted:	false
SSDEEP:	384:ZFkTfwoYZU97Jex7VOWW7bbcs5MFO6VC0RUD8XFZ4vNoowaUd:ZcXAM7MRnOH5R0RWvyos
MD5:	E3F9DD0A4B117CB786C65671005C8613
SHA1:	2A86E0C1AB1EA4AD2B09282084CCDE6856A45948
SHA-256:	66A88BB70795137EE3C73BBF6DFE8589C0938CD19200A3CFF4C3A0C8B2C81230
SHA-512:	41989F25816B1DEA296C9A87DB37FD79DB7EDD01FCA970811C5F5ABE785A727F1F18A35BE5E6331CF15462999AB26B3902FFE0607A2B4A5E82505699F11865F9
Malicious:	false
Reputation:	low
Preview:	......JFIF.........................................................................! !,,;...........................................................! !,,;..........."..........7......................................................................._4~......(..f.\i..V..OV....eM=m...T3$5mM6B.......57.s .#0...@l..s2C.a4cN..sL.A......A. T....i."KAQ.ZJ...5.f......h0l....O...wc....4Mb._.l&.ki...^!M..-...8....E.;D.im........9eNb:<.Ae/..Y10...YT{....G.j....t.....0......&%.H1$..R`.5.Dl...2.....tt....N.>>..5...u..k..c(..A.4V.....:..E.......F.%.....?..4.$z..C....[..1.l.4......n..l.....eA .5a`.D.....%......=.FAI....H...Bd.2F$.b.6Z.1...F.k.........,.r.5....3.....;Z_....>....aX?.........a.%.>.<E.L_.......]$.wUj..lx.hg.^.Y..X......D.\|......j8.[#` ._.*NL ......jR..Q....7.6..i......Ri..C....1.ow.^.....{.J.R..f..=..U.%..Rb...Y>..W.0.[.y.]....at,`.d.4....u.<..z...p.m\|..,s..q....s.......,O[r~N.l....n.M..Y..Aroc..^......y.jf3..+..o.~V..]....a.].:'#.T....9.Zu.>{...

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3875)
Category:	downloaded
Size (bytes):	4026
Entropy (8bit):	4.887488744728954
Encrypted:	false
SSDEEP:	96:xTDsQLFhLFaLF5LFcLbGLwLzLCqs/FdFxFWLFWGVNFWrhMyFayFcySyKJyjR9SHC:NsQL3LULnLuLCLwLzLCqs/FdFxFMFvNA
MD5:	CAE2CB4F5BF9E73322E2C8175AB0FC88
SHA1:	32C7C255224D65879A3FA657D2292D1187917E76
SHA-256:	9C627F018BFABFB8B188F5A9F7E3F7DC0ED816BB663B3552C5C2659DBA03502E
SHA-512:	64C9330E120BD8AE9E331BEF5E1417F824C8B7F755D03224279B5A45AE53CFCF23ABCA164688030C6FBE6CEE24E6A74C1F9693D140F6D68A82C92F0371D420ED
Malicious:	false
Reputation:	low
URL:	https://www.nab.com.au/etc.clientlibs/nab/clientlibs/clientlib-generated-tile.cae2cb4f5bf9e73322e2c8175ab0fc88.css
Preview:	/!. NAB Living Styleguide Component version: 0.67.0-jacana.1,. * commit: "c0fcf5b35ed1724762a27623625faf3aeb5b7137",. * branch: "HEAD". */..nab-tile--contact{display:flex;height:100%}.nab-tile--contact .h3{margin-bottom:0;font-weight:300}.nab-tile--contact .nab-tile__content{display:grid;grid-template-rows:-webkit-min-content -webkit-min-content 1fr;grid-template-rows:min-content min-content 1fr;width:100%}.nab-tile--contact .nab-tile__content .nab-text{margin:16px 0}.nab-tile--contact .nab-tile__content .button{align-self:end}.nab-tile--contact .nab-tile__content .nab-button{margin-top:0}.nab-tile--contact .nab-tile__icon{width:56px;min-width:56px;height:56px;min-height:56px;margin-right:24px;background-color:#c20000;border-radius:50%}.nab-tile--contact .nab-tile__icon svg{align-self:center;width:40px;min-width:40px;height:40px;min-height:40px;fill:#fff}@media (min-width:768px) and (max-width:1327px){.nab-tile--contact .nab-tile__icon{width:40px;min-width:40px;height:40px;m

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F?
Preview:	<html></html>

Static File Info

⊘No static file info

File Icon


Icon Hash:	b29a8a8e86868381

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 25, 2024 01:26:34.367782116 CET	49678	443	192.168.2.4	104.46.162.224
Jan 25, 2024 01:26:35.742594004 CET	49675	443	192.168.2.4	173.222.162.32
Jan 25, 2024 01:26:44.263345003 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.263425112 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.263591051 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.263593912 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.263700962 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.263776064 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.264167070 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.264209986 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.264317036 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.264344931 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.566296101 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.566431999 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.566642046 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.566657066 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.566658020 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.566694975 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.567220926 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.567282915 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.568608046 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.568619967 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.568664074 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.568676949 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.569473982 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.569554090 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.569618940 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.569628000 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.570317984 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.570409060 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.570527077 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.570540905 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.647886992 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.694756985 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.748280048 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.748711109 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.748768091 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.749404907 CET	49729	443	192.168.2.4	142.250.9.84
Jan 25, 2024 01:26:44.749424934 CET	443	49729	142.250.9.84	192.168.2.4
Jan 25, 2024 01:26:44.750835896 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.750993013 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:44.751049995 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.751560926 CET	49730	443	192.168.2.4	142.251.15.139
Jan 25, 2024 01:26:44.751588106 CET	443	49730	142.251.15.139	192.168.2.4
Jan 25, 2024 01:26:45.349381924 CET	49675	443	192.168.2.4	173.222.162.32
Jan 25, 2024 01:26:45.857413054 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:45.858411074 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:45.915108919 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.082758904 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.083074093 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.083311081 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.084228039 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.084389925 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.140326977 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.140638113 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.309118032 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.309552908 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.309693098 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.309732914 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.309773922 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.309880018 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.309890032 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.309890032 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.309938908 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.309976101 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.310013056 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.310046911 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.310070992 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.310079098 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.310108900 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.310161114 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.341569901 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.457056046 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:46.457137108 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:46.457250118 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:46.458112001 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:46.458152056 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:46.535279036 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535366058 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535403013 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535449982 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.535455942 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535492897 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535510063 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.535531998 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535567999 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535598993 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.535605907 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535644054 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535656929 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.535682917 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535720110 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535742998 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.535757065 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535794973 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535806894 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.535831928 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535886049 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535887957 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.535923958 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535960913 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.535974026 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.535999060 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.536036968 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.536048889 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.536076069 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.536123991 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.567003012 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567354918 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567394972 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567465067 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.567718029 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567755938 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567794085 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567820072 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.567832947 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567872047 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567883968 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.567910910 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567949057 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.567962885 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.567987919 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.568036079 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.683675051 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:46.686199903 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:46.686260939 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:46.687830925 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:46.687905073 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:46.689316988 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:46.689425945 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:46.736891985 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:46.736951113 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:46.760997057 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761218071 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761255980 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761267900 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.761296034 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761333942 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761352062 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.761373043 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761409998 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761421919 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.761447906 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761486053 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761497021 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.761523962 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761562109 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.761583090 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.774214029 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.774483919 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.774797916 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.775933981 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.789717913 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:46.792391062 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792634010 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792673111 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792691946 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.792711973 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792771101 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.792789936 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792828083 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792865038 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792886972 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.792905092 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792941093 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.792956114 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.792980909 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793019056 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793028116 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.793057919 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793096066 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793107986 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.793133974 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793170929 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793178082 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.793210030 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793247938 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793260098 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.793287992 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793328047 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793337107 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.793368101 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.793415070 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.999672890 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.999728918 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.999766111 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.999808073 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.999844074 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:46.999897957 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.999918938 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:46.999977112 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000122070 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000160933 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000186920 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.000199080 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000236988 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000264883 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.000277042 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000314951 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000329018 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.000353098 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000391006 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000403881 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.000428915 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.000483036 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.000539064 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.000973940 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.001111984 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.002330065 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.017734051 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.017775059 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.017812967 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.017848969 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.017975092 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018013954 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018040895 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018131971 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018170118 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018187046 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018207073 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018244982 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018258095 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018282890 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018321037 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018335104 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018358946 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018397093 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018409967 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018435001 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018484116 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018603086 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018644094 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018681049 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018692970 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018718958 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018757105 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018768072 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018795013 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018831968 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018843889 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018872023 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018910885 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018922091 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.018949986 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.018987894 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019000053 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.019025087 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019062996 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019071102 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.019099951 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019136906 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019165039 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.019172907 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019211054 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019238949 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.019249916 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019288063 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019296885 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.019326925 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019365072 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019378901 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.019403934 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019440889 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019458055 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.019479990 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019519091 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019530058 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.019558907 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.019609928 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.225347996 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225449085 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225490093 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225528955 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225564957 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225574017 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.225603104 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225632906 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.225636005 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225675106 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225720882 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225750923 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.225759983 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225797892 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225806952 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.225853920 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225907087 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.225935936 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.225970984 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226005077 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226007938 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226046085 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226082087 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226083994 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226121902 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226140022 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226157904 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226205111 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226214886 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226254940 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226309061 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226367950 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226404905 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226442099 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226463079 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226480961 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226521969 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226538897 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226561069 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226598978 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226613998 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226917028 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.226975918 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.226986885 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.227026939 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.227089882 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.227508068 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.227765083 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.242822886 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.242909908 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.243015051 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.243818045 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.274601936 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.289874077 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.328699112 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.329591036 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.329905033 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.330533981 CET	49742	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.451558113 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451679945 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451719999 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451740980 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451762915 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451783895 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451806068 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451843977 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451878071 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.451883078 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451929092 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451942921 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.451967001 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.451987028 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452006102 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452044010 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452054024 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452084064 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452121973 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452136040 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452161074 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452200890 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452214956 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452239990 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452277899 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452291965 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452316046 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452353954 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452364922 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452399015 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452435970 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452467918 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452476025 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452516079 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452528000 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452554941 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452596903 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452613115 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452635050 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452672958 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452687025 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452711105 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452749014 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452776909 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452795982 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452833891 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452872038 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452887058 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452910900 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452949047 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.452965975 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.452986956 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453003883 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453026056 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453063965 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453072071 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453102112 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453140974 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453154087 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453182936 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453223944 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453262091 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453273058 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453299999 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453337908 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453351021 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453377008 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453416109 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453428030 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453455925 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453495979 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453514099 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453535080 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453572035 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453586102 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453610897 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453628063 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.453650951 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453687906 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.453702927 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.454881907 CET	49743	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.458657980 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.527344942 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.554589987 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554619074 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554637909 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554657936 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554677010 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554696083 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554713964 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554732084 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554749966 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554769993 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554788113 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554806948 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554826021 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554825068 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.554845095 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554866076 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554883957 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554893970 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.554893970 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.554893970 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.554903984 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554912090 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.554925919 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554943085 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554959059 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.554963112 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554982901 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.554989100 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555001020 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555020094 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555038929 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555049896 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555056095 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555074930 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555085897 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555093050 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555109978 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555138111 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555155039 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555159092 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555175066 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555193901 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555212021 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555213928 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555229902 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555248022 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555248022 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555275917 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555289030 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555294037 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555310011 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555315018 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555327892 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555346966 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555349112 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555366039 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555385113 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555389881 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555404902 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555417061 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555422068 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555439949 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555459023 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555469036 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555476904 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555495024 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555514097 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555516958 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555532932 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555546999 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555551052 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555568933 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555572033 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555587053 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555604935 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555609941 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555623055 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555640936 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555660963 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555666924 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555679083 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555701017 CET	80	49742	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555716038 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555718899 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555736065 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555753946 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555773020 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555780888 CET	49742	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555790901 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555804968 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555809021 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555825949 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555844069 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555845022 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555864096 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555867910 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.555883884 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.555922031 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.556162119 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.596020937 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.596271992 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.678661108 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.678874969 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.678914070 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.678946972 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.678953886 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.678975105 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.678993940 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679002047 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.679011106 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679028988 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679049015 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679060936 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.679066896 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679085970 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679102898 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679111004 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.679121971 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679137945 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679156065 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679167986 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.679172993 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679191113 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679208994 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679215908 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.679229021 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679245949 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679249048 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.679263115 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.679263115 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679282904 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679302931 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.679306984 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.679343939 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.683718920 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.683955908 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684063911 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684082031 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684099913 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684118032 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684127092 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684176922 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684176922 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684196949 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684217930 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684222937 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684267044 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684328079 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684348106 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684365034 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684385061 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684402943 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684407949 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684453964 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684484005 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684503078 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684520006 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684537888 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684551001 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684556007 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684573889 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684580088 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684598923 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684617043 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684617043 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684633970 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684652090 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684653044 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684669018 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684686899 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684696913 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684705019 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684722900 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684735060 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684741974 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.684760094 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.684794903 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.685622931 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.685642004 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.685659885 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.685684919 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.696331978 CET	80	49743	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.696441889 CET	49743	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.721329927 CET	49743	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.729216099 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.729217052 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.753451109 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.753571987 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.781608105 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.781672001 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.781716108 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.781754971 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.781758070 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.781797886 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.781833887 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.781836033 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.781877041 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.781945944 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.781948090 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.781985998 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782025099 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782047987 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782063961 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782084942 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782104015 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782146931 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782167912 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782186031 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782226086 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782263041 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782264948 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782303095 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782326937 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782345057 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782381058 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782392979 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782419920 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782464027 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782480001 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782501936 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782538891 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782552958 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782577038 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782615900 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782638073 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.782659054 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.782712936 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.948492050 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:47.963265896 CET	80	49743	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.963541985 CET	80	49743	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.963584900 CET	80	49743	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:47.963648081 CET	49743	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.008228064 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.053137064 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.174034119 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174230099 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174407005 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174449921 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174491882 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174530029 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174570084 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174587965 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.174587965 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.174607992 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174647093 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174659014 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.174686909 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174702883 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.174726963 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.174784899 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.188812971 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.400428057 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400485992 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400504112 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400522947 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400542974 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400563002 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400580883 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400599003 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400616884 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400634050 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400650978 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400669098 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400686979 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400705099 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400706053 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.400706053 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.400706053 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.400724888 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400743008 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400759935 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400777102 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400783062 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.400783062 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.400794983 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400810957 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.400814056 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.400831938 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.400866032 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.413927078 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.414438963 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.463015079 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626204967 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626261950 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626301050 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626343966 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626383066 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626420021 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626441956 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626441956 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626461983 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626502037 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626511097 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626540899 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626580000 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626581907 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626616001 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626632929 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626652956 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626689911 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626725912 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626740932 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626763105 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626785040 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626801014 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626837015 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626873016 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626897097 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626914024 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626920938 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.626950026 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.626987934 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627002954 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627024889 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627072096 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627082109 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627110958 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627151966 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627163887 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627192020 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627228975 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627265930 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627285004 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627302885 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627340078 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627353907 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627377987 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627387047 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627414942 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627451897 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627489090 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627504110 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627526999 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627563953 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627567053 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627603054 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627643108 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627643108 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627760887 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627774954 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.627800941 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.627912045 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853280067 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853342056 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853382111 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853421926 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853458881 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853496075 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853533030 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853566885 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853568077 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853568077 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853579044 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853616953 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853640079 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853653908 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853689909 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853728056 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853745937 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853765965 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853804111 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853832960 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853841066 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853852987 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853878975 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853934050 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.853939056 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.853976011 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.854013920 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.854053020 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.854065895 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.854089975 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.854129076 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.854140043 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.854168892 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:48.854178905 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:48.897013903 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:49.101687908 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:49.436811924 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.436911106 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.436985970 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.440105915 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.440141916 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.654580116 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.654660940 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.657725096 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.657744884 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.657999992 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.709620953 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.729023933 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.769939899 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.855278969 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.855401039 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.855468035 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.860105991 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.860150099 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.860178947 CET	49745	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.860193014 CET	443	49745	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.891263008 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:49.956751108 CET	49746	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.956788063 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:49.956855059 CET	49746	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.957958937 CET	49746	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:49.957997084 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:50.116393089 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:50.116523027 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:50.163124084 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:50.169169903 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:50.169322968 CET	49746	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:50.174711943 CET	49746	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:50.174741983 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:50.174971104 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:50.178514957 CET	49746	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:50.221945047 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:50.378762960 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:50.378813982 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:50.378866911 CET	49746	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:50.395127058 CET	49746	443	192.168.2.4	184.31.50.93
Jan 25, 2024 01:26:50.395150900 CET	443	49746	184.31.50.93	192.168.2.4
Jan 25, 2024 01:26:56.675772905 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:56.675854921 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:56.675924063 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:58.125547886 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.125627041 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:58.401262999 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.401432037 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:58.401479006 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.401535988 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:58.493860006 CET	49736	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:58.493932962 CET	49734	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:58.493967056 CET	49740	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:58.493985891 CET	49737	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:26:58.494062901 CET	443	49737	108.177.122.147	192.168.2.4
Jan 25, 2024 01:26:58.527626991 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.527721882 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:58.585771084 CET	49735	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:58.719189882 CET	80	49736	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.719235897 CET	80	49734	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.719357014 CET	80	49740	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.810981989 CET	80	49735	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.924611092 CET	80	49743	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:58.924695015 CET	49743	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:59.207473040 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:59.207726002 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:59.275363922 CET	49741	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:59.275441885 CET	49743	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:26:59.500638008 CET	80	49741	91.215.85.14	192.168.2.4
Jan 25, 2024 01:26:59.516926050 CET	80	49743	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:00.549258947 CET	49755	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:00.774849892 CET	80	49755	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:00.774987936 CET	49755	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:01.136626959 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:01.136782885 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:01.294255972 CET	49744	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:01.519812107 CET	80	49744	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:03.747174025 CET	80	49723	69.164.42.0	192.168.2.4
Jan 25, 2024 01:27:03.747420073 CET	49723	80	192.168.2.4	69.164.42.0
Jan 25, 2024 01:27:03.747420073 CET	49723	80	192.168.2.4	69.164.42.0
Jan 25, 2024 01:27:03.850281000 CET	80	49723	69.164.42.0	192.168.2.4
Jan 25, 2024 01:27:03.919167042 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:03.919219971 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:03.919296980 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:03.919655085 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:03.919684887 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.193362951 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.193669081 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.193727970 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.195182085 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.195254087 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.197266102 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.197356939 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.197396994 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.241903067 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.241903067 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.241960049 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.296375036 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.569462061 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569523096 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569546938 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569610119 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569632053 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.569633007 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.569658041 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569684982 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569715977 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569725990 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.569765091 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.569824934 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.569843054 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569917917 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.569963932 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.569991112 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.570033073 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.571988106 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.695435047 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.695502043 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.695553064 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.695585966 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.695626020 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.695735931 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.695787907 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.695833921 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.695847988 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.695887089 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.695941925 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.695983887 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.696033001 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.696048021 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.696082115 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.697237968 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.820955992 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.821033955 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.821067095 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.821084976 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.821115017 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.821611881 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822184086 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822232008 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822277069 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822288036 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822320938 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822421074 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822443008 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822490931 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822535992 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822546959 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822577000 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822649002 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822679043 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822725058 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822763920 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822774887 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.822801113 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822866917 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.822983027 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.823035955 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.823081017 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.823091984 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.823124886 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.823385000 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.823430061 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.823437929 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.823473930 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.823491096 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.823513985 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.823648930 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.946939945 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.947007895 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.947053909 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.947077990 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.947108030 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.947208881 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.947256088 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.947262049 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.947310925 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.947315931 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.947354078 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.947639942 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.949637890 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.949683905 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.949726105 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.949738026 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.949765921 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.949863911 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.950112104 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950160027 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950196981 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.950208902 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950238943 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.950387955 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950437069 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950481892 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.950495005 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950530052 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.950680017 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950720072 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950763941 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.950777054 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.950810909 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951008081 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951055050 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951056004 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951081038 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951102972 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951123953 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951189995 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951286077 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951328039 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951371908 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951384068 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951428890 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951596022 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951642990 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951690912 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951703072 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951733112 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951733112 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951903105 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951936007 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.951946020 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951972961 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.951988935 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952038050 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952038050 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952203989 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952249050 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952292919 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952311039 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952333927 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952333927 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952471972 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952514887 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952522039 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952548981 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952593088 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952593088 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952693939 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952733040 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952739954 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952760935 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:04.952780962 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.952801943 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.953028917 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:04.953028917 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.072973967 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073038101 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073071957 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.073095083 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073133945 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.073168993 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.073282003 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073327065 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073370934 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.073383093 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073426008 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.073668957 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073721886 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073775053 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.073788881 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.073821068 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.073968887 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.075589895 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.075632095 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.075678110 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.075690985 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.075717926 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.075783014 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.078883886 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.078929901 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.078988075 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.079005957 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.079031944 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.079186916 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.079237938 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.079261065 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.079273939 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.079304934 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.079334021 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.079560041 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.079602003 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.079644918 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.079655886 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.079684019 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.079724073 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.079981089 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080034971 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080076933 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.080092907 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080128908 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.080226898 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080276012 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080322027 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.080333948 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080369949 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.080429077 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.080629110 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080673933 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080717087 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.080729008 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.080770969 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.081013918 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081063032 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081113100 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.081125975 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081156969 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.081285000 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081325054 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081372976 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.081386089 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081420898 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.081667900 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081717014 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081767082 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.081779003 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.081805944 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.081919909 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.082078934 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.082120895 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.082164049 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.082175016 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.082206964 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.082381010 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.082428932 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.082490921 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.082503080 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.082555056 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.082609892 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.214023113 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214085102 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214129925 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.214143038 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214185953 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.214236975 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214289904 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214334965 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.214346886 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214380980 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.214432001 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214473009 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214520931 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.214534044 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214564085 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.214597940 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214648008 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214674950 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.214687109 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.214715004 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.216207981 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246035099 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246108055 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246150970 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246165037 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246202946 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246258020 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246304035 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246311903 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246347904 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246362925 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246387005 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246433020 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246439934 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246469021 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246491909 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246507883 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246507883 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246532917 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.246577978 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.246577978 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.325561047 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.325628996 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.325678110 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.325699091 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.325733900 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.326781988 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.326837063 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.326894999 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.326908112 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.326941967 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327043056 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327091932 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327102900 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327128887 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327136993 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327166080 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327214003 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327275991 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327322006 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327363014 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327374935 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327408075 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327455044 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327507973 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327557087 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327569008 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327596903 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327634096 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327641010 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327660084 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327706099 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327718973 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327718973 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327738047 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327783108 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327841997 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327893972 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327940941 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327953100 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.327982903 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.327982903 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328027964 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328067064 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328069925 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328113079 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328125954 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328157902 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328200102 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328259945 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328280926 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328293085 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328325987 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328376055 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328419924 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328421116 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328439951 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.328475952 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328475952 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.328573942 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.329469919 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.331470966 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.333395958 CET	49763	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:05.333417892 CET	443	49763	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:05.485797882 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.485874891 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.485964060 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.486435890 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.486507893 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.561101913 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.561125040 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:05.561212063 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.561525106 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.561532021 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:05.734711885 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.735165119 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.735222101 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.736867905 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.737057924 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.737991095 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.738106012 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.738116026 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.781977892 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.791811943 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.791867971 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.807527065 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:05.807924986 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.807935953 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:05.809556007 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:05.809637070 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.810564041 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.810708046 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:05.810719013 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.839984894 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.855110884 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.855118036 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:05.901556969 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:05.963385105 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.963455915 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.963630915 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.964775085 CET	49771	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.964833021 CET	443	49771	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.967169046 CET	49776	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.967194080 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:05.967247009 CET	49776	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.967431068 CET	49776	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:05.967437029 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.041848898 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.042027950 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.042335033 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.042993069 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.043006897 CET	443	49774	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.043015003 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.043061018 CET	49774	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.045531988 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.045608044 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.045716047 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.046377897 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.046452999 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.209815025 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.210016012 CET	49776	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:06.210026026 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.210490942 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.210778952 CET	49776	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:06.210858107 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.211261988 CET	49776	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:06.257901907 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.288975954 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.289315939 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.289375067 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.289869070 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.290337086 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.290338039 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.290426016 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.290501118 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.337454081 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.447319984 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.447463036 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.447506905 CET	49776	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:06.449250937 CET	49776	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:06.449266911 CET	443	49776	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:06.525974035 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.526146889 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.526331902 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.527537107 CET	49777	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.527595997 CET	443	49777	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.568413019 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:06.568420887 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:06.568465948 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:06.568708897 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:06.568721056 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:06.584598064 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:06.584661007 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:06.584728003 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:06.588015079 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:06.588047028 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:06.603898048 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:06.603974104 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:06.604304075 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:06.604826927 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:06.604862928 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:06.774055004 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.774077892 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.774131060 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.774533033 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:06.774549961 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:06.898046970 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:06.898400068 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:06.898463011 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:06.899907112 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:06.899981022 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:06.900372028 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:06.900461912 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:06.900532007 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:06.900547981 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:06.910491943 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:06.910751104 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:06.910785913 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:06.912415028 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:06.912492037 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:06.916110992 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:06.916196108 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:06.916363001 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:06.916371107 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:06.921096087 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:06.921354055 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:06.921412945 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:06.921924114 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:06.922240973 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:06.922336102 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:06.922367096 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:06.922386885 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:06.947036982 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:06.962553024 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:06.962614059 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.020404100 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.020581007 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.020596981 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.022056103 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.022120953 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.025221109 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.025305986 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.025326014 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.065906048 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.073476076 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.073487997 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.119602919 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.134696960 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:07.134772062 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:07.134879112 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:07.136454105 CET	49786	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:07.136493921 CET	443	49786	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:07.158766985 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:07.158838987 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:07.159135103 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:07.159661055 CET	49787	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:07.159674883 CET	443	49787	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:07.185337067 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.185359955 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.185434103 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.185703993 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.185717106 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.216295004 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.216389894 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.216491938 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.216602087 CET	49785	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.216636896 CET	443	49785	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.219194889 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.219242096 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.219310999 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.220429897 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.220457077 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.223546982 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.223624945 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.223696947 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.224128962 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.224205017 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.224358082 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.224383116 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.224405050 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.224423885 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.224687099 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.224706888 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.224761009 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.224965096 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.225003004 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.225123882 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.225142002 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.225334883 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.225373983 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.225531101 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.225569010 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.254380941 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.254424095 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.254434109 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.254471064 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.254484892 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.254499912 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.254543066 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.254776955 CET	49791	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:07.254787922 CET	443	49791	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:07.303054094 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.303128958 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.303204060 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.303505898 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.303531885 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.307971954 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.308008909 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.308084011 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.308264017 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.308276892 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.437165022 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.437484980 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.437494040 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.438015938 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.438036919 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.438098907 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.438249111 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.438247919 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.438255072 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.438673973 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.438694000 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.438697100 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.438827991 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.479626894 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.485047102 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.502348900 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.502407074 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.503712893 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.505283117 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.505523920 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.505583048 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.505629063 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.535337925 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.535650969 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.535706043 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.537359953 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.537576914 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.537798882 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.537800074 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.537839890 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.537916899 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.539823055 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.540424109 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.540432930 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.541860104 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.541953087 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.543406010 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.543467045 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.543502092 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.545948029 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.585582972 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.585597992 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.585603952 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.585638046 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.602711916 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.613013029 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.613069057 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.613697052 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.614113092 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.614147902 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.615170002 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.615434885 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.615617037 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.615617037 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.615664005 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.615890980 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.615911007 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.616038084 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.616332054 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.616332054 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.616375923 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.616491079 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.626071930 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.626374960 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.626410007 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.626852989 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.626877069 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.627310038 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.627902985 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.627902985 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.627952099 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.628096104 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.636226892 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.636444092 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.636456013 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.638916969 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.639025927 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.639863968 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.639998913 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.639998913 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.640012026 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.640105009 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.656925917 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.656941891 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.657067060 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.657131910 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.673836946 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.674026966 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.674210072 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.676279068 CET	49792	443	192.168.2.4	3.223.28.32
Jan 25, 2024 01:27:07.676290989 CET	443	49792	3.223.28.32	192.168.2.4
Jan 25, 2024 01:27:07.678857088 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.682713032 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.682727098 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.697757959 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.697763920 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.729687929 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.743195057 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.743305922 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.743469000 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.809484959 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.809556961 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.817061901 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.839802980 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.839831114 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.839899063 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.840930939 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.842308998 CET	49800	443	192.168.2.4	63.140.38.100
Jan 25, 2024 01:27:07.842328072 CET	443	49800	63.140.38.100	192.168.2.4
Jan 25, 2024 01:27:07.842895031 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.842902899 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.844444990 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.844795942 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.845633984 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.845714092 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.845971107 CET	49797	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.845973015 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.845983028 CET	443	49797	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.850981951 CET	49794	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.851011038 CET	443	49794	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.854938984 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.855015039 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.855683088 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.855683088 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.855808973 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.856137037 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.856165886 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.856422901 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.858382940 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.858417034 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.858428001 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.858462095 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.858473063 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.858499050 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.858503103 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.859087944 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.860955000 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.860985994 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.861092091 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.861105919 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.861619949 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.862111092 CET	49801	443	192.168.2.4	63.140.38.160
Jan 25, 2024 01:27:07.862122059 CET	443	49801	63.140.38.160	192.168.2.4
Jan 25, 2024 01:27:07.867013931 CET	49795	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.867043018 CET	443	49795	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.881902933 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:07.881938934 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:07.882308006 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:07.882900953 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:07.882941008 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:07.889947891 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.895801067 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.895807028 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.923650980 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.923680067 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.923691988 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.923748970 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.923796892 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.923818111 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.923944950 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.923945904 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.923945904 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.923945904 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.924019098 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.924055099 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.924084902 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.924113035 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.924133062 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.924174070 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.924175024 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.924175024 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.924175024 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.924995899 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.943795919 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.954154968 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.954189062 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.954200029 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.954217911 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.954227924 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.954236031 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.954246998 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.954260111 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.954309940 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.954333067 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.957427979 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.958630085 CET	49798	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:07.958650112 CET	443	49798	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:07.975742102 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.975917101 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.976104021 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.982765913 CET	49803	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.982780933 CET	443	49803	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.983465910 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.983503103 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:07.983622074 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.983957052 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:07.983994961 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.022633076 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.022670031 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.022983074 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.022983074 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.023045063 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.050432920 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.050460100 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.050616026 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.050616026 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.050646067 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.050854921 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.050879955 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.050972939 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.050972939 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.050972939 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.051002979 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.051080942 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.051304102 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.051328897 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.052228928 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.052247047 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.052326918 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.124871969 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:08.125292063 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:08.125353098 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:08.125909090 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:08.126384974 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:08.126384974 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:08.126514912 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:08.133491993 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.133709908 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.133766890 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.134248972 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.134768009 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.134768009 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.134848118 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.134927034 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.136960030 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.137135029 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.137154102 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.137859106 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.138242006 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.138242006 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.138391972 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.138501883 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.177901983 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:08.177901983 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.177956104 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.178096056 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.178117037 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.178297997 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.178297997 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.178327084 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.178524017 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.178548098 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.178571939 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.178602934 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.178623915 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.178636074 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.178900003 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.178931952 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.178956032 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.179028988 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.179028988 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.179059982 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.179184914 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.179326057 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.179344893 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.179419994 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.179420948 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.179435968 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.179827929 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.179851055 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.179932117 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.179932117 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.179948092 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.180440903 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.181577921 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.221849918 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.221884966 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.222095013 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.222095013 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.222125053 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.223061085 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.241451979 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.241683960 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:08.241700888 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.242368937 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.243551016 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:08.243551016 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:08.243575096 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.243824959 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.266565084 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.267859936 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.267889023 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.269311905 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.269460917 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.269711971 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.269711971 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.269793987 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.291105032 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:08.307298899 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.307327032 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.307527065 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.307527065 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.307555914 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.307760000 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.307843924 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.307893038 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.308007002 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.308007956 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.308036089 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.308128119 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.310200930 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.310230017 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.310305119 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.310305119 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.310318947 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.310425997 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.310571909 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.310592890 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.310630083 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.310641050 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.310688019 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.310731888 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.311026096 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.311048985 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.311089039 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.311099052 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.311131001 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.311224937 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.311436892 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.311456919 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.311537027 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.311537027 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.311547995 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.311728954 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.311889887 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.311918020 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.312000990 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.312000990 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.312012911 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.312125921 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.313855886 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.313878059 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.313987017 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.313987017 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.313998938 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.314053059 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.314265013 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.314294100 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.314373970 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.314373970 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.314384937 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.314594984 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.314660072 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.314680099 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.314748049 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.314748049 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.314759016 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.314975023 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.315061092 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.315082073 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.315176964 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.315176964 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.315190077 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.315268993 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.322990894 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.323009014 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.348630905 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.348659039 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.350779057 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.350806952 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.351603985 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.355581999 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:08.355657101 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:08.361270905 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:08.361272097 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:08.370338917 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.386297941 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.386373997 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.386508942 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.386737108 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.387046099 CET	49807	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.387064934 CET	443	49807	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.392627954 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.392659903 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.392857075 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.392857075 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.392884970 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.393131971 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.413202047 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:08.413253069 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:08.413348913 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:08.413580894 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:08.413603067 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:08.414999962 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.415605068 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.415714979 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.416100979 CET	49808	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.416114092 CET	443	49808	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.434501886 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.434530973 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.434679985 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.434680939 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.434700012 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.434727907 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.434904099 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.435094118 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.435153008 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.435203075 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.437627077 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.438688993 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.438719034 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.438993931 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.439059973 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439157963 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439207077 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.439225912 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439261913 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.439291954 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439313889 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439315081 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.439330101 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439354897 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.439579964 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.439620972 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439644098 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439681053 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.439692020 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439727068 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.439888954 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.439970016 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.440021992 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.440023899 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.440057039 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.440362930 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.442820072 CET	49796	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:08.442847013 CET	443	49796	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:08.535656929 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.535741091 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.535789013 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:08.536835909 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:08.536854029 CET	443	49811	68.67.161.182	192.168.2.4
Jan 25, 2024 01:27:08.536865950 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:08.536891937 CET	49811	443	192.168.2.4	68.67.161.182
Jan 25, 2024 01:27:08.549096107 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.549164057 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.549216986 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.549613953 CET	49812	443	192.168.2.4	63.140.38.104
Jan 25, 2024 01:27:08.549628019 CET	443	49812	63.140.38.104	192.168.2.4
Jan 25, 2024 01:27:08.574415922 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:08.574439049 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:08.574491978 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:08.574755907 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:08.574769974 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:08.656591892 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:08.656615019 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:08.656672955 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:08.656881094 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:08.656896114 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:08.663681030 CET	49810	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:08.663738012 CET	443	49810	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:08.827483892 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:08.827678919 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:08.827692032 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:08.829108000 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:08.829164982 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:08.830043077 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:08.830122948 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:08.830209970 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:08.830219030 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:08.870894909 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:08.916069031 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:08.916290045 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:08.916367054 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:08.918029070 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:08.918210983 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:08.918567896 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:08.918622971 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:08.918636084 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:08.918668985 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:08.963921070 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:08.963937998 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:09.010399103 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:09.120626926 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:09.121150970 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:09.121207952 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:09.122870922 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:09.123121023 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:09.124241114 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:09.124511003 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:09.124511957 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:09.165112972 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:09.165169001 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:09.171652079 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:09.171720982 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:09.171777010 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:09.172807932 CET	49819	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:09.172823906 CET	443	49819	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:09.176327944 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.176413059 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.176660061 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.176918030 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.176953077 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.214930058 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:09.229983091 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.230010033 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.230019093 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.230067968 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.230082989 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.230143070 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.246303082 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.246373892 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.246380091 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.246428967 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.246607065 CET	49818	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.246618986 CET	443	49818	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.354166031 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:09.354334116 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:09.354401112 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:09.355310917 CET	49816	443	192.168.2.4	3.33.220.150
Jan 25, 2024 01:27:09.355349064 CET	443	49816	3.33.220.150	192.168.2.4
Jan 25, 2024 01:27:09.414288998 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.414366007 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.414443970 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.416346073 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.416384935 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.426136017 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.426536083 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.426594019 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.427278042 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.427591085 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.427685022 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.427737951 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.469928980 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.477880001 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.481445074 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:09.481471062 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:09.481595993 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:09.481936932 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:09.481949091 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:09.605031967 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.605078936 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.605087042 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.605102062 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.605171919 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.605305910 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.605314016 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.605325937 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.605448008 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.605462074 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.666815042 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.666989088 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.667120934 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.667742968 CET	49821	443	192.168.2.4	3.215.173.68
Jan 25, 2024 01:27:09.667802095 CET	443	49821	3.215.173.68	192.168.2.4
Jan 25, 2024 01:27:09.756489992 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:09.756506920 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:09.756639957 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:09.756802082 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:09.756808996 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:09.782725096 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.783524036 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.783582926 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.785212994 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.785378933 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.786206007 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.786298990 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.786413908 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.829936028 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.836738110 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.836756945 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.878685951 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.878962040 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.878971100 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.879440069 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.879864931 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.879864931 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.879899025 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.879973888 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.881866932 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.882054090 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.882112026 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.882594109 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.882627964 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.883018017 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.883106947 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.883142948 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.883183956 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:09.909564972 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.909637928 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.910981894 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.911000967 CET	443	49822	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.911046982 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.911204100 CET	49822	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.911437035 CET	49836	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.911473989 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.911814928 CET	49836	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.911815882 CET	49836	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:09.911876917 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:09.929122925 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.929151058 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:09.982651949 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:09.982844114 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:09.982855082 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:09.984502077 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:09.984596014 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:09.985477924 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:09.985704899 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:09.985781908 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.025926113 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.038831949 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.038839102 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.085650921 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.164989948 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:10.167372942 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:10.167392015 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:10.168833017 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:10.168906927 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:10.169322968 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:10.169357061 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:10.169357061 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:10.169450998 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:10.169614077 CET	49836	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:10.169641972 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:10.170169115 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:10.171032906 CET	49836	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:10.171236038 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:10.171400070 CET	49836	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:10.198986053 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.199012041 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.199022055 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.199053049 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.199078083 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.199122906 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.199136972 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.199182034 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.199201107 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.212014914 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:10.212023020 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:10.213223934 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.213255882 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.213279963 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.213335991 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.213342905 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.213433981 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.213901997 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:10.215423107 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.215434074 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.215442896 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.215492964 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.215500116 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.215532064 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.215543985 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.215553045 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.215573072 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.215621948 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.215625048 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.215626001 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.215656042 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.215734959 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.215790987 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.215799093 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.215846062 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.216778994 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.216785908 CET	443	49829	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.216809034 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.216861010 CET	49829	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.219754934 CET	49830	443	192.168.2.4	13.226.52.124
Jan 25, 2024 01:27:10.219765902 CET	443	49830	13.226.52.124	192.168.2.4
Jan 25, 2024 01:27:10.222315073 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.222393036 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.222753048 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.222759008 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.222925901 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.229521036 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.229602098 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.229607105 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.229631901 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.229702950 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.236658096 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.236887932 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.243896961 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.243984938 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.244019032 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.244025946 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.245150089 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.257708073 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:10.318372011 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.318486929 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.318528891 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.318546057 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.318659067 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.321789026 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.322010994 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.329035997 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.329121113 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.329157114 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.329163074 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.329406977 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.331500053 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:10.331581116 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.332072020 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:10.332072020 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:10.332159996 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.336177111 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.336261034 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.336291075 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.336297989 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.336338997 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.343405008 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.348227024 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.350696087 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.350774050 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.350804090 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.350811005 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.351748943 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.357800007 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.357884884 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.357924938 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.357949972 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.358860016 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.364995003 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.365140915 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.371618986 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.371689081 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.371711016 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.371718884 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.371772051 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.378185034 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.378333092 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.381504059 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.381577015 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.381608963 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.381616116 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.382128954 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.388056040 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.388151884 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.394671917 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.394747972 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.394778967 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.394787073 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.394999027 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.396713018 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:10.396874905 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:10.396970987 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:10.401551962 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.401693106 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.401695013 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.401721954 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.401815891 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.419075012 CET	49826	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:10.419089079 CET	443	49826	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:10.421351910 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.421435118 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.424330950 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.424417019 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.424447060 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.426898003 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.430269003 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.430376053 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.430389881 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.430419922 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.431608915 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.435473919 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.435558081 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.440778017 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.440859079 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.440891981 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.440898895 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.440973997 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.446162939 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.446257114 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.446264029 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.451505899 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.452092886 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.452099085 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.453438997 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.453515053 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.453624010 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.454442978 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.454467058 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.456697941 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.456752062 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.456763983 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.456783056 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.456834078 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.456839085 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.462013006 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.462069035 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.462075949 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.464701891 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.464787006 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.464852095 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.464860916 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.465564966 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.470020056 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.470088005 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.475281000 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.475349903 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.475354910 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.475379944 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.475431919 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.480618954 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.480694056 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.480700970 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.480715990 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.480767965 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.485865116 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.485928059 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.491087914 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.491167068 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.491202116 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.491271973 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.493041992 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:10.493091106 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:10.493192911 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:10.493851900 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:10.493880987 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:10.495954037 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.496049881 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.496069908 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.496140957 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.500767946 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.500839949 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.505595922 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.505661011 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.505712986 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.505764961 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.510236979 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.510296106 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.510354996 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.510404110 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.514687061 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.514765978 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.516284943 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:10.516357899 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:10.516415119 CET	49836	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:10.517905951 CET	49836	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:10.517918110 CET	443	49836	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:10.518889904 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.518965006 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.519011974 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.519062042 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.520143032 CET	49846	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:10.520179987 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.520256996 CET	49846	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:10.520782948 CET	49846	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:10.520798922 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.523118019 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.523190975 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.523240089 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.523287058 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.527393103 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.527457952 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.531492949 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.531559944 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.533708096 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.533772945 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.533834934 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.538006067 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.538079977 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.538088083 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.538130999 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.538203001 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.538208961 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.540632010 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.540695906 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.540707111 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.540750027 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.540802956 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.540808916 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.543145895 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.543339968 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.543344975 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.547444105 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.547532082 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.547538042 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.547553062 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.547605038 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.547610998 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.548577070 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.548633099 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.548639059 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.548697948 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.548744917 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.548751116 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.551018953 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.551080942 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.551090002 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.553850889 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.553999901 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.554054022 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.554059982 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.554111958 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.556480885 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.556597948 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.556602001 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.556634903 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.556682110 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.558876991 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.558942080 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.561312914 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.561382055 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.561402082 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.561456919 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.564002037 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.564065933 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.564131021 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.564181089 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.566359997 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.566425085 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.566447020 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.566497087 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.568789005 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.568845034 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.571436882 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.571504116 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.571515083 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.571543932 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.571611881 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.573750019 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.573807955 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.573832035 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.573898077 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.575788021 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.575968981 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:10.575985909 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.576108932 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.576173067 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.576463938 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.576929092 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:10.577019930 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.577271938 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:10.577316999 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.578502893 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.578567028 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.578588963 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.578638077 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.580770016 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.580843925 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.580852985 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.580867052 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.580924988 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.583148956 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.583214998 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.585333109 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.585413933 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.585414886 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.585437059 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.585489988 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.587660074 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.587714911 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.587742090 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.587790966 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.591062069 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.591125965 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.591140985 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.591195107 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.593259096 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.593341112 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.593347073 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.593363047 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.593406916 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.595540047 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.595614910 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.597738028 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.597800016 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.597826004 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.597877979 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.603250027 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.603347063 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.603399992 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.603408098 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.603435993 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.603486061 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.603492022 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.603518963 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.604111910 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.604118109 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.604317904 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.604366064 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.604372025 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.606426954 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.606486082 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.606492996 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.606511116 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.606559038 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.606564045 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.608529091 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.608607054 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.608639002 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.608644962 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.610661030 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.610722065 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.610733032 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.612586021 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.612752914 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.612807989 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.612842083 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.612894058 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.614804029 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.614892006 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.614911079 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.614917994 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.614981890 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.616838932 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.616903067 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.618108988 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:10.618921995 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.618983984 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.619008064 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.619066000 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.620919943 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.620990992 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.621005058 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.621069908 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.622945070 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.622998953 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.624912977 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.624989986 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.625000954 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.625052929 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.626912117 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.626977921 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.626996994 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.627053022 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.629055977 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.629113913 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.629141092 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.629192114 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.630835056 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.630896091 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.632795095 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.632854939 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.632882118 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.632935047 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.634681940 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.634748936 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.634778976 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.634915113 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.634974003 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.647913933 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:10.647936106 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:10.648005009 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:10.649034023 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:10.649048090 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:10.650198936 CET	49832	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:10.650211096 CET	443	49832	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:10.687392950 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.692069054 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.692080975 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.693511009 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.693579912 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.694751978 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.694828987 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.695945024 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.695952892 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.742666006 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.761296988 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.767956018 CET	49846	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:10.767966032 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.768438101 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.768805027 CET	49846	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:10.768881083 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.769150972 CET	49846	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:10.813914061 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.828268051 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.828346968 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:10.828427076 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:10.896296024 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.896486998 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:10.896563053 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:10.997476101 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.997548103 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:10.997629881 CET	49846	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:11.037141085 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.037177086 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.037333965 CET	49842	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:11.037362099 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.037393093 CET	443	49842	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:11.063908100 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.063932896 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.064009905 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.075833082 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.075851917 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.076814890 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.076828003 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.159672976 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.159727097 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.159787893 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.162332058 CET	49844	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.162360907 CET	443	49844	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.167903900 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.167937040 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.181159019 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.181197882 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.181305885 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.187041998 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.187074900 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.192975998 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.193022013 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.193167925 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.199016094 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.199033976 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.200400114 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.200439930 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.200500011 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.201129913 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.201154947 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.250063896 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.250514030 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:11.250541925 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.251955986 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.252028942 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:11.254302025 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:11.254379034 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.254750967 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:11.254760027 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.255101919 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:11.255135059 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.302123070 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.305143118 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.305150986 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.305505037 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.307034016 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.307092905 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.311889887 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.332793951 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:11.335099936 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.357901096 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.381036997 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:11.381046057 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.391983986 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.434866905 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.448401928 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.455177069 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.466650009 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.479403019 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.511399984 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.511562109 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.555625916 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.555665016 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.555701017 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.555733919 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.555747986 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.555787086 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.562617064 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.562726021 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.562732935 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.565828085 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.565906048 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.565911055 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.573019981 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.573055029 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.573086977 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.573101044 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.573193073 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.580121040 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.580183983 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.580213070 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.580219984 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.580267906 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.595521927 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.595561981 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.599478960 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.599586964 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.649993896 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:11.650008917 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:11.651977062 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.652009010 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.653471947 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.653750896 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:11.653831005 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:11.659164906 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.659219027 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.659235001 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.659244061 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.659282923 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.662727118 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.662760019 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.662779093 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.662786007 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.662964106 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.669975042 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.670025110 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.677243948 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.677284002 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.677314043 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.677320004 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.677386045 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.684417963 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.684456110 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.684488058 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.684494019 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.684537888 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.691668034 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.691729069 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.695959091 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.699130058 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.699157000 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.699184895 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.699194908 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.699234962 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.700346947 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.700436115 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.700845957 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.700879097 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.701623917 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.701653957 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.702368021 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.702408075 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.702425003 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.702486038 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.704128981 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.704165936 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.704246044 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.704575062 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.706651926 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.706696987 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.706701040 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.706706047 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.706753969 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.706832886 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:11.707261086 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:11.707772017 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.708252907 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.713082075 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.713104963 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.713151932 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.713157892 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.714312077 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.714466095 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.715934038 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.716187000 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.718346119 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.718949080 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.719707966 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.719752073 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.719753027 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.719760895 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.719804049 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.719851971 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.719876051 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.721636057 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:11.721647978 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:11.726424932 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.726490974 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.731885910 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.732882023 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.733289003 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.733344078 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.733402967 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.733427048 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.733448029 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.733453989 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.733491898 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.734788895 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.734806061 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.740297079 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.740351915 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.740355968 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.740400076 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.747745991 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.747764111 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.748001099 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.748008013 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.762677908 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.762695074 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.762727022 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.762733936 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.762770891 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.765651941 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.765713930 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.765717983 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.765759945 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.770354033 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.770415068 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.772002935 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:11.772011042 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.773977041 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.775789976 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.775840998 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.775846004 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.775893927 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.777919054 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.778379917 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:11.778548956 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.779798031 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.779855013 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.779860973 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.784475088 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.784532070 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.784554958 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.784564018 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.784603119 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.790800095 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.790893078 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.790896893 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.790925026 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.790968895 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.793843031 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.793869972 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.793917894 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.793925047 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.799118042 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.799180031 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.799185038 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.804254055 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.804276943 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.804301023 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.804306984 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.804348946 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.807915926 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.807967901 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.808012009 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.808024883 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.808121920 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.812566042 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.814064980 CET	49846	443	192.168.2.4	34.192.24.192
Jan 25, 2024 01:27:11.814095020 CET	443	49846	34.192.24.192	192.168.2.4
Jan 25, 2024 01:27:11.814960003 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.814975977 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.815025091 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.815031052 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.815098047 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.815278053 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:11.815306902 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:11.815464973 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:11.816131115 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:11.816143990 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:11.819752932 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.819796085 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.819823027 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.819828033 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.819875956 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.824609995 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.824661970 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.830483913 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.830527067 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.830555916 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.830562115 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.830605030 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.834619999 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.834659100 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.834672928 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.834676981 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.834719896 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.838568926 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.838620901 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.843116999 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.843172073 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.843175888 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.843214989 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.847368956 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.847417116 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.847433090 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.847439051 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.847477913 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.851650000 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.851730108 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.856129885 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.856199980 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.856230974 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.856237888 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.856290102 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.860111952 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.860157967 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.860177994 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.860183001 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.860222101 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.864053011 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.864109993 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.865945101 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.866044044 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.866117954 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:11.868844986 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.868935108 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.868938923 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.868961096 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.869014025 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.872553110 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.872603893 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.872610092 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.872652054 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.876089096 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.876168013 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.878550053 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.878599882 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.878608942 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.878618956 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.878664970 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.881021023 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.881052017 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.881078959 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.881084919 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.881768942 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.883738041 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.883796930 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.886125088 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.886157990 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.886181116 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.886194944 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.888581991 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.888639927 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.888644934 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.888668060 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.888694048 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.890990019 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.891079903 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:11.891129971 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:11.912609100 CET	49845	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:11.912637949 CET	443	49845	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:11.918608904 CET	80	49755	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:11.918721914 CET	49755	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:11.938658953 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.938822031 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.938895941 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.938920021 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.939198971 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:11.939269066 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:11.945283890 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.945310116 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.945365906 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.945398092 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.945523024 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.945579052 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:11.945590973 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.945640087 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:11.946752071 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.946803093 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:11.946959972 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:11.946994066 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:11.947042942 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:11.947168112 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:11.951316118 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.951628923 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:11.951769114 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:12.060856104 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:12.115933895 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:12.162518024 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:12.162540913 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:12.164047003 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:12.170239925 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:12.170717001 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:12.203716993 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:12.213859081 CET	49849	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:12.213875055 CET	443	49849	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:12.220159054 CET	49852	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:12.220186949 CET	443	49852	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:12.221173048 CET	49850	443	192.168.2.4	142.250.105.149
Jan 25, 2024 01:27:12.221210003 CET	443	49850	142.250.105.149	192.168.2.4
Jan 25, 2024 01:27:12.223310947 CET	49855	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.223351002 CET	443	49855	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.245914936 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:12.247206926 CET	49755	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:12.249587059 CET	49848	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:12.249604940 CET	443	49848	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:12.254617929 CET	49864	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:12.254653931 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:12.254718065 CET	49864	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:12.255374908 CET	49864	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:12.255389929 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:12.255963087 CET	49847	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:12.255976915 CET	443	49847	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:12.259130955 CET	49856	443	192.168.2.4	173.194.219.156
Jan 25, 2024 01:27:12.259175062 CET	443	49856	173.194.219.156	192.168.2.4
Jan 25, 2024 01:27:12.268629074 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.268642902 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.268697977 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.293670893 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.293689013 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.343010902 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:12.343158007 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:12.348014116 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:12.350997925 CET	49861	443	192.168.2.4	52.46.143.56
Jan 25, 2024 01:27:12.351016045 CET	443	49861	52.46.143.56	192.168.2.4
Jan 25, 2024 01:27:12.473752022 CET	80	49755	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:12.515681028 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.563141108 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.566452980 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.566459894 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.567965031 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.580472946 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.580897093 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.580912113 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.581410885 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.581476927 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.581557035 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.581696033 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.581743956 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.582269907 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.602358103 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:12.602423906 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:12.602485895 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:12.603096962 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:12.603132963 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:12.603210926 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:12.603929996 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:12.604007006 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:12.604085922 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:12.608984947 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:12.609021902 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:12.609183073 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:12.609215975 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:12.609472036 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:12.609492064 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:12.611092091 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.611116886 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.614078999 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.614124060 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.621954918 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.632272959 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.736720085 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.736885071 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.736938953 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.737713099 CET	49865	443	192.168.2.4	142.251.15.149
Jan 25, 2024 01:27:12.737723112 CET	443	49865	142.251.15.149	192.168.2.4
Jan 25, 2024 01:27:12.880004883 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:12.880445957 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:12.880502939 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:12.882344961 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:12.882441998 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:12.888565063 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.896817923 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.896857977 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.897531986 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:12.897667885 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:12.897867918 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.897931099 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.897998095 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:12.898053885 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:12.902842999 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:12.903045893 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:12.903074026 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:12.903992891 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:12.904057980 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:12.904999971 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:12.905057907 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:12.907499075 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:12.907716990 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:12.907736063 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:12.909158945 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:12.909307003 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:12.909483910 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:12.909575939 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:12.909609079 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:12.922801971 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.922981977 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.923038006 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.924714088 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:12.924783945 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:12.942387104 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:12.949928045 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:12.954341888 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:12.954520941 CET	49864	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:12.954530954 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:12.954859018 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:12.955137014 CET	49864	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:12.955192089 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:12.955287933 CET	49864	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:12.955310106 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:12.958126068 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:12.958153963 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:13.004631042 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:13.095837116 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:13.095916986 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:13.096087933 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:13.096158028 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:13.096199989 CET	443	49872	74.125.138.148	192.168.2.4
Jan 25, 2024 01:27:13.096226931 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:13.096250057 CET	49872	443	192.168.2.4	74.125.138.148
Jan 25, 2024 01:27:13.141119003 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:13.141216993 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:13.141271114 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:13.153162003 CET	49870	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:13.153191090 CET	443	49870	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:13.156075001 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.156227112 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.156286955 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.156542063 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.158051968 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.158091068 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.158263922 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.158282995 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.158715010 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:13.158915997 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:13.158945084 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:13.174463034 CET	49876	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:13.174499035 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:13.174726009 CET	49876	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:13.175708055 CET	49876	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:13.175744057 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:13.205899954 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:13.213032007 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.213318110 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:13.213351965 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:13.213408947 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.263593912 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:13.272768974 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.272835970 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.273046017 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.274267912 CET	49869	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.274295092 CET	443	49869	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.285532951 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:13.285558939 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:13.285686016 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:13.286552906 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:13.286561012 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:13.292948008 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.292962074 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.293066025 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.293629885 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.293644905 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.298572063 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.298609972 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.298813105 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.299623966 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.299662113 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.302027941 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.302063942 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.302189112 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.302675962 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.302695990 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.390117884 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:13.390290022 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:13.390475988 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:13.400352001 CET	49871	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:13.400393963 CET	443	49871	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:13.455611944 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.455789089 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.455821991 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.455959082 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.458214045 CET	49868	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:13.458252907 CET	443	49868	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:13.512789011 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.521663904 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.521672964 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.523804903 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.523886919 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.526185036 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:13.526209116 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:13.526350975 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:13.527667999 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.527827024 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.528059959 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.530827045 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:13.530847073 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:13.531467915 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.531500101 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.531507015 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.531524897 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.532440901 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.532519102 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.533551931 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.533615112 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.534645081 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.534734011 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.534746885 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.534817934 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.574698925 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.590256929 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.590312958 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.603110075 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:13.603456974 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:13.603513002 CET	49864	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:13.636042118 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.662405968 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.662592888 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.662818909 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.671607971 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.671993971 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.672024965 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.673686981 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.673855066 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.675412893 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.675515890 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.675954103 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.675981998 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.686832905 CET	49864	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:13.686857939 CET	443	49864	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:13.702877045 CET	49881	443	192.168.2.4	74.125.138.157
Jan 25, 2024 01:27:13.702934980 CET	443	49881	74.125.138.157	192.168.2.4
Jan 25, 2024 01:27:13.725275040 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.725387096 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.725397110 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.725470066 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.725655079 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.726377964 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.770672083 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:13.776355028 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:13.776369095 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:13.777770042 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:13.777911901 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:13.778287888 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:13.778367996 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:13.778620005 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:13.778635979 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:13.797957897 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.798034906 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.798211098 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.798958063 CET	49880	443	192.168.2.4	52.46.155.104
Jan 25, 2024 01:27:13.798976898 CET	443	49880	52.46.155.104	192.168.2.4
Jan 25, 2024 01:27:13.819796085 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:13.875751972 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:13.876452923 CET	49876	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:13.876508951 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:13.877000093 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:13.878526926 CET	49876	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:13.878613949 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:13.878760099 CET	49876	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:13.921955109 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:13.954473972 CET	49879	443	192.168.2.4	74.125.138.149
Jan 25, 2024 01:27:13.954485893 CET	443	49879	74.125.138.149	192.168.2.4
Jan 25, 2024 01:27:13.985289097 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.004105091 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:14.004287958 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:14.004894018 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:14.040446043 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.057874918 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.057876110 CET	49883	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:14.057882071 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.057894945 CET	443	49883	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:14.058928013 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.058970928 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.058994055 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.059312105 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:14.059387922 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:14.059468031 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:14.060266972 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.060313940 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.060399055 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:14.060436010 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:14.060522079 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.060528994 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.101689100 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:14.101762056 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:14.102164030 CET	49876	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:14.102891922 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.123117924 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.123151064 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.123208046 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.132077932 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.132093906 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.379888058 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.428112030 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.428134918 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.429792881 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.429856062 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.433398008 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.433419943 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.433482885 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.434659004 CET	49890	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.434715986 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.434777975 CET	49890	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.437947035 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.437962055 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.438119888 CET	49890	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.438149929 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.451847076 CET	49876	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:14.451884985 CET	443	49876	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:14.633754969 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.633821011 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.634012938 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.634588003 CET	49878	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:14.634597063 CET	443	49878	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:14.711930037 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.712249041 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.712279081 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.715455055 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.715522051 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.741075993 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:14.741286039 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:14.741344929 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:14.742274046 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:14.742413998 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:14.874144077 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.874181986 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.874376059 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.876313925 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.876352072 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.917000055 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.917320967 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.920131922 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.920420885 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.923998117 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:14.924215078 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:14.924968004 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.924988985 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.926306009 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.926342964 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:14.926652908 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:14.926734924 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:14.975657940 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.975756884 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:14.975824118 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:15.044795990 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.044874907 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.045059919 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.049463034 CET	49889	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.049493074 CET	443	49889	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.057789087 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.057873011 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.057965994 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.058582067 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.058617115 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.119995117 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.138901949 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.138928890 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.142796040 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.142879963 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.143873930 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.144309044 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.144320011 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.152856112 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:15.153036118 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:15.153152943 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:15.156997919 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:15.157505035 CET	49890	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:15.157589912 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:15.158051014 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:15.159046888 CET	49890	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:15.159141064 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:15.159429073 CET	49890	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:15.159471035 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:15.159497023 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.159576893 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.159624100 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.160118103 CET	49887	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.160134077 CET	443	49887	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.175776005 CET	49886	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:15.175833941 CET	443	49886	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:15.183994055 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.184020996 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.224616051 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.288285971 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.288362026 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.288445950 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.288938046 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.289005995 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.301402092 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.301904917 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.301964998 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.303414106 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.303493023 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.304001093 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.304089069 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.304236889 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.304254055 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.350474119 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.394340992 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.394494057 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.394556999 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.404963970 CET	49894	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:15.404993057 CET	443	49894	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:15.406740904 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.406816006 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.406918049 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.407326937 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.407361031 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.407413006 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.408380985 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.408411026 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.408874035 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.408893108 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.491755009 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.491796970 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.491875887 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.492506027 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.492523909 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.524228096 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.524300098 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.524367094 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.543332100 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.546430111 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.546488047 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.547555923 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.547646999 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.548213959 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.548293114 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.548623085 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.548652887 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.553703070 CET	49898	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.553761959 CET	443	49898	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.600476027 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.655505896 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.655575037 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.658154964 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.658183098 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.658370018 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.658384085 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.658802032 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.658869028 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.659118891 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.659182072 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.659816980 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.659878969 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.660123110 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.660362005 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.661201000 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.661350965 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.661557913 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.661642075 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.662426949 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.662439108 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.662476063 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.662484884 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.710445881 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.710585117 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.800662041 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.800863028 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.800916910 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.801106930 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.801290035 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.802458048 CET	49900	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:15.802519083 CET	443	49900	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:15.806895018 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:15.806984901 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:15.807214975 CET	49890	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:15.810827017 CET	49890	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:15.810867071 CET	443	49890	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:15.855925083 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.856224060 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.856255054 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.857878923 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.857969999 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.859214067 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.859309912 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.859518051 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.884886026 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.885796070 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.885912895 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.889271975 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.889452934 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.889518023 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.892802954 CET	49903	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.892810106 CET	443	49903	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.893879890 CET	49902	443	192.168.2.4	142.251.15.157
Jan 25, 2024 01:27:15.893922091 CET	443	49902	142.251.15.157	192.168.2.4
Jan 25, 2024 01:27:15.901988983 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.912427902 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.912483931 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.956736088 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.976155996 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.976233959 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:15.976310015 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.976799965 CET	49904	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:15.976841927 CET	443	49904	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:16.384119987 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:16.384175062 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:16.384269953 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:16.384516954 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:16.384533882 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:17.090640068 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:17.090955973 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:17.091015100 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:17.091720104 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:17.092027903 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:17.092293024 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:17.092304945 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:17.092305899 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:17.092371941 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:17.138643980 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:17.743608952 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:17.744043112 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:17.744097948 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:17.745398045 CET	49907	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:17.745405912 CET	443	49907	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:18.121112108 CET	80	49724	69.164.42.0	192.168.2.4
Jan 25, 2024 01:27:18.121233940 CET	49724	80	192.168.2.4	69.164.42.0
Jan 25, 2024 01:27:18.123711109 CET	49724	80	192.168.2.4	69.164.42.0
Jan 25, 2024 01:27:18.226397038 CET	80	49724	69.164.42.0	192.168.2.4
Jan 25, 2024 01:27:18.353574038 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:18.353641033 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:18.353715897 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:18.354130030 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:18.354161024 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:18.540497065 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:18.540576935 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:18.540812016 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:18.541207075 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:18.541245937 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:18.541420937 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:18.542190075 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:18.542207956 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:18.542251110 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:18.542682886 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:18.542696953 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:18.543055058 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:18.543080091 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:18.543194056 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:18.543235064 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:18.561175108 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:18.561253071 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:18.561326027 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:18.561584949 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:18.561623096 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:18.835469961 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:18.835823059 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:18.835882902 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:18.836209059 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:18.836498022 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:18.836560965 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:18.847917080 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:18.848117113 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:18.848136902 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:18.848609924 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:18.848932981 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:18.849020958 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:18.849071980 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:18.868159056 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:18.871793985 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:18.871824980 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:18.872334003 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:18.872786999 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:18.872894049 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:18.884443045 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:18.884913921 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:18.885096073 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:18.885117054 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:18.885474920 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:18.885993004 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:18.886055946 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:18.889909029 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:18.899652004 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:18.916166067 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:18.931279898 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:19.055267096 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:19.056417942 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:19.056440115 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:19.056907892 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:19.057312012 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:19.057399035 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:19.057625055 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:19.057625055 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:19.057668924 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:19.092210054 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.092248917 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.092302084 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.092767954 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.092787027 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.124716043 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.124785900 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.124964952 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:19.125098944 CET	49918	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:19.125138998 CET	443	49918	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.163924932 CET	80	49742	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:19.163984060 CET	49742	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:19.363528967 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.373076916 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.373087883 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.374720097 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.374792099 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.376250029 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.376336098 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.376631021 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.376637936 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.420655966 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.527967930 CET	49921	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:19.527995110 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.528062105 CET	49921	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:19.529089928 CET	49921	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:19.529100895 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.703150988 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:19.703205109 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:19.704008102 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:19.704698086 CET	49911	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:19.704725027 CET	443	49911	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:19.776442051 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.776772976 CET	49921	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:19.776792049 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.777254105 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.777632952 CET	49921	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:19.777707100 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.777817965 CET	49921	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:19.821908951 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:19.906136036 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.906416893 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.906476974 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.906867027 CET	49920	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.906881094 CET	443	49920	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.909720898 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.909801960 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:19.909910917 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.910094976 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:19.910105944 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.045245886 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:20.045326948 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:20.045387030 CET	49921	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:20.045805931 CET	49921	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:20.045824051 CET	443	49921	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:20.112137079 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.112200975 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.162421942 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.162767887 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.162841082 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.164450884 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.165014029 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.165143967 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.165225983 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.212683916 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.252480030 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.252628088 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.252680063 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.252860069 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.252875090 CET	443	49917	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.252882004 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.252921104 CET	49917	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.302445889 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.302469015 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.302520037 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.302762032 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:20.302988052 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.303003073 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.349900961 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:20.424190044 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:20.424222946 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:20.424297094 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:20.424743891 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:20.424762011 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:20.426211119 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:20.426317930 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:20.426403999 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:20.427189112 CET	49915	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:20.427226067 CET	443	49915	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:20.566931009 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.567147970 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.567183018 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.567661047 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.568099022 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.568181992 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.568247080 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.568283081 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.617640972 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.788093090 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.788151026 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.788409948 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.788487911 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.837948084 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.869218111 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.869242907 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.869285107 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.869302988 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.869323015 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.869461060 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.869462013 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.869462013 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.869462013 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.869462013 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.869560003 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.869642973 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.876733065 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.876832962 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.876877069 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.877151966 CET	49923	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:20.877165079 CET	443	49923	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:20.888748884 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.888793945 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.888978958 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.888979912 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.889039993 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.889096975 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.978147984 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.978197098 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.978390932 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.978390932 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.978452921 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.978507996 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:20.984221935 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:20.984421968 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.003828049 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.003871918 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.003927946 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.003998995 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.004040956 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.025111914 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.025151014 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.025194883 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.025265932 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.025306940 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.041224957 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.041250944 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.041440964 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.041440964 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.041517019 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.103195906 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.103951931 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.103967905 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.104029894 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.104101896 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.104161024 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.104161024 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.104161024 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.104233980 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.104285955 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.107172966 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.107403994 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.110480070 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.110548019 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.127757072 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.127784967 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.127988100 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.127988100 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.128048897 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.128118038 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.142599106 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.142641068 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.142678976 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.142741919 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.142784119 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.142805099 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.157386065 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.157414913 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.157625914 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.157625914 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.157687902 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.157764912 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.171344995 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.171374083 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.171590090 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.171649933 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.171720982 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.173331976 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.173435926 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.173542023 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.173542976 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.173924923 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.173924923 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.173985958 CET	443	49922	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.174135923 CET	49922	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.295566082 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:21.295640945 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:21.295722961 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:21.296813011 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:21.296859026 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:21.308461905 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:21.308511972 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:21.308801889 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:21.310012102 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:21.310056925 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:21.315376997 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:21.315412998 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:21.315489054 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:21.316437960 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:21.316458941 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:21.325856924 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.326061010 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:21.326080084 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.327709913 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.327773094 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:21.328934908 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:21.329091072 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:21.329094887 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.329164028 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.338947058 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.338968039 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.339020967 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.339623928 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.339634895 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.372831106 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:21.372838974 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.392585039 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.392659903 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.392734051 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.393177986 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.393198013 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.393282890 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.393501043 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.393524885 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.393647909 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.393663883 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.400660992 CET	49934	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:21.400681973 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.400754929 CET	49934	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:21.401014090 CET	49934	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:21.401026964 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.414999008 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:21.479396105 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.479424953 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.479479074 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.479723930 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.479731083 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.560473919 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.560684919 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.560702085 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.561160088 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.561425924 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.561501980 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.561536074 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.601855993 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.601866007 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.629570961 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.629725933 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.629786968 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:21.630126953 CET	49924	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:21.630139112 CET	443	49924	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:21.643075943 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:21.643191099 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:21.706180096 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.706415892 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.706430912 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.707334995 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.707787037 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.707896948 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.708024979 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.710330009 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.710334063 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.710725069 CET	49934	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:21.710741997 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.710858107 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.710875988 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.711215973 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.711332083 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.712004900 CET	49934	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:21.712095976 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.712383986 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.712455034 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.712560892 CET	49934	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:21.712670088 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.728661060 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.749932051 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.753345966 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.753375053 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.753931999 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.753932953 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.757309914 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.757384062 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.758539915 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.758790970 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.758795977 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.758960962 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.774907112 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:21.774982929 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:21.775199890 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:21.781491041 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.781610966 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.781754017 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.781764030 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.781972885 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.782030106 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.786843061 CET	49916	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:21.786900997 CET	443	49916	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:21.790441036 CET	49930	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:21.790453911 CET	443	49930	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:21.797674894 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:21.797712088 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:21.797781944 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:21.798100948 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:21.798119068 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:21.800524950 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.800532103 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:21.808305025 CET	49937	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:21.808379889 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:21.808459997 CET	49937	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:21.808862925 CET	49937	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:21.808938026 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:21.848938942 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:21.901979923 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.902072906 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.902276993 CET	49934	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:21.903012991 CET	49934	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:21.903050900 CET	443	49934	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:21.905234098 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.905318022 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.905364037 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.905706882 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.905725002 CET	443	49933	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.905738115 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.905767918 CET	49933	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.908376932 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.908416033 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.908488035 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.908793926 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.908821106 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.950036049 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.950103998 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.950170040 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.950252056 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.950301886 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.951060057 CET	49932	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.951087952 CET	443	49932	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.953994036 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.954030991 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:21.954087019 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.954305887 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:21.954324007 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.015841961 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:22.016050100 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:22.016067028 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:22.017046928 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:22.017350912 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:22.017437935 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:22.017452002 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:22.017517090 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:22.024957895 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.025268078 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.025327921 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.026241064 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.026591063 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.026715040 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.026715994 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.026793957 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.033576965 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.033895969 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.033956051 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.035130978 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.035559893 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.035561085 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.035640955 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.035657883 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.035703897 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.035845995 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:22.036184072 CET	49937	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:22.036242962 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:22.036724091 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:22.037015915 CET	49937	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:22.037111998 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:22.037219048 CET	49937	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:22.047686100 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.047961950 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:22.047991037 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.049432039 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.049493074 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:22.050421000 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:22.050503969 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.050620079 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:22.050631046 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.050652981 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:22.067341089 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:22.067470074 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.077977896 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:22.083483934 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.093946934 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.105470896 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:22.147897959 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.148205042 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.148267031 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.148755074 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.149039030 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.149125099 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.149137020 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.149285078 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.188580990 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.188926935 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.188986063 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.189719915 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.190167904 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.190167904 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.190197945 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.190263987 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.200311899 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.231523037 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.242149115 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:22.242225885 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:22.242501974 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:22.246444941 CET	49929	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:22.246462107 CET	443	49929	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:22.258359909 CET	49942	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:22.258438110 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:22.258526087 CET	49942	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:22.258811951 CET	49942	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:22.258838892 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:22.267034054 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:22.267246008 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:22.267458916 CET	49937	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:22.267575026 CET	49937	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:22.267611980 CET	443	49937	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:22.270589113 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.270626068 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.270704031 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.270915031 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.270935059 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.294828892 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.295109987 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.295212030 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:22.295514107 CET	49936	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:22.295542002 CET	443	49936	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:22.303853035 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.304112911 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.304173946 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:22.304800987 CET	49935	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:22.304816961 CET	443	49935	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.310476065 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:22.310501099 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.310669899 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:22.310817003 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:22.310832024 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.381115913 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.381272078 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.381722927 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.381722927 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.381787062 CET	443	49940	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.381936073 CET	49940	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.420450926 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.420504093 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.420589924 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.421200037 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.421231031 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.438225985 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:22.438252926 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:22.438303947 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:22.438574076 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:22.438584089 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:22.443834066 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.444022894 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.444027901 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.445146084 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.464721918 CET	49941	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:22.464740992 CET	443	49941	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:22.487375021 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.487694979 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.487755060 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.488234043 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.488640070 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.488641024 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.488733053 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.488809109 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.541969061 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.582508087 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.582850933 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:22.582907915 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.584453106 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.584753990 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:22.584950924 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.585057020 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:22.625991106 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:22.649025917 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.649183035 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.649449110 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.649985075 CET	49926	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.650023937 CET	443	49926	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.677613020 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.677802086 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.678216934 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.711510897 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:22.711512089 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.720869064 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.721040010 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.721467972 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.746506929 CET	49928	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:22.746567011 CET	443	49928	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:22.747549057 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.747612000 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.747950077 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:22.747972965 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:22.748887062 CET	49943	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:22.748914003 CET	443	49943	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:22.749351025 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.749432087 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.749660969 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:22.749717951 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:22.750722885 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.751005888 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.751876116 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:22.752115011 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:22.753345013 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.753360033 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.753547907 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:22.753555059 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:22.799695015 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:22.799932957 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.903578997 CET	49947	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:22.903656006 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:22.903745890 CET	49947	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:22.918333054 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:22.918369055 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:22.918448925 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:22.919903040 CET	49947	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:22.919981956 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:22.921312094 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:22.921327114 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:22.924123049 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:22.924156904 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:22.924266100 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:22.924601078 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:22.924616098 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:22.974308968 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:22.974673986 CET	49942	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:22.974701881 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:22.975168943 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:22.976133108 CET	49942	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:22.976213932 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:22.976843119 CET	49942	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:22.982665062 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.983094931 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:22.983160973 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.984167099 CET	49945	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:22.984204054 CET	443	49945	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:23.017930031 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:23.202291965 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:23.202363014 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:23.202836990 CET	49942	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:23.203083992 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.203149080 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.203193903 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.203217983 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.203238964 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.203254938 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.203279018 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.203890085 CET	49942	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:23.203919888 CET	443	49942	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:23.204447985 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.205177069 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.205214977 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.205645084 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.206373930 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.206445932 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.206465960 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.216770887 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.217272043 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.217288017 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.217772007 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.218116045 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.218194008 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.218259096 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.233897924 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.234699011 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.234781981 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:23.249912977 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.256879091 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.258256912 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.258263111 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.269313097 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.269378901 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.269515038 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.269515991 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.269536972 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.269769907 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.311650991 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.311717987 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.311908960 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.311908960 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.311929941 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.312287092 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.314690113 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.314766884 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.351583004 CET	49946	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:23.351598978 CET	443	49946	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.369390011 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.369436979 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.369476080 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.369504929 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.369533062 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.369555950 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.392239094 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.392282009 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.392374992 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.392374992 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.392405987 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.392509937 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.406136036 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:23.406172037 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:23.406253099 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:23.407183886 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:23.407216072 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:23.420176029 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.420222998 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.420356035 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.420356035 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.420387030 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.420639992 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.431917906 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.431958914 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.432027102 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.432056904 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.432126045 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.432274103 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.466476917 CET	49944	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:23.466505051 CET	443	49944	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:23.483603954 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.483680010 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.483748913 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.484810114 CET	49948	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.484838009 CET	443	49948	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.498545885 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.498617887 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.498668909 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.499406099 CET	49949	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:23.499423027 CET	443	49949	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:23.640831947 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:23.641480923 CET	49947	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:23.641541958 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:23.641872883 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:23.643214941 CET	49947	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:23.643318892 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:23.643945932 CET	49947	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:23.645879030 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:23.645929098 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.645999908 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:23.646733046 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:23.646770954 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.685937881 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:23.869318962 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:23.869395018 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:23.869446039 CET	49947	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:23.869914055 CET	49947	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:23.869932890 CET	443	49947	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:23.934950113 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.935277939 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:23.935307026 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.935983896 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.936497927 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:23.936499119 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:23.936630011 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:23.985006094 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.100076914 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:24.100152016 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.100209951 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:24.100816965 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:24.100895882 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.110939980 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:24.139547110 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:24.139575005 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:24.140763044 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:24.141963959 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:24.142335892 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:24.142421961 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:24.182739973 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:24.241097927 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.241134882 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:24.241339922 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.241451025 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.241466045 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:24.345494032 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.349128008 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:24.349143982 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.349446058 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.350229979 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:24.350306034 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.350655079 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:24.393920898 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.398977041 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:24.535618067 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.535640955 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.535645008 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.535680056 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.535748005 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.535849094 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.535850048 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.535850048 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.535885096 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.536355019 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.601941109 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.601974964 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.602201939 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.602201939 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.602261066 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.602703094 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.647237062 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.647274971 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.647392035 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.647392035 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.647452116 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.649375916 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.665282011 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.665364027 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.665517092 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.665579081 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.665663958 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.665777922 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.715503931 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.715538025 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.715739965 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.715739965 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.715770960 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.717506886 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.736680031 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.736717939 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.736896038 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.736896038 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.736924887 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.737968922 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.756567955 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:24.756769896 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:24.757399082 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:24.761557102 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.761651039 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.761797905 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.762523890 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.779725075 CET	49951	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:24.779752970 CET	443	49951	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:24.785099030 CET	49950	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:24.785126925 CET	443	49950	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:24.841659069 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:24.842629910 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.842659950 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:24.844074965 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:24.844182968 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.845323086 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.845323086 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.845336914 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:24.845398903 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:24.888335943 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.888341904 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:24.930504084 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:24.940378904 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.940694094 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:24.941716909 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:24.941718102 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.006052971 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.006087065 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.006397009 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.007199049 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.007213116 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.045021057 CET	49955	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:25.045057058 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.045695066 CET	49955	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:25.045764923 CET	49955	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:25.045778990 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.060071945 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.060108900 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.060374975 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.060621977 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.060658932 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.241975069 CET	49952	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.241992950 CET	443	49952	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.265233040 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.265611887 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.265624046 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.266299009 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.266757965 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.266757965 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.266773939 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.266844034 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.290443897 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.291119099 CET	49955	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:25.291148901 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.291446924 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.293247938 CET	49955	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:25.293319941 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.293415070 CET	49955	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:25.313427925 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.313755035 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.313812971 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.314459085 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.315090895 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.315090895 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.315133095 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.315371037 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.325032949 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.333933115 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.368592978 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.438921928 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:25.439100027 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:25.439811945 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:25.439812899 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:25.589392900 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.589546919 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.589612961 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.589787960 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.589787960 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.589829922 CET	443	49956	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:25.589880943 CET	49956	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:25.700006008 CET	49958	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:25.700095892 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:25.700156927 CET	49958	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:25.701607943 CET	49958	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:25.701639891 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:25.742459059 CET	49953	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:25.742518902 CET	443	49953	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:25.837973118 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.838165998 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.838243961 CET	49955	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:25.840111017 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.840182066 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.840204000 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.840234995 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.840269089 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.840276003 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.840326071 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.842998028 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.843173981 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:25.843220949 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.870455027 CET	49955	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:25.870475054 CET	443	49955	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:25.871836901 CET	49954	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:25.871850967 CET	443	49954	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:26.075583935 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.075613022 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.075659990 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.076481104 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.076498985 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.233284950 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:26.233311892 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:26.233364105 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:26.233926058 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:26.233943939 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:26.327876091 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.328315973 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.328334093 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.329004049 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.329380035 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.329467058 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.329586983 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.347529888 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.347605944 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.347845078 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.348351002 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.348395109 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.369906902 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.408432007 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:26.408742905 CET	49958	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:26.408799887 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:26.409487963 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:26.410342932 CET	49958	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:26.410538912 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:26.410747051 CET	49958	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:26.410856962 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:26.451152086 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:26.451229095 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:26.451699972 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:26.452210903 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:26.452286959 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:26.559514999 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:26.559551001 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:26.560049057 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:26.560179949 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:26.560195923 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:26.565793991 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:26.565807104 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:26.566418886 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:26.566838026 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:26.566845894 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:26.571559906 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:26.571589947 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:26.572082043 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:26.572211981 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:26.572218895 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:26.598050117 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.598099947 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.598532915 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.598560095 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.599330902 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.599920034 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.599999905 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.600203991 CET	443	49959	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:26.600475073 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.600475073 CET	49959	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:26.631897926 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.635168076 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.635198116 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.635665894 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.636424065 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.636424065 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.636466980 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.636676073 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.681931019 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.716619968 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:26.717622042 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:26.717679977 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:26.718321085 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:26.729809046 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:26.729809999 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:26.729926109 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:26.730087996 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:26.787180901 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:26.824162960 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.824322939 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.825026989 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:26.825805902 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.836322069 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:26.842082024 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:26.864753962 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:26.867177010 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:26.879923105 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:26.895613909 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:26.910783052 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:26.968512058 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:26.968537092 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:26.968555927 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:26.968575001 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:26.968740940 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:26.968749046 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:26.968786955 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:26.968792915 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:26.969651937 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:26.969811916 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:26.969847918 CET	49962	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.969907999 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:26.969935894 CET	443	49962	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.973572016 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:26.974327087 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:26.974710941 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:26.974752903 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:26.974919081 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:26.975014925 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:26.975020885 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:26.975061893 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:26.975146055 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:26.976655006 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:26.977233887 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:26.977233887 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:26.977722883 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:26.994743109 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.994776011 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:26.995136023 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.995357037 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:26.995373964 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.027904034 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:27.027915001 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:27.027920961 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:27.028001070 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:27.028001070 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:27.057549000 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:27.057746887 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:27.058515072 CET	49958	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:27.061094999 CET	49958	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:27.061152935 CET	443	49958	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:27.073448896 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:27.100632906 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:27.100789070 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:27.101701021 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:27.101701021 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:27.101712942 CET	443	49968	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:27.101910114 CET	49968	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:27.233925104 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.235173941 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:27.235188007 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.235861063 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.239188910 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:27.239392042 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:27.239398003 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.239435911 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.294687986 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:27.342396021 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.342461109 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.342480898 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.342520952 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.342538118 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.342555046 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.346307993 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.346379042 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.346461058 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.348030090 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.406116009 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.406152010 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.406203032 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.406223059 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.406337023 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.409573078 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.409636021 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.418451071 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.454106092 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.454145908 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.454196930 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.454216957 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.454245090 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.454245090 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.454301119 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.454334021 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.454334021 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.457015991 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.457129002 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.457153082 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.457345963 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.468280077 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.468358040 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.471494913 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:27.471600056 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:27.475133896 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:27.475136995 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:27.476731062 CET	49969	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:27.476732016 CET	49961	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:27.476742983 CET	443	49969	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:27.476748943 CET	443	49961	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:27.509418011 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.509480000 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.509536982 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.509582043 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.509619951 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.509721041 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.532186985 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.532227993 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.533160925 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.533160925 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.533225060 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.534471035 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.560430050 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.560477972 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.560652971 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.560652971 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.560719013 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.561052084 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.580941916 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.580985069 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.581073046 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.581135988 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.581485987 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.583847046 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.583884001 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.584462881 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.584625959 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.584640980 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.632369041 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.632411957 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.632668972 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.632728100 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.634226084 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.638686895 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.645421982 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.652118921 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.652160883 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.652424097 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.652483940 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.652539015 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.652614117 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.654145956 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.666275024 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.666316032 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.672481060 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.672547102 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.673227072 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.678775072 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.678796053 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.678833008 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.679634094 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.679697990 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.679791927 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.689059973 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.689097881 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.690968037 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.691030025 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.691711903 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.699784994 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.699866056 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.699920893 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.700304985 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.700366020 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.700666904 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.711296082 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.711333990 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.713779926 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.713799000 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.713952065 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.721923113 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.721961975 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.725342989 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.725403070 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.725512028 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.731729984 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.731770039 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.731823921 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.731882095 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.731929064 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.740669012 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.740705967 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.740875959 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.740875959 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.740937948 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.741048098 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.742199898 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.742265940 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.753448009 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.753489017 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.759021997 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.759493113 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.759552956 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.763087034 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.768538952 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.768580914 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.768770933 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.768770933 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.768832922 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.778197050 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.778247118 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.788009882 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.789320946 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.790324926 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.790395021 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.790430069 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.798204899 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.805200100 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.805270910 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.805304050 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.805324078 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.808799982 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.818124056 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.818146944 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.818167925 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.818200111 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.818219900 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.818882942 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.818897963 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.818917990 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.818958044 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.818990946 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.819029093 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.819056988 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.820816994 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.820836067 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.820864916 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.820884943 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.820909023 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.820952892 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.822921038 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.822942019 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.822958946 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.822990894 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.823002100 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.823020935 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.823034048 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.823048115 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.823070049 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.823126078 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.826338053 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.826595068 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.826611996 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.827074051 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.827385902 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.827462912 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.827528954 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.828766108 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.828819036 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.828836918 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.828838110 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.828864098 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.828887939 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.828933001 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.834965944 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.834989071 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.835025072 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.835047960 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.839098930 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.839169979 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.839220047 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.840450048 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.840500116 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.840517044 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.840542078 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.840779066 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.840780020 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.840845108 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.846302032 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.846342087 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.846386909 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.846509933 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.846571922 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.846848011 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.852410078 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.852458954 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.852627993 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.852627993 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.852691889 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.857579947 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.857624054 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.857868910 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.857870102 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.857960939 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.864908934 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.864948034 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.864984035 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.865063906 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.865236998 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.865796089 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.865844965 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.865875959 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.865905046 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.866281986 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.869750023 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.869791031 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.869884014 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.869913101 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.869920969 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.870002031 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.873661995 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.873713970 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.873819113 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.873836040 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.873850107 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.873943090 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.875087976 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.878345966 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.878397942 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.878441095 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.878458977 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.878561974 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.882222891 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.882263899 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.882587910 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.882606030 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.883430958 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.884814978 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.884865046 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.885010004 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.897927046 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:27.898471117 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.910748005 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.918055058 CET	49963	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:27.918090105 CET	443	49963	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.309009075 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:28.309051037 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:28.315146923 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:28.315511942 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:28.315531015 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:28.385823011 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.385936022 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.386037111 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.386645079 CET	49970	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.386673927 CET	443	49970	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.623423100 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.623475075 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.623599052 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.623886108 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.623914003 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.723566055 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:28.723614931 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:28.723687887 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:28.723901033 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:28.723920107 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:28.745646000 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.745685101 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.745775938 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.746011972 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.746016979 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.869369984 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.870945930 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.870975018 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.871562004 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.939385891 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.943972111 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.944129944 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.944652081 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.985922098 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.998318911 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.998646021 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:28.998663902 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:28.999355078 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.005681038 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.005815029 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.005820036 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.005970001 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.022773027 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:29.023004055 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:29.023075104 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:29.024205923 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:29.026834965 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:29.026918888 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:29.027007103 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:29.027045012 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:29.030188084 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.030263901 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.030380964 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.030808926 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.030849934 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.133846045 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.133961916 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.135814905 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.136209011 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.136930943 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.140996933 CET	49974	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.141025066 CET	443	49974	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.152508974 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:29.181777000 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.181854010 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.184568882 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.184900045 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.184931993 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.234559059 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.234791994 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.235575914 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.236135006 CET	49976	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.236151934 CET	443	49976	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.279382944 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.283447981 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.283505917 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.284010887 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.285692930 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.285825968 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.285856009 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.291357040 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.291436911 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.291604042 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.291904926 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.291929007 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.325978041 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.327292919 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:29.328018904 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:29.328077078 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:29.328778982 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:29.330790043 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:29.330888033 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:29.330904961 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:29.346466064 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.374001026 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:29.449198961 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:29.449831009 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.451009989 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.451067924 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.452560902 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.452744007 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.453185081 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.453185081 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.453305960 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.543791056 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.544126034 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.544167042 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.545710087 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.546072960 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.546224117 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.546267986 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.556246042 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.556273937 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.556344032 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.556704998 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.556718111 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.556937933 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.557132959 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.558130980 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.558463097 CET	49977	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.558521032 CET	443	49977	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.560209036 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.560286045 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.560376883 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.560551882 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.560594082 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.636168957 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:29.636246920 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:29.636339903 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:29.636765003 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:29.636837959 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:29.645185947 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.645229101 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.645366907 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.645647049 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.645673990 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.650609016 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.650665998 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.667694092 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:29.668215990 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:29.668277025 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:29.668431997 CET	49973	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:29.668448925 CET	443	49973	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:29.674781084 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.717559099 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.717684984 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.718499899 CET	49978	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.718559027 CET	443	49978	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.775985956 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.777206898 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.777349949 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.778103113 CET	49979	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:29.778139114 CET	443	49979	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:29.818080902 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.818382025 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.818413019 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.819118023 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.819638968 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.819711924 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.819724083 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.820035934 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.821685076 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.821698904 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.822190046 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.822468042 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.822545052 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.822601080 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.861938000 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.865905046 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.884777069 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:29.885566950 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:29.885622978 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:29.886382103 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:29.886867046 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:29.886967897 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:29.887075901 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:29.887188911 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:29.896358967 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.896553040 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.896570921 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.897238016 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.897536993 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.897773981 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.897918940 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:29.928447008 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:29.928617001 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:29.928705931 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:29.929862022 CET	49975	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:29.929949045 CET	443	49975	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:29.940983057 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:29.941018105 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:29.941097021 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:29.941313982 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:29.941328049 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:29.941901922 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:29.945650101 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.945669889 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:29.968934059 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.969038963 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:29.969120979 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.969475985 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:29.969552994 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.143359900 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.143450975 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.144283056 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:30.144362926 CET	49982	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:30.144398928 CET	443	49982	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.172041893 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.172194004 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.172379017 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.172393084 CET	443	49983	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.172979116 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.172995090 CET	49983	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.226903915 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.227474928 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.227535009 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.228068113 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.228971004 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.229096889 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.229161978 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.269972086 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.320611000 CET	80	49742	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:30.323534012 CET	49742	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:30.335875034 CET	49742	80	192.168.2.4	91.215.85.14
Jan 25, 2024 01:27:30.340523958 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.340559959 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.340980053 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.341356993 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.341373920 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.398602009 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.398664951 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.398685932 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.398802042 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.398850918 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.400656939 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.403486967 CET	49981	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.403529882 CET	443	49981	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.407342911 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.407383919 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.407453060 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.407671928 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.407681942 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.428834915 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.428895950 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.429035902 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.429059982 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.429069996 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.430214882 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.430222988 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.433931112 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.434200048 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.436363935 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.436404943 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.436582088 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.436799049 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.436820030 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.467740059 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.468143940 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.468403101 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.468729019 CET	49986	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.468786955 CET	443	49986	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.471291065 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.471365929 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.471479893 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.471741915 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.471776009 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.477025032 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:30.477061987 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:30.477468967 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:30.477679968 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:30.477696896 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:30.530090094 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:30.530356884 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:30.530371904 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:30.530831099 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:30.531155109 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:30.531223059 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:30.531272888 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:30.560700893 CET	80	49742	91.215.85.14	192.168.2.4
Jan 25, 2024 01:27:30.573945999 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:30.588732004 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.588990927 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.589015007 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.589716911 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.590544939 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.590636015 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.590687990 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.632102966 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:30.632209063 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.632323980 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:30.632546902 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:30.632571936 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.633914948 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.634035110 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:30.641911030 CET	443	49980	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:30.641993046 CET	49980	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:30.643644094 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.643696070 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.645193100 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.645565033 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.645576000 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.647797108 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.658783913 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.659028053 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.659046888 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.659527063 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.659813881 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.659892082 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.659939051 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.687747955 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.687988043 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.688016891 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.688730001 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.689033031 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.689126015 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.689153910 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.701904058 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.718597889 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.718971968 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.719032049 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.720918894 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.721308947 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.721529007 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.721627951 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.721668959 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.729902983 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.739048004 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.766016006 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.847409964 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.847515106 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.847572088 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.865561008 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.865722895 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.866103888 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.866123915 CET	443	49987	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.866864920 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.866885900 CET	49987	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.875298023 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.875533104 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:30.875591993 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.876077890 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.876374006 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:30.876466036 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.876529932 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:30.876569986 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:30.900356054 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.900573969 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.900602102 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.902095079 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.902416945 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.902525902 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:30.902532101 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.902832031 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:30.931170940 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.931257963 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.931288958 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.931324005 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.931427002 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.931442022 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.931509018 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.931566954 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.932002068 CET	49988	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.932018995 CET	443	49988	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.951961994 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.953484058 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.954427958 CET	49990	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.954466105 CET	443	49990	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.955513000 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.955569983 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.955657005 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.955686092 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.955729961 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.956974983 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.957333088 CET	49989	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:30.957346916 CET	443	49989	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:30.996511936 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:31.040887117 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:31.125602961 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:31.125603914 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:31.125689030 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:31.125727892 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:31.126498938 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:31.126586914 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:31.126847029 CET	49992	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:31.126885891 CET	443	49992	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:31.127286911 CET	49985	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:31.127300024 CET	443	49985	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:31.171988010 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:31.172136068 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:31.172389984 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:31.172416925 CET	443	49993	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:31.172980070 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:31.173007011 CET	49993	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:31.297112942 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.297209024 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.297334909 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.297672033 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.297709942 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.381283998 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:31.381515026 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.381540060 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:31.383209944 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:31.383281946 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.384216070 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.384308100 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:31.384372950 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.384438992 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.384475946 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:31.384553909 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.384572983 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:31.433614016 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.536185980 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.536487103 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.536550045 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.537296057 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.537638903 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.537777901 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.537791967 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.537883043 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.587054014 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.769227982 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.769313097 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.769820929 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.770651102 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.770726919 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.770750999 CET	49994	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.770798922 CET	443	49994	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.771259069 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.771780968 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:31.771856070 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:31.973699093 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:31.973978996 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:31.974474907 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.974562883 CET	49991	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:31.974585056 CET	443	49991	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:32.010359049 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:32.011193991 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:32.011253119 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:32.011970997 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:32.012474060 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:32.012559891 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:32.012587070 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:32.012613058 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:32.053005934 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:32.115653038 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:32.115729094 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:32.115838051 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:32.116024971 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:32.116050959 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:32.243721008 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:32.243810892 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:32.246546030 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:32.246918917 CET	49995	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:32.246977091 CET	443	49995	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:33.014919996 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:33.015396118 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:33.015456915 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:33.016942978 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:33.017148972 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:33.017479897 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:33.017559052 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:33.017612934 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:33.058717012 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:33.058773994 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:33.104306936 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:33.312072039 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:33.312273979 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:33.312597990 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:33.313105106 CET	49996	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:33.313128948 CET	443	49996	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:35.203839064 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:35.203915119 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:35.204318047 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:35.204318047 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:35.204438925 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:35.328326941 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.328402996 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.328497887 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.328704119 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.328732967 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.447819948 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:35.448251963 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:35.448307991 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:35.449004889 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:35.449481964 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:35.449568033 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:35.449620962 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:35.499049902 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:35.721440077 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.722948074 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.722965002 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.724646091 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.729110956 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.731132984 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.731309891 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.731321096 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.731381893 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.784352064 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.784363985 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.828083992 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.849383116 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.849458933 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.849836111 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.849874973 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.849920034 CET	443	50022	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.849947929 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.849982023 CET	50022	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.850761890 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.850836992 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:35.851340055 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.851507902 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:35.851548910 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.027684927 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.027770996 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.044662952 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.045052052 CET	50015	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.045110941 CET	443	50015	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.094647884 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.100100994 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:36.100157022 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.101540089 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.109757900 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:36.110058069 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:36.110058069 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:36.110090017 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.110234976 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.164655924 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:36.269360065 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:36.269434929 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:36.269982100 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:36.270148039 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:36.270176888 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:36.325613976 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.325779915 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.329457045 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:36.330681086 CET	50027	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:36.330739021 CET	443	50027	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:36.461759090 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.461795092 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.468163967 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.468686104 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.468709946 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.567049026 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:36.567100048 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:36.567212105 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:36.567461014 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:36.567481995 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:36.637820005 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:36.637875080 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:36.638133049 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:36.638329029 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:36.638359070 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:36.682881117 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:36.682915926 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:36.682987928 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:36.683340073 CET	50038	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:36.683414936 CET	443	50038	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:36.683486938 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:36.683501959 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:36.683646917 CET	50038	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:36.683782101 CET	50038	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:36.683809042 CET	443	50038	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:36.727936029 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.731323004 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.731353998 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.731893063 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.732249022 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.732295036 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.732361078 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:36.773601055 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:36.876969099 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:36.877213001 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:36.877270937 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:36.878727913 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:36.878863096 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:36.879868984 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:36.879945040 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:36.879993916 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:36.927198887 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:36.927256107 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:36.973620892 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:37.137772083 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.138102055 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.138129950 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.139760017 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.139925003 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.140866995 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.141130924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.142390013 CET	443	50038	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.143001080 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.143285990 CET	50038	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.143306017 CET	443	50038	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.144932985 CET	443	50038	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.145000935 CET	50038	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.145795107 CET	50038	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.146018028 CET	443	50038	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.187592030 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.187618017 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.202896118 CET	50038	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.202923059 CET	443	50038	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.233906984 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.248956919 CET	50038	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.254055977 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.257865906 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.257951975 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.259495974 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.259790897 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.260509968 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.260509968 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.260616064 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.260828972 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.267796993 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.268863916 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.268887043 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.270525932 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.270601988 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.271338940 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.271466017 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.271476030 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.271617889 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.279922009 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.280234098 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.280411959 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.281620979 CET	50034	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.281647921 CET	443	50034	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.287564993 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:37.287587881 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:37.287847042 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.287923098 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.288139105 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:37.288161993 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.288492918 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.288527966 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.288712025 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:37.288726091 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:37.298003912 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.298012018 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.298116922 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.298274994 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.298284054 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.306087017 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:37.306165934 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:37.306329012 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:37.306688070 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:37.306714058 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:37.310652971 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.310708046 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.312108994 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.312115908 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.352519035 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.367367983 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.496558905 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:37.497176886 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:37.497426987 CET	443	50031	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:37.497564077 CET	50031	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:37.498424053 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:37.498445988 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:37.498604059 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:37.498840094 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:37.498853922 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:37.504240990 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:37.504317999 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:37.504523039 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:37.504823923 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:37.504858971 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:37.508912086 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.509012938 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.509023905 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.509080887 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.509094000 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.509787083 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.521960974 CET	443	50035	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:37.567594051 CET	50035	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:37.579478025 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.579699993 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.579756975 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.580451965 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.580766916 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.580861092 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.580868959 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.600322008 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:37.600505114 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:37.600512028 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:37.601039886 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:37.601412058 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:37.601491928 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:37.601512909 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:37.603404999 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.603683949 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.603693008 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.604176998 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.604661942 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.604741096 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.604763985 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.621917009 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:37.626912117 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:37.645080090 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:37.645090103 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:37.645118952 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.645132065 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.748341084 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.748375893 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.748385906 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.748449087 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.748495102 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.748534918 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.749749899 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.749784946 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.749799967 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.749844074 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.749866962 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.749939919 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.750937939 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.750937939 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.836878061 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.836939096 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.840557098 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.841355085 CET	50046	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:37.841367960 CET	443	50046	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:37.853997946 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.854170084 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.854646921 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.854784012 CET	50036	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.854820013 CET	443	50036	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.870448112 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:37.872689962 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:37.872746944 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:37.874214888 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:37.894990921 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:37.895514011 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:37.902313948 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:37.933337927 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.933414936 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.942646027 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.943697929 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:37.943773031 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:37.947876930 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:37.947933912 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:37.954945087 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.955017090 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.955179930 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.955313921 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.955539942 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.955589056 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.958266020 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.958266020 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.958311081 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.958342075 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.958551884 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.958551884 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.958580017 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.958631039 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.958776951 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.963519096 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:37.963548899 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:37.967153072 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.009448051 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.020643950 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.020798922 CET	443	50049	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.021102905 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.021104097 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.021104097 CET	50049	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.021938086 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.021960974 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.022139072 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.022376060 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.022386074 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.106811047 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.122195005 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.122426987 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.145927906 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.161210060 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.161269903 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.162301064 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.162370920 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.162559032 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.162606001 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.162748098 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.162795067 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.163125992 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.163187981 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.163458109 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.163508892 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.163769007 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.165400028 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.165429115 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.167587042 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.177100897 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.177124023 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.177566051 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.177594900 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.178251982 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.178289890 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.178411007 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.178930998 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.179007053 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.179513931 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.179692030 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.179708004 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.180002928 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.180012941 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.180051088 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.180104017 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.180129051 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.180164099 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.180201054 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.180238962 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.180422068 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.180521011 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.180525064 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.180692911 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.180721045 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.180725098 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.180727959 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.180737972 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.180744886 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.180840015 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.180850029 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.181041956 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.181097031 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.181123972 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.181194067 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.181197882 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.181204081 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.181282997 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.181567907 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.181705952 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.182492971 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.217113018 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.217144012 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.220968008 CET	50044	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.220983982 CET	443	50044	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.225542068 CET	50045	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.225634098 CET	443	50045	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.235410929 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.235424042 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.249052048 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.251497984 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.251535892 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.253457069 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:38.253537893 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:38.260730028 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.260759115 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.261284113 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.262475967 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.262481928 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:38.262639046 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:38.262651920 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:38.262797117 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.262833118 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.265108109 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.265239954 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.265256882 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.265284061 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.265368938 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.291990042 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.295422077 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.310422897 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.329319000 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.329329967 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.330840111 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.332935095 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.333379984 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.333601952 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.367589951 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.367655039 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.367844105 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.367896080 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.367990971 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.368041039 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.370271921 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.370338917 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.370541096 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.370619059 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.370796919 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.370847940 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.371555090 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.371556997 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.371634007 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.371773958 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.371825933 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.371987104 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.372042894 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.372451067 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.372505903 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.372703075 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.372754097 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.373070002 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.373903990 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.386420965 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.386584997 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.386615038 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.386893034 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.386962891 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.387051105 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.393248081 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.393248081 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.393248081 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.393248081 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.393284082 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.393321037 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.393321037 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.393341064 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.393507957 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.393507957 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.395832062 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.396035910 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.398339987 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.398406982 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.398463964 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.398989916 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.398989916 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.399002075 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.399027109 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.399115086 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.401000977 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.401053905 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.411325932 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.411389112 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.413414001 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.416874886 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.416902065 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.444586992 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.452636003 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.452696085 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.454330921 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.454940081 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.457026005 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.457144976 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.457277060 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.462502956 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.497910976 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.507436991 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.507452965 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.513448000 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.513684988 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.516705990 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.516736984 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.516860008 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.516916990 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.518259048 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.518583059 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.520445108 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.520648003 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.523428917 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.523447990 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.525511026 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.525600910 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.525707960 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.526601076 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.527842999 CET	50052	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:38.527851105 CET	443	50052	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:38.529251099 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.529386044 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.529411077 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.529448032 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.542582035 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.548907042 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.548937082 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.549582958 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.552695990 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.555195093 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.555254936 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.555382013 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.555464029 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.555638075 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:38.555769920 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.555960894 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.556418896 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.556514025 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.556633949 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.556668043 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.556684971 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.565916061 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.570660114 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.570687056 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.573843002 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.573966026 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574165106 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574330091 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574445009 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574522972 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574568987 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574702024 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574755907 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574819088 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.574866056 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576016903 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576016903 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576046944 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576265097 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576265097 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576265097 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576266050 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576266050 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576266050 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576396942 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576462984 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576567888 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576582909 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576657057 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576706886 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576791048 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576798916 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576925993 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.576931000 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.576961994 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577001095 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577186108 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577234030 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577362061 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577406883 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577591896 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577611923 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.577619076 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577644110 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577687979 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.577712059 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.577749014 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.577790022 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.577795982 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577822924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.577861071 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578027964 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578074932 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578236103 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578277111 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578449011 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578474045 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.578481913 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578505039 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578511953 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.578548908 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.578636885 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578691006 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578813076 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578849077 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.578849077 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.578870058 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578874111 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.578902960 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.578959942 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.578979969 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.579045057 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579091072 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579216003 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579266071 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579454899 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579493999 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579617977 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579663992 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579794884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.579844952 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580001116 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580048084 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580218077 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580262899 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580364943 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580370903 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580391884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580413103 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580435991 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580436945 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580462933 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580497026 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580668926 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580704927 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580704927 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580734968 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580734968 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.580740929 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.580848932 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.585791111 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.585846901 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.600800991 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:38.601028919 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.601788044 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.601820946 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.602035046 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.602293015 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.602310896 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.615526915 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.617427111 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.617486954 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.617566109 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.617580891 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.617640018 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.617711067 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.617752075 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.617877007 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.617952108 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.617961884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.617993116 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.617995977 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.618104935 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.618144989 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.618638039 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.618647099 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.618702888 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.630630970 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.646935940 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.647150040 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.652539015 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.657866001 CET	50053	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.657882929 CET	443	50053	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.685395956 CET	50061	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.685431004 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.685724974 CET	50061	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.685990095 CET	50061	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.686008930 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.722207069 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.722215891 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.722292900 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.722539902 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.722547054 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.735183954 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.735268116 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.735402107 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.736162901 CET	50048	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.736174107 CET	443	50048	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.741841078 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.741934061 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.742470980 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.742845058 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.742919922 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.749878883 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.750698090 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.753715992 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.765593052 CET	50054	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.765634060 CET	443	50054	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.779115915 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.779206038 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.779345989 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.779620886 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:38.779644966 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:38.780082941 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.780143976 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.780303955 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.780303955 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.780333996 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.780440092 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.780488014 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.780881882 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.780896902 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.785226107 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.785285950 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.785881042 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.785959959 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.786279917 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.786396027 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.786499023 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.786550999 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.786720991 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.786777973 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.786986113 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787031889 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787233114 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787297010 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787427902 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787475109 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787612915 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787650108 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787826061 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.787870884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788075924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788117886 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788235903 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788283110 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788408041 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.788438082 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788464069 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788502932 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788666010 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788711071 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788764000 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.788862944 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.788911104 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789041042 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789093018 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789186954 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.789269924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789308071 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789465904 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789510012 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789664984 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789704084 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789714098 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.789755106 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.789787054 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.789814949 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.789839983 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.789863110 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789940119 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.789957047 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.789979935 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790023088 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790023088 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790041924 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790074110 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790079117 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790082932 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790108919 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790123940 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790134907 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790147066 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790164948 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790188074 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790271997 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790291071 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790321112 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790477991 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790514946 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790596962 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790652990 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790697098 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790837049 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.790872097 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.790874004 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791017056 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791060925 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791209936 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791246891 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791397095 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791419029 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791441917 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791461945 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791497946 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791528940 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791560888 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791560888 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791587114 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791587114 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791610956 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791632891 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791632891 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.791640043 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791676044 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791824102 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.791870117 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792021036 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792058945 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792141914 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792171001 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792192936 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792193890 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792193890 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792223930 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792246103 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792372942 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792414904 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792491913 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792560101 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792607069 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792742968 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792778969 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792804956 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792833090 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792870045 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.792928934 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.792973995 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793004990 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793037891 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793044090 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793057919 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793087006 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793112993 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793121099 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793144941 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793162107 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793163061 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793195963 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793222904 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793250084 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793255091 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793268919 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793298006 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793313026 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793359995 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793378115 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793384075 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793427944 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793504953 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793551922 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793566942 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793574095 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793606043 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793623924 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793698072 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793737888 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793802023 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793807030 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793881893 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793899059 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793921947 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.793930054 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.793971062 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794110060 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794151068 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794255972 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.794261932 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794276953 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794322968 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794354916 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.794435978 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794472933 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794502020 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.794606924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794655085 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794780016 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794817924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794935942 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.794946909 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794970036 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.794975042 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.794998884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.795042992 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.795129061 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.795172930 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.795310974 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.795357943 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.795461893 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.795500040 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.795531034 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.795948029 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.795983076 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.796225071 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.796272993 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.796302080 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.796427965 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.796936989 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.796941996 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.796977043 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.797004938 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.797045946 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.797312975 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.798130035 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.798208952 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.799065113 CET	50055	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.799082041 CET	443	50055	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.823544025 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.823610067 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.823627949 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.823653936 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.823735952 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.823873043 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.823915005 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824107885 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.824114084 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824212074 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824260950 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824395895 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.824402094 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824417114 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824455023 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824577093 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824625969 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824796915 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824846029 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.824852943 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.824877024 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.825004101 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.825054884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.825201988 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.825246096 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.825292110 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.825341940 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.825385094 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.825771093 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.825776100 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.825814009 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.825848103 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.836353064 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.836388111 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.839003086 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.839313030 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:38.839349985 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:38.845649958 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.846368074 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.846396923 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.847906113 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.853336096 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.853403091 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.853425980 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.854178905 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.854310036 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.854353905 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.854468107 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.854573965 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.855240107 CET	50047	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:38.855281115 CET	443	50047	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:38.873951912 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:38.873970985 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:38.874501944 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:38.874831915 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:38.874840021 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:38.885521889 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:38.886069059 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:38.886128902 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:38.886634111 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:38.887190104 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:38.887290955 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:38.887365103 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:38.909084082 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.909400940 CET	50061	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.909430027 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.909933090 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.911628962 CET	50061	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.911715031 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.911834955 CET	50061	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:38.924215078 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.924242020 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:38.929900885 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:38.941636086 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:38.950722933 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.950798988 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.951117039 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.951222897 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:38.951251030 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:38.953942060 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:38.974383116 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:38.981559038 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.985038042 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.985061884 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.985991001 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.986306906 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.986377001 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.986418962 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:38.986440897 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.986568928 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.986588955 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:38.986637115 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:38.986645937 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.986675024 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.986850023 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.986888885 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.987025976 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.987073898 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.990977049 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.991141081 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.991416931 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.991480112 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.992254972 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.992295980 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.992428064 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.992474079 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.993038893 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.993086100 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.993618965 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.993674994 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.994051933 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.994091034 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.994467974 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.994514942 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.994999886 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.995047092 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.995698929 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.995750904 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.995861053 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.995902061 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.996098042 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.996144056 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.996543884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.996589899 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.996969938 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.997021914 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.997189045 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.997241974 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.997478008 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.997524977 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.997693062 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.997736931 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.997972012 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.998020887 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:38.998806953 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.004796028 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.004827976 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.005646944 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005646944 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005646944 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005707026 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005707026 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005721092 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.005747080 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005762100 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005769968 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.005789995 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005817890 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005822897 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.005848885 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005876064 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005882025 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.005923986 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005923986 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005928993 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.005958080 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005983114 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.005990028 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006016016 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006040096 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006045103 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006062984 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006091118 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006119967 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006125927 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006155968 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006175041 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006196022 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006196022 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006233931 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006239891 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006268024 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006278992 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006298065 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006304026 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006318092 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006321907 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006345034 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006350040 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006378889 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006382942 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006412029 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006416082 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006427050 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006441116 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006445885 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006455898 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006479979 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006484032 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006498098 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006504059 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006545067 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006550074 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006567001 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006571054 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006601095 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006606102 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006630898 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006634951 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006660938 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006665945 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006690025 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006694078 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006724119 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006728888 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006748915 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006753922 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006771088 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006774902 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006797075 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006799936 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006809950 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006827116 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006830931 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006859064 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006870985 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006887913 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006894112 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006911993 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006916046 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006925106 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006937981 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006942034 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006963015 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.006968021 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.006994963 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007003069 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007015944 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007020950 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007035971 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007040977 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007054090 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007059097 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007155895 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007224083 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007247925 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007353067 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007353067 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007360935 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007380009 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007400990 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007436037 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007463932 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007481098 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007493019 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007500887 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007520914 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007550001 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007579088 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007603884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007611036 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007611036 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007632017 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007719040 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.007776022 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007813931 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007896900 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007920027 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.007986069 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008023977 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008042097 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008124113 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008259058 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008280993 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008286953 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008308887 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008313894 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008346081 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008361101 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008390903 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008419037 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008444071 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008455992 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008471966 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008500099 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008505106 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008522034 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008529902 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008553982 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008582115 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008625984 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008632898 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008656979 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008789062 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008794069 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008801937 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008819103 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008819103 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008847952 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008874893 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008881092 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008900881 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008924007 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.008986950 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.008994102 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009007931 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.009030104 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.009103060 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009121895 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009196997 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009231091 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009392023 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009412050 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009491920 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009515047 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009676933 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009711981 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009869099 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.009907007 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010005951 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010027885 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010215044 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010236979 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010327101 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010360003 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010515928 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010549068 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010626078 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010643959 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010936022 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.010957956 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.014820099 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017381907 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017381907 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017381907 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017411947 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.017442942 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017442942 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017442942 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017482042 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017503977 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017533064 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017559052 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017585993 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017612934 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017654896 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017677069 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017819881 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.017905951 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.021190882 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.024437904 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:39.024458885 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.024941921 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.025273085 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:39.025351048 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.025480986 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:39.054738045 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.065923929 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.074286938 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:39.083408117 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.083621979 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:39.083650112 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.084332943 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.085036039 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:39.085139990 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.085418940 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:39.112344980 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.112426043 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.113380909 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.115742922 CET	50057	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.115771055 CET	443	50057	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.117176056 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:39.117244005 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:39.117419958 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:39.126364946 CET	50061	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:39.126977921 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.127064943 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.127645969 CET	50061	443	192.168.2.4	18.160.78.31
Jan 25, 2024 01:27:39.127662897 CET	443	50061	18.160.78.31	192.168.2.4
Jan 25, 2024 01:27:39.128354073 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.128875971 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.128953934 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.129939079 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.131906033 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.131936073 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.132040024 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.132318974 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.132328987 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.134217978 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:39.156235933 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.156306028 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.156610012 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.156721115 CET	50051	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.156738043 CET	443	50051	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.159138918 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.159168959 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.159348965 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.159671068 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.159682035 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.218688965 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.218755007 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.218786955 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.218816042 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.218887091 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.237061024 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237123013 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237160921 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.237185955 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237210989 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.237234116 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.237306118 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237348080 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237493992 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237545013 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237575054 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.237591028 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237618923 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.237643003 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237683058 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237746000 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.237768888 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.237795115 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.240235090 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240302086 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240312099 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.240331888 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240365982 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.240499020 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240539074 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240576029 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.240581989 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240684032 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.240690947 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240714073 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240750074 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.240758896 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240843058 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.240849018 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240906954 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.240946054 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241019011 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241025925 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241100073 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241141081 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241146088 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241161108 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241168976 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241221905 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241298914 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241339922 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241461039 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241466999 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241477966 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241497040 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241544962 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241569996 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241575003 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241626024 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241830111 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241869926 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.241985083 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.241991043 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242052078 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242099047 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242223024 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.242230892 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242255926 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242269039 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.242292881 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242436886 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242486954 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242523909 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.242530107 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242623091 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242662907 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242757082 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.242795944 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242830992 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.242841005 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242857933 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.242872000 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.242887020 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.242913961 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.242934942 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.243004084 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243046045 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243171930 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243221998 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243249893 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.243254900 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243352890 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243391991 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243451118 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.243522882 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243567944 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243686914 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.243693113 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243707895 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243746996 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243751049 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.243817091 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.243823051 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243884087 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.243927002 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244055986 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244092941 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.244096041 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244126081 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244128942 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.244259119 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244302988 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244334936 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.244436979 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244460106 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.244465113 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244479895 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244616032 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244662046 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244724989 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.244730949 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244766951 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.244790077 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244828939 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244959116 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.244977951 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.244986057 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245013952 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245047092 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.245116949 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.245121002 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245158911 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245197058 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245338917 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.245338917 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245362043 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245393038 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.245410919 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245475054 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.245481014 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245533943 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245554924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245615005 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245637894 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245699883 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245738983 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245767117 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245795012 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245860100 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245877981 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245953083 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.245976925 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246046066 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246085882 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246124983 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246150970 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246215105 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246232033 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246290922 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246295929 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246306896 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246330976 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246395111 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246412039 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246447086 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246474981 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246510029 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246553898 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246572971 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246629953 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246633053 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246659994 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246664047 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246690035 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246715069 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246727943 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246742964 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246747017 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246768951 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246794939 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246809959 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246838093 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246855021 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246874094 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.246876001 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246895075 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246962070 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.246984005 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247006893 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247049093 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247066975 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247122049 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247124910 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247142076 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247145891 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247168064 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247200966 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247231960 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247270107 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247298002 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247324944 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247335911 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247390985 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247407913 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247464895 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247473955 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247488976 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247498989 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247559071 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247591972 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247613907 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247637987 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247680902 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247708082 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247725010 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247787952 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247807026 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.247812986 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247876883 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247909069 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.247940063 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.248042107 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248049021 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.248086929 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248092890 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.248111963 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248135090 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248141050 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.248164892 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248169899 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.248327017 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248332977 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.248466015 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.248471022 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248495102 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248745918 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248845100 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248872042 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248877048 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.248903036 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248920918 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248943090 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248969078 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.248994112 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.249021053 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.249043941 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.249105930 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.249279022 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.249499083 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.249713898 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.249860048 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.249983072 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.250190020 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.250231028 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.250257969 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.250262022 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.250281096 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.250627041 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.250664949 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.250693083 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.250781059 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.283936977 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.284504890 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.284570932 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:39.284580946 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.284641027 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:39.284881115 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:39.284924030 CET	443	50065	18.64.174.94	192.168.2.4
Jan 25, 2024 01:27:39.285104990 CET	50065	443	192.168.2.4	18.64.174.94
Jan 25, 2024 01:27:39.342994928 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.347595930 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.347693920 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.348978043 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.349230051 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.349257946 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.349329948 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.351082087 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:39.351238012 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.351515055 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.351887941 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.351887941 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.351932049 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.353899002 CET	50066	443	192.168.2.4	18.66.255.60
Jan 25, 2024 01:27:39.353926897 CET	443	50066	18.66.255.60	192.168.2.4
Jan 25, 2024 01:27:39.405781984 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.415816069 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.415890932 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.415981054 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.416026115 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416055918 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416106939 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.416109085 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416145086 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416275978 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416320086 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416441917 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416486025 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416522026 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.416568041 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.416579962 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416594028 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.416605949 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.416615009 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416656971 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416753054 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.416759968 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416785955 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416805029 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.416810989 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416832924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.416955948 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417018890 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417067051 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.417073965 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417105913 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417160988 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417293072 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417330027 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.417330980 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417408943 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.417414904 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417467117 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417512894 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417608023 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.417639971 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.417644024 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417658091 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417695045 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417826891 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.417871952 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418035030 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418070078 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418076992 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418091059 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418200016 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418224096 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418268919 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418406963 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418416977 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418456078 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418550014 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418555975 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418567896 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418589115 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418596029 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418627024 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418632984 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418653965 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418684959 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418689966 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418735981 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418786049 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418833017 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418884993 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418890953 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418965101 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.418986082 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.418992043 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419013023 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419142008 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419183969 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419285059 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419332027 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.419337034 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419368029 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419390917 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.419436932 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.419464111 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.419497013 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419536114 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419680119 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419706106 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.419711113 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419732094 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419858932 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419888973 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.419894934 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.419909000 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420034885 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420064926 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.420070887 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420092106 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420099974 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.420222044 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420273066 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420305014 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.420311928 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420330048 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.420381069 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420427084 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420515060 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.420520067 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420550108 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.420557022 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420597076 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420770884 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420777082 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.420797110 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420841932 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.420970917 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421005011 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.421011925 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421025038 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421150923 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421180964 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.421186924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421207905 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421339989 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421396017 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421498060 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421542883 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421684980 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421724081 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421855927 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.421966076 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422044992 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422107935 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422204018 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422251940 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422380924 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422419071 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422554970 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422604084 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422733068 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422775030 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422878981 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.422924042 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423054934 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423093081 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423228979 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423279047 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423403978 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423450947 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423670053 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423677921 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423748016 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423758984 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423774004 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423798084 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423815966 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423824072 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423856020 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423868895 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.423882961 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423912048 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423938036 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423963070 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.423990011 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424015999 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424017906 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424045086 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424061060 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424072027 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424094915 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424125910 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424168110 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424195051 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424204111 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424221992 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424232960 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424247026 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424277067 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424403906 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424443960 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424472094 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424501896 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424508095 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424531937 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424547911 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424595118 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424664974 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424670935 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424735069 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424735069 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424777031 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424854994 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.424915075 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.424957991 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425087929 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425105095 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.425111055 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425136089 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425182104 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425185919 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.425219059 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425266981 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425288916 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425339937 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425364017 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425415039 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425504923 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.425554037 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.425585985 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.425611973 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.425640106 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.425664902 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.425702095 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.425777912 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.426712036 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.427833080 CET	50037	443	192.168.2.4	159.69.19.197
Jan 25, 2024 01:27:39.427840948 CET	443	50037	159.69.19.197	192.168.2.4
Jan 25, 2024 01:27:39.433305025 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.433336020 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.433789968 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.433823109 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.433834076 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.433852911 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.434382915 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.434459925 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.434693098 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.434807062 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.434968948 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.435059071 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.435132027 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.435188055 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.449183941 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.449273109 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.450246096 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.450285912 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.450304985 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.450499058 CET	50056	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.450526953 CET	443	50056	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.451105118 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.451313019 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.451323986 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.466188908 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:39.469357014 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:39.469367027 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:39.469968081 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:39.477941036 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.478003979 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.479643106 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.480966091 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:39.481091022 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:39.481096029 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:39.481115103 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:39.482441902 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:39.482527971 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:39.488374949 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:39.489763021 CET	50058	443	192.168.2.4	52.65.199.83
Jan 25, 2024 01:27:39.489795923 CET	443	50058	52.65.199.83	192.168.2.4
Jan 25, 2024 01:27:39.491576910 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:39.492186069 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:39.492199898 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:39.493669987 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:39.495366096 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:39.495532036 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:39.495532036 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:39.495547056 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:39.495564938 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:39.495618105 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:39.495696068 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:39.495831013 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:39.495970964 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:39.509335995 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:39.509382963 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:39.509541988 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:39.509725094 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:39.509732962 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:39.540590048 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:39.555124998 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.555368900 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.555427074 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.556787968 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.556860924 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.557147980 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.557209969 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.557264090 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.557296038 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.567183018 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.567250013 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.567301035 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.567321062 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.567411900 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.567969084 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.568238020 CET	443	50063	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.568558931 CET	50063	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.600497961 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.600570917 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.642487049 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.642599106 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.642651081 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.643074036 CET	50070	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:39.643085003 CET	443	50070	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:39.646955967 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.767576933 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.767771006 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.767787933 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.768126965 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.768420935 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.768481016 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.768522978 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.768562078 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.768584967 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:39.798804045 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:39.798840046 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:39.801671982 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:39.817251921 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:39.830684900 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:39.830719948 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:39.936362028 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.936441898 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.937925100 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.950021982 CET	50064	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.950079918 CET	443	50064	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.958553076 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.958574057 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.958925009 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.959183931 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.959197998 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.960655928 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.960732937 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.961182117 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.961324930 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:39.961357117 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:39.971580982 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.971721888 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.971833944 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.972055912 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.972055912 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:39.972079039 CET	443	50069	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:39.975343943 CET	50069	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.052963018 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.053069115 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.058695078 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.064404011 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.072000980 CET	50067	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.072006941 CET	443	50067	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.074101925 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.074131012 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.074806929 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.077608109 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.077666998 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.077768087 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.077878952 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.084064960 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:40.084275961 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:40.085530043 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:40.085863113 CET	50060	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:40.085877895 CET	443	50060	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:40.090996981 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.091037989 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.092042923 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.092432976 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.092444897 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.107743025 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:40.109020948 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:40.109033108 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:40.109739065 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:40.122014046 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.122383118 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:40.122504950 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:40.122663021 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:40.143400908 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.143559933 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.152151108 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.152956009 CET	50068	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.153013945 CET	443	50068	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.171226978 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:40.196188927 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.196218967 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.196387053 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.196531057 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.196537971 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.377156973 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.377227068 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.377523899 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.377752066 CET	50071	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.377759933 CET	443	50071	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.379998922 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.380078077 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.380448103 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.380552053 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.380608082 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.456466913 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.463227034 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.463247061 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.463824987 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.464112997 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.464200020 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.464240074 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.491045952 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:40.491122007 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:40.491208076 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:40.491385937 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:40.491405964 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:40.509295940 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.509308100 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.524399996 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.524635077 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:40.524657011 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.526238918 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.526814938 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:40.526949883 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:40.526961088 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.527005911 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.563488007 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.563659906 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.563674927 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.564135075 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.564412117 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.564491987 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.564532995 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.564560890 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.564567089 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.564635038 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.569097996 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:40.586800098 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.588234901 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.588294029 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.588795900 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.589746952 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.589878082 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.591005087 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.591078997 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:40.601560116 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:40.601627111 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:40.618562937 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.649653912 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:40.668606043 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.668785095 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.669197083 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.669428110 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.669504881 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.669543028 CET	50077	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.669600964 CET	443	50077	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.670192003 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.670334101 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.670362949 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.683700085 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.683907032 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.683927059 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.684763908 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.685167074 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.685249090 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.685278893 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.705938101 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:40.706109047 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:40.708828926 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:40.710139990 CET	50078	443	192.168.2.4	54.206.194.51
Jan 25, 2024 01:27:40.710154057 CET	443	50078	54.206.194.51	192.168.2.4
Jan 25, 2024 01:27:40.720215082 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.720379114 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.724752903 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.727371931 CET	50089	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:40.727376938 CET	443	50089	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:40.729908943 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:40.739677906 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:40.742090940 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:40.742206097 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:40.742412090 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:40.742428064 CET	443	49967	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:40.750256062 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:40.750256062 CET	49967	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:40.754465103 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:40.754488945 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:40.757425070 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:40.757834911 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:40.757848978 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:40.760966063 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.761225939 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.761235952 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.761862040 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:40.761907101 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.775708914 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:40.775727034 CET	443	50081	76.223.31.44	192.168.2.4
Jan 25, 2024 01:27:40.845215082 CET	50081	443	192.168.2.4	76.223.31.44
Jan 25, 2024 01:27:40.851536989 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:40.852385998 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:40.852463007 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:40.860264063 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:40.861519098 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:40.861556053 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:40.893928051 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:40.975557089 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:40.975729942 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:40.994323969 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:40.994820118 CET	49966	443	192.168.2.4	54.211.243.61
Jan 25, 2024 01:27:40.994834900 CET	443	49966	54.211.243.61	192.168.2.4
Jan 25, 2024 01:27:40.996103048 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.999247074 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:40.999277115 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:40.999897003 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.010411978 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.010411978 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.010411978 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.010478020 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.010782957 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.011533022 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:41.012892008 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.012923002 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.013906956 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.014101982 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.014112949 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.014194012 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:41.014204025 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:41.014942884 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:41.018213987 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:41.018213987 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:41.018317938 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:41.059088945 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.059150934 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:41.107505083 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.107811928 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.107867956 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.109500885 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.109811068 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.111160994 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.111252069 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.111515045 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.155145884 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.155226946 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.156625032 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.156915903 CET	50086	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.156932116 CET	443	50086	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.157917976 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.159143925 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.159199953 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.165831089 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.165868998 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.166173935 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.166510105 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.166522026 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.170583963 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.170660019 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.170777082 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.171255112 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.171329975 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.185336113 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.185410023 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.186197042 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.186490059 CET	50087	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.186548948 CET	443	50087	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.219865084 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.245398045 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:41.246484041 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:41.249912024 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:41.268927097 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:41.269073009 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:41.278410912 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.279762983 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:41.280788898 CET	50088	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:41.280803919 CET	443	50088	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:41.281553984 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.281578064 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.281599998 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.282068968 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.295758009 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.295814991 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.296114922 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.296466112 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.296531916 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.296622992 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.296889067 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.310591936 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.310868979 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.310898066 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.354875088 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.369954109 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.393752098 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:41.393789053 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:41.399782896 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:41.400443077 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:41.400454044 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:41.416559935 CET	50094	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:41.416577101 CET	443	50094	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:41.451879978 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:41.452178001 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:41.452239990 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:41.452750921 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:41.453656912 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:41.453780890 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:41.453968048 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:41.497942924 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:41.506412983 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:41.532224894 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:41.532279968 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:41.532454014 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:41.532821894 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:41.532841921 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:41.566601992 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.566792011 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.567231894 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.567486048 CET	50096	443	192.168.2.4	3.133.211.247
Jan 25, 2024 01:27:41.567516088 CET	443	50096	3.133.211.247	192.168.2.4
Jan 25, 2024 01:27:41.598685980 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.598788023 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.599797964 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.600704908 CET	50090	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.600733995 CET	443	50090	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.707917929 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.707990885 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.708183050 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.708245039 CET	443	50091	20.53.196.14	192.168.2.4
Jan 25, 2024 01:27:41.709223986 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.709261894 CET	50091	443	192.168.2.4	20.53.196.14
Jan 25, 2024 01:27:41.760724068 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:41.760912895 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:41.760935068 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:41.762510061 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:41.762799978 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:41.762901068 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:41.762906075 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:41.762916088 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:41.762984037 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:41.770272970 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.770581007 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.770608902 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.771315098 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.771579981 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.771701097 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.771704912 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.771735907 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.771764994 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.779623032 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:41.779648066 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.779795885 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:41.779810905 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:41.779941082 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.779999018 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.780144930 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:41.780427933 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:41.780503988 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:41.780512094 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.780514956 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:41.781121016 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.781245947 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.781414032 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.781486988 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:41.803957939 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:41.817569017 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.821933031 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:41.826153994 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:41.826556921 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:41.884707928 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.884792089 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.884886026 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.885930061 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.885957003 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.886014938 CET	50093	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.886037111 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.886097908 CET	443	50093	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:41.886708021 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:41.886719942 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:42.009421110 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:42.009598017 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:42.010982990 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:42.011140108 CET	50101	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:42.011176109 CET	443	50101	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:42.043445110 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:42.043534040 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:42.045191050 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.045202971 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.049006939 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.049145937 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:42.049596071 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.049608946 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.050249100 CET	50095	443	192.168.2.4	54.153.169.192
Jan 25, 2024 01:27:42.050307989 CET	443	50095	54.153.169.192	192.168.2.4
Jan 25, 2024 01:27:42.080267906 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:42.080368996 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:42.081582069 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:42.082057953 CET	50099	443	192.168.2.4	52.71.237.94
Jan 25, 2024 01:27:42.082066059 CET	443	50099	52.71.237.94	192.168.2.4
Jan 25, 2024 01:27:42.088315964 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.088424921 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.093123913 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.093485117 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.093540907 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.240843058 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.240878105 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.243408918 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.248938084 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.248975039 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.254493952 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:42.254569054 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:42.257925987 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:42.257957935 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:42.258496046 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:42.258543015 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:42.258780956 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:42.258821964 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:42.258831024 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:42.258860111 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:42.259078979 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:42.259145021 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:42.273494005 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:42.275105000 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:42.275142908 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:42.281064034 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:42.281100988 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:42.281474113 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.281483889 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.282764912 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:42.282766104 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.284704924 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.284722090 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.284826994 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:42.284837008 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:42.359052896 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:42.359127998 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:42.361675024 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:42.365727901 CET	50097	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:42.365756035 CET	443	50097	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:42.369208097 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:42.369292974 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:42.373126030 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:42.373168945 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.387268066 CET	50098	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:42.387326002 CET	443	50098	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:42.389883995 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.393019915 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.393037081 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.393630981 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.406018019 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.406245947 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.406316996 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.406373978 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.406400919 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.407639980 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.408612013 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.408807039 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.409305096 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.409343004 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.409364939 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.417599916 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:42.417675018 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:42.417884111 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:42.418699980 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:42.418732882 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:42.450459957 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.450464010 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.450474024 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.471865892 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.472105980 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.472135067 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.473258018 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.473706961 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.473824024 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.473829985 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.473882914 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.497626066 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:42.502310038 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:42.502322912 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:42.502798080 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:42.503626108 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:42.503705025 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:42.503758907 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:42.503793955 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:42.516272068 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.516357899 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.518640995 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.518649101 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.520195007 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.526385069 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.526504040 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.526518106 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.526597977 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.559300900 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:42.574378014 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.587868929 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.587920904 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.588550091 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.588946104 CET	50104	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.588962078 CET	443	50104	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.603895903 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:42.603971004 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:42.605083942 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:42.605717897 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:42.605818987 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:42.610146999 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.610236883 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.610433102 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.610644102 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.610671043 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.640588045 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.641540051 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.641788006 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.642194986 CET	50105	443	192.168.2.4	54.205.210.54
Jan 25, 2024 01:27:42.642222881 CET	443	50105	54.205.210.54	192.168.2.4
Jan 25, 2024 01:27:42.673775911 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:42.673861027 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:42.677845001 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:42.678124905 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:42.678147078 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:42.734046936 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.734179020 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.734261036 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.734395027 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.736166000 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.736294985 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.736643076 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.737395048 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.737395048 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.737426996 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.738986969 CET	50112	443	192.168.2.4	64.233.177.155
Jan 25, 2024 01:27:42.739013910 CET	443	50112	64.233.177.155	192.168.2.4
Jan 25, 2024 01:27:42.740984917 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.741070986 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.741898060 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.741926908 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.742620945 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.744610071 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:42.744627953 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:42.748316050 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.748465061 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.755703926 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.758668900 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:42.758759975 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.758789062 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.758836985 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:42.758856058 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:42.762974977 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.763044119 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.765283108 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.765311956 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.765619993 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.837124109 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.837167025 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.838706017 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.838733912 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.839112997 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.840575933 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.840781927 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.847929955 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.848011971 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.848066092 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:42.848073006 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.848102093 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.848261118 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.848468065 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:42.848524094 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:42.848932981 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:42.849531889 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:42.849608898 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:42.849756956 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:42.849793911 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:42.852854013 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.853794098 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.853828907 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.854321003 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.854602098 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.854698896 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.854710102 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.854847908 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:42.855412960 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.855478048 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.855490923 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.855544090 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.862588882 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.862643003 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.870064020 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.870196104 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.878894091 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.878972054 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.883677006 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.883707047 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.884560108 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.891169071 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.894481897 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.894562006 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.898658037 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:42.898667097 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.898684978 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:42.898696899 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.901113033 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.901196003 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.907773972 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.909670115 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.909682989 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.914357901 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.914495945 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.921034098 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.921119928 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.921715021 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:42.925287962 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.925318956 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.925645113 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:42.925666094 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:42.926188946 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:42.926592112 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.927139044 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:42.927227020 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:42.927267075 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:42.939975023 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.943001032 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.943139076 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.943561077 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.943571091 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.949003935 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.949105978 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.950479031 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.950508118 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.951289892 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.954534054 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.955749989 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.959681034 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.959758997 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.959887981 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.959898949 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.960364103 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.965081930 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.965190887 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.970552921 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.973649979 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:42.973665953 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:42.973759890 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.973788977 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.976177931 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:42.976185083 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:42.976653099 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:42.977670908 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:42.977683067 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:42.978384018 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.978468895 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.978538990 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.978569031 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.978868008 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.981861115 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:42.982033014 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:42.982038975 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:42.982528925 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:42.982848883 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:42.982937098 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:42.982956886 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:42.982956886 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:42.982964039 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:42.983803034 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.983870029 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.983884096 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.984261036 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.989017963 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.991883993 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.994421959 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.994483948 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:42.994501114 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:42.994852066 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.000336885 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.000396013 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.000407934 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.000776052 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.005058050 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.005119085 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.005139112 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.005623102 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.010461092 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.010535955 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.015024900 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:43.015330076 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:43.015386105 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:43.015845060 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:43.016138077 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:43.016211033 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:43.016273022 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:43.016307116 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:43.017191887 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.017258883 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.017287016 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.019263983 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.019459963 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.019504070 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.019979000 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.020267963 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.020371914 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.020396948 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.020420074 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.022450924 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.022536039 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.023843050 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.023853064 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.024502993 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.028889894 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.030328035 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:43.032094955 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.036330938 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:43.036339045 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:43.036504030 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.037034035 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:43.037060976 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:43.037139893 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.037204027 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.037707090 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:43.037748098 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.039179087 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.039310932 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.039362907 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:43.039370060 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:43.039401054 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:43.039505959 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:43.039514065 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.039614916 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.039640903 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.039640903 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.039716005 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:43.039716005 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.039731979 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.039758921 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.040029049 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:43.040483952 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.040718079 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:43.040831089 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:43.040836096 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:43.040955067 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:43.044121027 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.044177055 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.044190884 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.044680119 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.048038006 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.051624060 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.051862955 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.052007914 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.054613113 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.054640055 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.055196047 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.055459023 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.055538893 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.055600882 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.055610895 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.055958033 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.057789087 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.057853937 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.059072018 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.059129953 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.059150934 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.059519053 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.060036898 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.060092926 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.060152054 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.060419083 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.060645103 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.060761929 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.062381029 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.062433958 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.062458992 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.062829971 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.065059900 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.065123081 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.065141916 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.065525055 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.067508936 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.067662954 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.069072962 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.069084883 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:43.070189953 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.070229053 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.070363045 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.070372105 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.070727110 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.072902918 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.072935104 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.072958946 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.072968006 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.073435068 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.075421095 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.075474977 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.075489998 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.075558901 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.076467991 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.076782942 CET	50106	443	192.168.2.4	31.13.88.13
Jan 25, 2024 01:27:43.076795101 CET	443	50106	31.13.88.13	192.168.2.4
Jan 25, 2024 01:27:43.081943035 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:43.085238934 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:43.085244894 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.085273027 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:43.097234011 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.097253084 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.097664118 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.097716093 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.097738981 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.098149061 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.098165035 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.098192930 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.098330021 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.098357916 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.099843025 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:43.099884033 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:43.101119995 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:43.101217031 CET	50114	443	192.168.2.4	63.140.38.237
Jan 25, 2024 01:27:43.101253033 CET	443	50114	63.140.38.237	192.168.2.4
Jan 25, 2024 01:27:43.120007038 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:43.120093107 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:43.120810986 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:43.121140003 CET	50102	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:43.121150017 CET	443	50102	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:43.131552935 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:43.131633997 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:43.131802082 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:43.131817102 CET	443	50115	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:43.133646011 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:43.133661985 CET	50115	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:43.197603941 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:43.197680950 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:43.198265076 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:43.199424028 CET	50116	443	192.168.2.4	23.20.189.8
Jan 25, 2024 01:27:43.199435949 CET	443	50116	23.20.189.8	192.168.2.4
Jan 25, 2024 01:27:43.217561007 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:43.217777967 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:43.218962908 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:43.222246885 CET	50117	443	192.168.2.4	172.253.124.105
Jan 25, 2024 01:27:43.222259998 CET	443	50117	172.253.124.105	192.168.2.4
Jan 25, 2024 01:27:43.228470087 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.228501081 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.228745937 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.228980064 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.229005098 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.265096903 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:43.265177011 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:43.269798040 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:43.269869089 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:43.277107954 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:43.277221918 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:43.369541883 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.369843006 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.429209948 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.431982994 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.433314085 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.433341026 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.433581114 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.433633089 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.434097052 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.434108019 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.437993050 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.438287020 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.438466072 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.438592911 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.438890934 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.438956022 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.439224958 CET	50108	443	192.168.2.4	15.197.193.217
Jan 25, 2024 01:27:43.439238071 CET	443	50108	15.197.193.217	192.168.2.4
Jan 25, 2024 01:27:43.439663887 CET	50111	443	192.168.2.4	52.223.40.198
Jan 25, 2024 01:27:43.439702034 CET	443	50111	52.223.40.198	192.168.2.4
Jan 25, 2024 01:27:43.446549892 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.452543020 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.452599049 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.453071117 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.453562021 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.453681946 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.454204082 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.471307993 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:43.471381903 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:43.474441051 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:43.477236032 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:43.477308989 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:43.481926918 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.481951952 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.489248037 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.489259005 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.497911930 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.504415989 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.584578037 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.584650993 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.590888023 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.608707905 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:43.608757973 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:43.609392881 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:43.611804008 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.612267971 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.624409914 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.631872892 CET	50113	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:27:43.631932020 CET	443	50113	52.65.11.116	192.168.2.4
Jan 25, 2024 01:27:43.632110119 CET	50120	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.632136106 CET	443	50120	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.646810055 CET	50121	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.646873951 CET	443	50121	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.669723034 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.669940948 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.672029018 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.677705050 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.677809954 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.682677031 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.682791948 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.682990074 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.683128119 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.685473919 CET	50109	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.685511112 CET	443	50109	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.686249018 CET	50107	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:43.686305046 CET	443	50107	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:43.686892033 CET	50122	443	192.168.2.4	172.253.124.103
Jan 25, 2024 01:27:43.686904907 CET	443	50122	172.253.124.103	192.168.2.4
Jan 25, 2024 01:27:43.778119087 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.778203011 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.778287888 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.778508902 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.778547049 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.779869080 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.779891014 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.780005932 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.780167103 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:43.780179977 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:43.871726990 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:43.911120892 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:43.911137104 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:43.912473917 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:43.913090944 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:43.913242102 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:43.913245916 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:43.913292885 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:43.913518906 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:43.954667091 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:44.020169973 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.020745993 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.020759106 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.021470070 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.023958921 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.024060965 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.024065971 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.024203062 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.027149916 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.034580946 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.034637928 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.035232067 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.035610914 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.035700083 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.035721064 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.077927113 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.104410887 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.104619980 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.169476986 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:44.169732094 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:44.169776917 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:44.171288967 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:44.172782898 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:44.173124075 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:44.173214912 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:44.254713058 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.254934072 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.255326986 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.255394936 CET	443	50125	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.255431890 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.255727053 CET	50125	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.273932934 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.273998976 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.274019957 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.274080038 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.274593115 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.275212049 CET	50126	443	192.168.2.4	31.13.66.35
Jan 25, 2024 01:27:44.275223970 CET	443	50126	31.13.66.35	192.168.2.4
Jan 25, 2024 01:27:44.319391012 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:44.361531019 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:44.361604929 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:44.361679077 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:44.361929893 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:44.361948967 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:44.400897026 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:44.400979996 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:44.401041985 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:44.402440071 CET	50123	443	192.168.2.4	35.71.131.137
Jan 25, 2024 01:27:44.402479887 CET	443	50123	35.71.131.137	192.168.2.4
Jan 25, 2024 01:27:44.500579119 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:44.500793934 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:44.501431942 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:44.503540039 CET	50119	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:44.503556967 CET	443	50119	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:44.566586018 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:44.566612005 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:44.569004059 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:44.582216024 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:44.582227945 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:44.655596972 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:44.655672073 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:44.655750990 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:44.656025887 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:44.656056881 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:44.830167055 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:44.830519915 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:44.830540895 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:44.831023932 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:44.831367970 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:44.831458092 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:44.831585884 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:44.873925924 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:44.874022961 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:45.068559885 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:45.068841934 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:45.068859100 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:45.069538116 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:45.069927931 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:45.070087910 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:45.070116043 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:45.070166111 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:45.104734898 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:45.104918003 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:45.105110884 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:45.105137110 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:45.105148077 CET	443	50128	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:45.105154991 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:45.105202913 CET	50128	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:45.119929075 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:45.252279997 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:45.252549887 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:45.252577066 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:45.254096985 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:45.254652023 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:45.254690886 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:45.255110025 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:45.366997957 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:45.392395020 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:45.392472029 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:45.398392916 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:45.399837017 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:45.399914026 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:45.606586933 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:45.606662989 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:45.606776953 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:45.606995106 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:45.607019901 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:45.719125986 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:45.719290018 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:45.719367027 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:45.720026970 CET	50127	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:45.720042944 CET	443	50127	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:45.837506056 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:45.838048935 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:45.838114977 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:45.838567972 CET	50129	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:45.838582993 CET	443	50129	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:46.016748905 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.017007113 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.017065048 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.017560959 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.017868042 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.017973900 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.017999887 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.018045902 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.018083096 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.074170113 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.365051031 CET	50132	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:27:46.365087032 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:46.365345001 CET	50132	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:27:46.365645885 CET	50132	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:27:46.365720987 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:46.457076073 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:46.457158089 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:46.457247019 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:46.457586050 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:46.457653999 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:46.492100954 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:46.492330074 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:46.492384911 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:46.493540049 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:46.493910074 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:46.494029045 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:46.494040966 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:46.494079113 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:46.494096994 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:46.494226933 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:46.549165964 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:46.587714911 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:46.588231087 CET	50132	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:27:46.588258982 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:46.588921070 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:46.589373112 CET	50132	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:27:46.589653015 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:46.624015093 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.624202013 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.624596119 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.624706984 CET	50130	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.624744892 CET	443	50130	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.628320932 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.628396034 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.628510952 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.628688097 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:46.628707886 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:46.638943911 CET	50132	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:27:47.081018925 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:47.081217051 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:47.081579924 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:47.081695080 CET	50131	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:47.081732035 CET	443	50131	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:47.084510088 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:47.084538937 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:47.084609032 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:47.084821939 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:47.084829092 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:47.166909933 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:47.176714897 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:47.176773071 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:47.178302050 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:47.178762913 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:47.178859949 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:47.179025888 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:47.179270029 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:47.219466925 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:47.243912935 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:47.248843908 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:47.248904943 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:47.249382973 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:47.249757051 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:47.249850035 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:47.249926090 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:47.249970913 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:47.261198044 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.261276007 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.261368990 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.261571884 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.261590004 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.294089079 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:47.504930973 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.505237103 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.505271912 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.506448030 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.506830931 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.506951094 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.506968021 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.507066011 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.558516026 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.679609060 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:47.680001974 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:47.680016041 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:47.681489944 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:47.681838989 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:47.681979895 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:47.682240963 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:47.735707998 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.735878944 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.736207008 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.736442089 CET	50136	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:47.736469030 CET	443	50136	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:47.739335060 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:47.816209078 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:47.816375017 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:47.816581964 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:47.816797972 CET	50133	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:47.816833973 CET	443	50133	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:47.863385916 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:47.863565922 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:47.863889933 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:47.864005089 CET	50134	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:47.864041090 CET	443	50134	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:48.263711929 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:48.263998032 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:48.264056921 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:48.264753103 CET	50135	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:48.264765024 CET	443	50135	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:48.562915087 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:48.562992096 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:48.564120054 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:48.564266920 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:48.564299107 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:49.270112991 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:49.284804106 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:49.284862995 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:49.286017895 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:49.290344954 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:49.290544033 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:49.292651892 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:49.292717934 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:49.336714029 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:49.918457985 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:49.918623924 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:49.918715000 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:49.919334888 CET	50137	443	192.168.2.4	15.197.224.21
Jan 25, 2024 01:27:49.919370890 CET	443	50137	15.197.224.21	192.168.2.4
Jan 25, 2024 01:27:50.396421909 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:50.396497965 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:50.396615982 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:50.396879911 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:50.396914959 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.016388893 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.018701077 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.018758059 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.019385099 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.023080111 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.023179054 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.023231030 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.023231030 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.023288012 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.063424110 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.632863045 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.633023024 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.633352041 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.633786917 CET	50138	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.633824110 CET	443	50138	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.637255907 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.637286901 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:51.637345076 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.637537956 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:51.637550116 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:52.257317066 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:52.257531881 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:52.257556915 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:52.258049011 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:52.258342981 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:52.258419991 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:52.258472919 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:52.258502960 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:52.274566889 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.274607897 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.274719000 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.274925947 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.274934053 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.304589033 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:52.519530058 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.519794941 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.519833088 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.521617889 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.523420095 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.523550987 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.523562908 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.523617983 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.584866047 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.751348972 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.751523972 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.751653910 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.753149986 CET	50140	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:52.753182888 CET	443	50140	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:52.865010023 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:52.865221977 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:52.866210938 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:52.866523981 CET	50139	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:52.866539001 CET	443	50139	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:53.571321964 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:53.571419954 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:53.571551085 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:53.572135925 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:53.572173119 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:53.819502115 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:53.819797039 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:53.819829941 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:53.820323944 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:53.820655107 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:53.820735931 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:53.821806908 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:53.861924887 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:53.875113964 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:54.100613117 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:54.100806952 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:54.101033926 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:54.101099968 CET	443	50141	20.96.87.156	192.168.2.4
Jan 25, 2024 01:27:54.101574898 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:54.101613998 CET	50141	443	192.168.2.4	20.96.87.156
Jan 25, 2024 01:27:54.310841084 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:54.310920954 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:54.311395884 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:54.311642885 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:54.311670065 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:54.559724092 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:54.559950113 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:54.559995890 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:54.560466051 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:54.560775995 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:54.560863972 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:54.560892105 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:54.601288080 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:54.601922989 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:55.112430096 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:55.112747908 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:55.112816095 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:55.112854958 CET	443	50142	18.160.172.81	192.168.2.4
Jan 25, 2024 01:27:55.113125086 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:55.113183022 CET	50142	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:27:55.116758108 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.116837025 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.116928101 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.117145061 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.117172956 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.374938011 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.375190973 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.375251055 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.376040936 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.376358986 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.376472950 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.376492977 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.382255077 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:55.382313013 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:55.382491112 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:55.382714987 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:55.382731915 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:55.431687117 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.919936895 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.920123100 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.920461893 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.920547962 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.920591116 CET	443	50143	18.160.172.54	192.168.2.4
Jan 25, 2024 01:27:55.920636892 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.921077967 CET	50143	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:27:55.998049974 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:55.998344898 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:55.998382092 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:55.999104023 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:55.999567032 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:55.999667883 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:55.999747038 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:55.999780893 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:55.999798059 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:56.048968077 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:56.579344988 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:56.579490900 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:56.579927921 CET	50132	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:27:56.602869034 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:56.603034973 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:56.604315996 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:56.604913950 CET	50144	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:56.604950905 CET	443	50144	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:56.615856886 CET	50132	443	192.168.2.4	108.177.122.147
Jan 25, 2024 01:27:56.615901947 CET	443	50132	108.177.122.147	192.168.2.4
Jan 25, 2024 01:27:56.616729021 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:56.616769075 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:56.620146036 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:56.620549917 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:56.620580912 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:56.624022961 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:56.624102116 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:56.624453068 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:56.624676943 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:56.624706030 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:57.245126963 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:57.245562077 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:57.245621920 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:57.246136904 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:57.246593952 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:57.246682882 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:57.246731997 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:57.269527912 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.269567013 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.269653082 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.269854069 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.269865990 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.303867102 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:57.508271933 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.508514881 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.508547068 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.509515047 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.509841919 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.509964943 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.509994030 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.511616945 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:57.511806011 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:57.511826992 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:57.513308048 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:57.513611078 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:57.513729095 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:57.513739109 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:57.513791084 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:57.513833046 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:57.514111042 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:57.557904005 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.560728073 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.560765028 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:57.742468119 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.742547035 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.742820978 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.743397951 CET	50147	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:27:57.743423939 CET	443	50147	3.226.226.33	192.168.2.4
Jan 25, 2024 01:27:57.846297026 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:57.846489906 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:57.846950054 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:57.847273111 CET	50146	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:27:57.847286940 CET	443	50146	20.53.176.113	192.168.2.4
Jan 25, 2024 01:27:58.097875118 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:58.098114967 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:58.098726988 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:58.099006891 CET	50145	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:27:58.099026918 CET	443	50145	52.63.8.134	192.168.2.4
Jan 25, 2024 01:27:58.101754904 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:58.101788998 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:58.101870060 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:58.102082014 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:58.102121115 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:58.697495937 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:58.697768927 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:58.697787046 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:58.698467016 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:58.698812962 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:58.698961973 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:58.699083090 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:58.741447926 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:59.282016039 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:59.282309055 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:27:59.282387972 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:59.283507109 CET	50148	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:27:59.283524036 CET	443	50148	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:00.301074028 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:00.301111937 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:00.301219940 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:00.302268982 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:00.302284002 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:00.405935049 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:00.406013012 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:00.406121969 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:00.409472942 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:00.409550905 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.027844906 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.028265953 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.028326988 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.028827906 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.029227972 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.029325962 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.029325962 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.029366016 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.073688030 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.196554899 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:01.196835995 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:01.196852922 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:01.198345900 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:01.198786020 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:01.198978901 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:01.198983908 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:01.199229002 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:01.241832972 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:01.633795977 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.633914948 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.634239912 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.634943008 CET	50150	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.635001898 CET	443	50150	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.638451099 CET	50151	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.638484955 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.638567924 CET	50151	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.638854980 CET	50151	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:01.638870955 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:01.827980995 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:01.828183889 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:01.828243971 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:01.828427076 CET	50149	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:01.828439951 CET	443	50149	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:01.831434011 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:01.831511974 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:01.831585884 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:01.831811905 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:01.831831932 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:02.257482052 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:02.257719040 CET	50151	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:02.257731915 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:02.258260012 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:02.258603096 CET	50151	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:02.258681059 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:02.258755922 CET	50151	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:02.258785963 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:02.277853012 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.277961016 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.278064966 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.278441906 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.278477907 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.423434973 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:02.423679113 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:02.423712015 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:02.425169945 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:02.425498009 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:02.425626993 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:02.425632000 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:02.425839901 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:02.475418091 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:02.516720057 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.517632961 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.517690897 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.518321991 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.519150019 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.519150019 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.519238949 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.519303083 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.568953037 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.750865936 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.750936031 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.751149893 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.751902103 CET	50153	443	192.168.2.4	3.226.226.33
Jan 25, 2024 01:28:02.751960993 CET	443	50153	3.226.226.33	192.168.2.4
Jan 25, 2024 01:28:02.859519958 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:02.859739065 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:02.859826088 CET	50151	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:02.860048056 CET	50151	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:02.860059977 CET	443	50151	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:03.004358053 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:03.004612923 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:03.004682064 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:03.005280972 CET	50152	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:03.005316973 CET	443	50152	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:05.291939974 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:05.291973114 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:05.292069912 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:05.292503119 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:05.292512894 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:05.394074917 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:05.394164085 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:05.394278049 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:05.395020962 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:05.395062923 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.013624907 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.013926029 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.013988972 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.015125036 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.015573978 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.015662909 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.015763998 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.015795946 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.015810966 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.185386896 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:06.185822010 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:06.185834885 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:06.186461926 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:06.187061071 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:06.187222958 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:06.187227011 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:06.187292099 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:06.227909088 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:06.617213964 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.617389917 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.617455959 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.618217945 CET	50155	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.618258953 CET	443	50155	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.621371984 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.621411085 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.621506929 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.621732950 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:06.621747017 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:06.815803051 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:06.816003084 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:06.816982985 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:06.816982985 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:06.819983006 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:06.820029020 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:06.820247889 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:06.820478916 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:06.820496082 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:07.120850086 CET	50154	443	192.168.2.4	52.63.8.134
Jan 25, 2024 01:28:07.120874882 CET	443	50154	52.63.8.134	192.168.2.4
Jan 25, 2024 01:28:07.241285086 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:07.241568089 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:07.241595984 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:07.242744923 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:07.243093014 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:07.243254900 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:07.243267059 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:07.243372917 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:07.288109064 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:07.416672945 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:07.416944027 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:07.416963100 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:07.418464899 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:07.418855906 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:07.419004917 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:07.419034958 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:07.459973097 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:07.847995996 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:07.848098993 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:07.848155022 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:07.852207899 CET	50156	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:07.852230072 CET	443	50156	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:08.002240896 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:08.002535105 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:08.002608061 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:08.003520012 CET	50157	443	192.168.2.4	3.24.11.8
Jan 25, 2024 01:28:08.003581047 CET	443	50157	3.24.11.8	192.168.2.4
Jan 25, 2024 01:28:08.317087889 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:08.317123890 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:08.317339897 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:08.318043947 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:08.318061113 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:08.567359924 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:08.608294964 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:08.630160093 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:08.630167961 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:08.631678104 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:08.672367096 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:08.711308956 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:08.711700916 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:08.711705923 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:08.711776972 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:08.765230894 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:09.148196936 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:09.148363113 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:09.149184942 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:09.191638947 CET	50158	443	192.168.2.4	18.160.172.81
Jan 25, 2024 01:28:09.191654921 CET	443	50158	18.160.172.81	192.168.2.4
Jan 25, 2024 01:28:10.176126003 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.176206112 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.176285982 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.176675081 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.176733017 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.421340942 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:10.421380997 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:10.421560049 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:10.421842098 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:10.421931028 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:10.459228992 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.459861040 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.459933996 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.460438013 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.461182117 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.461302996 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.461317062 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.505978107 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.509437084 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.974004030 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.974172115 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:10.974364042 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.975122929 CET	50159	443	192.168.2.4	18.160.172.54
Jan 25, 2024 01:28:10.975182056 CET	443	50159	18.160.172.54	192.168.2.4
Jan 25, 2024 01:28:11.073770046 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.074157000 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.074217081 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.075696945 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.076287031 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.076380014 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.076380014 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.076431990 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.272636890 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.300683022 CET	50161	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:28:11.300729036 CET	443	50161	52.65.11.116	192.168.2.4
Jan 25, 2024 01:28:11.301001072 CET	50161	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:28:11.301140070 CET	50161	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:28:11.301158905 CET	443	50161	52.65.11.116	192.168.2.4
Jan 25, 2024 01:28:11.564896107 CET	50162	443	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:11.564941883 CET	443	50162	185.229.191.39	192.168.2.4
Jan 25, 2024 01:28:11.565009117 CET	50162	443	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:11.596708059 CET	50162	443	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:11.596743107 CET	443	50162	185.229.191.39	192.168.2.4
Jan 25, 2024 01:28:11.678693056 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.678880930 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.678951025 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.695631027 CET	50160	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.695650101 CET	443	50160	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.883205891 CET	50163	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.883280993 CET	443	50163	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.883363962 CET	50163	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.884511948 CET	50163	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:11.884584904 CET	443	50163	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:11.912791014 CET	443	50161	52.65.11.116	192.168.2.4
Jan 25, 2024 01:28:11.913228035 CET	50161	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:28:11.913254976 CET	443	50161	52.65.11.116	192.168.2.4
Jan 25, 2024 01:28:11.914736986 CET	443	50161	52.65.11.116	192.168.2.4
Jan 25, 2024 01:28:11.915719032 CET	50161	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:28:11.916141987 CET	443	50161	52.65.11.116	192.168.2.4
Jan 25, 2024 01:28:11.916224957 CET	50161	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:28:11.916256905 CET	443	50161	52.65.11.116	192.168.2.4
Jan 25, 2024 01:28:11.916317940 CET	50161	443	192.168.2.4	52.65.11.116
Jan 25, 2024 01:28:11.916336060 CET	443	50161	52.65.11.116	192.168.2.4
Jan 25, 2024 01:28:12.008923054 CET	443	50162	185.229.191.39	192.168.2.4
Jan 25, 2024 01:28:12.008986950 CET	50162	443	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:12.009948969 CET	50162	443	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:12.009974003 CET	443	50162	185.229.191.39	192.168.2.4
Jan 25, 2024 01:28:12.010137081 CET	443	50162	185.229.191.39	192.168.2.4
Jan 25, 2024 01:28:12.010188103 CET	50162	443	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:12.160265923 CET	50162	443	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:12.182480097 CET	50164	80	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:12.388294935 CET	80	50164	185.229.191.39	192.168.2.4
Jan 25, 2024 01:28:12.388638973 CET	50164	80	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:12.419320107 CET	50164	80	192.168.2.4	185.229.191.39
Jan 25, 2024 01:28:12.505208015 CET	443	50163	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:12.505542994 CET	50163	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:12.505601883 CET	443	50163	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:12.506340981 CET	443	50163	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:12.506912947 CET	50163	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:12.506912947 CET	50163	443	192.168.2.4	20.53.176.113
Jan 25, 2024 01:28:12.507005930 CET	443	50163	20.53.176.113	192.168.2.4
Jan 25, 2024 01:28:12.507071018 CET	443	50163	20.53.176.113	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 25, 2024 01:26:43.972903013 CET	192.168.2.4	1.1.1.1	0xd8	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:43.973165989 CET	192.168.2.4	1.1.1.1	0x66b4	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:26:43.973715067 CET	192.168.2.4	1.1.1.1	0x8375	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:43.973941088 CET	192.168.2.4	1.1.1.1	0x47cc	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:26:45.380163908 CET	192.168.2.4	1.1.1.1	0xb13c	Standard query (0)	sub.nabprotect-livechat.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:45.380592108 CET	192.168.2.4	1.1.1.1	0x5cfe	Standard query (0)	sub.nabprotect-livechat.com	65	IN (0x0001)	false
Jan 25, 2024 01:26:46.336772919 CET	192.168.2.4	1.1.1.1	0x82d0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:46.337249994 CET	192.168.2.4	1.1.1.1	0xf665	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:26:47.014355898 CET	192.168.2.4	1.1.1.1	0x1c00	Standard query (0)	sub.nabprotect-livechat.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:47.014597893 CET	192.168.2.4	1.1.1.1	0xa770	Standard query (0)	sub.nabprotect-livechat.com	65	IN (0x0001)	false
Jan 25, 2024 01:26:56.741138935 CET	192.168.2.4	1.1.1.1	0x3633	Standard query (0)	download.anydesk.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:56.741709948 CET	192.168.2.4	1.1.1.1	0x5917	Standard query (0)	download.anydesk.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:02.519901991 CET	192.168.2.4	1.1.1.1	0x494d	Standard query (0)	www.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:02.520349979 CET	192.168.2.4	1.1.1.1	0xd514	Standard query (0)	www.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:03.728492975 CET	192.168.2.4	1.1.1.1	0xffeb	Standard query (0)	tms.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:03.728847027 CET	192.168.2.4	1.1.1.1	0xba7f	Standard query (0)	tms.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:05.365597963 CET	192.168.2.4	1.1.1.1	0xda9a	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.365741014 CET	192.168.2.4	1.1.1.1	0x1dba	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:05.396483898 CET	192.168.2.4	1.1.1.1	0x117e	Standard query (0)	nab.demdex.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.396840096 CET	192.168.2.4	1.1.1.1	0xce24	Standard query (0)	nab.demdex.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:05.520505905 CET	192.168.2.4	1.1.1.1	0xe171	Standard query (0)	www.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.520840883 CET	192.168.2.4	1.1.1.1	0x2bec	Standard query (0)	www.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:06.460896969 CET	192.168.2.4	1.1.1.1	0x7fc	Standard query (0)	smetrics.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.461868048 CET	192.168.2.4	1.1.1.1	0x9d23	Standard query (0)	smetrics.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:06.464879036 CET	192.168.2.4	1.1.1.1	0xb3bd	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.465269089 CET	192.168.2.4	1.1.1.1	0xdd27	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:06.572627068 CET	192.168.2.4	1.1.1.1	0xc789	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.572972059 CET	192.168.2.4	1.1.1.1	0xdcf7	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:06.616985083 CET	192.168.2.4	1.1.1.1	0x1752	Standard query (0)	nab.demdex.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.617388964 CET	192.168.2.4	1.1.1.1	0x9fc3	Standard query (0)	nab.demdex.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:07.164324045 CET	192.168.2.4	1.1.1.1	0x74cc	Standard query (0)	smetrics.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.164412022 CET	192.168.2.4	1.1.1.1	0x4f36	Standard query (0)	smetrics.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:07.173221111 CET	192.168.2.4	1.1.1.1	0x5ff8	Standard query (0)	nationalaustraliaban.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.173305988 CET	192.168.2.4	1.1.1.1	0xe06c	Standard query (0)	nationalaustraliaban.tt.omtrdc.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:07.318036079 CET	192.168.2.4	1.1.1.1	0x4e81	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.318320036 CET	192.168.2.4	1.1.1.1	0x4719	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:07.886435986 CET	192.168.2.4	1.1.1.1	0xeedd	Standard query (0)	nationalaustraliaban.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.886435986 CET	192.168.2.4	1.1.1.1	0x2bf9	Standard query (0)	nationalaustraliaban.tt.omtrdc.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:08.293618917 CET	192.168.2.4	1.1.1.1	0xb63a	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.293869972 CET	192.168.2.4	1.1.1.1	0x2046	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 25, 2024 01:27:08.451589108 CET	192.168.2.4	1.1.1.1	0x937c	Standard query (0)	tags.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.452383041 CET	192.168.2.4	1.1.1.1	0xb16a	Standard query (0)	tags.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:08.537496090 CET	192.168.2.4	1.1.1.1	0xb64e	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.537700891 CET	192.168.2.4	1.1.1.1	0x515e	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:09.294796944 CET	192.168.2.4	1.1.1.1	0xdea2	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.295037985 CET	192.168.2.4	1.1.1.1	0x2728	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:09.362226009 CET	192.168.2.4	1.1.1.1	0xe2f7	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.362495899 CET	192.168.2.4	1.1.1.1	0x7826	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 25, 2024 01:27:09.637084961 CET	192.168.2.4	1.1.1.1	0x6fc6	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.637562990 CET	192.168.2.4	1.1.1.1	0x98f5	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:09.690021992 CET	192.168.2.4	1.1.1.1	0x1053	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.690685987 CET	192.168.2.4	1.1.1.1	0x70c5	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:10.332504988 CET	192.168.2.4	1.1.1.1	0x992a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.333034992 CET	192.168.2.4	1.1.1.1	0x3b3b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:10.369671106 CET	192.168.2.4	1.1.1.1	0x6a43	Standard query (0)	collect.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.370023012 CET	192.168.2.4	1.1.1.1	0x351b	Standard query (0)	collect.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:10.495604992 CET	192.168.2.4	1.1.1.1	0x732	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.496171951 CET	192.168.2.4	1.1.1.1	0x483b	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 25, 2024 01:27:10.701677084 CET	192.168.2.4	1.1.1.1	0x343f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.701967001 CET	192.168.2.4	1.1.1.1	0x970e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:11.065172911 CET	192.168.2.4	1.1.1.1	0x1944	Standard query (0)	3347639.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.065673113 CET	192.168.2.4	1.1.1.1	0x607e	Standard query (0)	3347639.fls.doubleclick.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:11.074481010 CET	192.168.2.4	1.1.1.1	0x62a9	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.075021029 CET	192.168.2.4	1.1.1.1	0xff23	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:11.287563086 CET	192.168.2.4	1.1.1.1	0xf865	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.287981987 CET	192.168.2.4	1.1.1.1	0x5ada	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:12.376688957 CET	192.168.2.4	1.1.1.1	0x920c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.378626108 CET	192.168.2.4	1.1.1.1	0x97ba	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:12.437597990 CET	192.168.2.4	1.1.1.1	0x5f62	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.438201904 CET	192.168.2.4	1.1.1.1	0xfb65	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:12.440037012 CET	192.168.2.4	1.1.1.1	0xd365	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.440805912 CET	192.168.2.4	1.1.1.1	0xfc61	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:12.443914890 CET	192.168.2.4	1.1.1.1	0xe652	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.444152117 CET	192.168.2.4	1.1.1.1	0x389	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:13.163197041 CET	192.168.2.4	1.1.1.1	0x1d43	Standard query (0)	collect.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.164134026 CET	192.168.2.4	1.1.1.1	0xc665	Standard query (0)	collect.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:13.172863007 CET	192.168.2.4	1.1.1.1	0xd16f	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.173465967 CET	192.168.2.4	1.1.1.1	0xcbf7	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:13.178391933 CET	192.168.2.4	1.1.1.1	0x3f0c	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.178590059 CET	192.168.2.4	1.1.1.1	0xcc57	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:13.182359934 CET	192.168.2.4	1.1.1.1	0x693a	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.182858944 CET	192.168.2.4	1.1.1.1	0x3a78	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:13.394751072 CET	192.168.2.4	1.1.1.1	0x294c	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.395205021 CET	192.168.2.4	1.1.1.1	0xe156	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:13.396361113 CET	192.168.2.4	1.1.1.1	0xa58f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.396739960 CET	192.168.2.4	1.1.1.1	0xe314	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:13.932909012 CET	192.168.2.4	1.1.1.1	0xe839	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.933088064 CET	192.168.2.4	1.1.1.1	0x9213	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Jan 25, 2024 01:27:13.949086905 CET	192.168.2.4	1.1.1.1	0x1cd6	Standard query (0)	c.az.contentsquare.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.949377060 CET	192.168.2.4	1.1.1.1	0xd043	Standard query (0)	c.az.contentsquare.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:14.928812981 CET	192.168.2.4	1.1.1.1	0x23c2	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:14.929429054 CET	192.168.2.4	1.1.1.1	0xa67d	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:15.282423973 CET	192.168.2.4	1.1.1.1	0xba28	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.282923937 CET	192.168.2.4	1.1.1.1	0x3f4d	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:15.371268034 CET	192.168.2.4	1.1.1.1	0xff40	Standard query (0)	datacloud.tealiumiq.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.371756077 CET	192.168.2.4	1.1.1.1	0xf4fb	Standard query (0)	datacloud.tealiumiq.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:16.396475077 CET	192.168.2.4	1.1.1.1	0x6fa	Standard query (0)	x.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:16.396868944 CET	192.168.2.4	1.1.1.1	0x93d2	Standard query (0)	x.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:18.956588030 CET	192.168.2.4	1.1.1.1	0xd3c2	Standard query (0)	x.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:18.957360029 CET	192.168.2.4	1.1.1.1	0x8368	Standard query (0)	x.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:18.971216917 CET	192.168.2.4	1.1.1.1	0xde59	Standard query (0)	brand-messenger.app.khoros.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:18.971757889 CET	192.168.2.4	1.1.1.1	0xe06c	Standard query (0)	brand-messenger.app.khoros.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:20.301548958 CET	192.168.2.4	1.1.1.1	0x6932	Standard query (0)	mps.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:20.301810026 CET	192.168.2.4	1.1.1.1	0x756b	Standard query (0)	mps.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:21.677927971 CET	192.168.2.4	1.1.1.1	0x865c	Standard query (0)	mboxedge34.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:21.678282976 CET	192.168.2.4	1.1.1.1	0x42a4	Standard query (0)	mboxedge34.tt.omtrdc.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:22.300667048 CET	192.168.2.4	1.1.1.1	0xb6da	Standard query (0)	mboxedge34.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:22.301229954 CET	192.168.2.4	1.1.1.1	0x717a	Standard query (0)	mboxedge34.tt.omtrdc.net	65	IN (0x0001)	false
Jan 25, 2024 01:27:22.315756083 CET	192.168.2.4	1.1.1.1	0x28e8	Standard query (0)	brand-messenger.app.khoros.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:22.316158056 CET	192.168.2.4	1.1.1.1	0xaefd	Standard query (0)	brand-messenger.app.khoros.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:24.098824024 CET	192.168.2.4	1.1.1.1	0x4123	Standard query (0)	proactive-chat-server-ap.prod.aws.lcloud.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:24.099241018 CET	192.168.2.4	1.1.1.1	0x1d67	Standard query (0)	proactive-chat-server-ap.prod.aws.lcloud.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:26.072581053 CET	192.168.2.4	1.1.1.1	0xb3c5	Standard query (0)	proactive-chat-server-ap.prod.aws.lcloud.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:26.073375940 CET	192.168.2.4	1.1.1.1	0xf1ab	Standard query (0)	proactive-chat-server-ap.prod.aws.lcloud.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:27.583070040 CET	192.168.2.4	1.1.1.1	0x8db1	Standard query (0)	ib.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:27.583369017 CET	192.168.2.4	1.1.1.1	0xd232	Standard query (0)	ib.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:30.336338043 CET	192.168.2.4	1.1.1.1	0x3b56	Standard query (0)	syd-col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:30.336433887 CET	192.168.2.4	1.1.1.1	0x1687	Standard query (0)	syd-col.eum-appdynamics.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:31.977950096 CET	192.168.2.4	1.1.1.1	0x30d2	Standard query (0)	syd-col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:31.978121996 CET	192.168.2.4	1.1.1.1	0x74fe	Standard query (0)	syd-col.eum-appdynamics.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:34.429503918 CET	192.168.2.4	1.1.1.1	0xa2a	Standard query (0)	ib.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:34.429792881 CET	192.168.2.4	1.1.1.1	0xc901	Standard query (0)	ib.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:35.201950073 CET	192.168.2.4	1.1.1.1	0xcdaa	Standard query (0)	app.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.202214956 CET	192.168.2.4	1.1.1.1	0xeca8	Standard query (0)	app.launchdarkly.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:35.208976984 CET	192.168.2.4	1.1.1.1	0x6ed8	Standard query (0)	events.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.209306002 CET	192.168.2.4	1.1.1.1	0x15e7	Standard query (0)	events.launchdarkly.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:36.078092098 CET	192.168.2.4	1.1.1.1	0x7f0f	Standard query (0)	fhp.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.078397036 CET	192.168.2.4	1.1.1.1	0xd90e	Standard query (0)	fhp.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:36.258900881 CET	192.168.2.4	1.1.1.1	0x2403	Standard query (0)	app.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.259001970 CET	192.168.2.4	1.1.1.1	0x3fe3	Standard query (0)	app.launchdarkly.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:36.435416937 CET	192.168.2.4	1.1.1.1	0x9063	Standard query (0)	clientstream.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.435513020 CET	192.168.2.4	1.1.1.1	0x6f29	Standard query (0)	clientstream.launchdarkly.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:36.514849901 CET	192.168.2.4	1.1.1.1	0x8431	Standard query (0)	wup-24f7f3c7.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.515028000 CET	192.168.2.4	1.1.1.1	0xc1eb	Standard query (0)	wup-24f7f3c7.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:36.562002897 CET	192.168.2.4	1.1.1.1	0x8984	Standard query (0)	download.anydesk.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.562205076 CET	192.168.2.4	1.1.1.1	0x6151	Standard query (0)	download.anydesk.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:37.957446098 CET	192.168.2.4	1.1.1.1	0xfff0	Standard query (0)	1.a79ab95c1589a13f8a4cab612bc71f9f7.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:37.957545042 CET	192.168.2.4	1.1.1.1	0x5dc4	Standard query (0)	1.a79ab95c1589a13f8a4cab612bc71f9f7.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:37.958997965 CET	192.168.2.4	1.1.1.1	0x5907	Standard query (0)	1.b406929acabac9b095f124c81bdfcf57f.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:37.959140062 CET	192.168.2.4	1.1.1.1	0xd260	Standard query (0)	1.b406929acabac9b095f124c81bdfcf57f.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:37.959547997 CET	192.168.2.4	1.1.1.1	0xf5b7	Standard query (0)	1.c81358859121583b7adf2ace89cb39f44.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:37.959701061 CET	192.168.2.4	1.1.1.1	0x6773	Standard query (0)	1.c81358859121583b7adf2ace89cb39f44.com	65	IN (0x0001)	false
Jan 25, 2024 01:27:38.029762030 CET	192.168.2.4	1.1.1.1	0x39ea	Standard query (0)	wup-24f7f3c7.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.030013084 CET	192.168.2.4	1.1.1.1	0xe92	Standard query (0)	wup-24f7f3c7.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:38.812186003 CET	192.168.2.4	1.1.1.1	0x2fae	Standard query (0)	fhp.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.812340021 CET	192.168.2.4	1.1.1.1	0xa1c2	Standard query (0)	fhp.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:27:40.368658066 CET	192.168.2.4	1.1.1.1	0x424e	Standard query (0)	log-24f7f3c7.nab.com.au	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:40.368756056 CET	192.168.2.4	1.1.1.1	0x5b05	Standard query (0)	log-24f7f3c7.nab.com.au	65	IN (0x0001)	false
Jan 25, 2024 01:28:11.439431906 CET	192.168.2.4	1.1.1.1	0xed03	Standard query (0)	boot.net.anydesk.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.752033949 CET	192.168.2.4	1.1.1.1	0xcf3	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.752136946 CET	192.168.2.4	1.1.1.1	0xb7b	Standard query (0)	clients1.google.com	65	IN (0x0001)	false
Jan 25, 2024 01:28:13.134258986 CET	192.168.2.4	1.1.1.1	0x29e1	Standard query (0)	relay-9739e7d3.net.anydesk.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 25, 2024 01:26:44.092170954 CET	1.1.1.1	192.168.2.4	0x66b4	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:26:44.092407942 CET	1.1.1.1	192.168.2.4	0x8375	No error (0)	accounts.google.com		142.250.9.84	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:44.092446089 CET	1.1.1.1	192.168.2.4	0xd8	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:26:44.092446089 CET	1.1.1.1	192.168.2.4	0xd8	No error (0)	clients.l.google.com		142.251.15.139	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:44.092446089 CET	1.1.1.1	192.168.2.4	0xd8	No error (0)	clients.l.google.com		142.251.15.100	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:44.092446089 CET	1.1.1.1	192.168.2.4	0xd8	No error (0)	clients.l.google.com		142.251.15.113	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:44.092446089 CET	1.1.1.1	192.168.2.4	0xd8	No error (0)	clients.l.google.com		142.251.15.102	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:44.092446089 CET	1.1.1.1	192.168.2.4	0xd8	No error (0)	clients.l.google.com		142.251.15.138	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:44.092446089 CET	1.1.1.1	192.168.2.4	0xd8	No error (0)	clients.l.google.com		142.251.15.101	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:45.856563091 CET	1.1.1.1	192.168.2.4	0xb13c	No error (0)	sub.nabprotect-livechat.com		91.215.85.14	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:46.455378056 CET	1.1.1.1	192.168.2.4	0x82d0	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:46.455378056 CET	1.1.1.1	192.168.2.4	0x82d0	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:46.455378056 CET	1.1.1.1	192.168.2.4	0x82d0	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:46.455378056 CET	1.1.1.1	192.168.2.4	0x82d0	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:46.455378056 CET	1.1.1.1	192.168.2.4	0x82d0	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:46.455378056 CET	1.1.1.1	192.168.2.4	0x82d0	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:46.455733061 CET	1.1.1.1	192.168.2.4	0xf665	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 25, 2024 01:26:47.432862043 CET	1.1.1.1	192.168.2.4	0x1c00	No error (0)	sub.nabprotect-livechat.com		91.215.85.14	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:56.861716986 CET	1.1.1.1	192.168.2.4	0x3633	No error (0)	download.anydesk.com		188.40.104.135	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:26:59.085283995 CET	1.1.1.1	192.168.2.4	0x55cf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:26:59.085283995 CET	1.1.1.1	192.168.2.4	0x55cf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:02.652522087 CET	1.1.1.1	192.168.2.4	0x494d	No error (0)	www.nab.com.au	www.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:02.654898882 CET	1.1.1.1	192.168.2.4	0xd514	No error (0)	www.nab.com.au	www.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:03.852757931 CET	1.1.1.1	192.168.2.4	0xba7f	No error (0)	tms.nab.com.au	nab.edge.nc0.co		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:03.852757931 CET	1.1.1.1	192.168.2.4	0xba7f	No error (0)	nab.edge.nc0.co	edge-geo.nc0.co		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:03.918416977 CET	1.1.1.1	192.168.2.4	0xffeb	No error (0)	tms.nab.com.au	nab.edge.nc0.co		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:03.918416977 CET	1.1.1.1	192.168.2.4	0xffeb	No error (0)	nab.edge.nc0.co	edge-geo.nc0.co		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:03.918416977 CET	1.1.1.1	192.168.2.4	0xffeb	No error (0)	edge-geo.nc0.co		3.133.211.247	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.484971046 CET	1.1.1.1	192.168.2.4	0x1dba	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.484971046 CET	1.1.1.1	192.168.2.4	0x1dba	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.484971046 CET	1.1.1.1	192.168.2.4	0x1dba	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.223.28.32	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.23.6.4	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.239.196.136	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.172.228.89	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.198.252.61	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.211.254.18	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.224.154.119	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.485136986 CET	1.1.1.1	192.168.2.4	0xda9a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		35.171.138.152	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560134888 CET	1.1.1.1	192.168.2.4	0xce24	No error (0)	nab.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560134888 CET	1.1.1.1	192.168.2.4	0xce24	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560134888 CET	1.1.1.1	192.168.2.4	0xce24	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	nab.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.211.243.61	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.207.30.198	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.225.20.118	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.219.54.255	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.80.39.198	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.86.217.42	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.216.208.235	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.560564041 CET	1.1.1.1	192.168.2.4	0x117e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.173.68	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:05.639679909 CET	1.1.1.1	192.168.2.4	0xe171	No error (0)	www.nab.com.au	www.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:05.812283993 CET	1.1.1.1	192.168.2.4	0x2bec	No error (0)	www.nab.com.au	www.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.173.68	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.172.228.89	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.192.12.9	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.211.254.18	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.197.97.197	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.226.25.249	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.237.202.78	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.583447933 CET	1.1.1.1	192.168.2.4	0xb3bd	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.219.55.201	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.584095955 CET	1.1.1.1	192.168.2.4	0xdd27	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.584095955 CET	1.1.1.1	192.168.2.4	0xdd27	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.584095955 CET	1.1.1.1	192.168.2.4	0xdd27	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	smetrics.nab.com.au	nab.com.au.ssl.d1.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.237	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.137	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.232	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.151	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.128	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.229	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.100	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.163	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.117	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.595901012 CET	1.1.1.1	192.168.2.4	0x7fc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.15	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.596684933 CET	1.1.1.1	192.168.2.4	0x9d23	No error (0)	smetrics.nab.com.au	nab.com.au.ssl.d1.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.691328049 CET	1.1.1.1	192.168.2.4	0xc789	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.692195892 CET	1.1.1.1	192.168.2.4	0xdcf7	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	nab.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.211.243.61	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.207.30.198	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.225.20.118	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.219.54.255	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.80.39.198	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.216.208.235	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.86.217.42	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.736407042 CET	1.1.1.1	192.168.2.4	0x1752	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.173.68	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:06.786406040 CET	1.1.1.1	192.168.2.4	0x9fc3	No error (0)	nab.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.786406040 CET	1.1.1.1	192.168.2.4	0x9fc3	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:06.786406040 CET	1.1.1.1	192.168.2.4	0x9fc3	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	nationalaustraliaban.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.160	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.151	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.20	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.139	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.128	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.237	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.137	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.232	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.180	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.292886972 CET	1.1.1.1	192.168.2.4	0x5ff8	No error (0)	adobetarget.data.adobedc.net		63.140.38.219	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	smetrics.nab.com.au	nab.com.au.ssl.d1.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.100	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.163	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.117	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.15	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.104	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.226	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.120	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.0	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.113	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.297261000 CET	1.1.1.1	192.168.2.4	0x74cc	No error (0)	nab.com.au.ssl.d1.sc.omtrdc.net		63.140.38.115	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.302396059 CET	1.1.1.1	192.168.2.4	0x4f36	No error (0)	smetrics.nab.com.au	nab.com.au.ssl.d1.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:07.307622910 CET	1.1.1.1	192.168.2.4	0xe06c	No error (0)	nationalaustraliaban.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:07.437139034 CET	1.1.1.1	192.168.2.4	0x4e81	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.020853996 CET	1.1.1.1	192.168.2.4	0x2bf9	No error (0)	nationalaustraliaban.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	nationalaustraliaban.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.104	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.226	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.120	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.0	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.113	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.115	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.178	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.12	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.169	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.021964073 CET	1.1.1.1	192.168.2.4	0xeedd	No error (0)	adobetarget.data.adobedc.net		63.140.38.201	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.412460089 CET	1.1.1.1	192.168.2.4	0xb63a	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.412460089 CET	1.1.1.1	192.168.2.4	0xb63a	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.412460089 CET	1.1.1.1	192.168.2.4	0xb63a	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.412460089 CET	1.1.1.1	192.168.2.4	0xb63a	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.573658943 CET	1.1.1.1	192.168.2.4	0x937c	No error (0)	tags.nab.com.au	tags.nab.com.au.greylabeldelivery.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.573658943 CET	1.1.1.1	192.168.2.4	0x937c	No error (0)	tags.nab.com.au.greylabeldelivery.com		13.226.52.124	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.573658943 CET	1.1.1.1	192.168.2.4	0x937c	No error (0)	tags.nab.com.au.greylabeldelivery.com		13.226.52.63	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.573658943 CET	1.1.1.1	192.168.2.4	0x937c	No error (0)	tags.nab.com.au.greylabeldelivery.com		13.226.52.100	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.573658943 CET	1.1.1.1	192.168.2.4	0x937c	No error (0)	tags.nab.com.au.greylabeldelivery.com		13.226.52.127	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.573745966 CET	1.1.1.1	192.168.2.4	0xb16a	No error (0)	tags.nab.com.au	tags.nab.com.au.greylabeldelivery.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.192.24.192	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.233.204.225	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.192.12.9	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.220.12.195	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.1.32.215	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.20.47.15	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.228.127.185	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.655893087 CET	1.1.1.1	192.168.2.4	0xb64e	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.219.55.201	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:08.656071901 CET	1.1.1.1	192.168.2.4	0x515e	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.656071901 CET	1.1.1.1	192.168.2.4	0x515e	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:08.656071901 CET	1.1.1.1	192.168.2.4	0x515e	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:09.413290024 CET	1.1.1.1	192.168.2.4	0xdea2	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.480860949 CET	1.1.1.1	192.168.2.4	0xe2f7	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.480860949 CET	1.1.1.1	192.168.2.4	0xe2f7	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.480860949 CET	1.1.1.1	192.168.2.4	0xe2f7	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.480860949 CET	1.1.1.1	192.168.2.4	0xe2f7	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.755436897 CET	1.1.1.1	192.168.2.4	0x6fc6	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:09.755436897 CET	1.1.1.1	192.168.2.4	0x6fc6	No error (0)	scontent.xx.fbcdn.net		31.13.88.13	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:09.756097078 CET	1.1.1.1	192.168.2.4	0x98f5	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:09.808448076 CET	1.1.1.1	192.168.2.4	0x1053	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:09.808448076 CET	1.1.1.1	192.168.2.4	0x1053	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:09.809371948 CET	1.1.1.1	192.168.2.4	0x70c5	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:09.809371948 CET	1.1.1.1	192.168.2.4	0x70c5	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:10.451004982 CET	1.1.1.1	192.168.2.4	0x992a	No error (0)	ad.doubleclick.net		142.250.105.149	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.451004982 CET	1.1.1.1	192.168.2.4	0x992a	No error (0)	ad.doubleclick.net		142.250.105.148	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.452050924 CET	1.1.1.1	192.168.2.4	0x3b3b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 25, 2024 01:27:10.488878012 CET	1.1.1.1	192.168.2.4	0x6a43	No error (0)	collect.nab.com.au		15.197.224.21	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.488878012 CET	1.1.1.1	192.168.2.4	0x6a43	No error (0)	collect.nab.com.au		3.33.191.201	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.614784956 CET	1.1.1.1	192.168.2.4	0x732	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.614784956 CET	1.1.1.1	192.168.2.4	0x732	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.614784956 CET	1.1.1.1	192.168.2.4	0x732	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.614784956 CET	1.1.1.1	192.168.2.4	0x732	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.820506096 CET	1.1.1.1	192.168.2.4	0x343f	No error (0)	googleads.g.doubleclick.net		64.233.177.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.820506096 CET	1.1.1.1	192.168.2.4	0x343f	No error (0)	googleads.g.doubleclick.net		64.233.177.157	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.820506096 CET	1.1.1.1	192.168.2.4	0x343f	No error (0)	googleads.g.doubleclick.net		64.233.177.154	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.820506096 CET	1.1.1.1	192.168.2.4	0x343f	No error (0)	googleads.g.doubleclick.net		64.233.177.156	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:10.820861101 CET	1.1.1.1	192.168.2.4	0x970e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 25, 2024 01:27:11.187141895 CET	1.1.1.1	192.168.2.4	0x1944	No error (0)	3347639.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:11.187141895 CET	1.1.1.1	192.168.2.4	0x1944	No error (0)	dart.l.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.187141895 CET	1.1.1.1	192.168.2.4	0x1944	No error (0)	dart.l.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.191545963 CET	1.1.1.1	192.168.2.4	0x607e	No error (0)	3347639.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:11.193101883 CET	1.1.1.1	192.168.2.4	0x62a9	No error (0)	td.doubleclick.net		173.194.219.156	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.193101883 CET	1.1.1.1	192.168.2.4	0x62a9	No error (0)	td.doubleclick.net		173.194.219.157	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.193101883 CET	1.1.1.1	192.168.2.4	0x62a9	No error (0)	td.doubleclick.net		173.194.219.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.193101883 CET	1.1.1.1	192.168.2.4	0x62a9	No error (0)	td.doubleclick.net		173.194.219.154	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:11.406086922 CET	1.1.1.1	192.168.2.4	0xf865	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:11.406559944 CET	1.1.1.1	192.168.2.4	0x5ada	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:12.437690020 CET	1.1.1.1	192.168.2.4	0xe3e6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:12.437690020 CET	1.1.1.1	192.168.2.4	0xe3e6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.495892048 CET	1.1.1.1	192.168.2.4	0x920c	No error (0)	ad.doubleclick.net		74.125.138.148	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.495892048 CET	1.1.1.1	192.168.2.4	0x920c	No error (0)	ad.doubleclick.net		74.125.138.149	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.496987104 CET	1.1.1.1	192.168.2.4	0x97ba	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 25, 2024 01:27:12.556431055 CET	1.1.1.1	192.168.2.4	0x5f62	No error (0)	adservice.google.com		64.233.177.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.556431055 CET	1.1.1.1	192.168.2.4	0x5f62	No error (0)	adservice.google.com		64.233.177.156	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.556431055 CET	1.1.1.1	192.168.2.4	0x5f62	No error (0)	adservice.google.com		64.233.177.154	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.556431055 CET	1.1.1.1	192.168.2.4	0x5f62	No error (0)	adservice.google.com		64.233.177.157	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.557159901 CET	1.1.1.1	192.168.2.4	0xfb65	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jan 25, 2024 01:27:12.559020996 CET	1.1.1.1	192.168.2.4	0xd365	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.559020996 CET	1.1.1.1	192.168.2.4	0xd365	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.559020996 CET	1.1.1.1	192.168.2.4	0xd365	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.559020996 CET	1.1.1.1	192.168.2.4	0xd365	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.559020996 CET	1.1.1.1	192.168.2.4	0xd365	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.559020996 CET	1.1.1.1	192.168.2.4	0xd365	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:12.559257984 CET	1.1.1.1	192.168.2.4	0xfc61	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 25, 2024 01:27:12.563041925 CET	1.1.1.1	192.168.2.4	0x389	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:12.563308001 CET	1.1.1.1	192.168.2.4	0xe652	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:12.563308001 CET	1.1.1.1	192.168.2.4	0xe652	No error (0)	star-mini.c10r.facebook.com		31.13.66.35	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.282672882 CET	1.1.1.1	192.168.2.4	0x1d43	No error (0)	collect.nab.com.au		15.197.224.21	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.282672882 CET	1.1.1.1	192.168.2.4	0x1d43	No error (0)	collect.nab.com.au		3.33.191.201	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.291538954 CET	1.1.1.1	192.168.2.4	0xd16f	No error (0)	ad.doubleclick.net		74.125.138.149	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.291538954 CET	1.1.1.1	192.168.2.4	0xd16f	No error (0)	ad.doubleclick.net		74.125.138.148	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.291865110 CET	1.1.1.1	192.168.2.4	0xcbf7	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 25, 2024 01:27:13.297111034 CET	1.1.1.1	192.168.2.4	0x3f0c	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.300935030 CET	1.1.1.1	192.168.2.4	0x693a	No error (0)	adservice.google.com		74.125.138.157	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.300935030 CET	1.1.1.1	192.168.2.4	0x693a	No error (0)	adservice.google.com		74.125.138.154	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.300935030 CET	1.1.1.1	192.168.2.4	0x693a	No error (0)	adservice.google.com		74.125.138.156	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.300935030 CET	1.1.1.1	192.168.2.4	0x693a	No error (0)	adservice.google.com		74.125.138.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.301307917 CET	1.1.1.1	192.168.2.4	0x3a78	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jan 25, 2024 01:27:13.513596058 CET	1.1.1.1	192.168.2.4	0x294c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:13.513596058 CET	1.1.1.1	192.168.2.4	0x294c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:13.513961077 CET	1.1.1.1	192.168.2.4	0xe156	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:13.513961077 CET	1.1.1.1	192.168.2.4	0xe156	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:13.515264988 CET	1.1.1.1	192.168.2.4	0xe314	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 25, 2024 01:27:13.515317917 CET	1.1.1.1	192.168.2.4	0xa58f	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.515317917 CET	1.1.1.1	192.168.2.4	0xa58f	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.515317917 CET	1.1.1.1	192.168.2.4	0xa58f	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.515317917 CET	1.1.1.1	192.168.2.4	0xa58f	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.515317917 CET	1.1.1.1	192.168.2.4	0xa58f	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:13.515317917 CET	1.1.1.1	192.168.2.4	0xa58f	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:14.051486969 CET	1.1.1.1	192.168.2.4	0xe839	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:14.051486969 CET	1.1.1.1	192.168.2.4	0xe839	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:14.051486969 CET	1.1.1.1	192.168.2.4	0xe839	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:14.051486969 CET	1.1.1.1	192.168.2.4	0xe839	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:14.068576097 CET	1.1.1.1	192.168.2.4	0x1cd6	No error (0)	c.az.contentsquare.net	9fb0bae4fa1d51cf.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:14.068576097 CET	1.1.1.1	192.168.2.4	0x1cd6	No error (0)	c.af.contentsquare.net	tm-dep-production-eastus2.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:14.068576097 CET	1.1.1.1	192.168.2.4	0x1cd6	No error (0)	c1.af.contentsquare.net	dep.af.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:14.068576097 CET	1.1.1.1	192.168.2.4	0x1cd6	No error (0)	dep.af.contentsquare.net		20.96.87.156	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:14.068865061 CET	1.1.1.1	192.168.2.4	0xd043	No error (0)	c.az.contentsquare.net	9fb0bae4fa1d51cf.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:14.068865061 CET	1.1.1.1	192.168.2.4	0xd043	No error (0)	c.af.contentsquare.net	tm-dep-production-eastus2.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:14.068865061 CET	1.1.1.1	192.168.2.4	0xd043	No error (0)	c1.af.contentsquare.net	dep.af.contentsquare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:15.047111034 CET	1.1.1.1	192.168.2.4	0x23c2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:15.047111034 CET	1.1.1.1	192.168.2.4	0x23c2	No error (0)	star-mini.c10r.facebook.com		31.13.66.35	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.047768116 CET	1.1.1.1	192.168.2.4	0xa67d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:15.400717020 CET	1.1.1.1	192.168.2.4	0xba28	No error (0)	adservice.google.com		142.251.15.157	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.400717020 CET	1.1.1.1	192.168.2.4	0xba28	No error (0)	adservice.google.com		142.251.15.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.400717020 CET	1.1.1.1	192.168.2.4	0xba28	No error (0)	adservice.google.com		142.251.15.154	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.400717020 CET	1.1.1.1	192.168.2.4	0xba28	No error (0)	adservice.google.com		142.251.15.156	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.401525974 CET	1.1.1.1	192.168.2.4	0x3f4d	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jan 25, 2024 01:27:15.490951061 CET	1.1.1.1	192.168.2.4	0xff40	No error (0)	datacloud.tealiumiq.com		3.226.226.33	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.490951061 CET	1.1.1.1	192.168.2.4	0xff40	No error (0)	datacloud.tealiumiq.com		18.232.3.84	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.490951061 CET	1.1.1.1	192.168.2.4	0xff40	No error (0)	datacloud.tealiumiq.com		18.208.244.177	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.490951061 CET	1.1.1.1	192.168.2.4	0xff40	No error (0)	datacloud.tealiumiq.com		3.229.231.142	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.490951061 CET	1.1.1.1	192.168.2.4	0xff40	No error (0)	datacloud.tealiumiq.com		34.192.225.178	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:15.490951061 CET	1.1.1.1	192.168.2.4	0xff40	No error (0)	datacloud.tealiumiq.com		18.209.217.234	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:16.530839920 CET	1.1.1.1	192.168.2.4	0x6fa	No error (0)	x.nab.com.au	x.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:16.609900951 CET	1.1.1.1	192.168.2.4	0x93d2	No error (0)	x.nab.com.au	x.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:19.077075005 CET	1.1.1.1	192.168.2.4	0xd3c2	No error (0)	x.nab.com.au	x.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:19.091131926 CET	1.1.1.1	192.168.2.4	0x8368	No error (0)	x.nab.com.au	x.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:19.091526031 CET	1.1.1.1	192.168.2.4	0xde59	No error (0)	brand-messenger.app.khoros.com		18.160.172.81	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:19.091526031 CET	1.1.1.1	192.168.2.4	0xde59	No error (0)	brand-messenger.app.khoros.com		18.160.172.77	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:19.091526031 CET	1.1.1.1	192.168.2.4	0xde59	No error (0)	brand-messenger.app.khoros.com		18.160.172.54	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:19.091526031 CET	1.1.1.1	192.168.2.4	0xde59	No error (0)	brand-messenger.app.khoros.com		18.160.172.4	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:20.422934055 CET	1.1.1.1	192.168.2.4	0x6932	No error (0)	mps.nab.com.au	mps.nab.com.au.greylabeldelivery.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:20.422934055 CET	1.1.1.1	192.168.2.4	0x6932	No error (0)	mps.nab.com.au.greylabeldelivery.com		54.153.169.192	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:20.422934055 CET	1.1.1.1	192.168.2.4	0x6932	No error (0)	mps.nab.com.au.greylabeldelivery.com		52.63.103.153	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:20.422934055 CET	1.1.1.1	192.168.2.4	0x6932	No error (0)	mps.nab.com.au.greylabeldelivery.com		52.64.7.20	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:20.423583031 CET	1.1.1.1	192.168.2.4	0x756b	No error (0)	mps.nab.com.au	mps.nab.com.au.greylabeldelivery.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:21.796391010 CET	1.1.1.1	192.168.2.4	0x865c	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:21.796391010 CET	1.1.1.1	192.168.2.4	0x865c	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:21.796391010 CET	1.1.1.1	192.168.2.4	0x865c	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		54.205.210.54	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:21.796391010 CET	1.1.1.1	192.168.2.4	0x865c	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		35.169.173.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:21.796391010 CET	1.1.1.1	192.168.2.4	0x865c	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		23.20.189.8	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:21.797019005 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:21.797019005 CET	1.1.1.1	192.168.2.4	0x42a4	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:22.419375896 CET	1.1.1.1	192.168.2.4	0xb6da	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:22.419375896 CET	1.1.1.1	192.168.2.4	0xb6da	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:22.419375896 CET	1.1.1.1	192.168.2.4	0xb6da	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		23.20.189.8	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:22.419375896 CET	1.1.1.1	192.168.2.4	0xb6da	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		54.205.210.54	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:22.419375896 CET	1.1.1.1	192.168.2.4	0xb6da	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		35.169.173.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:22.419754982 CET	1.1.1.1	192.168.2.4	0x717a	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:22.419754982 CET	1.1.1.1	192.168.2.4	0x717a	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:22.437041998 CET	1.1.1.1	192.168.2.4	0x28e8	No error (0)	brand-messenger.app.khoros.com		18.160.172.54	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:22.437041998 CET	1.1.1.1	192.168.2.4	0x28e8	No error (0)	brand-messenger.app.khoros.com		18.160.172.77	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:22.437041998 CET	1.1.1.1	192.168.2.4	0x28e8	No error (0)	brand-messenger.app.khoros.com		18.160.172.4	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:22.437041998 CET	1.1.1.1	192.168.2.4	0x28e8	No error (0)	brand-messenger.app.khoros.com		18.160.172.81	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:24.222011089 CET	1.1.1.1	192.168.2.4	0x4123	No error (0)	proactive-chat-server-ap.prod.aws.lcloud.com		52.65.199.83	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:24.222011089 CET	1.1.1.1	192.168.2.4	0x4123	No error (0)	proactive-chat-server-ap.prod.aws.lcloud.com		52.65.184.65	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:24.222011089 CET	1.1.1.1	192.168.2.4	0x4123	No error (0)	proactive-chat-server-ap.prod.aws.lcloud.com		54.206.194.51	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:26.231458902 CET	1.1.1.1	192.168.2.4	0xb3c5	No error (0)	proactive-chat-server-ap.prod.aws.lcloud.com		54.206.194.51	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:26.231458902 CET	1.1.1.1	192.168.2.4	0xb3c5	No error (0)	proactive-chat-server-ap.prod.aws.lcloud.com		52.65.184.65	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:26.231458902 CET	1.1.1.1	192.168.2.4	0xb3c5	No error (0)	proactive-chat-server-ap.prod.aws.lcloud.com		52.65.199.83	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:27.718686104 CET	1.1.1.1	192.168.2.4	0xd232	No error (0)	ib.nab.com.au	ib.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:27.876573086 CET	1.1.1.1	192.168.2.4	0x8db1	No error (0)	ib.nab.com.au	ib.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:30.471715927 CET	1.1.1.1	192.168.2.4	0x3b56	No error (0)	syd-col.eum-appdynamics.com	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:30.471715927 CET	1.1.1.1	192.168.2.4	0x3b56	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		52.63.8.134	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:30.471715927 CET	1.1.1.1	192.168.2.4	0x3b56	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		52.62.219.7	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:30.471715927 CET	1.1.1.1	192.168.2.4	0x3b56	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		52.65.235.167	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:30.471715927 CET	1.1.1.1	192.168.2.4	0x3b56	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		13.54.218.204	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:30.471715927 CET	1.1.1.1	192.168.2.4	0x3b56	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		52.62.195.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:30.471715927 CET	1.1.1.1	192.168.2.4	0x3b56	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		3.24.11.8	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:30.476358891 CET	1.1.1.1	192.168.2.4	0x1687	No error (0)	syd-col.eum-appdynamics.com	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:32.100146055 CET	1.1.1.1	192.168.2.4	0x30d2	No error (0)	syd-col.eum-appdynamics.com	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:32.100146055 CET	1.1.1.1	192.168.2.4	0x30d2	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		3.24.11.8	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:32.100146055 CET	1.1.1.1	192.168.2.4	0x30d2	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		52.63.8.134	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:32.100146055 CET	1.1.1.1	192.168.2.4	0x30d2	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		52.62.219.7	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:32.100146055 CET	1.1.1.1	192.168.2.4	0x30d2	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		52.62.195.155	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:32.100146055 CET	1.1.1.1	192.168.2.4	0x30d2	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		52.65.235.167	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:32.100146055 CET	1.1.1.1	192.168.2.4	0x30d2	No error (0)	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		13.54.218.204	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:32.115008116 CET	1.1.1.1	192.168.2.4	0x74fe	No error (0)	syd-col.eum-appdynamics.com	collector-proxy-alb-744229001.ap-southeast-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:34.562758923 CET	1.1.1.1	192.168.2.4	0xa2a	No error (0)	ib.nab.com.au	ib.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:34.564853907 CET	1.1.1.1	192.168.2.4	0xc901	No error (0)	ib.nab.com.au	ib.nab.com.au.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:34.656208038 CET	1.1.1.1	192.168.2.4	0x5547	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:34.656208038 CET	1.1.1.1	192.168.2.4	0x5547	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.320741892 CET	1.1.1.1	192.168.2.4	0xcdaa	No error (0)	app.launchdarkly.com	c3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:35.321187019 CET	1.1.1.1	192.168.2.4	0xeca8	No error (0)	app.launchdarkly.com	c3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:35.327790022 CET	1.1.1.1	192.168.2.4	0x6ed8	No error (0)	events.launchdarkly.com		52.71.237.94	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.327790022 CET	1.1.1.1	192.168.2.4	0x6ed8	No error (0)	events.launchdarkly.com		52.20.64.16	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.327790022 CET	1.1.1.1	192.168.2.4	0x6ed8	No error (0)	events.launchdarkly.com		3.215.101.233	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.327790022 CET	1.1.1.1	192.168.2.4	0x6ed8	No error (0)	events.launchdarkly.com		52.20.211.222	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.327790022 CET	1.1.1.1	192.168.2.4	0x6ed8	No error (0)	events.launchdarkly.com		3.209.131.209	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.327790022 CET	1.1.1.1	192.168.2.4	0x6ed8	No error (0)	events.launchdarkly.com		3.212.118.41	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.327790022 CET	1.1.1.1	192.168.2.4	0x6ed8	No error (0)	events.launchdarkly.com		54.164.40.204	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:35.327790022 CET	1.1.1.1	192.168.2.4	0x6ed8	No error (0)	events.launchdarkly.com		54.90.94.6	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.215195894 CET	1.1.1.1	192.168.2.4	0xd90e	No error (0)	fhp.nab.com.au	fp-aws-au-back.group-ib.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.215195894 CET	1.1.1.1	192.168.2.4	0xd90e	No error (0)	fp-aws-au-back.group-ib.com	k8s-istiosys-istioing-245f3491e8-20c60ff33b9fb931.elb.ap-southeast-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.267260075 CET	1.1.1.1	192.168.2.4	0x7f0f	No error (0)	fhp.nab.com.au	fp-aws-au-back.group-ib.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.267260075 CET	1.1.1.1	192.168.2.4	0x7f0f	No error (0)	fp-aws-au-back.group-ib.com	k8s-istiosys-istioing-245f3491e8-20c60ff33b9fb931.elb.ap-southeast-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.267260075 CET	1.1.1.1	192.168.2.4	0x7f0f	No error (0)	k8s-istiosys-istioing-245f3491e8-20c60ff33b9fb931.elb.ap-southeast-2.amazonaws.com		52.65.11.116	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.377556086 CET	1.1.1.1	192.168.2.4	0x2403	No error (0)	app.launchdarkly.com	c3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.378031015 CET	1.1.1.1	192.168.2.4	0x3fe3	No error (0)	app.launchdarkly.com	c3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.554346085 CET	1.1.1.1	192.168.2.4	0x6f29	No error (0)	clientstream.launchdarkly.com	clientstream-ga.launchdarkly.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.554384947 CET	1.1.1.1	192.168.2.4	0x9063	No error (0)	clientstream.launchdarkly.com	clientstream-ga.launchdarkly.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.554384947 CET	1.1.1.1	192.168.2.4	0x9063	No error (0)	clientstream-ga.launchdarkly.com		76.223.31.44	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.554384947 CET	1.1.1.1	192.168.2.4	0x9063	No error (0)	clientstream-ga.launchdarkly.com		13.248.151.210	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.636935949 CET	1.1.1.1	192.168.2.4	0x8431	No error (0)	wup-24f7f3c7.nab.com.au	wup-24f7f3c7.au.v2.we-stats.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.636935949 CET	1.1.1.1	192.168.2.4	0x8431	No error (0)	wup-24f7f3c7.au.v2.we-stats.com		20.53.176.113	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:36.637310982 CET	1.1.1.1	192.168.2.4	0xc1eb	No error (0)	wup-24f7f3c7.nab.com.au	wup-24f7f3c7.au.v2.we-stats.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:36.681925058 CET	1.1.1.1	192.168.2.4	0x8984	No error (0)	download.anydesk.com		159.69.19.197	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.076379061 CET	1.1.1.1	192.168.2.4	0x5dc4	No error (0)	1.a79ab95c1589a13f8a4cab612bc71f9f7.com	d3lyk6mjwds9ox.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078177929 CET	1.1.1.1	192.168.2.4	0x5907	No error (0)	1.b406929acabac9b095f124c81bdfcf57f.com	d3hspktnnoy2e3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078177929 CET	1.1.1.1	192.168.2.4	0x5907	No error (0)	d3hspktnnoy2e3.cloudfront.net		18.66.255.60	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078177929 CET	1.1.1.1	192.168.2.4	0x5907	No error (0)	d3hspktnnoy2e3.cloudfront.net		18.66.255.66	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078177929 CET	1.1.1.1	192.168.2.4	0x5907	No error (0)	d3hspktnnoy2e3.cloudfront.net		18.66.255.123	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078177929 CET	1.1.1.1	192.168.2.4	0x5907	No error (0)	d3hspktnnoy2e3.cloudfront.net		18.66.255.35	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078623056 CET	1.1.1.1	192.168.2.4	0xd260	No error (0)	1.b406929acabac9b095f124c81bdfcf57f.com	d3hspktnnoy2e3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078845024 CET	1.1.1.1	192.168.2.4	0xf5b7	No error (0)	1.c81358859121583b7adf2ace89cb39f44.com	d3q5vj014p5nip.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078845024 CET	1.1.1.1	192.168.2.4	0xf5b7	No error (0)	d3q5vj014p5nip.cloudfront.net		18.64.174.94	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078845024 CET	1.1.1.1	192.168.2.4	0xf5b7	No error (0)	d3q5vj014p5nip.cloudfront.net		18.64.174.53	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078845024 CET	1.1.1.1	192.168.2.4	0xf5b7	No error (0)	d3q5vj014p5nip.cloudfront.net		18.64.174.122	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078845024 CET	1.1.1.1	192.168.2.4	0xf5b7	No error (0)	d3q5vj014p5nip.cloudfront.net		18.64.174.124	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078926086 CET	1.1.1.1	192.168.2.4	0xfff0	No error (0)	1.a79ab95c1589a13f8a4cab612bc71f9f7.com	d3lyk6mjwds9ox.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078926086 CET	1.1.1.1	192.168.2.4	0xfff0	No error (0)	d3lyk6mjwds9ox.cloudfront.net		18.160.78.31	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078926086 CET	1.1.1.1	192.168.2.4	0xfff0	No error (0)	d3lyk6mjwds9ox.cloudfront.net		18.160.78.91	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078926086 CET	1.1.1.1	192.168.2.4	0xfff0	No error (0)	d3lyk6mjwds9ox.cloudfront.net		18.160.78.93	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.078926086 CET	1.1.1.1	192.168.2.4	0xfff0	No error (0)	d3lyk6mjwds9ox.cloudfront.net		18.160.78.10	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.079680920 CET	1.1.1.1	192.168.2.4	0x6773	No error (0)	1.c81358859121583b7adf2ace89cb39f44.com	d3q5vj014p5nip.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.151612043 CET	1.1.1.1	192.168.2.4	0x39ea	No error (0)	wup-24f7f3c7.nab.com.au	wup-24f7f3c7.au.v2.we-stats.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.151612043 CET	1.1.1.1	192.168.2.4	0x39ea	No error (0)	wup-24f7f3c7.au.v2.we-stats.com		20.53.176.113	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.152878046 CET	1.1.1.1	192.168.2.4	0xe92	No error (0)	wup-24f7f3c7.nab.com.au	wup-24f7f3c7.au.v2.we-stats.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.931520939 CET	1.1.1.1	192.168.2.4	0x2fae	No error (0)	fhp.nab.com.au	fp-aws-au-back.group-ib.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.931520939 CET	1.1.1.1	192.168.2.4	0x2fae	No error (0)	fp-aws-au-back.group-ib.com	k8s-istiosys-istioing-245f3491e8-20c60ff33b9fb931.elb.ap-southeast-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.931520939 CET	1.1.1.1	192.168.2.4	0x2fae	No error (0)	k8s-istiosys-istioing-245f3491e8-20c60ff33b9fb931.elb.ap-southeast-2.amazonaws.com		52.65.11.116	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:38.949364901 CET	1.1.1.1	192.168.2.4	0xa1c2	No error (0)	fhp.nab.com.au	fp-aws-au-back.group-ib.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:38.949364901 CET	1.1.1.1	192.168.2.4	0xa1c2	No error (0)	fp-aws-au-back.group-ib.com	k8s-istiosys-istioing-245f3491e8-20c60ff33b9fb931.elb.ap-southeast-2.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:40.489476919 CET	1.1.1.1	192.168.2.4	0x424e	No error (0)	log-24f7f3c7.nab.com.au	log-24f7f3c7.au.v2.we-stats.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:27:40.489476919 CET	1.1.1.1	192.168.2.4	0x424e	No error (0)	log-24f7f3c7.au.v2.we-stats.com		20.53.196.14	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:27:40.490485907 CET	1.1.1.1	192.168.2.4	0x5b05	No error (0)	log-24f7f3c7.nab.com.au	log-24f7f3c7.au.v2.we-stats.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:28:11.558882952 CET	1.1.1.1	192.168.2.4	0xed03	No error (0)	boot.net.anydesk.com		185.229.191.39	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.870647907 CET	1.1.1.1	192.168.2.4	0xcf3	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:28:12.870647907 CET	1.1.1.1	192.168.2.4	0xcf3	No error (0)	clients.l.google.com		64.233.176.138	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.870647907 CET	1.1.1.1	192.168.2.4	0xcf3	No error (0)	clients.l.google.com		64.233.176.100	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.870647907 CET	1.1.1.1	192.168.2.4	0xcf3	No error (0)	clients.l.google.com		64.233.176.101	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.870647907 CET	1.1.1.1	192.168.2.4	0xcf3	No error (0)	clients.l.google.com		64.233.176.102	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.870647907 CET	1.1.1.1	192.168.2.4	0xcf3	No error (0)	clients.l.google.com		64.233.176.139	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.870647907 CET	1.1.1.1	192.168.2.4	0xcf3	No error (0)	clients.l.google.com		64.233.176.113	A (IP address)	IN (0x0001)	false
Jan 25, 2024 01:28:12.870683908 CET	1.1.1.1	192.168.2.4	0xb7b	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 25, 2024 01:28:13.266078949 CET	1.1.1.1	192.168.2.4	0x29e1	No error (0)	relay-9739e7d3.net.anydesk.com		37.19.203.67	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	91.215.85.14	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:26:46.083311081 CET	442	OUT	GET / HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:46.309552908 CET	275	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html last-modified: Thu, 08 Jun 2023 20:58:20 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 51376 date: Thu, 25 Jan 2024 00:26:46 GMT
Jan 25, 2024 01:26:46.309693098 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 5b 6f 1c 49 b6 a5 f9 de 40 ff 07 9f 7c 3e 6e 65 f7 4b 77 e5 01 74 34 3d e0 00 ca 99 01 4e 37 31 f3 34 88 0c 31 33 d8 15 14 f3 88 54 54 95 30 3f 7e f0 ad ed 1e 0c 92 a1 ac cc 2a 31 59 a7 bb 04 c8 c3 e8 17 73 73 Data Ascii: [oI@\|>neKwt4=N71413TT0?~*1Ysswk_w7ww~?[?~o?i6Lw}3mo?_}O?<w
Jan 25, 2024 01:26:46.309732914 CET	1286	IN	Data Raw: f6 f0 d4 c7 33 f3 90 c3 0a c7 87 1f cb c3 0f 1e 5e 0d 88 53 73 a1 96 ad f3 31 f0 48 ce 17 de 50 77 29 d8 6f 6c 95 6b 53 9e 9d af 2e b5 3c bb d8 f3 61 1e 2e a6 2d cd 49 a9 70 db 4e 6b 53 d7 b8 1f c7 b2 0f 6a 72 2e 4c c0 3a 38 78 15 3d f5 83 55 30 Data Ascii: 3^Ss1HPw)olkS.<a.-IpNkSjr.L:8x=U0Ejs=)QxC\|LTvmJ(@mt,Ren.g}\*]\3>.1#KK]w!i0hT:5E;>GWR"tc1)>
Jan 25, 2024 01:26:46.309773922 CET	1286	IN	Data Raw: 72 ea a8 ca 32 d8 31 21 73 65 b2 92 54 6e 29 90 21 c6 d9 f5 2a 75 37 30 07 e9 68 0b 09 13 7d 09 87 e4 6a 69 3b 8a 4c c3 b5 0f ad b7 7a 95 f9 e7 5e 65 6a 79 9b 5c 94 d6 c2 a2 c1 1b 0a b6 a0 4c ab 62 93 5c 0b 52 68 99 53 7b eb ac 31 29 5b 79 c7 e3 Data Ascii: r21!seTn)!u70h}ji;Lz^ejy\Lb\RhS{1)[yobl[HVLO3BC;)!+wVnOd<P\ejr5v}q>W1L__QUK.V[PoSp(c}w5Z#3d=aQtfZLr
Jan 25, 2024 01:26:46.309880018 CET	1286	IN	Data Raw: b4 75 b2 da 22 87 37 46 b5 95 64 7d d1 52 83 ad 50 1a b6 9c 4f 72 c7 99 45 3b ed 99 62 75 5f 5a 10 d0 c4 3d be 20 4c c9 21 a8 a0 76 c4 4b 3d 2f 6a 68 8c d3 70 32 3e f8 ac e5 76 76 1e 7d 3b a4 c1 c2 99 54 da cd 8e 33 82 86 b7 0b d8 a5 0a 3a 4a 2c Data Ascii: u"7Fd}RPOrE;bu_Z= L!vK=/jhp2>vv};T3:J,vg3_^\|X/9,GdC4SMoz:/0U1u8Oo_*ZBii_S12Y1<#0N{./?jct6lW[M
Jan 25, 2024 01:26:46.309938908 CET	1286	IN	Data Raw: 57 0f 33 96 99 ef c6 04 72 ff dc ad 9e 44 48 95 29 f8 8b 67 d2 da 72 a7 c7 e7 8e 49 73 6d 73 e5 cd c9 b4 3a a6 10 36 cf 41 fa 7e 4a 4f ce ca bf e8 ac 76 e6 ac 34 d7 5f 10 16 70 6e 15 f8 6b cf fa cd ef f8 d2 23 62 ff aa a6 b4 ea 04 06 4c 02 b6 8f Data Ascii: W3rDH)grIsms:6A~JOv4_pnk#bL$P;iQ*Ms$W"zXMk00UyF$(xkCp$'\n4[NB\c4t P<afBK@K\="3]u^KfuB{pn,^
Jan 25, 2024 01:26:46.309976101 CET	1286	IN	Data Raw: 13 4b b5 84 38 f9 28 bc 85 16 fa 9a 88 2b 4d 69 1e e0 a1 c0 67 35 39 2b ca 40 3d 4c 01 5f 6a 36 d7 2e b5 74 fe af aa 02 3e f4 d8 15 af 31 0d 2c 6d 9c 51 f8 bf 9e 11 05 1e de 3b 83 38 c4 77 98 fb fa 44 18 7b f9 fc 5d c6 e5 ad 30 c9 d0 01 36 64 d4 Data Ascii: K8(+Mig59+@=L_j6.t>1,mQ;8wD{]06dPeSyXyE72dw[YK[o+N t29=jPhrr6Fj5B3daBA,G7gR41+0x~96Pli@:e@.]/@
Jan 25, 2024 01:26:46.310013056 CET	1286	IN	Data Raw: b7 4e d8 38 36 71 32 3b 52 9c e2 e1 e4 4f f8 12 2f ea c9 9f 73 bc 7c f8 33 ce 11 d7 50 0a b2 24 a4 f6 ae c9 00 0f 5f cd 09 20 41 61 23 62 b8 f3 35 ec 13 41 0b 93 b6 a7 a7 18 b8 1d f2 8a 9a 67 6d 9f 55 a0 cd 9e 8e 66 b1 f8 e9 85 a3 29 8f 1f e9 fd Data Ascii: N86q2;RO/s\|3P$_ Aa#b5AgmUf)O_?}!o~F[=O\|Caxe}tAHeXrn8\B2*u~]B)E+1kcZO2v:Hc/q C\D1FV.GRir3fE$s/r:
Jan 25, 2024 01:26:46.310070992 CET	1286	IN	Data Raw: 38 c0 a7 33 a4 09 e1 09 9b e8 62 dd 95 9b cd 95 33 8e b6 c7 57 84 bf f1 8a b9 9d 23 66 f8 fb 6f d4 df 7a 8b 5f 7d c5 77 38 0f da 21 29 7f 1c c9 e3 5e 78 58 7d b8 df 6c ef f7 af 4c 52 01 11 72 43 1f e8 46 c0 2e 17 4b 5b a2 45 15 7c 8a f5 12 21 a1 Data Ascii: 83b3W#foz_}w8!)^xX}lLRrCF.K[E\|!h~)DS. "FI"~_t,FXXLkIE @~U@Nbn2[$j1fe5c#fcV0x&{/D8)OJzb}6Y~WHr;\Q
Jan 25, 2024 01:26:46.310108900 CET	1286	IN	Data Raw: 22 0a 14 d7 b7 79 84 ac ec 6a 36 8a 6d 11 c8 2b 41 6e c7 80 29 9a ec 93 d6 10 73 41 c2 ef 3d 9c 02 70 5d 3e 7e 16 b3 23 d7 9a de 06 c3 3b 35 6c 00 04 0d 40 cb d4 95 45 01 36 04 68 c0 32 b4 f3 58 6c a5 a8 f6 ba 14 11 67 f5 14 d1 a8 a9 34 1a 46 5b Data Ascii: "yj6m+An)sA=p]>~#;5l@E6h2Xlg4F[rgW`%./+-c3+qJo\d!g #S,plI2FS[gg%T,oWX4\|/Z{7-,SYIHWggg5(j\*#A\|UI.z}a
Jan 25, 2024 01:26:46.535279036 CET	1286	IN	Data Raw: d5 39 24 80 8e 9e cd a9 b9 1c 7d 0e 29 80 b8 53 99 7d ce 1e 8c 83 21 3c 64 7a 1d 21 3d c6 5f e3 8c ac 2d ef e1 8e 96 c4 89 a4 2f 2f 75 7b 0c 16 4f 99 84 af f0 90 0d a1 84 87 18 0f 44 57 d9 16 8b 20 04 07 f9 68 22 00 fb 5b 9f ed 64 c9 a9 4a af 20 Data Ascii: 9$})S}!<dz!=_-//u{ODW h"[dJ =rIi%t2~D)goS$DM\oSF<Mbd%o[1THb+D5%(PH$U;?gJY_-HeT/BY4*uFK+Y"5=
Jan 25, 2024 01:26:46.774483919 CET	403	OUT	GET /img/nab-logo.svg HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://sub.nabprotect-livechat.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:46.999808073 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:46 GMT content-type: image/svg+xml last-modified: Thu, 08 Jun 2023 16:27:44 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 1651 date: Thu, 25 Jan 2024 00:26:46 GMT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 df 6f 1b 37 0c fe 57 84 2b 0a 6c 0f a2 25 8a d4 8f 21 0e b0 ad eb f6 90 be e6 b5 48 2f 89 6d e0 1c 07 b1 e7 64 f9 eb 07 52 3a db 49 9d 36 db 0a 0c e8 83 2d 5a a7 e3 51 1f f9 7d e2 f9 64 bd 9d 99 fb c5 e5 66 3e ed a2 eb cc fc 6a 31 9b 6f a6 5d 70 9d d9 2e ae ee 7f 59 3d 4c 3b 67 9c 89 ce c8 dc c3 72 b8 59 4f bb f9 66 73 fb d3 64 72 7f 7f 0f f7 01 56 77 b3 09 3a e7 26 eb ed ac 3b 3d b9 bc ba 5e 9f 9e 0c 8b 9b ab 8b bb df ef 2e 2e 17 57 37 1b f3 e0 a7 9d 85 e8 df 76 e6 2f 3f ed d8 81 e3 b7 9d 79 c0 69 57 0a 14 94 79 dc cf 2f 2e a7 dd cd c5 27 3b ac 66 ab 8f eb ed ec e3 c7 8b ee f4 64 bd 59 dd 1a f9 b2 fd 6a 58 dd 4d bb 37 bf bd 73 ce b9 ce ac ae af d7 57 9b 69 e7 de 76 93 a3 eb ca d3 75 09 52 78 61 e9 3b ff 74 69 24 c8 f1 85 b5 bf e6 a7 6b bd ab 01 4c 9e ee fe 28 1a b2 d5 11 8e 52 c0 61 83 63 37 8f d3 0e 28 1e 05 e3 d3 51 30 7e e6 1a 8d 4e ae 6e 2f fa c5 e6 af 69 f7 0a 74 c6 1b bf ba 8d 49 cd ed cc 5c 2f 86 61 da dd ac 6e ae ba d3 93 db 8b cd dc 5c 4e bb 0f 21 42 c6 6c 3c 43 e2 de 19 60 24 f0 0c 5c 0a 84 14 75 44 64 e3 8c fc b4 e0 12 ef 8c 2d 64 a4 5e 4d e3 2c 20 46 31 2d 30 a6 6a 10 7b b9 90 18 2d 78 b6 90 31 c9 32 ae bf 74 89 fa 0a 6d 2c 5b 8b e0 13 ce 2d 14 17 b6 72 03 cd ab e9 c1 97 32 87 92 f2 f6 c0 d4 05 b6 cd e6 14 1e 97 04 2e a2 45 88 25 f7 fa 40 e3 ac 07 74 41 36 66 3d 04 26 88 89 e4 41 ae e4 76 2f 03 a5 ea 50 9f 1f 7a 67 15 07 09 ca 83 47 92 6b cd 12 b0 9c 91 01 62 62 1d 4b a2 2d 42 c0 a0 3e ce 3d 01 73 af db f3 e0 28 2b 20 d6 03 15 f1 41 a1 9a 8f cb 02 94 8d d3 28 73 8b 92 9e 47 09 b1 85 18 a0 24 7c 7d 8c a9 c6 98 5a 8c e9 c5 18 e3 3e c6 78 24 46 1b c0 79 43 e0 a8 05 b2 ae b9 d3 24 ea 17 71 ad 80 31 e3 08 8c ac 3e d4 90 e4 eb e6 d8 91 24 ba 1a 9a c2 5a 1a 10 9d 17 cf 1a 75 8b 1f b1 55 9a 00 27 d5 98 31 eb 48 ec eb 05 2d 29 31 64 d3 72 a5 16 14 49 29 b5 01 91 e4 09 1a 96 4b 64 6b 38 c5 61 b3 82 d3 e2 2c 29 b7 41 b0 aa 95 d7 6b 36 8c 07 4c 45 91 28 c6 43 e1 0a 50 91 15 c6 19 0f d9 45 08 89 ab 65 3c 10 0a c6 ae e4 5e d9 b2 e3 91 10 83 4b 79 5c d6 4a b4 1e 0a e5 23 bc 11 be a9 b1 9b 11 38 d5 88 29 b7 35 46 f3 1e c7 e9 04 9e 2f 80 3c ca c7 38 e3 d4 a1 70 94 24 0a 62 5d cc a8 90 e9 18 1d 6a f4 1e 8b b8 6b 46 d1 6a 43 e4 b9 78 7e 5c 82 67 13 21 46 d9 8b 26 a5 66 52 b7 27 05 98 9b bd d6 1f 92 c1 66 34 00 6a 8a 35 4f 3a 63 0e ae 0a 54 82 a0 ba 91 27 9b 03 87 8a 92 e3 60 9c 54 78 94 c4 49 d6 25 17 5a 37 58 9a bd ab 2c 2f 54 ac a3 a6 8c d6 2a 3c 6a 9a 83 e9 1e 12 87 fd d6 a3 39 f0 26 c2 81 3e b4 e8 9f 53 92 77 94 e4 67 94 f4 2f 53 d2 51 69 94 14 eb 6b 94 54 e9 63 4a 15 39 81 3b 3a 14 b6 e8 ae 95 90 2c 61 b6 aa f9 36 21 be 42 35 58 43 ac ca 73 8e 1e 10 77 aa c1 7b d1 28 7b d1 90 32 cf 80 29 ca 79 32 8a bc ad 94 a6 7a 26 58 88 17 82 3a 9b fa 5d ab 36 b1 2e e3 03 d9 96 cc 12 6b 86 a4 94 0e bd f1 eb bd 8d 75 Data Ascii: Xo7W+l%!H/mdR:I6-ZQ}df>j1o]p.Y=L;grYOfsdrVw:&;=^..W7v/?yiWy/.';fdYjXM7sWivuRxa;ti$kL(Rac7(Q0~Nn/itI\/an\N!Bl<C`$\uDd-d^M, F1-0j{-x12tm,[-r2.E%@tA6f=&Av/PzgGkbbK-B>=s(+ A(sG$\|}Z>x$FyC$q1>$ZuU'1H-)1drI)Kdk8a,)Ak6LE(CPEe<^Ky\J#8)5F/<8p$b]jkFjCx~\g!F&fR'f4j5O:cT'`TxI%Z7X,/T*<j9&>Swg/SQikTcJ9;:,a6!B5XCsw{({2)y2z&X:]6.ku
Jan 25, 2024 01:26:47.329905033 CET	419	OUT	GET /fonts/source-sans-pro-semibold.woff2 HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive Origin: http://sub.nabprotect-livechat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://sub.nabprotect-livechat.com/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:47.555310011 CET	308	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:47 GMT content-type: font/woff2 last-modified: Thu, 08 Jun 2023 17:24:28 GMT accept-ranges: bytes content-length: 38088 date: Thu, 25 Jan 2024 00:26:47 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	91.215.85.14	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:26:46.341569901 CET	354	OUT	GET /css/style.css HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://sub.nabprotect-livechat.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:46.567354918 CET	353	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:46 GMT content-type: text/css last-modified: Thu, 08 Jun 2023 17:25:12 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 91974 date: Thu, 25 Jan 2024 00:26:46 GMT
Jan 25, 2024 01:26:46.567394972 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 bd 6b 6f 1c 49 96 60 f9 79 0b a8 ff a0 ae 45 03 59 bd c9 a8 78 47 50 c2 0e 6a 1e 0b cc 00 b3 fb 65 e6 db a0 31 a0 c4 50 8a 5b 7c 68 49 aa 52 d5 1a fd f7 45 3c 24 91 99 66 e1 e6 76 cf f1 30 66 01 dd ca 14 69 7e 48 Data Ascii: koI`yEYxGPje1P[\|hIRE<$fv0fi~Hc^WWorz4yrx?{?{?Yg\|]N'r1]M/t>~0x{}z
Jan 25, 2024 01:26:46.567718029 CET	1286	IN	Data Raw: 5d 5c fe bf 9f 1e 1e f7 2b 33 37 17 57 b7 df d7 2d df 5e df bd fb db d7 0f 93 fd dd da 7e ed eb e9 e6 e6 b0 8e f4 7a b4 5c 6d 6e 5e 8d bf 7e b8 ff f2 f6 ee f3 f6 af af 6e 7f 79 fd ee ee f6 71 73 fb 78 f6 f6 ee f3 9b c3 65 c7 6f b6 2f e1 ef af ef Data Ascii: ]\+37W-^~z\mn^~nyqsxeo/~}nn>^Oo~\tzo~y{w4x{wya/7/vn/7__G+^]=>n.Cnnc{{?[
Jan 25, 2024 01:26:46.567755938 CET	1286	IN	Data Raw: ce b3 df e4 b2 c4 1f ff 30 ba df 3c 7c bc bb 7d b8 fa fb e6 97 fb ab cb 2f db ff 73 b6 af 72 d8 56 1c bc 7e f8 78 71 fb 6a 32 7d f3 64 1b f8 37 df f2 6a b4 fb c6 6f 5c db 7f 79 b3 1b e5 5b 16 38 0c f7 f0 fa 7e f3 71 73 f1 f8 d3 64 fa f3 cd d5 ed Data Ascii: 0<\|}/srV~xqj2}d7jo\y[8~qsd?Oj/\|Ogg/K\|~_]^>7d6\VQ}/D?:_~(B
Jan 25, 2024 01:26:46.567794085 CET	1286	IN	Data Raw: 3c 85 b1 bd ca 17 b4 d8 e1 30 8b 7b 95 cd 2f 7f 38 a4 ee 3a 48 3f e6 93 3c 91 b1 fd d5 b6 97 48 1c 4c 75 7f b5 f1 45 13 87 d3 5d 3d e9 c7 7c 92 87 30 b6 55 dc fa c2 8a 03 3a d0 56 f1 0b 5a 6a 71 98 f9 35 97 7e 9c 81 22 0d 6b 15 a6 d7 05 a2 4f 1e Data Ascii: <0{/8:H?<HLuE]=\|0U:VZjq5~"kO 2@+5VjJ>]AQXA3)O&9e$^jydbgyj2owwu0P&U2n4/Et/<xzy+ue:F\|
Jan 25, 2024 01:26:46.567832947 CET	1286	IN	Data Raw: aa a0 a8 6e 81 0a 8a ca d7 a5 a0 78 99 30 9a 78 d1 5a 1d b6 83 f6 90 a3 f5 7a bd ee dc 76 2b 42 1d 32 a0 56 15 cc 94 8c 1b 0d a8 f5 75 32 28 9d 51 1e 83 02 f2 55 31 28 9e 5b 0c 83 a2 1a 35 30 28 a0 5b fa 82 a2 66 a2 68 6a ed 67 35 3e a4 22 22 ce Data Ascii: nx0xZzv+B2Vu2(QU1([50([fhjg5>""Rq3R7([oe6([]E5(a.&z>5!cjUOTjqJjn)T\|r]-Gq$BI"BQr!PBY /R;$h=_N
Jan 25, 2024 01:26:46.567872047 CET	1286	IN	Data Raw: f6 7f 46 58 b1 d9 fe 8f 31 a5 76 ae 5e 17 88 a6 02 42 a3 f1 82 1a bc 1c 66 f1 44 8b e6 5b be 1c d2 81 4e b4 78 41 4d 60 0e b3 7a a2 c5 0b 6a 0b eb c7 7c 92 5c 12 3b 85 e3 05 75 8c 39 cc e2 29 1c cd f7 90 39 a4 03 9d c2 f1 82 ba ca 1c 66 f1 14 8e Data Ascii: FX1v^BfD[NxAM`zj\|\;u9)9fg0+gPOLb`4pt`Hj@lOBbt{sSN^P'rzhII2Kh? s4Ku@Gcu4Ks~'1d^Ng'zf<
Jan 25, 2024 01:26:46.567910910 CET	1286	IN	Data Raw: 22 a1 0e 74 8a 7d f3 92 12 89 74 a8 73 ec 5f 94 b6 44 a2 1e ea 24 fb 17 25 32 e9 49 7d a2 24 59 a5 36 e9 77 85 68 92 64 1c 27 12 33 2e 3b 91 38 5d eb 89 04 ad e8 4f 24 56 d9 83 22 51 0b 42 14 89 54 36 a3 48 d4 b2 22 45 a2 56 5c 29 3d 59 4f 94 0f Data Ascii: "t}ts_D$%2I}$Y6whd'3.;8]O$V"QBT6H"EV\)=YO)DT$fC"ZVHsE+laKO*AK+DS"cje[$hY"Q6ZHED/l\|I}4Ywh`$T#AzH0FV1`eD-Hez@f5
Jan 25, 2024 01:26:46.567949057 CET	1286	IN	Data Raw: b4 6b a0 94 a0 79 15 a5 04 ea 3a 29 25 68 45 4e 29 b1 ca 96 4a 89 5a d6 55 4a d4 b2 b7 d2 ca 1f b2 c0 b2 27 f6 89 32 7a 95 d2 b2 df 15 a2 19 9d 71 5b 4a cc aa e4 52 62 36 6c 97 12 aa ab bd 94 a0 05 ff a5 44 2a 8b 30 25 6a d9 88 29 51 cb 6a 4c 89 Data Ascii: ky:)%hEN)JZUJ'2zq[JRb6lD0%j)QjLZvdZDe>QngB43MjJYSVD7%jY)Q+>N+i(b'JU~W&S"UaPeD-{=%jY)QOTV~J'2yJ(TBueD-D%j*
Jan 25, 2024 01:26:46.567987919 CET	1286	IN	Data Raw: b0 b9 e4 9f 4a a7 d6 6a 46 58 47 98 4a a7 b3 c3 fa f1 61 aa b2 da ee d5 0e 4c 9b 49 fe c9 74 8a ee c7 f4 60 cc a5 fc 54 36 95 ea 48 fa c4 fd 5c f2 4f 95 ee 4a bd 3b 7d 70 73 d9 3f 55 bc bb 1a ad a7 cb bd 48 79 fb 4a 38 9e cf 28 5c 6e b1 e0 c9 a8 Data Ascii: JjFXGJaLIt`T6H\OJ;}ps?UHyJ8(\nW\BtI4vjb Hqt A+'XyB>@}Gp@#H9q` AG(HY{ ,X)C>o^}GQ{ q3H){\m
Jan 25, 2024 01:26:46.792391062 CET	1286	IN	Data Raw: 21 03 1f b1 6c fd ce a4 bb a9 0f a0 aa 3b 44 09 09 bf 45 7c 75 e7 25 cd ca 3a a6 bb f8 b0 a0 b7 1b ce 79 bb 6f 71 1a 08 71 e9 6f f7 2d 4e 07 4b b8 06 fc 5c 56 af 3a b4 3e 35 84 18 95 55 87 36 a7 88 25 64 03 7e 32 ab 97 49 5a 9c 2e 42 5c d2 32 49 Data Ascii: !l;DE\|u%:yoqqo-NK\V:>5U6%d~2IZ.B\2I9aX0:d#TcL#&uG)Qf]hE8~UMf;<D'02FL:\Gu'TL'SHi(TT7Q5D~J\|\|\|"
Jan 25, 2024 01:26:47.328699112 CET	418	OUT	GET /fonts/source-sans-pro-regular.woff2 HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive Origin: http://sub.nabprotect-livechat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://sub.nabprotect-livechat.com/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:47.554619074 CET	308	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:47 GMT content-type: font/woff2 last-modified: Thu, 08 Jun 2023 17:24:24 GMT accept-ranges: bytes content-length: 37860 date: Thu, 25 Jan 2024 00:26:47 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	91.215.85.14	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:26:46.774797916 CET	428	OUT	GET /img/business-woman-nab-star-2500x900.avif HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://sub.nabprotect-livechat.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:46.999977112 CET	309	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:46 GMT content-type: image/avif last-modified: Thu, 08 Jun 2023 16:27:44 GMT accept-ranges: bytes content-length: 117830 date: Thu, 25 Jan 2024 00:26:46 GMT
Jan 25, 2024 01:26:47.000122070 CET	1286	IN	Data Raw: 00 00 00 1c 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 00 ea 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 Data Ascii: ftypavifavifmif1miafmeta!hdlrpictpitm"ilocD@8#iinfinfeav01jiprpKipcocolrnclxav1Cispepixi
Jan 25, 2024 01:26:47.000160933 CET	1286	IN	Data Raw: 99 58 b4 8f 4d db 87 cb 20 61 3d ba 11 9a c2 78 e2 54 d0 35 5a 4a 22 72 fc 9e 12 2b 81 c7 4e fd 15 36 1b 54 39 a6 d9 db 26 cd 8d 73 5f b2 81 70 ea 30 a8 71 d8 44 b8 bc 4d 7a 7a 98 21 c3 2c a6 0e 00 41 f0 dc d6 ce 14 d4 b3 f6 ce c6 88 04 47 43 f4 Data Ascii: XM a=xT5ZJ"r+N6T9&s_p0qDMzz!,AGClZ^B~"`a\|hpYk@--WCfzkWw$vRFkc8m4'.v%x`Z-As?e<;e{\,L67*^(6V+s<a
Jan 25, 2024 01:26:47.000199080 CET	1286	IN	Data Raw: 4d 58 db ad 99 d1 b4 7a a2 32 19 93 0a 6e a0 25 5c f3 7a 9d 85 14 ba 35 bc f0 8b 97 5f 9d b2 3c 52 20 3a 51 40 d9 4a b6 b7 4b e3 22 32 09 4f 7f 6d dd 08 3c 7e 1c 21 db 2c 06 15 11 a8 19 e1 ef 01 15 d5 26 da d0 8a 51 cc 26 80 c8 be 96 8f df 97 a1 Data Ascii: MXz2n%\z5_<R :Q@JK"2Om<~!,&Q&YNsLzJnm({*t:h?WGaeL^,TC3v@{G4Pb,;gy/$t";x[]'f6":;Kfm[9iA[}[2r:
Jan 25, 2024 01:26:47.000236988 CET	1286	IN	Data Raw: f1 e5 0f 14 c6 88 40 a6 f1 83 08 b7 0e e5 e6 88 32 b2 9f 7a 88 45 44 ba 5c d9 b9 ee 13 e3 82 ff 9b 3b d3 ac 5d 3a 7d 7f aa d2 a9 37 cb a7 41 a2 39 20 df 17 95 13 ee eb cb 77 77 68 eb 2c 43 33 2b 05 8c 9e fb 80 eb c3 c0 89 6c a9 cb 8a 56 df 16 90 Data Ascii: @2zED\;]:}7A9 wwh,C3+lV.=KfFJw4w@yc0\7AE;LKsU+xUHwW%1e/ppQ* 9FeV.s6Fki:q*0K
Jan 25, 2024 01:26:47.000277042 CET	1286	IN	Data Raw: d5 17 95 35 7d 6c 3b da 88 f5 8f 3d b9 08 81 3c 45 70 42 a1 7a 14 fc df 01 26 26 d8 bf 44 7f 3e b4 4c 17 ac 95 1b 70 d2 99 9a 70 c1 55 78 24 e5 2e 20 ec 77 58 25 f5 9f 77 ed 5f 65 81 11 18 cf a8 59 f6 f6 8b 78 6c 11 de 5f 68 fa 25 cb 0f a1 5e 2e Data Ascii: 5}l;=<EpBz&&D>LppUx$. wX%w_eYxl_h%^.6{umITy&v75.}.^yMteBE3808a{Xwh^~QK^d^oT1%EG%h$bz)o$'vQ%\|,G+fAQpRo-(%C=EGD
Jan 25, 2024 01:26:47.000314951 CET	1286	IN	Data Raw: 01 e4 24 81 24 39 04 ef 06 ec cf 48 f8 60 e2 f2 c8 4b bb 60 4d c0 04 74 ef 1a 45 3d c3 39 5d 8b 91 9f 3e 8e 45 af f6 c6 fd 10 a1 63 0e 5c f9 54 c1 70 2f 17 db 85 fb 84 98 3b fb 0a de e5 02 f7 91 9a c2 8e 33 f2 2e 8b d6 00 cf 65 ce ca 0f 9b 4c 8d Data Ascii: $$9H`K`MtE=9]>Ec\Tp/;3.eLdAFjiP yt+eWng3zj+-XUv=&9q*K6I}nLPXuV&xSm~O3-a[>aG>I"w6BjW.^<Zx/{#0SVM3Ydv4k&;
Jan 25, 2024 01:26:47.000353098 CET	1286	IN	Data Raw: 58 fd dd 4a ff 74 75 e8 59 56 2d c3 9c dc 7e 92 86 e6 16 7a 09 13 4f 43 83 28 e9 49 86 91 82 84 61 45 8d 5e f3 ca 1a e3 86 08 02 d7 3d 59 0f 53 20 bc 8a 6c b7 e4 07 28 70 a4 ea 43 07 4a b3 3f 38 ed 49 24 0a 1f 70 63 18 19 32 b0 1e 98 4d d6 2f a3 Data Ascii: XJtuYV-~zOC(IaE^=YS l(pCJ?8I$pc2M/I :Z9-0~Q%_pgU'q3YjYS_!h?R:l_s4M\|\*j\|%Nu\x.0JW3-s7Ss?V5V2eevm9Te
Jan 25, 2024 01:26:47.000391006 CET	1286	IN	Data Raw: a4 ca 11 2e 8d 41 18 50 14 8e e3 4d 99 0d 79 01 2e 5d 59 0d 0f 24 81 e3 82 11 ab 24 cd 57 5e b8 08 cb 58 67 5b 9f 34 d7 81 51 68 c1 76 ac f6 8a 01 44 87 75 46 7c 04 a9 56 4c 46 29 1f b2 5a c1 c1 5a a1 a4 dd aa 36 be f2 f0 e0 36 ef df 7b 42 03 dd Data Ascii: .APMy.]Y$$W^Xg[4QhvDuF\|VLF)ZZ66{BDS#io"2DMp0TQM&'9!yS!zb#(d(N}*+1G~5cO^I}8{6E4@')_om2J=?(cIO2]!&z
Jan 25, 2024 01:26:47.000428915 CET	1286	IN	Data Raw: 8c 4b 6a b2 03 f4 5f 02 19 a8 d8 b4 72 8b d4 42 88 08 ee 0e 6e be f5 28 63 3d a5 ce 88 b4 dc 55 49 e2 13 95 22 9c ce 82 e1 32 69 0a bd d2 90 bd 27 37 3f 8f 09 ec 38 dc f1 d0 15 9e d7 75 e6 58 11 5a d2 ca a8 ff 82 ea 9c d7 ba e0 b5 4a e5 b4 a6 5f Data Ascii: Kj_rBn(c=UI"2i'7?8uXZJ_96i4O"F]/KJ`~`bqps`<l<[`kC{Pv~n$f7lgo;,>]JSSdc\%*yJm4z
Jan 25, 2024 01:26:47.225347996 CET	1286	IN	Data Raw: 3c aa 46 a7 d2 af 60 eb f4 7d 62 42 ec 5c e3 cc 62 14 e1 15 19 36 65 64 e4 f4 86 2c 81 1c c4 e9 fc ea 8c e1 b6 83 99 72 f6 b9 01 e4 17 01 a1 59 20 76 ff d3 e4 56 f6 d1 f7 cd 33 6c 7b 70 7d 66 d6 ac 39 9a 02 aa b6 31 ed e0 24 e5 ad ac 66 d5 49 48 Data Ascii: <F`}bB\b6ed,rY vV3l{p}f91$fIHm0$Tdac%lCc4{J:f~d.]rH;a!+hf6DS , X `_)nfBzY^tq2m94!9=a^<B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	91.215.85.14	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:26:47.000539064 CET	353	OUT	GET /scripts/jquery-3.7.0.min.js HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://sub.nabprotect-livechat.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:47.226367950 CET	367	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:47 GMT content-type: application/javascript last-modified: Fri, 26 May 2023 21:42:54 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 30381 date: Thu, 25 Jan 2024 00:26:47 GMT
Jan 25, 2024 01:26:47.226404905 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bd 79 93 db 36 b6 07 fa ff ab 7a df a1 c5 f1 30 80 05 a9 25 3b c9 bd 43 35 a2 4a bc 4c 9c 49 e2 24 76 b6 61 33 29 b6 08 75 33 66 83 0a 09 f5 12 51 f3 d9 5f 9d 83 85 20 45 b5 93 a9 fb 26 35 6e 11 04 b1 e3 e0 e0 2c Data Ascii: y6z0%;C5JLI$va3)u3fQ_ E&5n,sxt[Q<tv=y7'/R$IDu*9w\|ZVE'Og\|IStlkqR_`8WQOl[0<b*6eeiVB"f4jk\|MFmD
Jan 25, 2024 01:26:47.226442099 CET	1286	IN	Data Raw: 29 21 05 2b 59 45 69 74 53 e6 d9 c9 cc 34 0c f3 54 d4 2d a5 d4 9b 44 b2 13 77 9b 54 66 65 64 38 b8 60 4c d4 f8 ab 54 5d 4d 2b 48 be 26 94 4e 2b b1 29 d2 95 20 a7 e7 cf 4f 2f 59 10 50 96 d7 df 89 34 bb 87 73 5d 00 ff d7 59 d2 7d de 10 48 8f 2c cb Data Ascii: )!+YEitS4T-DwTfed8`LT]M+H&N+) O/YP4s]Y}H,.-=uXNQC+XiRo/(I)4Fk_"s]EZI'Sgt #Pd7AzQEWhGJXHEQ8
Jan 25, 2024 01:26:47.226480961 CET	1286	IN	Data Raw: bb 7e 3d cd 27 01 65 bf 75 52 29 fb b4 5f a6 1a 07 8f 02 ca 9e f3 dd ab e7 51 e7 dd df cc 38 05 94 3d fb f2 d3 37 6f ba 6f cf cf a7 ed fb b7 9f fe b3 fb 56 bf 6a e2 c7 09 bc fe f4 ed db ef a2 5e bd 1b ca be 79 f3 e2 fb e7 af fb 2f 2e 29 7b f6 f9 Data Ascii: ~='euR)_Q8=7ooVj^y/.){/{Jt7pnON$\M)d\2B$i(9?Sx+6];8AP^oa}dH!;u?(OaL\j{YF.~Li}Oal!'D\l*%i
Jan 25, 2024 01:26:47.226521969 CET	1286	IN	Data Raw: f8 a8 93 aa a3 b1 16 14 4e 40 ef ca 3c 7a db 1d 60 2d f0 1b 4a 25 ed 57 96 96 ef b1 fa 2c af 57 a5 94 78 4d c6 1e 0e 37 c4 4a e4 19 dc a1 f4 97 48 f0 fd dc 2e f3 db 43 9a ee ce 07 fd ed aa ae 3f 4f eb ee c7 de f1 d0 2b 80 04 d1 55 5a 93 c7 2c fa Data Ascii: N@<z`-J%W,WxM7JH.C?O+UZ,uN]i4? y%BjyGadpx}/TM5[>\|=hzN>s>2i`68Y]75<LwX7 M9 Z88,`%%#@l,"iw1
Jan 25, 2024 01:26:47.226561069 CET	1286	IN	Data Raw: db ee bc 99 fe 06 8f b5 fd c0 c1 a6 1c cd 06 bd 22 8c 4d f7 7e 6f 94 9c 87 95 82 75 34 9c 5d be 06 4a 75 74 5f e4 97 56 1d 2b c6 81 51 d7 81 2e 0e c6 0c ce 81 81 8a 95 1e e2 43 03 ad e9 aa bd 9f 78 0f 4d f3 fe cb 6d ff 62 4b 02 fc 1c 24 90 01 30 Data Ascii: "M~ou4]Jut_V+Q.CxMmbK$0j{x9!M,.Q1c@'-T#\|<an4Y.5]L~hJiFKm[KfdN+vG#qyk~CFW.Hr
Jan 25, 2024 01:26:47.226598978 CET	1286	IN	Data Raw: a2 16 ea 30 fb af 98 dd 9a 21 fc 13 3c d7 dc d3 cf 1d d6 85 79 e6 7a 7c 65 6f b9 c8 d2 3b 7b fc 59 54 d8 db 0c 5d a4 70 86 03 a3 b1 85 2e 5a 49 8f e5 0d f4 b0 a1 67 09 dc 10 48 c5 ef b5 cd 5d 0a 0b 97 a0 5f 1f 4f 4d 69 70 f8 db 2b 5c d3 a4 94 d5 Data Ascii: 0!<yz\|eo;{YT]p.ZIgH]_OMip+\FcH$v%:Tdj'ZB+0<.Ltx>j/GJTQ679hEvDX[ Z X3P1U+2M#rVmls^
Jan 25, 2024 01:26:47.226917028 CET	1286	IN	Data Raw: 7b 98 8b 7f 59 71 b1 3f 3c 89 2b 71 e4 00 85 d5 71 e8 07 0e 92 06 b6 e2 e0 9b f3 33 11 bc 70 85 83 ad 83 ef f6 03 ac d7 ca 52 6e 18 9a 27 67 a4 e4 2b 60 a1 56 9e 06 91 b6 16 53 c1 ab e7 b0 b5 49 ca 4b 50 68 9a eb f3 3f f0 5a dc ca dd 9f c1 ba 74 Data Ascii: {Yq?<+qq3pRn'g+`VSIKPh?ZtdDM/8qV$DBVs*Poiji/]w4Ex%`xy!@\wZ>sS}oTzhNl]Zb!R4BK&8v}nG`Ld
Jan 25, 2024 01:26:47.226986885 CET	1286	IN	Data Raw: 88 da 4b 01 ba 1b bd 00 29 1a 5e a7 59 f6 59 1f dc d6 2f 37 cd 32 62 91 73 7b 80 a4 51 ef d9 2e 5b 10 09 ed 5b 3c b3 dd 80 9a db da b2 1e 22 78 59 87 06 9f 4a 46 e8 bb 6e d4 e5 83 36 0d 70 50 fb 2a 1a ea 72 23 09 38 66 94 d3 ff 0c b1 fc 64 5f 81 Data Ascii: K)^YY/72bs{Q.[[<"xYJFn6pP*r#8fd_mY oG`24e2PC>`?1T}IrE:J=:<oe-l &s!SD<Hb"U"@{[l]=xmBA9oGLP"J
Jan 25, 2024 01:26:47.227026939 CET	1286	IN	Data Raw: b4 bb af cc cf 07 2e 3b cb f6 74 41 8b 21 70 96 a9 f9 6e bf e8 31 26 c3 a4 48 81 ab 17 e8 1a 3e 4a 16 a9 26 41 5c 42 bb 58 85 74 27 cb 7c 8a 94 83 5b 41 19 3f 9d 88 24 7e 92 58 ac 0f 9b f2 d4 4f 99 61 0e 38 d1 99 1d 34 78 a0 4c 17 aa 20 01 8e 4f Data Ascii: .;tA!pn1&H>J&A\BXt'\|[A?$~XOa84xL Oj;y}HS5hL~;mM,]XwctDqD(kLa}_~Z"&x&ViH{4d#I;\|9V*xX%xP%>4BM&Ksj\N8e
Jan 25, 2024 01:26:47.452749014 CET	1286	IN	Data Raw: 2c 75 8b 95 a4 d7 a6 36 cf 7d 49 ac 82 eb 23 4a d9 0f da 2d 0a 43 d7 2d 7e c5 d5 d0 af d6 c7 ad cb cd 8f 03 21 8d a1 86 78 e3 f5 18 6b bd be b4 48 0b 20 1a be eb 47 fc b4 4e ca 60 ef eb 11 57 67 b2 e4 f6 3d 51 76 bc 80 af 58 aa c8 7f f3 43 2f 75 Data Ascii: ,u6}I#J-C-~!xkH GN`Wg=QvXC/u`(=3K>z> {Tj2kujy~>S-T!Ntry{c#)*kAYgeULN}tdsQEWCFs+_ C}J`)QI
Jan 25, 2024 01:26:47.458657980 CET	415	OUT	GET /fonts/source-sans-pro-bold.woff2 HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive Origin: http://sub.nabprotect-livechat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://sub.nabprotect-livechat.com/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:47.683955908 CET	308	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:47 GMT content-type: font/woff2 last-modified: Thu, 08 Jun 2023 17:24:34 GMT accept-ranges: bytes content-length: 37968 date: Thu, 25 Jan 2024 00:26:47 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	91.215.85.14	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:26:47.002330065 CET	343	OUT	GET /scripts/script.js HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://sub.nabprotect-livechat.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:47.227765083 CET	524	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:47 GMT content-type: application/javascript last-modified: Thu, 08 Jun 2023 20:52:44 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 159 date: Thu, 25 Jan 2024 00:26:47 GMT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d cd c1 0a 82 40 10 c6 f1 b3 82 ef 30 98 e0 2c 84 c7 3c 58 6f d0 4b 98 3b e2 e0 b6 23 ce c6 42 e1 bb 77 10 a3 0e 45 e7 df cc f7 2f 30 b2 b7 12 4d 25 1e 73 27 ad 85 99 94 ef 04 da cd e2 5c be 87 fe e6 bb c0 e2 01 c9 c0 23 4b 13 ee 01 8b d7 5f 64 1b 06 34 70 3c 41 7d a8 d7 8b a4 c0 72 a7 a1 9d c3 99 fd a8 a5 a9 06 b6 84 a6 d9 cc 92 8e 41 a6 2f 7a 95 0b 3b da 50 07 89 2b 2e 40 4e e9 bf c2 e7 c6 ef fc 5b 21 4b 17 d3 3c 01 2f 02 f1 d5 15 01 00 00 Data Ascii: @0,<XoK;#BwE/0M%s'\#K_d4p<A}rA/z;P+.@N[!K</
Jan 25, 2024 01:26:47.329591036 CET	416	OUT	GET /fonts/source-sans-pro-light.woff2 HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive Origin: http://sub.nabprotect-livechat.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://sub.nabprotect-livechat.com/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:47.555056095 CET	308	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:47 GMT content-type: font/woff2 last-modified: Thu, 08 Jun 2023 17:24:20 GMT accept-ranges: bytes content-length: 37556 date: Thu, 25 Jan 2024 00:26:47 GMT
Jan 25, 2024 01:26:47.555175066 CET	1286	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 92 b4 00 10 00 00 00 01 89 14 00 00 92 47 00 03 01 89 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 3f 44 59 4e 41 85 4d 1a 82 3a 3f 47 44 59 4e 84 15 1b 81 bd 1a 1c 81 af 66 06 60 00 9a 00 0a 82 Data Ascii: wOF2GF?DYNAM:?GDYNf`\|6$B [[fqq>E,Z?\|5!{_7?1e;0T%zdJVDHK#"53{`#bm4F7~
Jan 25, 2024 01:26:47.555193901 CET	1286	IN	Data Raw: 67 1d 6d ad 72 99 a5 7b f5 51 bf d7 1f ad 89 b6 70 cb 71 ef af 6a 1b 74 6f f6 b9 7e fa ae 06 7b 5b 13 ec 73 fa 8b b6 c0 2d a2 f8 74 c4 07 5a ff 11 9d 7d 8e fe d0 60 3d ff d0 60 45 1b bb 82 9b bb 7b ab 31 ae b8 9c f3 3c 9f 05 95 e5 ac a8 db f7 98 Data Ascii: gmr{Qpqjto~{[s-tZ}`=`E{1<tSd[Y?>6-[/IS>tX^gBVXEJX2-2-2-2'/tq8v)pr%,X.N'wIIV~G[+h6:eYR*.MZ#BP
Jan 25, 2024 01:26:47.555212021 CET	1286	IN	Data Raw: 3e 6a a0 3a aa a1 2a fb 99 82 f9 58 8e f5 18 03 83 1d 60 87 1b 4a 6f 79 9c 60 0f f7 e4 b8 2f 0e fd 70 64 7c 6c d2 1e e2 b9 ef d0 b1 eb 78 79 c2 93 7f 5e 8b e0 03 6f 78 79 ef f0 3e e0 7d c2 fb 82 77 b2 f7 7d ef 67 48 9a ce 7e 50 ef 4b de 6f 41 f8 Data Ascii: >j:X`Joy`/pd\|lxy^oxy>}w}gH~PKoAh+P)^]cWpn\|@`(V`UfC6Meg? 8N,.,.n>)^5C>g-s+{WwrUTSURuUcT{uug[h&h
Jan 25, 2024 01:26:47.555346966 CET	1286	IN	Data Raw: e1 02 ae e1 3e 1e 22 05 4f f0 0c 69 48 c7 1b bc 85 13 6e bc a7 2f 83 59 97 49 1c c0 59 dc c1 27 fc 28 7f 85 a8 b8 1a ea 7b 8d d0 32 1d d0 0b 23 93 cf 14 30 c1 26 c4 84 9a a2 a6 8c a9 64 6a 9b 6f cd 30 33 c3 2c 33 3b cc 43 e3 76 78 3b 02 1c 15 1c Data Ascii: >"OiHn/YIY'({2#0&djo03,3;Cvx;9`pxbJ**8DlDslB"p- }8~WnFX#6nMF?f}x+B-Z)NsB9Uu5vJNx~a
Jan 25, 2024 01:26:47.555366039 CET	1286	IN	Data Raw: 45 41 36 67 0b e4 67 4b b6 42 08 5b b3 35 f2 b3 1b bb 23 3f 7b b2 27 bc 99 c4 24 78 f3 1b 7e 87 02 ec c7 7e f0 e0 00 0e 40 09 0e e1 10 94 e0 70 0e 87 27 c7 70 0c 4a 70 1c c7 a1 04 27 70 02 0a 73 22 27 22 94 93 5e bf 34 c3 38 99 93 51 84 53 38 05 Data Ascii: EA6ggKB[5#?{'$x~~@p'pJp'ps"'"^48QS8E9SQ89\jNBu`2Q7a\|(zz@$h=OHb4_u m%/%^7W$NIDKg\|%&6l0c;\|g:#;!dvA0
Jan 25, 2024 01:26:47.555385113 CET	1286	IN	Data Raw: 24 69 a4 49 9a f5 35 b4 d0 4a 03 69 d2 a4 89 93 94 96 f6 25 d5 88 11 3f 01 5c 3c 71 50 39 dd bf 14 7c 7a 9c 1e 87 1e ed d5 5e 6c a4 7d da 8f 1e 1d d0 01 6c a4 27 eb 69 e8 d1 33 f4 0c 6c a4 67 e9 59 e8 d1 73 f5 5c f4 e8 79 7a 3e 6a f4 42 bd 10 1b Data Ascii: $iI5Ji%?\<qP9\|z^l}l'i3lgYs\yz>jBz9zpDEo0jYB=aTS50l uq3BQ,jt~"qI\|;AO`@)wN=P^\n=[2/{$@W9veMwGs:
Jan 25, 2024 01:26:47.555404902 CET	1286	IN	Data Raw: 68 d4 be b9 42 f2 68 78 2e f7 d7 bf 3e 73 65 b1 d2 6e 51 ca 61 7e f9 b7 d7 ad 13 29 3e ba 65 52 e9 f9 cc 90 cb 87 0d e5 c9 3f df 78 d0 3b 26 3f fd 22 3f b6 99 ea 3f 79 f5 b5 aa 48 21 a0 bf 5f 36 50 ff ce 82 b8 6f 86 bb e4 52 3a 03 35 ef 0e a8 f6 Data Ascii: hBhx.>senQa~)>eR?x;&?"??yH!_6PoR:53C/&aclIw<'8sb1~@\~1"Ex].\!MyV\|D>\7$/yZcFOVt=e=Szz^R#\|$
Jan 25, 2024 01:26:47.555422068 CET	1286	IN	Data Raw: 98 8a 4a 87 5a ea 89 11 c7 c7 46 d8 d8 d8 78 fd 99 9e f8 98 fe 55 1b 86 32 d2 85 30 75 6a 1c 62 4c c2 94 ac 36 dd 6f f6 b5 17 93 f6 ac a4 25 8d 99 fe 14 da bb 64 13 d9 04 33 bc 2a b4 66 cb 36 b2 4d 32 47 98 26 1a a5 c9 db 02 1b cb 26 30 b5 7f 8a Data Ascii: JZFxU20ujbL6o%d3*f6M2G&&0]9veke%S3T"Xu,X>TRCL4,VnqA&FdG-Zdz[%rt{^\(^\|&&[r+iV7]P=Y/
Jan 25, 2024 01:26:47.555439949 CET	1286	IN	Data Raw: 24 fe c5 51 9c c3 75 3c c0 4b 7c e0 39 fa 47 48 41 0a 53 05 35 54 27 fd ac 01 9a a4 25 da a6 13 ba a9 57 fa 6c b2 9b 50 53 ca d4 36 6d 73 10 bd e3 17 71 3b fc 80 ff 31 1e 0b b1 19 47 71 1d cf f1 81 7e 2c c4 78 d6 60 2b 7e c3 bf 39 9a 73 b9 9e 07 Data Ascii: $Qu<K\|9GHAS5T'%WlPS6msq;1Gq~,x`+~9sy)WE5RgT}19LS1{ ?&`&&[[1<+\|r("TIiiN4EMSE<r:'D,V'fcad-wc9yWNHUVu
Jan 25, 2024 01:26:47.781716108 CET	1286	IN	Data Raw: 5a 93 b6 23 37 0a ab 57 5d 72 ee d2 8d 7b 8f ea f5 32 df 40 34 4c 28 21 29 05 35 6c f4 af be 37 43 8c cc ac 1c 3c 7c 02 42 22 e2 92 52 d6 65 64 e5 52 3e 5e fa df 14 51 56 71 e5 56 55 4d a3 9a 53 43 41 c7 c2 25 26 a3 a4 19 ba 35 a0 d1 33 30 32 b1 Data Ascii: Z#7W]r{2@4L(!)5l7C<\|B"RedR>^QVqVUMSCA%&5302qp nZMv9vkw<FX\|rZ}0lS/$=y%>f9Z+9M!,-KjQPTVqVUM-{x{Xky;~
Jan 25, 2024 01:26:48.188812971 CET	398	OUT	GET /favicon.ico HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://sub.nabprotect-livechat.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:48.414438963 CET	1001	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:48 GMT content-type: image/x-icon last-modified: Thu, 08 Jun 2023 16:37:38 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 646 date: Thu, 25 Jan 2024 00:26:48 GMT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 52 4d 48 54 51 18 3d 6f 9c 37 f3 66 46 9d 19 47 9d f4 bd 37 33 da fc bd 37 65 a8 13 a2 0c 65 e6 0f 56 82 69 16 49 51 14 92 8b a4 16 2d 02 c1 5d 8b 20 22 a2 55 d0 2e 8a 48 88 36 19 15 d4 c2 55 8b 32 37 b5 68 21 54 68 32 bf 21 48 04 9d 98 67 63 e3 38 bb 3e 38 8b 7b ee 39 df 3d df bd 17 10 20 c0 e5 02 04 04 30 69 06 ea 01 44 01 b8 00 04 b0 c1 1b 65 06 6a 1c 1b 28 aa bc fc 2e 80 9f 00 58 0e 15 82 8b 82 60 2b e6 f2 da 7b 00 bc 00 6e 01 f8 b5 c1 9b 08 08 5b bd a6 6a 7a ab af d1 26 c6 4b fb e6 3d 77 00 a4 0a 9c d5 14 a5 c7 36 45 ab 39 64 f4 12 60 a6 d7 79 85 31 75 85 9e ca b3 e5 b2 65 8b d7 16 53 80 61 ef 7b 46 1a df d1 eb 9c 66 8d 63 92 51 f9 33 75 f5 07 e5 9a 9b db b2 95 c2 04 89 81 da 47 86 5e 57 52 8c ca 2b d4 94 34 35 25 c3 e6 fa 79 ba 6c e3 74 db c7 e8 b6 8f d3 21 76 1b f9 4a 7b d4 57 cd 50 57 32 d4 94 54 19 ac 52 57 93 d4 94 25 3a a5 13 25 f7 e4 a6 a7 6a 94 11 f9 25 63 be b4 a1 cf 6b 75 35 b5 89 7c 16 5d 5d 65 83 6b 9a 02 c4 bf 5e 33 3d 95 a3 ec 6a 79 c1 fe ae ef dc d7 96 63 5b 38 4d dd 97 d7 7e a5 e6 5b a0 ee 5b a6 e6 5b 34 66 f2 79 66 8d b3 fe 9d 5d 41 77 55 1f 3b 5b 67 79 f8 c0 32 07 12 39 26 5a 33 6c 8f a4 b9 2b 90 62 58 9e 67 b0 f1 15 23 ca 02 43 f2 1b 06 77 bc a6 24 86 b7 df 9d c9 4e 8f ab 97 ed fa 73 a3 47 77 3c c3 ce dd 19 c6 a3 49 46 fc f7 19 56 9f 32 d6 3c c7 58 d3 33 c6 9a 1e 50 ac a8 2b fb 06 da ce 1b 3c 36 b8 c6 a1 9e 2c 07 12 59 f6 74 64 b9 3f fe 8d 21 ff 0c 5b c2 0f 19 54 ae b3 4d 7b 4c b5 f6 aa 31 fb d6 0c 0e 1e 4c cc f1 fc c9 75 1e 3f 92 e5 a1 ee 65 0e f7 e7 38 dc b7 c6 bd b1 27 b4 8a 7e 4a 96 10 2d e6 06 4a 62 a4 f0 7e bf 0b 7e 9b 14 e4 d8 d0 47 1e 1d 7c cb a0 7f 8a 75 ee 11 0e f5 7e e2 99 b1 75 ee 09 df 2e f7 7f f2 de a5 c2 5a b2 04 a9 36 9c a3 64 95 37 35 7e f9 34 4f 8d ac b0 59 9e 28 37 ef 17 00 17 4b ff 71 31 04 41 64 53 e3 25 3a ed 1d a5 7b 39 00 97 01 58 01 4c 00 f8 00 20 59 0e 02 a4 a4 00 4b 31 b7 08 e0 02 00 09 ff 59 7f 00 ea 74 7e ac 7e 04 00 00 Data Ascii: RMHTQ=o7fFG737eeViIQ-] "U.H6U27h!Th2!Hgc8>8{9= 0iDej(.X`+{n[jz&K=w6E9d`y1ueSa{FfcQ3uG^WR+45%ylt!vJ{WPW2TRW%:%j%cku5\|]]ek^3=jyc[8M~[[[4fyf]AwU;[gy29&Z3l+bXg#Cw$NsGw<IFV2<X3P+<6,Ytd?![TM{L1Lu?e8'~J-Jb~~G\|u~u.Z6d75~4OY(7Kq1AdS%:{9XL YK1Yt~~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	91.215.85.14	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:26:47.721329927 CET	296	OUT	GET /img/nab-logo.svg HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:47.963541985 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:47 GMT content-type: image/svg+xml last-modified: Thu, 08 Jun 2023 16:27:44 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 1651 date: Thu, 25 Jan 2024 00:26:47 GMT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 df 6f 1b 37 0c fe 57 84 2b 0a 6c 0f a2 25 8a d4 8f 21 0e b0 ad eb f6 90 be e6 b5 48 2f 89 6d e0 1c 07 b1 e7 64 f9 eb 07 52 3a db 49 9d 36 db 0a 0c e8 83 2d 5a a7 e3 51 1f f9 7d e2 f9 64 bd 9d 99 fb c5 e5 66 3e ed a2 eb cc fc 6a 31 9b 6f a6 5d 70 9d d9 2e ae ee 7f 59 3d 4c 3b 67 9c 89 ce c8 dc c3 72 b8 59 4f bb f9 66 73 fb d3 64 72 7f 7f 0f f7 01 56 77 b3 09 3a e7 26 eb ed ac 3b 3d b9 bc ba 5e 9f 9e 0c 8b 9b ab 8b bb df ef 2e 2e 17 57 37 1b f3 e0 a7 9d 85 e8 df 76 e6 2f 3f ed d8 81 e3 b7 9d 79 c0 69 57 0a 14 94 79 dc cf 2f 2e a7 dd cd c5 27 3b ac 66 ab 8f eb ed ec e3 c7 8b ee f4 64 bd 59 dd 1a f9 b2 fd 6a 58 dd 4d bb 37 bf bd 73 ce b9 ce ac ae af d7 57 9b 69 e7 de 76 93 a3 eb ca d3 75 09 52 78 61 e9 3b ff 74 69 24 c8 f1 85 b5 bf e6 a7 6b bd ab 01 4c 9e ee fe 28 1a b2 d5 11 8e 52 c0 61 83 63 37 8f d3 0e 28 1e 05 e3 d3 51 30 7e e6 1a 8d 4e ae 6e 2f fa c5 e6 af 69 f7 0a 74 c6 1b bf ba 8d 49 cd ed cc 5c 2f 86 61 da dd ac 6e ae ba d3 93 db 8b cd dc 5c 4e bb 0f 21 42 c6 6c 3c 43 e2 de 19 60 24 f0 0c 5c 0a 84 14 75 44 64 e3 8c fc b4 e0 12 ef 8c 2d 64 a4 5e 4d e3 2c 20 46 31 2d 30 a6 6a 10 7b b9 90 18 2d 78 b6 90 31 c9 32 ae bf 74 89 fa 0a 6d 2c 5b 8b e0 13 ce 2d 14 17 b6 72 03 cd ab e9 c1 97 32 87 92 f2 f6 c0 d4 05 b6 cd e6 14 1e 97 04 2e a2 45 88 25 f7 fa 40 e3 ac 07 74 41 36 66 3d 04 26 88 89 e4 41 ae e4 76 2f 03 a5 ea 50 9f 1f 7a 67 15 07 09 ca 83 47 92 6b cd 12 b0 9c 91 01 62 62 1d 4b a2 2d 42 c0 a0 3e ce 3d 01 73 af db f3 e0 28 2b 20 d6 03 15 f1 41 a1 9a 8f cb 02 94 8d d3 28 73 8b 92 9e 47 09 b1 85 18 a0 24 7c 7d 8c a9 c6 98 5a 8c e9 c5 18 e3 3e c6 78 24 46 1b c0 79 43 e0 a8 05 b2 ae b9 d3 24 ea 17 71 ad 80 31 e3 08 8c ac 3e d4 90 e4 eb e6 d8 91 24 ba 1a 9a c2 5a 1a 10 9d 17 cf 1a 75 8b 1f b1 55 9a 00 27 d5 98 31 eb 48 ec eb 05 2d 29 31 64 d3 72 a5 16 14 49 29 b5 01 91 e4 09 1a 96 4b 64 6b 38 c5 61 b3 82 d3 e2 2c 29 b7 41 b0 aa 95 d7 6b 36 8c 07 4c 45 91 28 c6 43 e1 0a 50 91 15 c6 19 0f d9 45 08 89 ab 65 3c 10 0a c6 ae e4 5e d9 b2 e3 91 10 83 4b 79 5c d6 4a b4 1e 0a e5 23 bc 11 be a9 b1 9b 11 38 d5 88 29 b7 35 46 f3 1e c7 e9 04 9e 2f 80 3c ca c7 38 e3 d4 a1 70 94 24 0a 62 5d cc a8 90 e9 18 1d 6a f4 1e 8b b8 6b 46 d1 6a 43 e4 b9 78 7e 5c 82 67 13 21 46 d9 8b 26 a5 66 52 b7 27 05 98 9b bd d6 1f 92 c1 66 34 00 6a 8a 35 4f 3a 63 0e ae 0a 54 82 a0 ba 91 27 9b 03 87 8a 92 e3 60 9c 54 78 94 c4 49 d6 25 17 5a 37 58 9a bd ab 2c 2f 54 ac a3 a6 8c d6 2a 3c 6a 9a 83 e9 1e 12 87 fd d6 a3 39 f0 26 c2 81 3e b4 e8 9f 53 92 77 94 e4 67 94 f4 2f 53 d2 51 69 94 14 eb 6b 94 54 e9 63 4a 15 39 81 3b 3a 14 b6 e8 ae 95 90 2c 61 b6 aa f9 36 21 be 42 35 58 43 ac ca 73 8e 1e 10 77 aa c1 7b d1 28 7b d1 90 32 cf 80 29 ca 79 32 8a bc ad 94 a6 7a 26 58 88 17 82 3a 9b fa 5d ab 36 b1 2e e3 03 d9 96 cc 12 6b 86 a4 94 0e bd f1 eb bd 8d 75 Data Ascii: Xo7W+l%!H/mdR:I6-ZQ}df>j1o]p.Y=L;grYOfsdrVw:&;=^..W7v/?yiWy/.';fdYjXM7sWivuRxa;ti$kL(Rac7(Q0~Nn/itI\/an\N!Bl<C`$\uDd-d^M, F1-0j{-x12tm,[-r2.E%@tA6f=&Av/PzgGkbbK-B>=s(+ A(sG$\|}Z>x$FyC$q1>$ZuU'1H-)1drI)Kdk8a,)Ak6LE(CPEe<^Ky\J#8)5F/<8p$b]jkFjCx~\g!F&fR'f4j5O:cT'`TxI%Z7X,/T*<j9&>Swg/SQikTcJ9;:,a6!B5XCsw{({2)y2z&X:]6.ku
Jan 25, 2024 01:26:47.963584900 CET	722	IN	Data Raw: e2 38 34 a0 e4 38 f8 32 50 d8 37 1e 55 15 6f f0 34 2b a4 28 40 09 f9 10 49 c7 5c ca 33 a0 42 da bb 88 fb b3 e3 b5 2e 76 61 18 5d d0 d4 a0 21 90 91 1f 97 5e fc 49 99 07 ca 5b 08 73 1b 00 03 f7 22 3a a2 a6 c5 05 a5 56 2d 10 9d 11 a5 33 8a 83 f8 1a Data Ascii: 8482P7Uo4+(@I\3B.va]!^I[s":V-3-}8BAMr3+GF{E(u\|v[1(eYT$55d#F%6FDzujM6WY4)P/L,!d22S]>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	91.215.85.14	80	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:26:47.948492050 CET	321	OUT	GET /img/business-woman-nab-star-2500x900.avif HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:48.174230099 CET	309	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:48 GMT content-type: image/avif last-modified: Thu, 08 Jun 2023 16:27:44 GMT accept-ranges: bytes content-length: 117830 date: Thu, 25 Jan 2024 00:26:48 GMT
Jan 25, 2024 01:26:48.174407005 CET	1286	IN	Data Raw: 00 00 00 1c 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 00 00 00 ea 6d 65 74 61 00 00 00 00 00 00 00 21 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 70 69 74 6d 00 Data Ascii: ftypavifavifmif1miafmeta!hdlrpictpitm"ilocD@8#iinfinfeav01jiprpKipcocolrnclxav1Cispepixi
Jan 25, 2024 01:26:48.174449921 CET	1286	IN	Data Raw: 99 58 b4 8f 4d db 87 cb 20 61 3d ba 11 9a c2 78 e2 54 d0 35 5a 4a 22 72 fc 9e 12 2b 81 c7 4e fd 15 36 1b 54 39 a6 d9 db 26 cd 8d 73 5f b2 81 70 ea 30 a8 71 d8 44 b8 bc 4d 7a 7a 98 21 c3 2c a6 0e 00 41 f0 dc d6 ce 14 d4 b3 f6 ce c6 88 04 47 43 f4 Data Ascii: XM a=xT5ZJ"r+N6T9&s_p0qDMzz!,AGClZ^B~"`a\|hpYk@--WCfzkWw$vRFkc8m4'.v%x`Z-As?e<;e{\,L67*^(6V+s<a
Jan 25, 2024 01:26:48.174491882 CET	1286	IN	Data Raw: 4d 58 db ad 99 d1 b4 7a a2 32 19 93 0a 6e a0 25 5c f3 7a 9d 85 14 ba 35 bc f0 8b 97 5f 9d b2 3c 52 20 3a 51 40 d9 4a b6 b7 4b e3 22 32 09 4f 7f 6d dd 08 3c 7e 1c 21 db 2c 06 15 11 a8 19 e1 ef 01 15 d5 26 da d0 8a 51 cc 26 80 c8 be 96 8f df 97 a1 Data Ascii: MXz2n%\z5_<R :Q@JK"2Om<~!,&Q&YNsLzJnm({*t:h?WGaeL^,TC3v@{G4Pb,;gy/$t";x[]'f6":;Kfm[9iA[}[2r:
Jan 25, 2024 01:26:48.174530029 CET	1286	IN	Data Raw: f1 e5 0f 14 c6 88 40 a6 f1 83 08 b7 0e e5 e6 88 32 b2 9f 7a 88 45 44 ba 5c d9 b9 ee 13 e3 82 ff 9b 3b d3 ac 5d 3a 7d 7f aa d2 a9 37 cb a7 41 a2 39 20 df 17 95 13 ee eb cb 77 77 68 eb 2c 43 33 2b 05 8c 9e fb 80 eb c3 c0 89 6c a9 cb 8a 56 df 16 90 Data Ascii: @2zED\;]:}7A9 wwh,C3+lV.=KfFJw4w@yc0\7AE;LKsU+xUHwW%1e/ppQ* 9FeV.s6Fki:q*0K
Jan 25, 2024 01:26:48.174570084 CET	1286	IN	Data Raw: d5 17 95 35 7d 6c 3b da 88 f5 8f 3d b9 08 81 3c 45 70 42 a1 7a 14 fc df 01 26 26 d8 bf 44 7f 3e b4 4c 17 ac 95 1b 70 d2 99 9a 70 c1 55 78 24 e5 2e 20 ec 77 58 25 f5 9f 77 ed 5f 65 81 11 18 cf a8 59 f6 f6 8b 78 6c 11 de 5f 68 fa 25 cb 0f a1 5e 2e Data Ascii: 5}l;=<EpBz&&D>LppUx$. wX%w_eYxl_h%^.6{umITy&v75.}.^yMteBE3808a{Xwh^~QK^d^oT1%EG%h$bz)o$'vQ%\|,G+fAQpRo-(%C=EGD
Jan 25, 2024 01:26:48.174607992 CET	1286	IN	Data Raw: 01 e4 24 81 24 39 04 ef 06 ec cf 48 f8 60 e2 f2 c8 4b bb 60 4d c0 04 74 ef 1a 45 3d c3 39 5d 8b 91 9f 3e 8e 45 af f6 c6 fd 10 a1 63 0e 5c f9 54 c1 70 2f 17 db 85 fb 84 98 3b fb 0a de e5 02 f7 91 9a c2 8e 33 f2 2e 8b d6 00 cf 65 ce ca 0f 9b 4c 8d Data Ascii: $$9H`K`MtE=9]>Ec\Tp/;3.eLdAFjiP yt+eWng3zj+-XUv=&9q*K6I}nLPXuV&xSm~O3-a[>aG>I"w6BjW.^<Zx/{#0SVM3Ydv4k&;
Jan 25, 2024 01:26:48.174647093 CET	1286	IN	Data Raw: 58 fd dd 4a ff 74 75 e8 59 56 2d c3 9c dc 7e 92 86 e6 16 7a 09 13 4f 43 83 28 e9 49 86 91 82 84 61 45 8d 5e f3 ca 1a e3 86 08 02 d7 3d 59 0f 53 20 bc 8a 6c b7 e4 07 28 70 a4 ea 43 07 4a b3 3f 38 ed 49 24 0a 1f 70 63 18 19 32 b0 1e 98 4d d6 2f a3 Data Ascii: XJtuYV-~zOC(IaE^=YS l(pCJ?8I$pc2M/I :Z9-0~Q%_pgU'q3YjYS_!h?R:l_s4M\|\*j\|%Nu\x.0JW3-s7Ss?V5V2eevm9Te
Jan 25, 2024 01:26:48.174686909 CET	1286	IN	Data Raw: a4 ca 11 2e 8d 41 18 50 14 8e e3 4d 99 0d 79 01 2e 5d 59 0d 0f 24 81 e3 82 11 ab 24 cd 57 5e b8 08 cb 58 67 5b 9f 34 d7 81 51 68 c1 76 ac f6 8a 01 44 87 75 46 7c 04 a9 56 4c 46 29 1f b2 5a c1 c1 5a a1 a4 dd aa 36 be f2 f0 e0 36 ef df 7b 42 03 dd Data Ascii: .APMy.]Y$$W^Xg[4QhvDuF\|VLF)ZZ66{BDS#io"2DMp0TQM&'9!yS!zb#(d(N}*+1G~5cO^I}8{6E4@')_om2J=?(cIO2]!&z
Jan 25, 2024 01:26:48.174726963 CET	1286	IN	Data Raw: 8c 4b 6a b2 03 f4 5f 02 19 a8 d8 b4 72 8b d4 42 88 08 ee 0e 6e be f5 28 63 3d a5 ce 88 b4 dc 55 49 e2 13 95 22 9c ce 82 e1 32 69 0a bd d2 90 bd 27 37 3f 8f 09 ec 38 dc f1 d0 15 9e d7 75 e6 58 11 5a d2 ca a8 ff 82 ea 9c d7 ba e0 b5 4a e5 b4 a6 5f Data Ascii: Kj_rBn(c=UI"2i'7?8uXZJ_96i4O"F]/KJ`~`bqps`<l<[`kC{Pv~n$f7lgo;,>]JSSdc\%*yJm4z
Jan 25, 2024 01:26:48.400428057 CET	1286	IN	Data Raw: 3c aa 46 a7 d2 af 60 eb f4 7d 62 42 ec 5c e3 cc 62 14 e1 15 19 36 65 64 e4 f4 86 2c 81 1c c4 e9 fc ea 8c e1 b6 83 99 72 f6 b9 01 e4 17 01 a1 59 20 76 ff d3 e4 56 f6 d1 f7 cd 33 6c 7b 70 7d 66 d6 ac 39 9a 02 aa b6 31 ed e0 24 e5 ad ac 66 d5 49 48 Data Ascii: <F`}bB\b6ed,rY vV3l{p}f91$fIHm0$Tdac%lCc4{J:f~d.]rH;a!+hf6DS , X `_)nfBzY^tq2m94!9=a^<B
Jan 25, 2024 01:26:49.891263008 CET	291	OUT	GET /favicon.ico HTTP/1.1 Host: sub.nabprotect-livechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 25, 2024 01:26:50.116523027 CET	1001	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Thu, 01 Feb 2024 00:26:50 GMT content-type: image/x-icon last-modified: Thu, 08 Jun 2023 16:37:38 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding content-length: 646 date: Thu, 25 Jan 2024 00:26:50 GMT Data Raw: 1f 8b 08 00 00 00 00 00 00 03 a5 52 4d 48 54 51 18 3d 6f 9c 37 f3 66 46 9d 19 47 9d f4 bd 37 33 da fc bd 37 65 a8 13 a2 0c 65 e6 0f 56 82 69 16 49 51 14 92 8b a4 16 2d 02 c1 5d 8b 20 22 a2 55 d0 2e 8a 48 88 36 19 15 d4 c2 55 8b 32 37 b5 68 21 54 68 32 bf 21 48 04 9d 98 67 63 e3 38 bb 3e 38 8b 7b ee 39 df 3d df bd 17 10 20 c0 e5 02 04 04 30 69 06 ea 01 44 01 b8 00 04 b0 c1 1b 65 06 6a 1c 1b 28 aa bc fc 2e 80 9f 00 58 0e 15 82 8b 82 60 2b e6 f2 da 7b 00 bc 00 6e 01 f8 b5 c1 9b 08 08 5b bd a6 6a 7a ab af d1 26 c6 4b fb e6 3d 77 00 a4 0a 9c d5 14 a5 c7 36 45 ab 39 64 f4 12 60 a6 d7 79 85 31 75 85 9e ca b3 e5 b2 65 8b d7 16 53 80 61 ef 7b 46 1a df d1 eb 9c 66 8d 63 92 51 f9 33 75 f5 07 e5 9a 9b db b2 95 c2 04 89 81 da 47 86 5e 57 52 8c ca 2b d4 94 34 35 25 c3 e6 fa 79 ba 6c e3 74 db c7 e8 b6 8f d3 21 76 1b f9 4a 7b d4 57 cd 50 57 32 d4 94 54 19 ac 52 57 93 d4 94 25 3a a5 13 25 f7 e4 a6 a7 6a 94 11 f9 25 63 be b4 a1 cf 6b 75 35 b5 89 7c 16 5d 5d 65 83 6b 9a 02 c4 bf 5e 33 3d 95 a3 ec 6a 79 c1 fe ae ef dc d7 96 63 5b 38 4d dd 97 d7 7e a5 e6 5b a0 ee 5b a6 e6 5b 34 66 f2 79 66 8d b3 fe 9d 5d 41 77 55 1f 3b 5b 67 79 f8 c0 32 07 12 39 26 5a 33 6c 8f a4 b9 2b 90 62 58 9e 67 b0 f1 15 23 ca 02 43 f2 1b 06 77 bc a6 24 86 b7 df 9d c9 4e 8f ab 97 ed fa 73 a3 47 77 3c c3 ce dd 19 c6 a3 49 46 fc f7 19 56 9f 32 d6 3c c7 58 d3 33 c6 9a 1e 50 ac a8 2b fb 06 da ce 1b 3c 36 b8 c6 a1 9e 2c 07 12 59 f6 74 64 b9 3f fe 8d 21 ff 0c 5b c2 0f 19 54 ae b3 4d 7b 4c b5 f6 aa 31 fb d6 0c 0e 1e 4c cc f1 fc c9 75 1e 3f 92 e5 a1 ee 65 0e f7 e7 38 dc b7 c6 bd b1 27 b4 8a 7e 4a 96 10 2d e6 06 4a 62 a4 f0 7e bf 0b 7e 9b 14 e4 d8 d0 47 1e 1d 7c cb a0 7f 8a 75 ee 11 0e f5 7e e2 99 b1 75 ee 09 df 2e f7 7f f2 de a5 c2 5a b2 04 a9 36 9c a3 64 95 37 35 7e f9 34 4f 8d ac b0 59 9e 28 37 ef 17 00 17 4b ff 71 31 04 41 64 53 e3 25 3a ed 1d a5 7b 39 00 97 01 58 01 4c 00 f8 00 20 59 0e 02 a4 a4 00 4b 31 b7 08 e0 02 00 09 ff 59 7f 00 ea 74 7e ac 7e 04 00 00 Data Ascii: RMHTQ=o7fFG737eeViIQ-] "U.H6U27h!Th2!Hgc8>8{9= 0iDej(.X`+{n[jz&K=w6E9d`y1ueSa{FfcQ3uG^WR+45%ylt!vJ{WPW2TRW%:%j%cku5\|]]ek^3=jyc[8M~[[[4fyf]AwU;[gy29&Z3l+bXg#Cw$NsGw<IFV2<X3P+<6,Ytd?![TM{L1Lu?e8'~J-Jb~~G\|u~u.Z6d75~4OY(7Kq1AdS%:{9XL YK1Yt~~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	50164	185.229.191.39	80	4948	C:\Users\user\Downloads\AnyDesk.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:28:12.419320107 CET	273	OUT	Data Raw: 16 03 01 01 0c 01 00 01 08 03 03 25 f4 dd 14 32 98 47 e4 af 8b e5 7e 55 11 81 be 4b e8 08 b6 6a e7 c3 86 86 c3 05 b2 5f 2b 83 83 00 00 6e c0 30 c0 2c c0 28 c0 24 c0 14 c0 0a 00 a5 00 a3 00 a1 00 9f 00 6b 00 6a 00 69 00 68 00 39 00 38 00 37 00 36 Data Ascii: %2G~UKj_+n0,($kjih98762.*&=5/+'#g@?>32101-)%</q#
Jan 25, 2024 01:28:12.628247976 CET	1286	IN	Data Raw: 16 03 03 00 57 02 00 00 53 03 03 df ef 65 11 3f b3 af a1 db 1b 5d 97 4f 2e 2b d5 4b 9a e6 28 3f 7b cd c6 44 4f 57 4e 47 52 44 01 20 90 70 d2 4e f1 be 5d bd 77 d0 4a ab 2f ed 6d 72 0b b6 78 a9 c0 49 a9 5c c8 25 e3 b2 44 a3 0f 61 c0 2c 00 00 0b ff Data Ascii: WSe?]O.+K(?{DOWNGRD pN]wJ/mrxI\%Da,C0?0'0vtS$0*H0H10UAnyNet Root CA1 0Uphilandro Software GmbH10UDE0181118021423Z281115021
Jan 25, 2024 01:28:12.628287077 CET	1286	IN	Data Raw: 5a eb 51 2f 97 bf f6 fb 33 27 90 b3 d8 e4 e0 cd 68 3b 6a 87 6c a6 0d e7 d8 bd 61 df 56 6b 2a e1 1c 2b f5 9f bf 85 dd 8c 5b 06 1e 71 7f ba 4a a6 40 b0 77 17 ea 2c 3f 5b 94 14 85 2e ad 11 61 ab 88 f6 01 bb b3 47 6b e2 81 18 f1 8e 39 e6 d8 7b 0c 63 Data Ascii: ZQ/3'h;jlaVk*+[qJ@w,?[.aGk9{cpu'-5={{Hy8-&~K2vf/bj@kXScuxI#ph3/L^}a}4AkP+g_R4gs@lo67Jv"rR}uMU#[~.K_e
Jan 25, 2024 01:28:12.628340960 CET	46	IN	Data Raw: 17 70 68 69 6c 61 6e 64 72 6f 20 53 6f 66 74 77 61 72 65 20 47 6d 62 48 31 0b 30 09 06 03 55 04 06 13 02 44 45 16 03 03 00 04 0e 00 00 00 Data Ascii: philandro Software GmbH10UDE
Jan 25, 2024 01:28:12.637002945 CET	1094	OUT	Data Raw: 16 03 03 02 b6 0b 00 02 b2 00 02 af 00 02 ac 30 82 02 a8 30 82 01 90 02 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 19 31 17 30 15 06 03 55 04 03 0c 0e 41 6e 79 44 65 73 6b 20 43 6c 69 65 6e 74 30 20 17 0d 32 34 30 31 32 35 30 30 32 38 Data Ascii: 000H010UAnyDesk Client0 240125002810Z20740112002810Z010UAnyDesk Client0"0H0<MhwvP+@!6MVERR5kmR<8,j] d,:gV#F'
Jan 25, 2024 01:28:12.844363928 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 8d 86 f2 a0 55 22 4b 09 9d 5c 89 c3 d5 c5 61 a3 47 16 2e b8 e6 b7 e8 82 82 c0 b5 ab 1d 85 c7 70 d7 d5 b5 8d 13 c6 df cf Data Ascii: (U"K\aG.p
Jan 25, 2024 01:28:12.844631910 CET	40	IN	Data Raw: 17 03 03 00 23 8d 86 f2 a0 55 22 4b 0a d8 ff db 27 34 30 5d 2e bb 06 09 a0 f4 3a c3 dc ba 92 59 a0 27 0b c6 31 f4 84 3f Data Ascii: #U"K'40].:Y'1?
Jan 25, 2024 01:28:12.856360912 CET	92	OUT	Data Raw: 17 03 03 00 57 78 bd 1c 3b 01 3b 8b fc 5f 6f 89 61 b2 9f dd dd 70 30 6a 26 ec e6 c9 ab b5 44 84 ca 9d 8c ac 23 7d 61 42 3b f9 8b 07 74 6d 20 db b2 cc 5c 3e 74 8e 1a 6c a2 ec 79 de 6b 5e 9b c6 0c 3c c5 d1 c6 7d 78 cf ed 21 4f b0 03 eb 8d 3d 1b d6 Data Ascii: Wx;;_oap0j&D#}aB;tm \>tlyk^<}x!O=.Pk,Gv
Jan 25, 2024 01:28:13.062561989 CET	271	IN	Data Raw: 17 03 03 01 0a 8d 86 f2 a0 55 22 4b 0b 7a e3 77 d9 67 53 88 63 ee d3 6e 52 c6 b6 5e c8 e0 e4 03 61 02 af 86 16 1b ec fd 65 4d 4a 8b ad 21 14 5d 64 4d a2 90 8e 45 0c 80 b2 37 41 1e 30 d8 10 db 2f b2 cb aa 1a cc c9 0b 42 2d 58 25 e9 d2 aa 49 43 b4 Data Ascii: U"KzwgScnR^aeMJ!]dME7A0/B-X%IC;6! 2EPKQJ{NEi=DRQ;lF.1C^iCA-~lUqz:c^D}vp\CoY[[)t/0L;G-`n!bw)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	50168	37.19.203.67	80	4948	C:\Users\user\Downloads\AnyDesk.exe

Timestamp	Bytes transferred	Direction	Data
Jan 25, 2024 01:28:14.223993063 CET	273	OUT	Data Raw: 16 03 01 01 0c 01 00 01 08 03 03 cb d9 cd 1b 7f 4b aa 69 8e 96 9c 67 27 fe 16 7c c5 d1 05 5a 9e 93 e8 eb 1d 8a f6 a9 84 ab ab eb 00 00 6e c0 30 c0 2c c0 28 c0 24 c0 14 c0 0a 00 a5 00 a3 00 a1 00 9f 00 6b 00 6a 00 69 00 68 00 39 00 38 00 37 00 36 Data Ascii: Kig'\|Zn0,($kjih98762.*&=5/+'#g@?>32101-)%</q#
Jan 25, 2024 01:28:14.451757908 CET	1286	IN	Data Raw: 16 03 03 00 57 02 00 00 53 03 03 49 e9 70 91 37 79 13 43 75 2c d6 97 79 6c e3 c1 aa 7c 3a 68 6f 7a c0 5a 44 4f 57 4e 47 52 44 01 20 6d a4 cf 1b 38 37 f5 8e ce 9c bf 46 6e 95 64 9c 21 10 af 78 1f d3 69 3e 01 c1 5a 26 c1 b8 cf 98 c0 2c 00 00 0b ff Data Ascii: WSIp7yCu,yl\|:hozZDOWNGRD m87Fnd!xi>Z&,C0?0'0vtS$0*H0H10UAnyNet Root CA1 0Uphilandro Software GmbH10UDE0181118021423Z281115021
Jan 25, 2024 01:28:14.451798916 CET	1286	IN	Data Raw: 5a eb 51 2f 97 bf f6 fb 33 27 90 b3 d8 e4 e0 cd 68 3b 6a 87 6c a6 0d e7 d8 bd 61 df 56 6b 2a e1 1c 2b f5 9f bf 85 dd 8c 5b 06 1e 71 7f ba 4a a6 40 b0 77 17 ea 2c 3f 5b 94 14 85 2e ad 11 61 ab 88 f6 01 bb b3 47 6b e2 81 18 f1 8e 39 e6 d8 7b 0c 63 Data Ascii: ZQ/3'h;jlaVk*+[qJ@w,?[.aGk9{cpu'-5={{Hy8-&~K2vf/bj@kXScuxI#ph3/L^}a}4AkP+g_R4gs@lo67Jv"rR}uMU#[~.K_e
Jan 25, 2024 01:28:14.451834917 CET	45	IN	Data Raw: 70 68 69 6c 61 6e 64 72 6f 20 53 6f 66 74 77 61 72 65 20 47 6d 62 48 31 0b 30 09 06 03 55 04 06 13 02 44 45 16 03 03 00 04 0e 00 00 00 Data Ascii: philandro Software GmbH10UDE
Jan 25, 2024 01:28:14.713046074 CET	1094	OUT	Data Raw: 16 03 03 02 b6 0b 00 02 b2 00 02 af 00 02 ac 30 82 02 a8 30 82 01 90 02 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 19 31 17 30 15 06 03 55 04 03 0c 0e 41 6e 79 44 65 73 6b 20 43 6c 69 65 6e 74 30 20 17 0d 32 34 30 31 32 35 30 30 32 38 Data Ascii: 000H010UAnyDesk Client0 240125002810Z20740112002810Z010UAnyDesk Client0"0H0<MhwvP+@!6MVERR5kmR<8,j] d,:gV#F'
Jan 25, 2024 01:28:14.940316916 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 7d 43 bc f7 2a f4 55 bd b8 1a d8 66 b7 d7 3d 90 8e 7c e8 93 c0 41 37 03 06 df 6d 21 22 2e e0 3a 57 94 7b ce 79 96 24 9c Data Ascii: (}C*Uf=\|A7m!".:W{y$
Jan 25, 2024 01:28:14.940339088 CET	40	IN	Data Raw: 17 03 03 00 23 7d 43 bc f7 2a f4 55 be b0 12 ab 11 40 ac 23 7b 19 c9 24 91 66 cf 85 cc c0 6c 7e 0f 40 83 f3 35 f5 a4 a3 Data Ascii: #}C*U@#{$fl~@5
Jan 25, 2024 01:28:14.959434032 CET	92	OUT	Data Raw: 17 03 03 00 57 58 dd 5a 65 b9 dd 03 d3 bf f2 c9 cb 64 5c 0d e5 98 64 ff 39 1e cd 66 0e c9 f4 d7 c3 86 38 12 03 9e cd 45 bd 3c bc a5 e5 5f 82 dc 53 e1 d2 d1 7c 58 6b 98 49 1d 6d 7b 43 18 fb 1a 5e 47 91 8a a1 2a 5f dc 81 a6 db eb a8 fe e5 8e 0a d4 Data Ascii: WXZed\d9f8E<_S\|XkIm{C^G*_JA
Jan 25, 2024 01:28:15.270999908 CET	146	IN	Data Raw: 17 03 03 00 8d 7d 43 bc f7 2a f4 55 bf 77 1d 9d d0 d0 e6 54 d5 b8 88 05 6e e1 91 b8 53 44 33 13 c7 ae 34 d6 df b2 1e c8 d4 5b 6c f6 97 1a 39 46 06 72 a3 94 09 8b dd 95 b1 27 1d 3b 09 b1 58 23 97 41 c9 51 eb 9f 5d d8 dc d9 d7 f1 5e fc 56 d0 7f e3 Data Ascii: }C*UwTnSD34[l9Fr';X#AQ]^Vq/JW/0,E"ON/Q.jOQz(!T>JGEs?
Jan 25, 2024 01:28:15.376004934 CET	576	OUT	Data Raw: 17 03 03 02 3b 58 dd 5a 65 b9 dd 03 d4 e9 1e ed 11 c2 f4 74 c8 36 14 5a 03 b9 b0 df 78 04 cb 0a af 08 79 69 91 4d f6 12 ab 10 9d aa 60 43 42 1f f7 7c 14 bd 6e e1 03 d5 b9 be 54 bd d8 57 af ce 6e 2c e9 63 ca da 74 77 b6 63 c8 e7 18 95 d9 d5 76 1b Data Ascii: ;XZet6ZxyiM`CB\|nTWn,ctwcv+vD,\|8@allBlg]`IRgM~4fbi^CPcoiA7ewz7(l{E3p}['h~dkWk\$`<p@ %p1Xt

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	142.251.15.139	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:26:44 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:26:44 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-aM5oStA7ybHdWYeDu0cYOQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Jan 2024 00:26:44 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6232 X-Daystart: 59204 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-25 00:26:44 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 33 32 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 39 32 30 34 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6232" elapsed_seconds="59204"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-25 00:26:44 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-25 00:26:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49729	142.250.9.84	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:26:44 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:26:44 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-25 00:26:44 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Jan 2024 00:26:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Ny1F0xYmErabJN8sQUzAVA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-25 00:26:44 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-25 00:26:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	184.31.50.93	443

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:26:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-25 00:26:49 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: 902AF8D23979454DA39CF4559240B387 Ref B: BLUEDGE1412 Ref C: 2024-01-23T06:58:51Z Cache-Control: public, max-age=109966 Date: Thu, 25 Jan 2024 00:26:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	184.31.50.93	443

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:26:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-25 00:26:50 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0URSoYgAAAABePpjyRlUAQrduejDbkqt8U0pDRURHRTA1MjAAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=163254 Date: Thu, 25 Jan 2024 00:26:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-25 00:26:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49763	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:04 UTC	1365	OUT	GET /nab/Bootstrap.js HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233
2024-01-25 00:27:04 UTC	699	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:04 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 912059 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Jan 2024 00:26:30 GMT ETag: "88e14e475ed3fd8df6efc3eb91cd64f5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: oSXFHXIjN_8U3WpPWhKCEIf0pIxChvwg Accept-Ranges: bytes Server: CloudFront Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0d28f7015cfb69cd3eb6e14359add86e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xFtSBjOb5BsYeHODAkr4bZHjGEFURS0GXU2PenOVi6pfMDLFij1ngQ== Age: 171649
2024-01-25 00:27:04 UTC	15685	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 65 6e 73 69 67 68 74 65 6e 49 6e 69 74 28 29 7b 76 61 72 20 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 20 3d 20 7b 63 6c 69 65 6e 74 3a 20 22 6e 61 62 22 2c 20 63 6c 69 65 6e 74 49 64 3a 20 31 31 36 39 2c 20 70 75 62 6c 69 73 68 50 61 74 68 3a 20 22 70 72 6f 64 22 2c 20 69 73 50 75 62 6c 69 63 3a 31 2c 20 73 65 72 76 65 72 43 6f 6d 70 6f 6e 65 6e 74 4c 6f 63 61 74 69 6f 6e 3a 20 22 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 73 65 72 76 65 72 43 6f 6d 70 6f 6e 65 6e 74 2e 70 68 70 22 2c 20 73 74 61 74 69 63 4a 61 76 61 73 63 72 69 70 74 50 61 74 68 3a 20 22 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 63 6f 64 65 2f 22 2c 20 6e 73 3a 20 27 42 6f 6f 74 73 74 72 61 70 Data Ascii: (function ensightenInit(){var ensightenOptions = {client: "nab", clientId: 1169, publishPath: "prod", isPublic:1, serverComponentLocation: "tms.nab.com.au/nab/prod/serverComponent.php", staticJavascriptPath: "tms.nab.com.au/nab/prod/code/", ns: 'Bootstrap
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 65 62 75 67 7c 7c 28 62 2e 64 65 62 75 67 3d 62 2e 6c 6f 67 29 3b 62 2e 69 6e 66 6f 7c 7c 28 62 2e 69 6e 66 6f 3d 62 2e 6c 6f 67 29 3b 62 2e 77 61 72 6e 7c 7c 28 62 2e 77 61 72 6e 3d 62 2e 6c 6f 67 29 3b 62 2e 65 72 72 6f 72 7c 7c 28 62 2e 65 72 72 6f 72 3d 62 2e 6c 6f 67 29 7d 29 28 29 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 2d 31 3c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 2f 22 29 3f 65 2e 74 69 6d 65 72 3d 77 69 6e 64 6f 77 2e 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 6c 6f 61 64 65 64 7c 69 6e 74 65 72 61 63 74 69 76 65 7c 63 6f 6d 70 6c 65 74 65 2f 2e 74 65 73 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 Data Ascii: ebug\|\|(b.debug=b.log);b.info\|\|(b.info=b.log);b.warn\|\|(b.warn=b.log);b.error\|\|(b.error=b.log)})();document.addEventListener?(-1<navigator.userAgent.indexOf("AppleWebKit/")?e.timer=window.setInterval(function(){/loaded\|interactive\|complete/.test(document.re
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 69 6f 6e 28 6e 75 6c 6c 2c 22 56 61 6c 75 65 28 73 29 20 63 61 6e 6e 6f 74 20 62 65 20 63 6f 6e 76 65 72 74 65 64 20 74 6f 20 6e 75 6d 62 65 72 3a 20 63 6f 6d 70 61 72 65 57 69 74 68 3a 20 22 2b 61 2b 22 2c 20 63 6f 6d 70 61 72 65 54 6f 3a 20 22 2b 0a 20 20 20 20 62 29 29 2c 21 31 29 3a 64 3e 65 7d 2c 65 71 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 62 7d 2c 65 78 69 73 74 73 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 7c 7c 61 3d 3d 70 7c 7c 22 22 3d 3d 61 3f 21 31 3a 21 30 7d 2c 72 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 62 3d 6e 65 77 20 52 65 67 45 78 70 28 62 2c 64 3f 22 69 22 3a 22 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 6d 61 74 63 68 28 62 29 7d 63 Data Ascii: ion(null,"Value(s) cannot be converted to number: compareWith: "+a+", compareTo: "+ b)),!1):d>e},eql:function(a,b){return a==b},exists:function(a,b){return null==a\|\|a==p\|\|""==a?!1:!0},re:function(a,b,d){b=new RegExp(b,d?"i":"");try{return a.match(b)}c
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 5b 61 5d 3d 64 7d 7d 3b 76 61 72 20 48 3d 6e 65 77 20 70 2c 4a 3d 6e 65 77 20 70 2c 77 3d 6e 65 77 20 70 2c 43 3d 6e 65 77 20 70 2c 7a 3d 22 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 22 69 6e 20 44 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 72 6e 20 31 36 3d 3d 28 64 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 26 31 36 29 7d 3a 22 63 6f 6e 74 61 69 6e 73 22 69 6e 20 44 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 64 3d 39 3d 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 64 3d 3d 77 69 6e 64 6f 77 3f 44 3a 64 3b 72 65 74 75 72 6e 20 64 21 3d 3d 61 26 26 64 2e 63 6f 6e 74 61 69 6e 73 28 61 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 66 Data Ascii: ;return this.c[a]=d}};var H=new p,J=new p,w=new p,C=new p,z="compareDocumentPosition"in D?function(a,d){return 16==(d.compareDocumentPosition(a)&16)}:"contains"in D?function(a,d){d=9===d.nodeType\|\|d==window?D:d;return d!==a&&d.contains(a)}:function(a,d){f
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6e 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 7b 63 61 6c 6c 62 61 63 6b 73 3a 7b 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 5b 65 5d 3d 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 5b 65 5d 7c 7c 5b 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 73 5b 65 5d 2e 70 75 73 68 28 74 29 2d 31 2c 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 63 61 6c 6c 62 61 63 6b 73 5b 65 5d 2e 73 70 6c 69 63 65 28 6e 2c 31 29 7d 7d 2c 65 78 65 63 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ue:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function n(){return{callbacks:{},add:function(e,t){this.callbacks[e]=this.callbacks[e]\|\|[];var n=this.callbacks[e].push(t)-1,i=this;return function(){i.callbacks[e].splice(n,1)}},execute:function(e
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 26 28 74 3d 21 31 29 29 2c 7b 63 6f 72 73 54 79 70 65 3a 65 2c 63 6f 72 73 43 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 3a 74 7d 7d 28 29 2c 0a 67 65 74 43 4f 52 53 49 6e 73 74 61 6e 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6e 6f 6e 65 22 3d 3d 3d 74 68 69 73 2e 63 6f 72 73 4d 65 74 61 64 61 74 61 2e 63 6f 72 73 54 79 70 65 3f 6e 75 6c 6c 3a 6e 65 77 20 5f 5b 74 68 69 73 2e 63 6f 72 73 4d 65 74 61 64 61 74 61 2e 63 6f 72 73 54 79 70 65 5d 7d 2c 66 69 72 65 43 4f 52 53 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 6e 3b 74 72 79 7b 69 66 28 28 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 29 21 3d 3d 4f 62 6a 65 63 74 28 6e 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 61 2e 68 61 6e Data Ascii: &(t=!1)),{corsType:e,corsCookiesEnabled:t}}(),getCORSInstance:function(){return"none"===this.corsMetadata.corsType?null:new _[this.corsMetadata.corsType]},fireCORS:function(t,n,i){function r(e){var n;try{if((n=JSON.parse(e))!==Object(n))return void a.han
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 3a 22 41 74 74 65 6d 70 74 65 64 20 74 6f 20 61 74 74 61 63 68 20 61 6e 64 20 6c 6f 61 64 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 75 62 6c 69 73 68 69 6e 67 20 69 66 72 61 6d 65 20 74 68 72 6f 75 67 68 20 74 68 69 73 20 41 50 49 20 63 61 6c 6c 2e 20 52 65 73 75 6c 74 3a 20 22 2b 0a 28 65 2e 6d 65 73 73 61 67 65 7c 7c 22 6e 6f 20 72 65 73 75 6c 74 22 29 7d 29 7d 29 2c 61 2e 61 74 74 61 63 68 49 66 72 61 6d 65 28 29 29 3a 72 28 7b 65 72 72 6f 72 3a 22 45 6e 63 6f 75 6e 74 65 72 65 64 20 61 20 70 72 6f 62 6c 65 6d 20 69 6e 20 61 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 61 74 74 61 63 68 20 61 6e 64 20 6c 6f 61 64 20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e 20 70 75 62 6c 69 73 68 69 6e 67 20 69 66 72 61 6d 65 20 74 68 72 6f 75 67 68 20 74 68 Data Ascii: :"Attempted to attach and load the destination publishing iframe through this API call. Result: "+(e.message\|\|"no result")})}),a.attachIframe()):r({error:"Encountered a problem in attempting to attach and load the destination publishing iframe through th
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 62 6c 6f 62 29 26 26 67 2e 5f 73 65 74 46 69 65 6c 64 73 28 4d 2c 6e 29 2c 67 2e 5f 75 73 65 31 73 74 50 61 72 74 79 4d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 53 65 72 76 65 72 26 26 6e 2e 6d 69 64 26 26 67 2e 5f 73 65 74 46 69 65 6c 64 73 28 62 2c 7b 69 64 3a 6e 2e 69 64 7d 29 29 2c 67 2e 5f 63 61 6c 6c 41 6c 6c 43 61 6c 6c 62 61 63 6b 73 28 41 2c 0a 5b 69 5d 29 7d 69 66 28 74 3d 3d 3d 4d 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 65 28 6e 29 29 7b 76 61 72 20 72 3d 36 30 34 38 30 30 3b 76 6f 69 64 20 30 21 3d 6e 2e 69 64 5f 73 79 6e 63 5f 74 74 6c 26 26 6e 2e 69 64 5f 73 79 6e 63 5f 74 74 6c 26 26 28 72 3d 70 61 72 73 65 49 6e 74 28 6e 2e 69 64 5f 73 79 6e 63 5f 74 74 6c 2c 31 30 29 29 3b 76 61 72 20 61 3d 46 2e 67 65 74 52 65 67 69 6f 6e 41 6e 64 43 68 65 Data Ascii: blob)&&g._setFields(M,n),g._use1stPartyMarketingCloudServer&&n.mid&&g._setFields(b,{id:n.id})),g._callAllCallbacks(A,[i])}if(t===M&&"object"===e(n)){var r=604800;void 0!=n.id_sync_ttl&&n.id_sync_ttl&&(r=parseInt(n.id_sync_ttl,10));var a=F.getRegionAndChe
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 64 75 63 74 73 41 6e 64 53 65 72 76 69 63 65 73 5b 69 5d 2e 74 79 70 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 6c 69 73 74 3d 6c 69 73 74 2b 70 72 6f 64 75 63 74 73 41 6e 64 53 65 72 76 69 63 65 73 5b 69 5d 2e 74 79 70 65 2b 22 3a 22 2b 70 72 6f 64 75 63 74 73 41 6e 64 53 65 72 76 69 63 65 73 5b 69 5d 2e 6e 61 6d 65 2b 22 2c 22 3b 65 6c 73 65 20 6c 69 73 74 3d 6c 69 73 74 2b 70 72 6f 64 75 63 74 73 41 6e 64 53 65 72 76 69 63 65 73 5b 69 5d 2e 6e 61 6d 65 2b 22 2c 22 3b 72 65 74 75 72 6e 20 6c 69 73 74 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2e 63 61 6c 6c 28 74 68 69 73 29 3b 73 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 3d 73 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 26 26 73 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 21 3d 3d 22 4e 6f 6e 65 22 3f 73 2e Data Ascii: ductsAndServices[i].type!="undefined")list=list+productsAndServices[i].type+":"+productsAndServices[i].name+",";else list=list+productsAndServices[i].name+",";return list}}catch(e){}}.call(this);s.linkTrackVars=s.linkTrackVars&&s.linkTrackVars!=="None"?s.
2024-01-25 00:27:04 UTC	16384	IN	Data Raw: 61 5b 61 5d 5b 62 5d 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 63 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 3f 63 3a 5b 5d 2c 74 68 69 73 2e 64 61 74 61 5b 61 5d 5b 62 5d 2e 61 70 70 6c 79 28 74 68 69 73 2e 64 61 74 61 5b 61 5d 2c 63 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 67 28 22 45 72 72 6f 72 2c 20 27 22 2b 62 2b 0a 22 27 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 68 69 73 2e 76 61 6c 69 64 61 74 65 49 6e 70 75 74 28 61 29 29 7b 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 30 29 3b 76 61 72 20 62 Data Ascii: a[a][b]));else return c="object"==typeof c&&"number"==typeof c.length?c:[],this.data[a][b].apply(this.data[a],c);else return this.log("Error, '"+b+"' is not a function")},parse:function(a){if(this.validateInput(a)){a=Array.prototype.slice.call(a,0);var b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49771	3.223.28.32	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:05 UTC	726	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=4986658252DDA4900A490D4D%40AdobeOrg&d_nsid=0&ts=1706142424109 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:05 UTC	947	IN	HTTP/1.1 302 Found Date: Thu, 25 Jan 2024 00:27:05 GMT Content-Length: 0 Connection: close X-TID: 9YoKUdLNSwo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.nab.com.au Vary: Origin Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=4986658252DDA4900A490D4D%40AdobeOrg&d_nsid=0&ts=1706142424109 DCS: dcs-prod-va6-2-v053-045124583.edge-va6.demdex.com 0 ms set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:05 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49774	54.211.243.61	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:05 UTC	672	OUT	GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=Bootstrapper.aam_tnt_cb HTTP/1.1 Host: nab.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:06 UTC	777	IN	HTTP/1.1 302 Found Date: Thu, 25 Jan 2024 00:27:05 GMT Content-Length: 0 Connection: close X-TID: Wmnzq266TbY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://nab.demdex.net/firstevent?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=Bootstrapper.aam_tnt_cb DCS: dcs-prod-va6-2-v053-053936ea8.edge-va6.demdex.com 0 ms set-cookie: demdex=69949952628053946071772149917135184323; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:05 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49776	3.223.28.32	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:06 UTC	784	OUT	GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=4986658252DDA4900A490D4D%40AdobeOrg&d_nsid=0&ts=1706142424109 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=74249799952676478810044664576166395424
2024-01-25 00:27:06 UTC	817	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:06 GMT Content-Type: application/json;charset=utf-8 Content-Length: 870 Connection: close X-TID: /FmK0O1nTJ4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.nab.com.au Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v053-0216818ef.edge-va6.demdex.com 2 ms set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:06 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-01-25 00:27:06 UTC	870	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 34 35 33 31 35 37 37 30 31 38 36 36 38 33 37 39 36 32 30 30 37 30 35 33 30 30 35 32 37 35 36 30 30 34 39 36 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"74531577018668379620070530052756004963","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49777	54.211.243.61	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:06 UTC	732	OUT	GET /firstevent?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=Bootstrapper.aam_tnt_cb HTTP/1.1 Host: nab.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=69949952628053946071772149917135184323
2024-01-25 00:27:06 UTC	1010	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:06 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 181 Connection: close X-TID: FSXBJjGfQ8Q= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v053-0ccda2445.edge-va6.demdex.com 5 ms set-cookie: DST=; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:06 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: demdex=69949952628053946071772149917135184323; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:06 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: nab=69949952628053946071772149917135184323; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:06 GMT; Path=/; Domain=.nab.demdex.net; Secure; SameSite=None
2024-01-25 00:27:06 UTC	181	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 61 61 6d 5f 74 6e 74 5f 63 62 28 7b 22 73 74 75 66 66 22 3a 5b 5d 2c 22 75 75 69 64 22 3a 22 36 39 39 34 39 39 35 32 36 32 38 30 35 33 39 34 36 30 37 31 37 37 32 31 34 39 39 31 37 31 33 35 31 38 34 33 32 33 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 46 53 58 42 4a 6a 47 66 51 38 51 3d 22 2c 22 74 72 61 69 74 73 22 3a 5b 32 35 32 37 38 32 30 2c 31 38 38 34 35 35 31 35 2c 31 32 36 35 31 35 38 30 2c 31 38 37 36 32 33 36 35 5d 2c 22 73 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d 29 Data Ascii: Bootstrapper.aam_tnt_cb({"stuff":[],"uuid":"69949952628053946071772149917135184323","dcs_region":7,"tid":"FSXBJjGfQ8Q=","traits":[2527820,18845515,12651580,18762365],"segments":[]})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49786	3.215.173.68	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:06 UTC	533	OUT	GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=4986658252DDA4900A490D4D%40AdobeOrg&d_nsid=0&ts=1706142424109 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=74249799952676478810044664576166395424
2024-01-25 00:27:07 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: application/json;charset=utf-8 Content-Length: 856 Connection: close X-TID: kYQMjRouSio= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v053-0ff2cf599.edge-va6.demdex.com 2 ms set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:07 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-01-25 00:27:07 UTC	856	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 34 35 33 31 35 37 37 30 31 38 36 36 38 33 37 39 36 32 30 30 37 30 35 33 30 30 35 32 37 35 36 30 30 34 39 36 33 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"74531577018668379620070530052756004963","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49787	63.140.38.237	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:06 UTC	1956	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&mid=74531577018668379620070530052756004963&ts=1706142425202 HTTP/1.1 Host: smetrics.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144285; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CvVersion%7C4.4.0
2024-01-25 00:27:07 UTC	670	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.nab.com.au access-control-allow-credentials: true date: Thu, 25 Jan 2024 00:27:07 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C74531577018668379620070530052756004963; Path=/; Domain=nab.com.au; Max-Age=63072000; Expires=Sat, 24 Jan 2026 00:27:27 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-01-25 00:27:07 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 37 34 35 33 31 35 37 37 30 31 38 36 36 38 33 37 39 36 32 30 30 37 30 35 33 30 30 35 32 37 35 36 30 30 34 39 36 33 22 7d Data Ascii: {"mid":"74531577018668379620070530052756004963"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49785	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:06 UTC	1933	OUT	GET /nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2F HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144285; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CvVersion%7C4.4.0
2024-01-25 00:27:07 UTC	487	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: text/javascript Content-Length: 934 Connection: close Vary: Accept-Encoding Server: CloudFront Expires: Thu, 25 Jan 2024 00:27:06 GMT Cache-Control: no-cache Cache-Control: no-store X-Cache: Miss from cloudfront Via: 1.1 02a2bd1a95c9e133cb6af71565738388.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Nw2Q0T_zuWd0BkJUY1k3c0CCsZ8vQYRyRS8PYub8BYxs9UVbIWSNEA==
2024-01-25 00:27:07 UTC	934	IN	Data Raw: 0a 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 5f 73 65 72 76 65 72 54 69 6d 65 20 3d 20 27 32 30 32 34 2d 30 31 2d 32 35 20 30 30 3a 32 37 3a 30 37 27 3b 20 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 5f 63 6c 69 65 6e 74 49 50 20 3d 20 27 31 38 2e 32 31 37 2e 31 34 34 2e 31 31 38 27 3b 20 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 69 6e 73 65 72 74 50 61 67 65 46 69 6c 65 73 28 5b 27 68 74 74 70 73 3a 2f 2f 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 63 6f 64 65 2f 36 38 36 30 63 34 63 66 32 35 36 66 62 39 65 35 32 65 63 33 36 31 30 35 66 61 36 37 36 61 36 64 2e 6a 73 3f 63 6f 6e 64 69 74 69 6f 6e 49 64 30 3d 34 39 35 38 31 37 38 27 2c 27 68 74 74 70 73 3a 2f 2f 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 63 6f Data Ascii: Bootstrapper._serverTime = '2024-01-25 00:27:07'; Bootstrapper._clientIP = '18.217.144.118'; Bootstrapper.insertPageFiles(['https://tms.nab.com.au/nab/prod/code/6860c4cf256fb9e52ec36105fa676a6d.js?conditionId0=4958178','https://tms.nab.com.au/nab/prod/co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49791	54.211.243.61	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	799	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: nab.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DST=; demdex=69949952628053946071772149917135184323; nab=69949952628053946071772149917135184323
2024-01-25 00:27:07 UTC	605	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: Xu+AY4hnQHc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Mon, 20 Nov 2023 15:28:35 GMT DCS: dcs-prod-va6-2-v053-0e37111ad.edge-va6.demdex.com 0 ms
2024-01-25 00:27:07 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49792	3.223.28.32	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	669	OUT	GET /ibs:dpid=411&dpuuid=ZbGq2wAAAGFJ1wN- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DST=; demdex=74249799952676478810044664576166395424
2024-01-25 00:27:07 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: t+AwI3PvQeg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v053-0da4f5eed.edge-va6.demdex.com 2 ms set-cookie: dpm=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:07 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:07 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-01-25 00:27:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49794	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	1875	OUT	GET /nab/prod/code/6860c4cf256fb9e52ec36105fa676a6d.js?conditionId0=4958178 HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
2024-01-25 00:27:07 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1200 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 06 Dec 2023 00:54:17 GMT ETag: "8befcb089920a735b715027b57ded9b3" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: zChT0iTldJxgCDLhrtmwagusFqZ.9yIG Accept-Ranges: bytes Server: CloudFront Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c61c541bdffdab35e3f35d4013a8cfc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: dzWdxq_2kQlYqYhsXqsPOPZePrsPrE32FU0a8KTBijhwgGBzb2fLEw== Age: 114791
2024-01-25 00:27:07 UTC	1200	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 44 4f 4d 50 61 72 73 65 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 6f 6f 74 73 74 72 61 70 70 65 72 3d 77 69 6e 64 6f 77 5b 22 42 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 3b 76 61 72 20 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3d 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3b 76 61 72 20 70 69 78 65 6c 49 44 3d 22 31 33 34 39 35 37 32 36 30 31 38 32 32 39 38 37 22 3b 76 61 72 20 6c 6f 63 61 6c 65 3d 22 65 6e 5f 55 53 22 7c 7c 22 65 6e 5f 55 53 22 3b 76 61 72 20 65 6d 61 69 6c 3d 22 22 3b 76 61 72 20 66 69 72 73 74 4e 61 6d 65 3d 22 22 3b 76 61 72 20 6c 61 73 74 4e 61 6d 65 3d 22 22 3b 76 61 72 20 70 68 6f 6e 65 3d 22 22 3b 76 61 72 20 67 65 6e 64 Data Ascii: Bootstrapper.bindDOMParsed(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;var pixelID="1349572601822987";var locale="en_US"\|\|"en_US";var email="";var firstName="";var lastName="";var phone="";var gend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49796	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	1874	OUT	GET /nab/prod/code/d001cc9904eab560176cac5da2b94660.js?conditionId0=422932 HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
2024-01-25 00:27:07 UTC	706	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 503747 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 09 Jan 2024 22:31:41 GMT ETag: "b4ec13e736330abb31373f6fb86f6a7d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: 6y3EMgt68raqabkPr.itzE6zBYkf6hV3 Accept-Ranges: bytes Server: CloudFront Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bbf175c94294473684e8193e0dd6dd0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Z_Wu1PZRznCg1jpzfQVe8DyRRThBUVx-5yoaSJFPlOyvE-sVa8A5dQ== Age: 1302744
2024-01-25 00:27:07 UTC	15678	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 49 6d 6d 65 64 69 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 6f 6f 74 73 74 72 61 70 70 65 72 3d 77 69 6e 64 6f 77 5b 22 42 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 3b 76 61 72 20 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3d 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 72 65 67 69 73 74 65 72 44 61 74 61 44 65 66 69 6e 69 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 64 61 74 61 2e 64 65 66 69 6e 65 28 7b 65 78 74 72 61 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 64 65 63 69 73 69 6f 6e 5f 73 74 61 74 75 73 3d 22 22 3b 69 66 28 77 69 6e 64 Data Ascii: Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.registerDataDefinition(function(){Bootstrapper.data.define({extract:function(){try{var decision_status="";if(wind
2024-01-25 00:27:07 UTC	16384	IN	Data Raw: 2e 6f 72 69 67 4c 54 45 7d 29 7d 2c 33 35 32 38 33 36 34 2c 36 38 32 38 30 30 29 3b 0a 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 49 6d 6d 65 64 69 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 6f 6f 74 73 74 72 61 70 70 65 72 3d 77 69 6e 64 6f 77 5b 22 42 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 3b 76 61 72 20 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3d 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 45 76 65 6e 74 2e 61 64 64 28 22 65 6e 73 45 76 65 6e 74 20 2d 20 73 75 72 76 65 79 2d 63 6f 6d 70 6c 65 74 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 3d 73 2e 6c 69 6e 6b 54 72 61 63 6b Data Ascii: .origLTE})},3528364,682800);Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.ensEvent.add("ensEvent - survey-completed",function(){var _linkTrackVars=s.linkTrack
2024-01-25 00:27:08 UTC	16384	IN	Data Raw: 22 66 6f 72 6d 2d 64 65 63 69 73 69 6f 6e 22 3a 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 45 76 65 6e 74 2e 74 72 69 67 67 65 72 28 22 65 6e 73 45 76 65 6e 74 20 2d 20 66 6f 72 6d 20 2d 20 66 6f 72 6d 2d 64 65 63 69 73 69 6f 6e 22 29 3b 0a 73 5f 63 6c 65 61 72 50 72 6f 64 75 63 74 73 56 61 72 28 29 3b 69 66 28 74 79 70 65 6f 66 20 73 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 73 2e 63 6c 65 61 72 56 61 72 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 73 2e 63 6c 65 61 72 56 61 72 73 28 22 70 75 72 63 68 61 73 65 49 44 22 29 3b 73 5f 73 65 6e 64 54 65 61 6c 69 75 6d 54 72 61 63 6b 45 76 65 6e 74 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 65 6e 64 2d 6f 66 2d 66 6f 72 6d 2d 72 65 61 63 68 65 64 Data Ascii: "form-decision":Bootstrapper.ensEvent.trigger("ensEvent - form - form-decision");s_clearProductsVar();if(typeof s!="undefined"&&typeof s.clearVars=="function")s.clearVars("purchaseID");s_sendTealiumTrackEvent(arguments[0]);break;case "end-of-form-reached
2024-01-25 00:27:08 UTC	16384	IN	Data Raw: 63 6b 65 64 22 29 3b 0a 62 72 65 61 6b 3b 63 61 73 65 20 22 62 75 74 74 6f 6e 2d 63 6c 69 63 6b 65 64 22 3a 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 45 76 65 6e 74 2e 74 72 69 67 67 65 72 28 22 65 6e 73 45 76 65 6e 74 20 2d 20 62 75 74 74 6f 6e 2d 63 6c 69 63 6b 65 64 22 29 3b 62 72 65 61 6b 7d 62 72 65 61 6b 3b 63 61 73 65 20 22 6d 6f 64 61 6c 2d 73 75 72 76 65 79 2d 75 73 65 64 22 3a 73 77 69 74 63 68 28 61 63 74 69 6f 6e 29 7b 63 61 73 65 20 22 6d 6f 64 61 6c 2d 73 75 72 76 65 79 2d 70 72 65 73 65 6e 74 65 64 22 3a 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 45 76 65 6e 74 2e 74 72 69 67 67 65 72 28 22 65 6e 73 45 76 65 6e 74 20 2d 20 6d 6f 64 61 6c 2d 73 75 72 76 65 79 2d 70 72 65 73 65 6e 74 65 64 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 Data Ascii: cked");break;case "button-clicked":Bootstrapper.ensEvent.trigger("ensEvent - button-clicked");break}break;case "modal-survey-used":switch(action){case "modal-survey-presented":Bootstrapper.ensEvent.trigger("ensEvent - modal-survey-presented");break;case
2024-01-25 00:27:08 UTC	16384	IN	Data Raw: 66 20 64 61 74 61 4c 61 79 65 72 45 76 65 6e 74 4f 62 6a 2e 65 76 65 6e 74 54 79 70 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 64 61 74 61 4c 61 79 65 72 45 76 65 6e 74 4f 62 6a 2e 65 76 65 6e 74 54 79 70 65 3d 3d 22 66 6f 72 6d 2d 69 6e 74 65 72 61 63 74 65 64 22 26 26 74 79 70 65 6f 66 20 64 61 74 61 4c 61 79 65 72 45 76 65 6e 74 4f 62 6a 2e 64 61 74 61 2e 6e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 66 6f 72 6d 5f 6e 61 6d 65 3d 64 61 74 61 4c 61 79 65 72 45 76 65 6e 74 4f 62 6a 2e 64 61 74 61 2e 6e 61 6d 65 3b 76 61 72 20 6e 61 6d 65 3d 22 22 3b 69 66 28 74 79 70 65 6f 66 20 64 61 74 61 4c 61 79 65 72 45 76 65 6e 74 4f 62 6a 2e 64 61 74 61 2e 6e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 66 6f 72 6d 5f 6e 61 6d 65 3d 3d 22 22 Data Ascii: f dataLayerEventObj.eventType!="undefined"&&dataLayerEventObj.eventType=="form-interacted"&&typeof dataLayerEventObj.data.name!="undefined")form_name=dataLayerEventObj.data.name;var name="";if(typeof dataLayerEventObj.data.name!="undefined"&&form_name==""
2024-01-25 00:27:08 UTC	16384	IN	Data Raw: 6f 72 20 2d 20 53 63 65 6e 61 72 69 6f 20 73 74 61 72 74 22 3b 69 66 28 74 79 70 65 6f 66 20 73 2e 70 61 72 73 65 44 61 74 61 4c 61 79 65 72 28 22 73 65 63 74 69 6f 6e 22 29 3d 3d 22 73 74 72 69 6e 67 22 26 26 73 2e 70 61 72 73 65 44 61 74 61 4c 61 79 65 72 28 22 73 65 63 74 69 6f 6e 22 29 21 3d 22 75 6e 6b 6e 6f 77 6e 20 73 65 63 74 69 6f 6e 22 29 7b 76 61 72 20 73 65 63 74 69 6f 6e 3d 73 2e 70 61 72 73 65 44 61 74 61 4c 61 79 65 72 28 22 73 65 63 74 69 6f 6e 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2b 2f 67 2c 22 2d 22 29 3b 77 69 6e 64 6f 77 2e 73 63 46 6f 72 6d 44 65 62 75 67 3d 22 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 2d 20 53 63 65 6e 61 72 69 6f 20 31 3a 20 73 65 63 74 69 6f 6e 20 69 73 20 73 65 74 22 3b 72 65 74 75 72 6e 20 64 69 Data Ascii: or - Scenario start";if(typeof s.parseDataLayer("section")=="string"&&s.parseDataLayer("section")!="unknown section"){var section=s.parseDataLayer("section").replace(/\s+/g,"-");window.scFormDebug="file-upload-error - Scenario 1: section is set";return di
2024-01-25 00:27:08 UTC	16384	IN	Data Raw: 68 74 65 6e 4f 70 74 69 6f 6e 73 3b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 72 65 67 69 73 74 65 72 44 61 74 61 44 65 66 69 6e 69 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 64 61 74 61 2e 64 65 66 69 6e 65 28 7b 65 78 74 72 61 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 48 4f 3b 76 61 72 20 48 4f 43 6c 69 63 6b 49 44 41 72 72 3b 74 72 79 7b 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6f 6b 69 65 56 61 6c 75 65 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 22 28 5e 7c 5b 5e 3b 5d 2b 29 5c 5c 73 2a 22 2b 61 2b 22 5c 5c 73 2a 5c 78 33 64 5c 5c 73 2a 28 5b 5e 3b 5d 2b 29 22 29 3b 72 65 74 75 72 6e 20 62 3f 62 2e 70 6f 70 28 29 3a 22 22 7d 48 4f 3d 67 65 74 43 Data Ascii: htenOptions;Bootstrapper.registerDataDefinition(function(){Bootstrapper.data.define({extract:function(){var HO;var HOClickIDArr;try{function getCookieValue(a){var b=document.cookie.match("(^\|[^;]+)\\s"+a+"\\s\x3d\\s*([^;]+)");return b?b.pop():""}HO=getC
2024-01-25 00:27:08 UTC	16384	IN	Data Raw: 73 3d 7b 6e 65 78 74 3a 6f 28 30 29 2c 74 68 72 6f 77 3a 6f 28 31 29 2c 72 65 74 75 72 6e 3a 6f 28 32 29 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 73 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 73 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 73 29 7b 69 66 28 69 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 75 3b 29 74 72 79 7b 69 66 28 69 3d 31 2c 72 26 26 28 65 3d 32 26 73 5b 30 5d 3f Data Ascii: s={next:o(0),throw:o(1),return:o(2)},"function"==typeof Symbol&&(s[Symbol.iterator]=function(){return this}),s;function o(s){return function(o){return function(s){if(i)throw new TypeError("Generator is already executing.");for(;u;)try{if(i=1,r&&(e=2&s[0]?
2024-01-25 00:27:08 UTC	16384	IN	Data Raw: 28 74 2e 6d 65 73 73 61 67 65 2c 22 20 22 29 29 7d 29 3b 76 61 72 20 74 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 77 68 69 74 65 4c 69 73 74 46 69 6c 65 6e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 73 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 2e 63 61 6c 6c 28 5a 74 2c 74 29 7d 2c 74 2e 73 65 74 53 74 72 61 74 65 67 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 4a 3d 6e 7d 2c 74 2e 63 6f 6d 70 75 74 65 49 73 41 63 74 69 76 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 24 3d 5a 2e 62 6f 6f 6c 65 61 6e 28 6e 29 2c 74 2e 24 3f 74 2e 4b 3d 5a 2e 62 6f 6f 6c 65 61 6e 28 31 30 29 3a 74 2e 4b 3d 21 31 7d 2c 74 2e 69 73 4c 6f 67 67 69 6e 67 41 63 74 69 76 65 3d 66 75 Data Ascii: (t.message," "))});var tn=function(){function t(){}return t.whiteListFilename=function(t){csArray.prototype.push.call(Zt,t)},t.setStrategy=function(n){t.J=n},t.computeIsActive=function(n){t.$=Z.boolean(n),t.$?t.K=Z.boolean(10):t.K=!1},t.isLoggingActive=fu
2024-01-25 00:27:08 UTC	16384	IN	Data Raw: 3a 5b 34 2c 74 68 69 73 2e 63 61 63 68 65 2e 6d 61 74 63 68 41 6c 6c 28 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 72 5c 78 33 64 6e 2e 73 65 6e 74 28 29 2c 6f 5c 78 33 64 72 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 5c 78 33 64 7b 7d 3b 65 2e 68 65 61 64 65 72 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 5b 72 5d 5c 78 33 64 65 7d 29 29 2c 64 65 6c 65 74 65 20 74 5b 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 5d 3b 76 61 72 20 72 5c 78 33 64 74 2e 64 61 74 61 74 79 70 65 3b 72 65 74 75 72 6e 20 64 65 6c 65 74 65 20 74 2e 64 61 74 61 74 79 70 65 2c 22 6a 73 6f 6e 22 5c 78 33 64 5c 78 33 64 5c 78 33 64 72 7c 7c 22 62 61 73 65 36 34 22 5c 78 33 64 5c 78 33 64 5c 78 33 64 72 3f 65 2e 74 65 78 Data Ascii: :[4,this.cache.matchAll()];case 2:return r\x3dn.sent(),o\x3dr.map((function(e){var t\x3d{};e.headers.forEach((function(e,r){t[r]\x3de})),delete t["content-type"];var r\x3dt.datatype;return delete t.datatype,"json"\x3d\x3d\x3dr\|\|"base64"\x3d\x3d\x3dr?e.tex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49797	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	1874	OUT	GET /nab/prod/code/15e884c3d32788d21cefeb57d775a93e.js?conditionId0=404951 HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
2024-01-25 00:27:07 UTC	679	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 951 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Thu, 17 Nov 2022 03:25:47 GMT ETag: "7186b3f10226536406735607d2408546" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: WvJhk8awiUaLOlO8GHEb2GlYuuJhLvY0 Accept-Ranges: bytes Server: CloudFront X-Cache: Hit from cloudfront Via: 1.1 38ed7a81ebf68698e87cb5fd9ad4a3b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rYTxv7ZgVmVzelUgDx5l79MBd68j8IWjFLngn9rg1sqJlyOb4UG1Jw== Age: 141992
2024-01-25 00:27:07 UTC	951	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 44 65 70 65 6e 64 65 6e 63 79 49 6d 6d 65 64 69 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 6f 6f 74 73 74 72 61 70 70 65 72 3d 77 69 6e 64 6f 77 5b 22 42 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 3b 76 61 72 20 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3d 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3b 76 61 72 20 63 6f 75 6e 74 69 6e 67 4d 65 74 68 6f 64 3d 22 73 74 61 6e 64 61 72 64 22 3b 76 61 72 20 64 6c 3d 22 67 44 61 74 61 4c 61 79 65 72 22 3b 76 61 72 20 66 6c 6f 6f 64 4c 69 67 68 74 49 64 3d 22 44 43 2d 33 33 34 37 36 33 39 22 3b 76 61 72 20 73 65 6e 64 5f 74 6f 3d 5b 5d 3b 69 66 28 66 6c 6f 6f 64 4c 69 67 68 74 49 64 29 7b 76 61 72 20 Data Ascii: Bootstrapper.bindDependencyImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;var countingMethod="standard";var dl="gDataLayer";var floodLightId="DC-3347639";var send_to=[];if(floodLightId){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49800	63.140.38.100	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	1776	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&mid=74531577018668379620070530052756004963&ts=1706142425202 HTTP/1.1 Host: smetrics.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144285; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0
2024-01-25 00:27:07 UTC	609	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 25 Jan 2024 00:27:07 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C74531577018668379620070530052756004963; Path=/; Domain=nab.com.au; Max-Age=63072000; Expires=Sat, 24 Jan 2026 00:27:27 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-01-25 00:27:07 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 37 34 35 33 31 35 37 37 30 31 38 36 36 38 33 37 39 36 32 30 30 37 30 35 33 30 30 35 32 37 35 36 30 30 34 39 36 33 22 7d Data Ascii: {"mid":"74531577018668379620070530052756004963"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49798	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	1874	OUT	GET /nab/prod/code/7d816e9f44d24a84e2a964434ff1f04d.js?conditionId0=396971 HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
2024-01-25 00:27:07 UTC	704	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 14654 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Mon, 20 Nov 2023 02:49:52 GMT ETag: "c3ae46a6d8e936f554174fd23055b3e1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: TSzcHbX0_GAPL580cDrPXjrGwo58_QBu Accept-Ranges: bytes Server: CloudFront Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 252d91a64bfdc4045e9d843f4a37a3e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: PjeLKStxol7OtkWWu6fZOwoj3xEce0eBwzp421191I2KEUopCy1FZg== Age: 182646
2024-01-25 00:27:07 UTC	14654	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 49 6d 6d 65 64 69 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 64 43 6f 6e 64 69 74 69 6f 6e 73 3d 7b 22 6e 6f 74 22 3a 5b 6e 75 6c 6c 5d 2c 22 63 61 73 65 49 6e 73 65 6e 73 69 74 69 76 65 22 3a 5b 22 69 67 6e 6f 72 65 20 63 61 73 65 22 5d 2c 22 63 6f 6d 70 61 72 65 54 6f 22 3a 5b 22 75 6e 6b 6e 6f 77 6e 7c 6e 61 62 22 5d 2c 22 72 65 71 75 69 72 65 64 44 61 74 61 22 3a 5b 22 35 30 35 38 37 22 5d 2c 22 63 6f 6d 70 61 72 61 74 6f 72 73 22 3a 5b 22 6d 61 74 63 68 65 73 22 5d 7d 3b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 64 61 74 61 2e 72 65 73 6f 6c 76 65 28 64 64 43 6f 6e 64 69 74 69 6f 6e 73 2e 72 65 71 75 69 72 65 64 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 64 43 6f 6e 64 69 74 69 Data Ascii: Bootstrapper.bindImmediate(function(){var ddConditions={"not":[null],"caseInsensitive":["ignore case"],"compareTo":["unknown\|nab"],"requiredData":["50587"],"comparators":["matches"]};Bootstrapper.data.resolve(ddConditions.requiredData,function(){ddConditi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49795	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	1875	OUT	GET /nab/prod/code/c1d0bcd13bbf05d268d84a1cf7be88bc.js?conditionId0=4879801 HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C4.4.0; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286
2024-01-25 00:27:07 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 6747 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Wed, 09 Aug 2023 05:05:06 GMT ETag: "2d6dca0e905e99eff3a42a8552512a11" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: beayVQ1hLey.wStfyfkGOZkQ0KCA1TCO Accept-Ranges: bytes Server: CloudFront Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 141cc765667839ffa8c4ad646af354cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZKqAm1w99q94tXwX-IZUc2YZtiABxlif0LOqtNSlN7ImLVj8M06zsw== Age: 114784
2024-01-25 00:27:07 UTC	6747	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 49 6d 6d 65 64 69 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 64 43 6f 6e 64 69 74 69 6f 6e 73 3d 7b 22 6e 6f 74 22 3a 5b 6e 75 6c 6c 5d 2c 22 63 61 73 65 49 6e 73 65 6e 73 69 74 69 76 65 22 3a 5b 22 69 67 6e 6f 72 65 20 63 61 73 65 22 5d 2c 22 63 6f 6d 70 61 72 65 54 6f 22 3a 5b 22 75 6e 6b 6e 6f 77 6e 7c 6e 61 62 22 5d 2c 22 72 65 71 75 69 72 65 64 44 61 74 61 22 3a 5b 22 35 30 35 38 37 22 5d 2c 22 63 6f 6d 70 61 72 61 74 6f 72 73 22 3a 5b 22 6d 61 74 63 68 65 73 22 5d 7d 3b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 64 61 74 61 2e 72 65 73 6f 6c 76 65 28 64 64 43 6f 6e 64 69 74 69 6f 6e 73 2e 72 65 71 75 69 72 65 64 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 64 43 6f 6e 64 69 74 69 Data Ascii: Bootstrapper.bindImmediate(function(){var ddConditions={"not":[null],"caseInsensitive":["ignore case"],"compareTo":["unknown\|nab"],"requiredData":["50587"],"comparators":["matches"]};Bootstrapper.data.resolve(ddConditions.requiredData,function(){ddConditi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49801	63.140.38.160	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	710	OUT	POST /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1 Host: nationalaustraliaban.tt.omtrdc.net Connection: keep-alive Content-Length: 1157 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:07 UTC	1157	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 38 36 61 61 37 34 32 37 34 35 61 34 32 62 34 62 63 65 66 38 62 66 32 62 36 35 64 30 38 31 38 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 36 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 Data Ascii: {"requestId":"e86aa742745a42b4bcef8bf2b65d0818","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":60,"channel":"web","screen":{"width":1280,"heigh
2024-01-25 00:27:07 UTC	840	IN	HTTP/1.1 200 OK date: Thu, 25 Jan 2024 00:27:07 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.nab.com.au access-control-allow-credentials: true x-request-id: ca82b694-6e5a-405d-bfab-32a63f599315 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-25 00:27:07 UTC	3121	IN	Data Raw: 63 32 61 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 38 36 61 61 37 34 32 37 34 35 61 34 32 62 34 62 63 65 66 38 62 66 32 62 36 35 64 30 38 31 38 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6e 61 74 69 6f 6e 61 6c 61 75 73 74 72 61 6c 69 61 62 61 6e 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 62 62 30 38 64 33 33 33 39 34 38 63 34 32 62 33 38 36 37 63 30 63 38 39 38 62 30 66 30 30 31 63 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 37 34 35 33 31 35 37 37 30 31 38 36 36 38 33 37 39 36 32 30 30 37 30 35 33 30 30 35 32 37 35 36 30 30 34 39 36 33 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 Data Ascii: c2a{"status":200,"requestId":"e86aa742745a42b4bcef8bf2b65d0818","client":"nationalaustraliaban","id":{"tntId":"bb08d333948c42b3867c0c898b0f001c.34_0","marketingCloudVisitorId":"74531577018668379620070530052756004963"},"edgeHost":"mboxedge34.tt.omtrdc.ne
2024-01-25 00:27:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49803	68.67.161.182	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:07 UTC	642	OUT	GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nab.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:07 UTC	1494	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 25 Jan 2024 00:27:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID AN-X-Request-Uuid: e2bc06ef-5e2f-4b88-97b1-9772658a9b0d Set-Cookie: XANDR_PANID=d3MnvHeuZTXOk3s_Q6iMTu178ZYj7BNkQnU6Ny-potk3dTiv0f9F_uVI68W05ZyQSqottz15eToys7AVztrnZuUZC9XTsDHygPhrTBdWZRY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Apr-2024 00:27:07 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 12-Jan-2034 00:27:07 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4323334077643033457; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Apr-2024 00:27:07 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.74; 81.181.57.74; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49810	3.215.173.68	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:08 UTC	506	OUT	GET /ibs:dpid=411&dpuuid=ZbGq2wAAAGFJ1wN- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DST=; demdex=74249799952676478810044664576166395424; dextp=358-1-1706142426061; dpm=74249799952676478810044664576166395424
2024-01-25 00:27:08 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:08 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: IKj9O4e5RYs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v053-03389adaa.edge-va6.demdex.com 3 ms set-cookie: dpm=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:08 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:08 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-01-25 00:27:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49807	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:08 UTC	1918	OUT	GET /nab/prod/code/d9d080c5e00417b3e1a46d592afbbb69.js?conditionId0=421109&conditionId1=416171 HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0
2024-01-25 00:27:08 UTC	703	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:08 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1595 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 09 May 2023 06:16:24 GMT ETag: "cee085f14c373fad4818dcc9affa4100" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: zMqKm86BLTTiF.GOrRvhLe8pZp2pkSqH Accept-Ranges: bytes Server: CloudFront Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4cdcf8406ed0f002560c00fdc60b6ee0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ZSn2eC4hDr-B6NPMRbtl3Lcpz5iooqkj2pQU11aEuT-j0SNvNjaH9g== Age: 113992
2024-01-25 00:27:08 UTC	1595	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 49 6d 6d 65 64 69 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 49 6d 6d 65 64 69 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 6f 6f 74 73 74 72 61 70 70 65 72 3d 77 69 6e 64 6f 77 5b 22 42 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 3b 76 61 72 20 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3d 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 72 65 67 69 73 74 65 72 44 61 74 61 44 65 66 69 6e 69 74 69 6f 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 64 61 74 61 2e 64 65 66 69 6e 65 28 7b 65 78 74 72 61 63 74 3a 66 75 6e 63 74 69 6f Data Ascii: Bootstrapper.bindImmediate(function(){Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.registerDataDefinition(function(){Bootstrapper.data.define({extract:functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49808	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:08 UTC	1898	OUT	GET /nab/prod/code/35a6ab04a336312adca4bf1c25933921.js?conditionId0=505275 HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144286; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0
2024-01-25 00:27:08 UTC	680	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:08 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 354 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Thu, 29 Jul 2021 03:38:39 GMT ETag: "bc9850d4b364bc315496543907f16039" x-amz-server-side-encryption: AES256 Cache-Control: max-age=315360000 x-amz-version-id: w6rXtQOJu1tmPZ6NgLfNNpOv_y39ylik Accept-Ranges: bytes Server: CloudFront X-Cache: Hit from cloudfront Via: 1.1 bcf3714653b91c162db4f8a673af0716.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: i8n_D0qgj-7N5S1S-3N7XeVsVCGJH2GP8xtpXect-t7MJr5ccmtXSw== Age: 1741185
2024-01-25 00:27:08 UTC	354	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 62 69 6e 64 49 6d 6d 65 64 69 61 74 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 6f 6f 74 73 74 72 61 70 70 65 72 3d 77 69 6e 64 6f 77 5b 22 42 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 3b 76 61 72 20 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3d 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 65 6e 73 69 67 68 74 65 6e 4f 70 74 69 6f 6e 73 3b 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 22 23 5f 63 6f 6e 74 65 6e 74 5f 6d 6c 63 5f 65 6e 5f 70 65 72 73 6f 6e 61 6c 5f 68 6f 6d 65 5f 6a 63 72 5f 63 6f 6e 74 65 6e 74 5f 70 61 72 2d 63 6f 6c 2d 62 6f 64 79 2d 32 5f 62 6f 6f 74 73 74 72 61 70 5f 72 6f 77 5f 30 5f 63 6f 6c 31 20 2e 6d 65 64 69 61 2d 62 6f 64 79 20 2e 74 65 78 74 2d 69 6d 61 67 Data Ascii: Bootstrapper.bindImmediate(function(){var Bootstrapper=window["Bootstrapper"];var ensightenOptions=Bootstrapper.ensightenOptions;Bootstrapper.on("click","#_content_mlc_en_personal_home_jcr_content_par-col-body-2_bootstrap_row_0_col1 .media-body .text-imag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49811	68.67.161.182	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:08 UTC	859	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nab.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=d3MnvHeuZTXOk3s_Q6iMTu178ZYj7BNkQnU6Ny-potk3dTiv0f9F_uVI68W05ZyQSqottz15eToys7AVztrnZuUZC9XTsDHygPhrTBdWZRY.; receive-cookie-deprecation=1; uuid2=4323334077643033457
2024-01-25 00:27:08 UTC	1427	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 25 Jan 2024 00:27:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dpm.demdex.net/ibs:dpid=358&dpuuid=4323334077643033457 AN-X-Request-Uuid: 51313f11-62fe-4f50-b25e-7619c95157a0 Set-Cookie: XANDR_PANID=d3MnvHeuZTXOk3s_Q6iMTu178ZYj7BNkQnU6Ny-potk3dTiv0f9F_uVI68W05ZyQSqottz15eToys7AVztrnZuUZC9XTsDHygPhrTBdWZRY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Apr-2024 00:27:08 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 12-Jan-2034 00:27:08 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=4323334077643033457; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 24-Apr-2024 00:27:08 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.74; 81.181.57.74; 797.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49812	63.140.38.104	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:08 UTC	459	OUT	GET /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1 Host: nationalaustraliaban.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:08 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 25 Jan 2024 00:27:08 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-01-25 00:27:08 UTC	72	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49818	13.226.52.124	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:08 UTC	1919	OUT	GET /main/prod/utag.js HTTP/1.1 Host: tags.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF69R2zONAQAApVkDPgvNjU0CYceaf/m3Wmu3jJLRzQOzXWB9uw8Chz0Ayrr1vMezDEvcHa71oSJ/4izxhsH8+8JBFoNx9XGuY02q1v/InARUgup2OERs4kC55FwxMFKtcUuJaSQEabMVhYxJL8CWMRKWFWqJ6kicQj8hrI33Leep6lU1lmV36CJDkLqnSdSgehkV0MfLknZq/NYkkJPNklM0+FHepM13jnsuFyifHvi0FcdSovbilcmpKvoVXkMogudhoQEmi7PNkhXHho2jQ9scpfV6hOPEroIzwW1EitPqoytSzX7FplsUQx15f+HOSxpuxOLN5n+svIBSofFbpHtvf5cE/weVebGX57yKPEDxVo0vCq0=~-1~-1~-1; bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144287\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227
2024-01-25 00:27:09 UTC	691	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28615 Connection: close Date: Thu, 25 Jan 2024 00:27:10 GMT Last-Modified: Wed, 25 Oct 2023 02:24:32 GMT ETag: "3bffe0b0e6d670be6f5a33b5b138fd31" x-amz-server-side-encryption: AES256 x-amz-version-id: 8iBtmYBcfvhsNUoiL7Y2L70vW2UNCMb6 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 795fca0399f361701665c0d9fab45324.cloudfront.net (CloudFront), 1.1 d7db6b9cdf796f6ea0cdbe5b3a75c84a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 Cache-Control: max-age=300 Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: isIxoFp7bN7mYpjTnpGFeqNacHS9GUaYEreQT-y98BoQQvRiUPpR3g==
2024-01-25 00:27:09 UTC	15693	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 33 31 30 32 35 30 32 32 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 74 72 79 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 74 65 61 6c 3d 77 69 6e 64 6f 77 2e 74 65 61 6c 7c 7c 7b 7d 3b 74 65 61 6c 2e 69 67 6e 6f 72 65 5f 6b 65 79 73 3d 7b 7d 3b 74 65 61 6c 2e 72 65 70 6c 61 63 65 5f 6b 65 79 73 3d 7b 7d 3b 74 65 61 6c 2e 70 72 65 66 Data Ascii: //tealium universal tag - utag.loader ut4.0.202310250223, Copyright 2023 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;try{try{window.teal=window.teal\|\|{};teal.ignore_keys={};teal.replace_keys={};teal.pref
2024-01-25 00:27:09 UTC	12922	IN	Data Raw: 66 67 5b 61 5d 2e 73 65 6e 64 29 7b 75 74 61 67 2e 44 42 28 22 53 45 4e 44 49 4e 47 3a 20 22 2b 61 29 3b 74 72 79 7b 69 66 28 75 74 61 67 2e 6c 6f 61 64 65 72 2e 73 65 6e 64 71 2e 70 65 6e 64 69 6e 67 3e 30 26 26 75 74 61 67 2e 6c 6f 61 64 65 72 2e 73 65 6e 64 71 5b 61 5d 29 7b 75 74 61 67 2e 44 42 28 22 75 74 61 67 2e 6c 6f 61 64 65 72 2e 4c 4f 41 44 3a 73 65 6e 64 71 3a 20 22 2b 61 29 3b 77 68 69 6c 65 28 64 3d 75 74 61 67 2e 6c 6f 61 64 65 72 2e 73 65 6e 64 71 5b 61 5d 2e 73 68 69 66 74 28 29 29 7b 75 74 61 67 2e 44 42 28 64 29 3b 75 74 61 67 2e 73 65 6e 64 65 72 5b 61 5d 2e 73 65 6e 64 28 64 2e 65 76 65 6e 74 2c 75 74 61 67 2e 68 61 6e 64 6c 65 72 2e 43 28 64 2e 64 61 74 61 29 29 3b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 73 65 6e 64 71 2e 70 65 6e 64 69 Data Ascii: fg[a].send){utag.DB("SENDING: "+a);try{if(utag.loader.sendq.pending>0&&utag.loader.sendq[a]){utag.DB("utag.loader.LOAD:sendq: "+a);while(d=utag.loader.sendq[a].shift()){utag.DB(d);utag.sender[a].send(d.event,utag.handler.C(d.data));utag.loader.sendq.pendi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49819	34.192.24.192	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:08 UTC	763	OUT	GET /ibs:dpid=358&dpuuid=4323334077643033457 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nab.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DST=; demdex=74249799952676478810044664576166395424; dpm=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037
2024-01-25 00:27:09 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:09 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: IgtQIuIPQJQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v053-04d1637b9.edge-va6.demdex.com 2 ms set-cookie: dpm=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:09 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:09 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-01-25 00:27:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49816	3.33.220.150	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:09 UTC	656	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.nab.com.au&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nab.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:09 UTC	137	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:09 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-01-25 00:27:09 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49821	3.215.173.68	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:09 UTC	529	OUT	GET /ibs:dpid=358&dpuuid=4323334077643033457 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DST=; demdex=74249799952676478810044664576166395424; dpm=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037
2024-01-25 00:27:09 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:09 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: jRnB0U5KTyE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v053-0ccda2445.edge-va6.demdex.com 8 ms set-cookie: dpm=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:09 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:09 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-01-25 00:27:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49822	52.46.143.56	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:09 UTC	623	OUT	GET /dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nab.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:09 UTC	743	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Jan 2024 00:27:09 GMT Content-Length: 0 Connection: close x-amz-rid: VGZA94MDQYWVY9MX7AJM Set-Cookie: ad-id=A1SXk2ZwEUKxjaXejNhNlO0\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 00:27:09 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49830	13.226.52.124	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:09 UTC	2118	OUT	GET /main/prod/utag.5.js?utv=ut4.49.202310240140 HTTP/1.1 Host: tags.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF19S2zONAQAAn28DPgvjzPLZ+6xUPgrTRcFy1ZG4MT0O16GLpt5gIxSnoeQKsvQSigViKpuE3RNsv5wuEn/+AWl0bzh/ryxEB/kcjuEFInoHuT/ADjXIl2LS+o13GhwwbE97nNtffLu7Amcq5aIQBJg2Q7F1fO15a8TLtcSlPiVbeh6gbpbKWbbmsOe/TFnzzt0tusVNz25jm3OuXZobiJopaPhaor0i1eg3km5LNj1XWvtlmC8vjNvHs9vieYLzoi+wIYO+lu+eNh2HDTVI90qaIMx3ffUMyZQgv8vL9vhxDdcEs3JMkjIUxSRDEUtZMIZURgt9PyEe7hOkck0sQXSzslJ+voZB64z7j3Ng9EhePx/5bzMISJwM8N3ZX7qyyUPstA==~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227
2024-01-25 00:27:10 UTC	695	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 29596 Connection: close Date: Thu, 25 Jan 2024 00:27:11 GMT Last-Modified: Wed, 25 Oct 2023 02:24:32 GMT ETag: "f79421e13b5858afec62cfa8cae6c49d" x-amz-server-side-encryption: AES256 x-amz-version-id: etY3k8V3S8ytNyO5zfYRZZC4aEu4YvGx Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 795fca0399f361701665c0d9fab45324.cloudfront.net (CloudFront), 1.1 8a771ca27e5a3c9e06b12b7af5d25aa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 Cache-Control: max-age=1296000 Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Xo9I2wAHJBFRmjy7JZzeoPSeurcIUUJVfj0et8WzxrOp1n2m2e6Iaw==
2024-01-25 00:27:10 UTC	15689	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 35 20 75 74 34 2e 30 2e 32 30 32 33 31 30 32 35 30 32 32 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 69 66 28 74 79 70 65 6f 66 20 4a 53 4f 4e 21 3d 3d 27 6f 62 6a 65 63 74 27 29 7b 4a 53 4f 4e 3d 7b 7d 3b 7d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 72 78 5f 6f 6e 65 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d 2a 24 2f 2c 72 78 5f 74 77 6f 3d 2f 5c 5c 28 3f 3a 5b 22 5c 5c 5c 2f 62 66 6e 72 74 5d 7c 75 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 34 7d 29 2f 67 2c 72 78 5f 74 68 72 65 65 3d 2f 22 5b 5e 22 5c Data Ascii: //tealium universal tag - utag.5 ut4.0.202310250223, Copyright 2023 Tealium.com Inc. All Rights Reserved.if(typeof JSON!=='object'){JSON={};}(function(){'use strict';var rx_one=/^[\],:{}\s]*$/,rx_two=/\\(?:["\\\/bfnrt]\|u[0-9a-fA-F]{4})/g,rx_three=/"[^"\
2024-01-25 00:27:10 UTC	13907	IN	Data Raw: 53 61 6c 74 53 68 61 41 74 74 72 49 44 3d 73 74 2e 70 72 6f 70 65 72 74 69 65 73 5b 73 77 74 69 63 68 69 6e 67 41 53 53 61 6c 74 53 68 61 41 74 74 72 49 44 5d 3b 7d 0a 63 61 74 63 68 28 65 29 7b 7d 7d 0a 69 66 28 62 2e 74 65 61 6c 69 75 6d 5f 73 77 69 74 63 68 5f 6b 65 79 5f 73 61 6c 74 5f 73 68 61 26 26 28 28 73 2e 67 65 74 46 72 6f 6d 55 74 61 67 4d 61 69 6e 43 6f 6f 6b 69 65 28 62 2c 4c 41 53 54 5f 4c 4f 47 47 45 44 5f 49 44 2c 74 72 75 65 29 26 26 62 2e 74 65 61 6c 69 75 6d 5f 73 77 69 74 63 68 5f 6b 65 79 5f 73 61 6c 74 5f 73 68 61 21 3d 3d 73 2e 67 65 74 46 72 6f 6d 55 74 61 67 4d 61 69 6e 43 6f 6f 6b 69 65 28 62 2c 4c 41 53 54 5f 4c 4f 47 47 45 44 5f 49 44 2c 74 72 75 65 29 29 7c 7c 28 70 72 65 76 69 6f 75 73 41 53 53 61 6c 74 53 68 61 41 74 74 72 Data Ascii: SaltShaAttrID=st.properties[swtichingASSaltShaAttrID];}catch(e){}}if(b.tealium_switch_key_salt_sha&&((s.getFromUtagMainCookie(b,LAST_LOGGED_ID,true)&&b.tealium_switch_key_salt_sha!==s.getFromUtagMainCookie(b,LAST_LOGGED_ID,true))\|\|(previousASSaltShaAttr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49829	13.226.52.124	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:09 UTC	2118	OUT	GET /main/prod/utag.8.js?utv=ut4.49.202305090101 HTTP/1.1 Host: tags.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF19S2zONAQAAn28DPgvjzPLZ+6xUPgrTRcFy1ZG4MT0O16GLpt5gIxSnoeQKsvQSigViKpuE3RNsv5wuEn/+AWl0bzh/ryxEB/kcjuEFInoHuT/ADjXIl2LS+o13GhwwbE97nNtffLu7Amcq5aIQBJg2Q7F1fO15a8TLtcSlPiVbeh6gbpbKWbbmsOe/TFnzzt0tusVNz25jm3OuXZobiJopaPhaor0i1eg3km5LNj1XWvtlmC8vjNvHs9vieYLzoi+wIYO+lu+eNh2HDTVI90qaIMx3ffUMyZQgv8vL9vhxDdcEs3JMkjIUxSRDEUtZMIZURgt9PyEe7hOkck0sQXSzslJ+voZB64z7j3Ng9EhePx/5bzMISJwM8N3ZX7qyyUPstA==~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227
2024-01-25 00:27:10 UTC	694	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6173 Connection: close Date: Thu, 25 Jan 2024 00:27:11 GMT Last-Modified: Wed, 25 Oct 2023 02:24:32 GMT ETag: "935dfc0e42abedb1da18ced5cd9e6a85" x-amz-server-side-encryption: AES256 x-amz-version-id: e8ZsYHx6tx2qRouTNr2yrnaPIzh8NVbJ Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 5e3f4627de97deab81963915d14a9754.cloudfront.net (CloudFront), 1.1 41958139e7d828579c6466c1ce1c7b26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 Cache-Control: max-age=1296000 Vary: Accept-Encoding X-Cache: Miss from cloudfront X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: kMLx0SBm7evI8fXEK13SOzOEkyUiyf6bR4Cc4K9JAN4940QEHc8b8Q==
2024-01-25 00:27:10 UTC	6173	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 38 20 75 74 34 2e 30 2e 32 30 32 33 31 30 32 35 30 32 32 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 2e 76 Data Ascii: //tealium universal tag - utag.8 ut4.0.202310250223, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg.v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49832	31.13.88.13	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:09 UTC	535	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:10 UTC	1813	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=1200 Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: gSWg8wF4XHY0Qwt7vVHSJ6yr/NyHWRllrsnOzWyoNujSKgb9kP6v/lOyGoFQg0SOh/Av9q+YJAz4J7i4vOR+tg== Date: Thu, 25 Jan 2024 00:27:10 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 217726
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 Data Ascii: ");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iter
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 22 2b 74 79 70 65 6f 66 20 62 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 Data Ascii: "+typeof b);a.prototype=Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumera
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 62 7d Data Ascii: "?"undefined":i(HTMLElement))==="object")return a instanceof HTMLElement;else return a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.exports=b}
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 6f 6e 20 6e 28 61 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 3a 6e 75 6c 6c 2c 77 61 72 6e 69 6e 67 73 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 69 66 28 61 29 7b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 62 3d 69 5b 61 5d 3b 69 66 28 62 21 3d 3d 21 30 29 72 65 74 75 72 6e 20 6d 28 7b 6d 65 74 61 64 61 74 61 3a 61 2c 74 79 70 65 3a 22 55 4e 53 55 50 50 4f 52 54 45 44 5f 4d 45 54 41 44 41 54 41 5f 41 52 47 55 4d 45 4e 54 22 7d 29 7d 72 65 74 75 72 6e 20 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 21 61 29 72 65 74 Data Ascii: on n(a){return{error:null,warnings:a}}function o(a){if(a){a=a.toLowerCase();var b=i[a];if(b!==!0)return m({metadata:a,type:"UNSUPPORTED_METADATA_ARGUMENT"})}return l()}function p(a){var b=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(!a)ret
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 73 2e 5f 72 65 67 4b 65 79 2b 2b 3b 74 68 69 73 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5b 63 5d 3d 61 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 62 2e 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 73 5b 63 5d 7d 7d 7d 2c 7b 6b 65 79 3a 22 6c 69 73 74 65 6e 4f 6e 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 26 26 62 28 29 3b 62 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 62 3d 74 68 69 73 2e 6c 69 73 74 65 6e 28 63 29 3b 72 65 74 75 72 6e 20 62 7d 7d 2c 7b 6b 65 79 3a 22 74 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 Data Ascii: s._regKey++;this._subscriptions[c]=a;return function(){delete b._subscriptions[c]}}},{key:"listenOnce",value:function(a){var b=null,c=function(){b&&b();b=null;return a.apply(void 0,arguments)};b=this.listen(c);return b}},{key:"trigger",value:function(){va
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 6e 64 6c 65 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 6c 65 6e 67 74 68 3e 30 26 26 74 68 69 73 2e 5f 63 62 28 74 68 69 73 2e 5f 64 61 74 61 29 2c 74 68 69 73 2e 5f 64 61 74 61 3d 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 69 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d Data Ascii: ndle=null),this._data.length>0&&this._cb(this._data),this._data=[]}}]);return a}();l.exports=i})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsBrowserPropertiesConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}}
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 2e 6f 62 6a 65 63 74 4f 72 53 74 72 69 6e 67 28 29 29 7d 29 29 29 29 2c 76 61 6c 75 65 52 75 6c 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 69 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 72 75 6c 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 28 29 29 7d 29 29 29 29 2c 62 6c 61 63 6b 6c 69 73 74 65 64 49 66 72 61 6d 65 52 65 66 65 72 72 65 72 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6d 61 70 4f 66 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 Data Ascii: .objectOrString())})))),valueRules:b.allowNull(b.arrayOf(b.allowNull(b.objectWithFields({id:b.allowNull(b.string()),rule:b.allowNull(b.object())})))),blacklistedIframeReferrers:b.allowNull(b.mapOf(b["boolean"]()))});k.exports=a})();return k.exports}(a,b,c
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 7d 3b 6b 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 61 2c 65 29 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 65 72 63 65 49 6e 66 65 72 65 64 45 76 65 6e 74 73 43 6f 6e 66 69 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 Data Ascii: };k.exports=function(a){return c(a,e)}})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsCoerceInferedEventsConfig",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModule
2024-01-25 00:27:10 UTC	1500	IN	Data Raw: 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 64 28 62 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 3f 7b 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3a 62 2c 76 61 6c 75 65 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d Data Ascii: urn null;var b=a.parameter_type;a=a.value;b=d(b);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=null&&a!=null?{parameter_type:b,value:a}:null}function h(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.param

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49826	35.71.131.137	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:10 UTC	422	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.nab.com.au&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:10 UTC	137	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:10 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-01-25 00:27:10 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49836	52.46.143.56	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:10 UTC	670	OUT	GET /dcm?pid=5c420d2b-f139-4fee-b0c0-89a7b8ce9433&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nab.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A1SXk2ZwEUKxjaXejNhNlO0\|t
2024-01-25 00:27:10 UTC	954	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 25 Jan 2024 00:27:10 GMT Content-Length: 0 Connection: close x-amz-rid: QEANHATXJ62CE2FSCM3V Set-Cookie: ad-id=A1SXk2ZwEUKxjaXejNhNlO0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Oct-2024 00:27:10 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Apr-2029 00:27:10 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://dpm.demdex.net/ibs:dpid=139200&dpuuid=cl-JCtUlT92usJjdql6PEw&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49842	63.140.38.237	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:10 UTC	4397	OUT	GET /b/ss/nab-prd/10/JS-2.22.4/s61174878437376?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A9%204%20-60&d.&nsid=0&jsonv=1&.d&sdid=0C347103BA19F920-1361389A48D48953&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Apersonal&g=https%3A%2F%2Fwww.nab.com.au%2F&c.&getTimeParting=6.3&.c&cc=AUD&ch=nab%3Apersonal&server=www.nab.com.au&v0=Typed%2FBookmarked&events=event19%2Cevent1&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&tnt=582199%3A0%3A0%2C589365%3A0%3A0%2C584544%3A1%3A0&c1=nab&v1=D%3Dc1&h1=D%3DpageName%2B%22%3Aindex%22&l1=MH23083-P&c2=D%3Dch&v2=D%3Dch&c5=1&v5=D%3Dc5&c9=D%3DpageName&v9=D%3DpageName&c11=D%3Dg&v11=D%3Dg&c13=New&v13=D%3Dc13&c23=no-segment%20%3A%20first%20page%20visit%20-%20empty%20stuff%20array&c24=no-segment%20%3A%20first%20page%20visit%20-%20empty%20stuff%20array&c31=D%3D%22Typed%2FBookmarked%3A%22%2BpageName&v31=Typed%2FBookmarked&v32=Typed%2FBookmarked&v33=Typed%2FBookmarked&v34=n%2Fa&v35=n%2Fa&v36=Typed%2FBookmarked&v37=Typed%2FBookmarked&v38=n%2Fa&v47=582199%206086%20%20%7C%20%20POC%20%7C%20Acquisition%20%7C%20EDB%20%7C%20%20CONTROL%2C589365%206710%20%7C%20Control%2C584544%206254%20%7C%20Challenger&v60=no-segment%20%3A%20first%20page%20visit%20-%20empty%20stuff%20array&v61=no-segment%20%3A%20first%20page%20visit%20-%20empty%20stuff%20array&c72=VisitorAPI%20Present&v72=v47%20set%20via%20response%20token%20%3A%20582199%3A0%3A0%2C589365%3A0%3A0%2C584544%3A1%3A0%20%3A%20582199%206086%20%20%7C%20%20POC%20%7C%20Acquisition%20%7C%20EDB%20%7C%20%20CONTROL%2C589365%206710%20%7C%20Control%2C584544%206254%20%7C%20Challenger&v73=Thursday%7C11%3A27%20AM&v74=D%3Dt&c75=D%3Dv72&v75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v76=69949952628053946071772149917135184323&v77=https%3A%2F%2Fwww.nab.com.au%2F&v81=0.22848551443168175_1706142429071&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&AQE=1 HTTP/1.1 Host: smetrics.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF19S2zONAQAAn28DPgvjzPLZ+6xUPgrTRcFy1ZG4MT0O16GLpt5gIxSnoeQKsvQSigViKpuE3RNsv5wuEn/+AWl0bzh/ryxEB/kcjuEFInoHuT/ADjXIl2LS+o13GhwwbE97nNtffLu7Amcq5aIQBJg2Q7F1fO15a8TLtcSlPiVbeh6gbpbKWbbmsOe/TFnzzt0tusVNz25jm3OuXZobiJopaPhaor0i1eg3km5LNj1XWvtlmC8vjNvHs9vieYLzoi+wIYO+lu+eNh2HDTVI90qaIMx3ffUMyZQgv8vL9vhxDdcEs3JMkjIUxSRDEUtZMIZURgt9PyEe7hOkck0sQXSzslJ+voZB64z7j3Ng9EhePx/5bzMISJwM8N3ZX7qyyUPstA==~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true
2024-01-25 00:27:10 UTC	828	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 25 Jan 2024 00:27:10 GMT expires: Wed, 24 Jan 2024 00:27:10 GMT last-modified: Fri, 26 Jan 2024 00:27:10 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C74531577018668379620070530052756004963; Path=/; Domain=nab.com.au; Max-Age=63072000; Expires=Sat, 24 Jan 2026 00:27:27 GMT; etag: 3663912969928572928-4617882260429539082 vary: * x-aam-tid: rcxmz0xHRr8= dcs: dcs-prod-va6-2-v053-0b6ec9ea5.edge-va6.demdex.com 5 ms content-type: application/x-javascript;charset=utf-8 content-length: 746 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-01-25 00:27:10 UTC	746	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 74 6e 74 22 2c 22 63 76 22 3a 22 70 72 6f 66 69 6c 65 2e 6f 6d 6e 69 61 3d 63 3a 75 6e 6b 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 6e 61 62 2e 63 6f 6d 2e 61 75 22 7d 5d 2c 22 75 75 69 64 22 3a 22 37 34 32 34 39 37 39 39 39 35 32 36 37 36 34 37 38 38 31 30 30 34 34 36 36 34 35 37 36 31 36 36 33 39 35 34 32 34 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 72 63 78 6d 7a 30 78 48 52 72 38 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 33 35 38 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[{"cn":"aam_tnt","cv":"profile.omnia=c:unk","ttl":30,"dmn":"nab.com.au"}],"uuid":"74249799952676478810044664576166395424","dcs_region":7,"tid":"rcxmz0xHRr8=","ibs":[{"id":"358","ttl":10080,"tag":"img

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49844	142.250.105.149	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:10 UTC	970	OUT	GET /ddm/activity/src=3347639;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:10 UTC	1003	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/activity/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49846	34.192.24.192	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:10 UTC	882	OUT	GET /ibs:dpid=139200&dpuuid=cl-JCtUlT92usJjdql6PEw&redir=https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dadobe.com%26id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nab.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DST=; demdex=74249799952676478810044664576166395424; dpm=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037\|139200-1-1706142428038
2024-01-25 00:27:10 UTC	934	IN	HTTP/1.1 302 Found Date: Thu, 25 Jan 2024 00:27:10 GMT Content-Length: 0 Connection: close X-TID: KKPwC8DQSpw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://s.amazon-adsystem.com/ecm3?ex=adobe.com&id=74249799952676478810044664576166395424 DCS: dcs-prod-va6-2-v053-03e5e2e3f.edge-va6.demdex.com 2 ms set-cookie: dpm=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:10 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:10 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49845	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:11 UTC	2622	OUT	POST /nab/main/2/i.gif HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive Content-Length: 7808 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryVAq2rBAqZ72pkBaz Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; _abck=4532B2FB87B7771BD4B9C6087273DA12~-1~YAAQDyXRF19S2zONAQAAn28DPgvjzPLZ+6xUPgrTRcFy1ZG4MT0O16GLpt5gIxSnoeQKsvQSigViKpuE3RNsv5wuEn/+AWl0bzh/ryxEB/kcjuEFInoHuT/ADjXIl2LS+o13GhwwbE97nNtffLu7Amcq5aIQBJg2Q7F1fO15a8TLtcSlPiVbeh6gbpbKWbbmsOe/TFnzzt0tusVNz25jm3OuXZobiJopaPhaor0i1eg3km5LNj1XWvtlmC8vjNvHs9vieYLzoi+wIYO+lu+eNh2HDTVI90qaIMx3ffUMyZQgv8vL9vhxDdcEs3JMkjIUxSRDEUtZMIZURgt9PyEe7hOkck0sQXSzslJ+voZB64z7j3Ng9EhePx/5bzMISJwM8N3ZX7qyyUPstA==~-1~-1~-1; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session
2024-01-25 00:27:11 UTC	7808	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 56 41 71 32 72 42 41 71 5a 37 32 70 6b 42 61 7a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 64 61 74 61 22 0d 0a 0d 0a 7b 22 6c 6f 61 64 65 72 2e 63 66 67 22 3a 7b 22 35 22 3a 7b 22 6c 6f 61 64 22 3a 31 2c 22 73 65 6e 64 22 3a 31 2c 22 76 22 3a 32 30 32 33 31 30 32 34 30 31 34 30 2c 22 77 61 69 74 22 3a 31 2c 22 74 69 64 22 3a 32 30 30 36 34 2c 22 69 64 22 3a 22 35 22 2c 22 73 72 63 22 3a 22 2f 2f 74 61 67 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6d 61 69 6e 2f 70 72 6f 64 2f 75 74 61 67 2e 35 2e 6a 73 3f 75 74 76 3d 75 74 34 2e 34 39 2e 32 30 32 33 31 30 32 34 30 31 34 30 22 2c 22 65 78 65 63 75 74 65 64 22 3a Data Ascii: ------WebKitFormBoundaryVAq2rBAqZ72pkBazContent-Disposition: form-data; name="data"{"loader.cfg":{"5":{"load":1,"send":1,"v":202310240140,"wait":1,"tid":20064,"id":"5","src":"//tags.nab.com.au/main/prod/utag.5.js?utv=ut4.49.202310240140","executed":
2024-01-25 00:27:11 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: nab:main:2:datacloud X-did: 018d3e036c1f0020cd3edad10e9a0506f001706700918 X-Region: ap-southeast-2 Access-Control-Allow-Origin: https://www.nab.com.au X-ServerID: uconnect_i-0d38065ec3590c3f7 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Access-Control-Expose-Headers: X-Region Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 018d3e036c1f0020cd3edad10e9a0506f001706700918 Access-Control-Allow-Credentials: true X-ULVer: 7148b0428db0ebbd7546f47133838a6c62277b79-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:11 GMT X-UUID: c445158f-fe7e-47a1-85ee-40165739445d
2024-01-25 00:27:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49849	31.13.88.13	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:11 UTC	1262	OUT	GET /signals/config/1349572601822987?v=2.9.142&r=stable&domain=www.nab.com.au&hme=e82209ddce2f5ef9f00773b102465283e977acad712d554991b839c35823b905&ex_m=62%2C103%2C91%2C95%2C53%2C3%2C87%2C61%2C14%2C85%2C78%2C44%2C46%2C145%2C148%2C159%2C155%2C156%2C158%2C25%2C88%2C45%2C68%2C157%2C140%2C143%2C152%2C153%2C160%2C112%2C13%2C43%2C164%2C163%2C114%2C16%2C29%2C32%2C1%2C36%2C57%2C58%2C59%2C63%2C82%2C15%2C12%2C84%2C81%2C80%2C92%2C94%2C31%2C93%2C26%2C22%2C141%2C144%2C121%2C24%2C9%2C10%2C11%2C5%2C6%2C21%2C19%2C20%2C49%2C54%2C56%2C66%2C89%2C23%2C67%2C8%2C7%2C71%2C41%2C18%2C17%2C4%2C73%2C79%2C72%2C77%2C33%2C35%2C76%2C48%2C74%2C28%2C37%2C65%2C0%2C83%2C75%2C2%2C30%2C55%2C34%2C90%2C38%2C70%2C60%2C40%2C39%2C96%2C52%2C51%2C27%2C86%2C50%2C47%2C42%2C69%2C64%2C97 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:11 UTC	1813	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=1200 Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: Fdbou0Muvj6s9p65E/wZ5xM5tOlvkYpnE5n7Ngb1UlbcxdaoyHOrP1RjRwQpN+vRX7xBg90LK8LrDUEpMRisCA== Date: Thu, 25 Jan 2024 00:27:11 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 131185
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 Data Ascii: urn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d Data Ascii: ;b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsM
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 63 2e 67 65 74 43 6c 69 63 6b 49 44 46 72 6f 6d 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 43 6f 6f 6b 69 65 22 29 3b 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 6b 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 6c 3d 6b 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 6d 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 6f 75 6c 64 4e 6f 74 44 Data Ascii: c.getClickIDFromBrowserProperties;f.getFbeventsModules("SignalsFBEventsPixelCookie");c=f.getFbeventsModules("SignalsFBEventsPlugin");var k=f.getFbeventsModules("SignalsFBEventsURLUtil"),l=k.getURLParameter,m=f.getFbeventsModules("signalsFBEventsShouldNotD
2024-01-25 00:27:11 UTC	744	IN	Data Raw: 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 29 3b 64 26 26 28 62 5b 73 5d 3d 64 2e 70 61 63 6b 28 29 29 3b 64 3d 79 28 29 3b 64 26 26 28 62 5b 75 5d 3d 64 2e 70 61 63 6b 28 29 29 3b 72 65 74 75 72 6e 20 62 7d 29 7d 62 28 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6f 6f 6b 69 65 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6f 6f 6b 69 65 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e Data Ascii: a.location.href,e);d&&(b[s]=d.pack());d=y();d&&(b[u]=d.pack());return b})}b()})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.cookie");f.registerPlugin&&f.registerPlugin("fbevents.plugins.cookie",e.exports);f.en
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 Data Ascii: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 Data Ascii: rohibitedsources");f.registerPlugin&&f.registerPlugin("fbevents.plugins.prohibitedsources",e.exports);f.ensureModuleRegistered("fbevents.plugins.prohibitedsources",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d)
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 68 61 32 35 36 5f 77 69 74 68 5f 64 65 70 65 6e 64 65 6e 63 69 65 73 5f 6e 65 77 22 29 3b 68 2e 65 61 63 68 3b 76 61 72 20 6a 3d 68 2e 6d 61 70 2c 6b 3d 21 31 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 62 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 73 74 61 72 74 3a 75 6e 77 61 6e 74 Data Ascii: ntsPlugin");var h=f.getFbeventsModules("SignalsFBEventsUtils"),i=f.getFbeventsModules("sha256_with_dependencies_new");h.each;var j=h.map,k=!1;e.exports=new a(function(a,e){b.listen(function(b,c,f){if(b==null)return;a.performanceMark("fbevents:start:unwant
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 55 72 6c 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 76 61 72 20 69 3d 65 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 62 2e 69 64 2c 22 55 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 3b 69 3d 64 2e 67 65 74 28 62 2e 69 64 2c 22 75 6e 77 61 6e 74 65 64 44 61 74 61 22 29 3b 69 66 28 69 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 22 64 6c 22 29 26 26 63 2e 64 6c 2e 6c 65 6e 67 74 68 3e 30 29 7b 76 61 72 20 6a 3d 6e 65 77 20 55 52 4c 28 63 2e 64 6c 29 2c 6c 3d 68 28 6a 2c 69 2c 66 29 3b 6b 26 26 6c 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6a 2e 73 65 61 72 63 68 3d 6c 2c 63 2e 64 6c 3d 6a Data Ascii: UrlProcessing",b.id);var i=e.optIns.isOptedIn(b.id,"UnwantedData");if(!i)return;i=d.get(b.id,"unwantedData");if(i==null)return;if(Object.prototype.hasOwnProperty.call(c,"dl")&&c.dl.length>0){var j=new URL(c.dl),l=h(j,i,f);k&&l.length>0&&(j.search=l,c.dl=j
2024-01-25 00:27:11 UTC	1500	IN	Data Raw: 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 Data Ascii: olvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iabpcmaebridge",function(){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49848	64.233.177.155	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:11 UTC	1179	OUT	GET /pagead/viewthroughconversion/1040712916/?random=1706142429237&cv=9&fst=1706142429237&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2F&tiba=NAB%20personal%20banking%20%7C%20Loans%2C%20accounts%2C%20credit%20cards%2C%20insurance%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:11 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Jan-2024 00:42:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-25 00:27:11 UTC	410	IN	Data Raw: 39 39 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 99e(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-01-25 00:27:11 UTC	1252	IN	Data Raw: 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 Data Ascii: 1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("S
2024-01-25 00:27:11 UTC	807	IN	Data Raw: 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4c 58 59 79 63 55 4e 4b 64 6a 4e 35 52 30 46 52 4d 55 6c 74 5a 7a 68 42 54 54 6f 78 4e 7a 41 32 4d 54 51 79 4e 44 49 35 4d 6a 4d 33 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 31 30 34 30 37 31 32 39 31 36 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 30 36 31 34 32 34 32 39 32 33 37 5c 78 32 36 63 76 5c 78 33 64 39 5c 78 32 36 66 73 74 5c 78 33 64 31 37 30 36 31 34 30 38 30 30 30 30 30 5c 78 32 36 6e 75 6d 5c 78 33 64 31 5c 78 32 36 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 5c 78 33 64 41 55 44 5c 78 32 36 6c 61 62 65 6c 5c 78 33 64 2d 76 32 71 43 4a 76 33 79 47 41 51 31 49 6d 67 38 Data Ascii: ).call(this);;s.ss_(window,'LXYycUNKdjN5R0FRMUltZzhBTToxNzA2MTQyNDI5MjM3',['https://www.google.com/pagead/1p-user-list/1040712916/?random\x3d1706142429237\x26cv\x3d9\x26fst\x3d1706140800000\x26num\x3d1\x26currency_code\x3dAUD\x26label\x3d-v2qCJv3yGAQ1Img8
2024-01-25 00:27:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49847	52.223.40.198	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:11 UTC	624	OUT	GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:11 UTC	137	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:11 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-01-25 00:27:11 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49850	142.250.105.149	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:11 UTC	1151	OUT	GET /activity;register_conversion=1;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:11 UTC	2348	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6468962080996402151"}],"aggregatable_trigger_data":[{"filters":{"14":["1778735"]},"key_piece":"0x7927657502c210e5","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x6a472ef24c2092b4","not_filters":{"14":["1778735"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["1778735"]},"key_piece":"0x1e069c3e9476ba92","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x2bba1e6ba5be9661","not_filters":{"14":["1778735"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"9787474634718695732","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6468962080996402151","filters":{"14":["1778735"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"6468962080996402151","filters":{"14":["1778735"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"6468962080996402151","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"6468962080996402151","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["3347639"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 24-Feb-2024 00:27:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Jan-2024 00:42:11 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49852	142.250.105.149	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:11 UTC	1004	OUT	GET /ddm/activity/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:11 UTC	1143	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/p/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044;~oref=https://www.nab.com.au/ Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Jan-2024 00:42:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49855	142.251.15.149	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:11 UTC	1164	OUT	GET /activityi;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1 Host: 3347639.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:11 UTC	1136	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://3347639.fls.doubleclick.net/activityi;dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49856	173.194.219.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:11 UTC	1175	OUT	GET /td/fls/rul/activityi;fledge=1;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:11 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Jan-2024 00:42:11 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-25 00:27:11 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-01-25 00:27:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49861	52.46.143.56	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:12 UTC	691	OUT	GET /ecm3?ex=adobe.com&id=74249799952676478810044664576166395424 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nab.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A1SXk2ZwEUKxjaXejNhNlO0; ad-privacy=0
2024-01-25 00:27:12 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Jan 2024 00:27:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: MAAAPJCHB8WMKCN7QTWT Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-25 00:27:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49865	142.251.15.149	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:12 UTC	1250	OUT	GET /activityi;dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1 Host: 3347639.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-01-25 00:27:12 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:12 GMT Expires: Thu, 25 Jan 2024 00:27:12 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkN2JxNRb5c3UrvjpeUWdF0h9WJAjlO4U0HnycaHxH5QRTWnr_AK8QOSAmYa1w; expires=Sat, 24-Jan-2026 00:27:12 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-25 00:27:12 UTC	268	IN	Data Raw: 32 37 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4d 65 66 32 2d 79 6a 39 34 4d 44 46 62 Data Ascii: 276<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMef2-yj94MDFb
2024-01-25 00:27:12 UTC	369	IN	Data Raw: 73 72 63 3d 33 33 34 37 36 33 39 3b 74 79 70 65 3d 62 72 61 6e 64 38 33 39 3b 63 61 74 3d 4e 41 42 48 6f 30 3b 6f 72 64 3d 38 32 33 34 35 30 37 31 38 36 36 32 38 3b 61 75 69 64 64 63 3d 2a 3b 70 73 3d 31 3b 70 63 6f 72 3d 39 34 32 32 32 33 37 37 37 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 67 74 6d 3d 34 35 66 65 34 31 6d 30 3b 67 63 64 3d 31 31 6c 31 6c 31 6c 31 6c 31 3b 64 6d 61 3d 30 3b 74 61 67 5f 65 78 70 3d 37 31 38 34 37 30 39 36 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 Data Ascii: src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=*;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5
2024-01-25 00:27:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49872	74.125.138.148	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:12 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 137 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:12 UTC	137	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 39 37 38 37 34 37 34 36 33 34 37 31 38 36 39 35 37 33 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://nab.com.au","trigger_debug_key":"9787474634718695732"},"type":"trigger-no-matching-source"}]
2024-01-25 00:27:13 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 25 Jan 2024 00:27:13 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49870	172.253.124.105	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:12 UTC	1378	OUT	GET /pagead/1p-user-list/1040712916/?random=1706142429237&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2F&tiba=NAB%20personal%20banking%20%7C%20Loans%2C%20accounts%2C%20credit%20cards%2C%20insurance%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSGwAvHhf_gw1NI_RCsC9QZU11dpzpG-29nBhAbw&random=2650558029&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:13 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49864	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:12 UTC	2786	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142430835&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF6lS2zONAQAAo3oDPguD+QLnkz/TweKgLOMESFryTHBvEdB6L6t1ljmyLw6sMO3pCXkdsSt/VVNkZhm/D0PRITrXiJ7LfIcRKGgg4tODnqVbcY+IweQcZN+6PvA93UhSHqBWG/rsvK7PpQvU2mMSdSMzf5tKmjKOlVcseYuoHNyRkDgBFjwa67jydNiCmoTd8Gdvi+JrU/rtchIPmaZBLJZ4TXfg+ZVgVZqcNVQRzzfy+iuulN3FaSpM1EmxOYUBYLEaJsXqVkVkc2dOUaAL/fXTkM3sKvu8fWv1RdP7xvWgGr6YXTYHyXtp3RncbHNG8lNdUKzPvHQStyLrOnFAwNZiRwsZGSaQ3d4kxWd0FHBfgiMFEJ+Gv2cYsIY/UyfAoy8gIa1QsV7vNBzdlFHzI2yZ~-1~-1~-1
2024-01-25 00:27:13 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:13 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 780 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-0bc3e58d170fc7e16 X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:13 UTC	780	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 31 36 34 30 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 35 33 33 30 22 3a 22 76 69 65 77 22 2c 22 31 37 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 22 2c 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142431640},"properties":{"5330":"view","17":"https://www.nab.com.au/","profile":"main","account":"na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49869	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:13 UTC	881	OUT	GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142431136&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=ab08a5&ler=empty&it=1706142429433&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:13 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Jan 2024 00:27:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49868	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:13 UTC	991	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142431136&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=ab08a5&ler=empty&it=1706142429433&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:13 UTC	1977	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown" report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net .fbsbx.com .fb.com;font-src data: .gstatic.com .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com .tenor.co media.tenor.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net .giphy.com connect.facebook.net .carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com .whatsapp.net .fb.com .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com https://.giphy.com data:;frame-src .doubleclick.net .google.com .facebook.com www.googleadservices.com .fbsbx.com fbsbx.com data: www.instagram.com .fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: .facebook.com data:;block-all-mixed-content;upgrade-insecure-requests; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=()
2024-01-25 00:27:13 UTC	1084	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 65 74 65 63 74 69 6f 6e 3d 28 29 2c 20 6b 65 79 62 6f 61 72 64 2d 6d 61 70 3d 28 29 2c 20 6c 6f 63 61 6c 2d 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-f
2024-01-25 00:27:13 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49871	64.233.177.155	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:13 UTC	1221	OUT	GET /ddm/fls/p/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044;~oref=https://www.nab.com.au/ HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:13 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49879	74.125.138.149	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:13 UTC	932	OUT	GET /activity;register_conversion=1;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=31574219.1706142429;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkN2JxNRb5c3UrvjpeUWdF0h9WJAjlO4U0HnycaHxH5QRTWnr_AK8QOSAmYa1w
2024-01-25 00:27:13 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6468962080996402151"}],"aggregatable_trigger_data":[{"filters":{"14":["1778735"]},"key_piece":"0x7927657502c210e5","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x6a472ef24c2092b4","not_filters":{"14":["1778735"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["1778735"]},"key_piece":"0x1e069c3e9476ba92","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x2bba1e6ba5be9661","not_filters":{"14":["1778735"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"9787474634718695732","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"6468962080996402151","filters":{"14":["1778735"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"6468962080996402151","filters":{"14":["1778735"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"6468962080996402151","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"6468962080996402151","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["3347639"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 24-Feb-2024 00:27:13 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49881	74.125.138.157	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:13 UTC	1271	OUT	GET /ddm/fls/z/dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3347639.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:13 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49880	52.46.155.104	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:13 UTC	457	OUT	GET /ecm3?ex=adobe.com&id=74249799952676478810044664576166395424 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A1SXk2ZwEUKxjaXejNhNlO0; ad-privacy=0
2024-01-25 00:27:13 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 25 Jan 2024 00:27:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 77FESSZ1PZSAAQEVSMTR Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-01-25 00:27:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49883	172.253.124.103	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:13 UTC	1144	OUT	GET /pagead/1p-user-list/1040712916/?random=1706142429237&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2F&tiba=NAB%20personal%20banking%20%7C%20Loans%2C%20accounts%2C%20credit%20cards%2C%20insurance%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSGwAvHhf_gw1NI_RCsC9QZU11dpzpG-29nBhAbw&random=2650558029&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:13 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49876	35.71.131.137	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:13 UTC	390	OUT	GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:14 UTC	137	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:13 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-01-25 00:27:14 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49878	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:14 UTC	2518	OUT	GET /nab/main/2/i.gif HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1
2024-01-25 00:27:14 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: nab:main:2:datacloud X-Region: ap-southeast-2 X-ServerID: uconnect_i-0d38065ec3590c3f7 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: c0cac752f06243b49502f930237cd639 X-ULVer: 7148b0428db0ebbd7546f47133838a6c62277b79-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:14 GMT X-UUID: c0cac752-f062-43b4-9502-f930237cd639 Set-Cookie: TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; Path=/; Domain=.collect.nab.com.au; Expires=Fri, 24-Jan-2025 00:27:14 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49887	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:14 UTC	1042	OUT	GET /pageview?pid=51360&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142432&pn=1&dw=1263&dh=4308&ww=1280&wh=907&sw=1280&sh=1024&dr=&url=https%3A%2F%2Fwww.nab.com.au%2F&uc=1&la=en-US&cvars=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Apersonal%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%7D&cvarp=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Apersonal%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%7D&v=13.59.1&pvt=n&ex=&r=978019 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:15 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:15 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49889	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:14 UTC	778	OUT	GET /dvar?v=13.59.1&pid=51360&pn=1&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=479557 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:15 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:14 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49886	15.197.193.217	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:14 UTC	758	OUT	GET /track/up?adv=7uxlgqc&ref=https%3A%2F%2Fwww.nab.com.au%2F&upid=r2pjj86&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:15 UTC	136	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:15 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49894	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:15 UTC	944	OUT	GET /dvar?v=13.59.1&pid=51360&pn=1&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA0WPQQuCQBCF%2F8q05wiTsuimZtZBXFC6RMiQiy7pLqktSPXfGzHp8g6P933DvJjrZW6aOdbWgTdceOxf4ahrARwLQc0hPVMGRjR9jj14qO5SFWzHfgQBlO7t8ZSt7KRWw3rvUc7YfJJvlhYV52CYJmhI0EIqKwFSQSQKVGiAl9gKsAfzOPe16hpd%2FS32ekV1zFPKiZqOhaEbgWkXkHSocmxyONX0QNMPvhH0S6wqoahkny92VYhE9wAAAA%3D%3D&ct=2&r=682030 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:15 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:15 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49890	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:15 UTC	2852	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142432916&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
2024-01-25 00:27:15 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 780 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-04feb7579ef5c792c X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:15 UTC	780	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 31 36 34 30 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 35 33 33 30 22 3a 22 76 69 65 77 22 2c 22 31 37 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 22 2c 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142431640},"properties":{"5330":"view","17":"https://www.nab.com.au/","profile":"main","account":"na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49898	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:15 UTC	647	OUT	GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142431136&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=ab08a5&ler=empty&it=1706142429433&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:15 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Jan 2024 00:27:15 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49900	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:15 UTC	684	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142431136&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=ab08a5&ler=empty&it=1706142429433&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:15 UTC	1929	IN	HTTP/1.1 200 OK reporting-endpoints: default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown" report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net .fbsbx.com .fb.com;font-src data: .gstatic.com .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com .tenor.co media.tenor.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net .giphy.com connect.facebook.net .carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com .whatsapp.net .fb.com .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com https://.giphy.com data:;frame-src .doubleclick.net .google.com .facebook.com www.googleadservices.com .fbsbx.com fbsbx.com data: www.instagram.com .fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: .facebook.com data:;block-all-mixed-content;upgrade-insecure-requests; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=()
2024-01-25 00:27:15 UTC	1117	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 65 74 65 63 74 69 6f 6e 3d 28 29 2c 20 6b 65 79 62 6f 61 72 64 2d 6d 61 70 3d 28 29 2c 20 6c 6f 63 61 6c 2d 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49902	142.251.15.157	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:15 UTC	987	OUT	GET /ddm/fls/p/src=3347639;dc_pre=CJmAm-yj94MDFXcKTwgdWAsCWw;type=brand839;cat=vizte001;u18=%7B%22SVI%22:%22%22,%22MID%22:%2274531577018668379620070530052756004963%22,%22DDXUUID%22:%2269949952628053946071772149917135184323%22,%22SSC%22:null,%22SCVSync%22:1%7D;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;ord=5212909348227.044;~oref=https://www.nab.com.au/ HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:15 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49903	142.251.15.157	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:15 UTC	1024	OUT	GET /ddm/fls/z/dc_pre=CMef2-yj94MDFbux0QQdljEGeA;src=3347639;type=brand839;cat=NABHo0;ord=8234507186628;auiddc=;ps=1;pcor=942223777;pscdl=noapi;gtm=45fe41m0;gcd=11l1l1l1l1;dma=0;tag_exp=71847096;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.nab.com.au%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:15 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49904	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:15 UTC	578	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:15 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:15 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-086149dcea345fad0 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:15 GMT X-UUID: b97bf109-4d06-4e56-b7e2-7bae11f1b4bc Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:15 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:15 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49907	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:17 UTC	2902	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142435001&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|
2024-01-25 00:27:17 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:17 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-0bad74752eb307abc X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:17 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49918	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:18 UTC	760	OUT	POST /v2/events?v=13.59.1&pn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142432&pid=51360&str=194&di=6059&dc=10206&fl=10246&sr=21&mdh=4308&ct=0 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive Content-Length: 293 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:18 UTC	293	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 30 2c 22 74 73 22 3a 32 36 35 2c 22 78 22 3a 31 32 38 30 2c 22 79 22 3a 39 30 37 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 76 61 6c 22 3a 35 33 38 36 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 74 73 22 3a 32 39 31 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 76 61 6c 22 3a 31 32 30 36 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 74 73 22 3a 32 39 31 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 76 61 6c 22 3a 30 2e 30 30 30 39 32 33 31 38 30 32 30 35 36 32 33 36 35 32 34 2c 22 74 73 22 3a 33 30 32 7d 2c 7b 22 74 79 70 65 22 3a 32 2c 22 74 73 22 3a 34 31 30 34 2c 22 78 22 3a 36 34 36 2c 22 79 22 3a 34 34 31 7d Data Ascii: [{"type":0,"ts":265,"x":1280,"y":907},{"type":19,"name":"FCP","val":5386.8000000000175,"ts":291},{"type":19,"name":"TTFB","val":1206.6000000000058,"ts":291},{"type":19,"name":"CLS","val":0.0009231802056236524,"ts":302},{"type":2,"ts":4104,"x":646,"y":441}
2024-01-25 00:27:19 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:19 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49911	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:19 UTC	2902	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142437096&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|
2024-01-25 00:27:19 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-0bad74752eb307abc X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:19 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49920	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:19 UTC	560	OUT	GET /bundle/loader.js?v=1706142437712 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:19 UTC	540	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 261 Connection: close Date: Thu, 25 Jan 2024 00:27:20 GMT Last-Modified: Tue, 23 Jan 2024 17:31:24 GMT ETag: "203466a85e12bce0b869df3d13cf52ee" x-amz-server-side-encryption: AES256 Cache-Control: max-age=5 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 aec195bf1d855e18a833703ccd5e90ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: dIQ4hpsruc681-44ar4FUF2RtzzQFG4aBuAsDdfeE8dtuAK3UoOOvQ==
2024-01-25 00:27:19 UTC	261	IN	Data Raw: 1f 8b 08 08 eb f7 af 65 00 03 6c 6f 61 64 65 72 2e 6a 73 00 6d 90 cd 4e c3 30 10 84 ef 7d 0a 73 8a 73 88 03 42 48 fc a8 97 56 1c 7a e0 04 2f e0 7a 37 b1 21 b1 2d ff 54 42 a8 ef 8e 6d e2 80 50 7d 5a 69 67 76 be 31 1d a2 16 41 19 4d 5b f2 b5 21 e9 9d b8 23 80 10 2d 1e 80 6c 49 73 74 5c c3 0b 7a 8f 7a 44 b7 8b 1a 26 7c 15 4e d9 d0 3c 15 83 1a 08 bd 02 23 e2 8c 3a b0 11 c3 f3 84 79 dc 7d 1e 80 d6 4b 6d 3d 5f 23 a2 9b f2 75 19 82 f5 8f 7d 5f 52 ba b9 c6 30 6e 2d fb 90 c6 19 cf 84 99 cb 5a 48 f4 ff 75 dd e9 86 3d dc de b1 eb fe 58 c0 d8 bb 5f a8 6a 8e 2f a8 6f 7c 4c 69 2b a4 70 c8 03 2e 9c b4 f9 d1 34 ed af 73 75 31 ef 44 72 26 da 4b 4b 95 7f a8 56 bc 24 10 92 3b 8f 21 37 8d 61 e8 ee ff c0 ad 30 12 39 e4 be a8 61 2f d5 04 74 b5 2f 40 e7 cd b9 a5 69 fe 06 ec db Data Ascii: eloader.jsmN0}ssBHVz/z7!-TBmP}Zigv1AM[!#-lIst\zzD&\|N<#:y}Km=_#u}_R0n-ZHu=X_j/o\|Li+p.4su1Dr&KKV$;!7a09a/t/@i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49921	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:19 UTC	759	OUT	POST /v2/events?v=13.59.1&pn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142432&pid=51360&str=194&di=6059&dc=10206&fl=10246&sr=21&mdh=4308&ct=0 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:19 UTC	38	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 32 2c 22 74 73 22 3a 35 36 39 32 2c 22 78 22 3a 36 34 30 2c 22 79 22 3a 34 33 35 7d 5d Data Ascii: [{"type":2,"ts":5692,"x":640,"y":435}]
2024-01-25 00:27:20 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:19 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49917	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:20 UTC	2819	OUT	GET /nab/Bootstrap.js HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session If-None-Match: "88e14e475ed3fd8df6efc3eb91cd64f5" If-Modified-Since: Tue, 23 Jan 2024 00:26:30 GMT
2024-01-25 00:27:20 UTC	617	IN	HTTP/1.1 304 Not Modified Date: Thu, 25 Jan 2024 00:27:20 GMT Content-Type: application/javascript; charset=utf-8 Connection: close x-amz-replication-status: COMPLETED ETag: "88e14e475ed3fd8df6efc3eb91cd64f5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: oSXFHXIjN_8U3WpPWhKCEIf0pIxChvwg Server: CloudFront Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 55e94b07b6102f9f50d16b922c8d10ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: MPHYTnjxvvNavdkApMumASOrFnmsW-pY5PXng22oGAaolJvrISHLgg== Age: 171665

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49922	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:20 UTC	571	OUT	GET /branches/brand-messenger-v1.935.0/bundle.js HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:20 UTC	549	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 192849 Connection: close Date: Thu, 25 Jan 2024 00:27:21 GMT Last-Modified: Tue, 23 Jan 2024 17:31:15 GMT ETag: "4f948aa65a8255cab9cbffc1a09e4f69" x-amz-server-side-encryption: AES256 Cache-Control: max-age=2630000 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 71092193ad2b78575d72d153155a9c70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: DGv_Gh7yhiOL9hCeGamlYWLpq9yc43Bx4Psfk51NIIc-qpZdSGPzUA==
2024-01-25 00:27:20 UTC	1479	IN	Data Raw: 1f 8b 08 08 e2 f7 af 65 00 03 62 75 6e 64 6c 65 2e 6a 73 00 ac 5b 6b 77 db b8 d1 fe be bf 82 e6 79 8f 96 6c 60 5a f2 2d b6 64 ae eb 38 4e e2 6e 1c 67 37 c9 a6 ad eb d7 87 12 21 89 1b 0a 50 48 c8 b6 6a f1 bf f7 19 00 a4 48 59 4e 72 4e bb 97 88 04 31 83 c1 dc 67 80 6c fd 65 c3 79 25 33 27 4d 06 5c e4 dc 49 c4 50 66 93 48 25 52 38 d3 94 47 18 ca 39 77 fa 59 24 e2 09 cf 73 2e 46 3c 0b 3a f4 ef 61 30 49 44 f0 67 1e bc 3d 3f 3d 7b f7 e1 2c 50 f7 ca f9 cb d6 4f 1b c3 99 18 10 02 4f f9 0f b7 51 e6 f0 f0 a1 e8 95 83 8e f0 32 ff 21 19 7a fc 2a bb f6 33 ae 66 99 70 e8 39 e0 f7 53 99 a9 bc 47 20 32 a4 a1 f0 21 e9 66 2c ed 6e 74 98 fd d8 7d 28 8a 9e 05 52 04 34 88 d2 d4 93 25 2c 93 6c f9 2c 7c bc a4 e1 46 7b 39 56 88 60 12 2a 26 82 41 c8 f1 67 1c 2e 49 65 9c 81 2e 11 Data Ascii: ebundle.js[kwyl`Z-d8Nng7!PHjHYNrN1gley%3'M\IPfH%R8G9wY$s.F<:a0IDg=?={,POOQ2!z3fp9SG 2!f,nt}(R4%,l,\|F{9V`&Ag.Ie.
2024-01-25 00:27:20 UTC	16384	IN	Data Raw: 10 55 b3 93 11 24 e7 b3 cf e1 d6 fb 71 24 94 9c fc ed c3 d6 d3 f3 5a 2d 24 96 27 f0 89 89 48 90 71 22 00 22 6d c2 af d4 7f 0c 87 66 48 ce e8 1b b2 9a f8 42 67 56 c8 a9 5d e8 e8 08 49 ce 7b 99 ab 7e 34 f8 82 91 d9 34 46 00 fc 04 dc 78 41 79 80 d8 76 cb b3 5c 17 55 8f 47 5e cc cf e3 c7 a3 b9 19 b2 48 e0 47 08 72 90 ca 9c 96 4c f2 4b 0c 50 9c d4 81 7a 05 3f d4 22 5b 5d 33 e7 ea 25 4f 39 76 4d f0 93 28 fb 72 92 a6 27 f9 ef d0 2a fa 3a 96 77 ef a4 4a 86 c9 40 03 9c 82 61 82 a7 f0 5f d0 3f 03 fd 3e e3 d6 6b 2c 77 ae 17 82 e2 92 71 d3 9b 9c da 97 5a 14 f9 e0 19 07 aa 96 39 82 29 03 ce 52 4e 6f 9e 9b 26 e2 8b eb f7 28 77 48 43 60 99 a7 3c 1f 73 d8 26 a2 21 f9 81 d0 55 fc 5e 6d 0d f2 9c 46 c6 19 1f fe 78 7e bb be 6c d5 a8 1a c9 09 c1 41 a8 a7 e3 24 8d c9 ab 55 e4 Data Ascii: U$q$Z-$'Hq""mfHBgV]I{~44FxAyv\UG^HGrLKPz?"[]3%O9vM(r'*:wJ@a_?>k,wqZ9)RNo&(wHC`<s&!U^mFx~lA$U
2024-01-25 00:27:20 UTC	16384	IN	Data Raw: 8e 19 b3 a4 07 1b 73 4c 87 65 a7 98 ae 37 dc d7 bd 55 b5 13 37 21 6e 4f 31 8e cb e9 ff 63 ef c9 96 1a 49 b6 fb 15 51 6e 33 55 43 a2 91 68 b6 2e 5c a3 2b 40 0d 9a 06 89 d1 42 0f 8d 18 45 81 12 28 10 55 ea aa 12 4b 83 1c 5c db d7 6b 84 3f c0 2f be af 7e f2 17 38 1c 31 7f 72 f1 07 f8 17 7c 4e 2e b5 4b 34 d3 33 0e df 6b 4d 4f 50 a5 dc 2a 97 b3 66 9e 3c 67 03 b2 b1 d9 78 66 e7 58 45 bd 5d cb 1d fe 98 eb f4 8e e6 b0 c8 ab 62 ea 03 39 5e 8a 7d 21 91 fd 8d da e9 69 90 9c 8b a7 77 71 ba f2 d1 14 80 8f dc 3a dd db 00 d0 00 b8 38 3d 01 08 e9 e1 6e 0a 1b 6d fc 8b b7 ab cb 9d fc f2 22 7c ee 0c f2 e0 57 77 79 31 d1 eb d8 ea 69 30 aa ac be 1d ab c1 8e 4b ae 73 33 07 a3 64 9f 0c 8b 0a 7e 94 03 56 ab e0 cd 7e b4 cd be 02 a2 7c 0f cc c0 36 be f9 11 fa cc b6 3f 1e 2c 78 83 Data Ascii: sLe7U7!nO1cIQn3UCh.\+@BE(UK\k?/~81r\|N.K43kMOP*f<gxfXE]b9^}!iwq:8=nm"\|Wwy1i0Ks3d~V~\|6?,x
2024-01-25 00:27:20 UTC	16384	IN	Data Raw: ee 82 8a 64 e9 93 5d 9a b0 d2 88 f8 49 f1 4a 51 79 98 6a cb f3 c7 ad b1 ee 15 6b a8 7b 65 c2 ea 82 c4 09 44 78 dc 3a 0a 6f 86 47 ba 57 4a 74 89 c7 f3 61 b4 68 ff af e5 09 27 88 66 6a b6 04 db 15 d1 51 bb 3c 8b fb 8e 4a 22 d8 52 54 87 8e fc 8d 7b 68 64 6c a4 3a 72 64 cf de fa bf 54 e4 bf 2f 15 21 0f 72 3b c2 70 e1 76 7b 42 4f 53 ca 74 02 99 21 2b db 18 d6 8d ed aa 84 4d 27 a9 cd 56 63 cc 6c 06 d4 06 b1 fe b4 94 07 a2 8c d9 3e 8b 59 ac c8 dc 95 a4 49 fb 12 a5 49 b3 7b b5 1d bf 9c 9c 9e 45 4a 12 8a 91 8a 3d 7c 14 33 23 1b cb 8c d8 63 bc 4c db 58 66 cc 3e ca cb 94 c2 d6 6a 39 dd cf 3d 9b b4 7a f1 d8 50 1f db 76 c9 aa e0 66 cc 7a 58 0e 48 67 15 21 16 b6 90 89 54 f2 d4 44 98 a4 b1 98 50 22 e4 76 0e 0b 02 6c 67 8b 0f 42 bc 72 ab 32 10 09 cb ac 36 d6 d1 17 d4 36 Data Ascii: d]IJQyjk{eDx:oGWJtah'fjQ<J"RT{hdl:rdT/!r;pv{BOSt!+M'Vcl>YII{EJ=\|3#cLXf>j9=zPvfzXHg!TDP"vlgBr266
2024-01-25 00:27:20 UTC	3072	IN	Data Raw: 88 46 45 e2 4b 3e 5d 82 e4 c8 88 14 33 89 31 bd 97 ee c7 50 24 1a 60 e8 32 3c 11 ff 6d 82 b2 3c 99 cb 44 7c e8 90 00 00 5b fb a4 c4 c3 f1 a5 13 f2 c3 f8 d5 bd 89 f8 7f 8c 9c 00 a8 b1 11 a3 67 20 a8 2d fa d3 20 74 1a 67 22 20 50 74 a8 8d 1b 6b bc cf 4c a3 13 bc 00 93 25 78 01 cf 05 40 da fd aa 62 8e 82 71 79 68 86 71 e9 7a d8 a1 51 f6 5b 06 df 66 87 58 02 d2 2e 3b e8 0c f7 79 50 14 b4 5a 3c fa 73 a3 3a 4b 0f c2 2c a1 98 81 a9 c4 05 ee bb c5 98 04 17 4a d3 43 a1 46 f6 85 97 f2 b8 c2 53 a1 d5 1e ec a7 3e 02 79 ba 31 88 cd 9f 97 86 d0 0b 85 67 9c d0 e7 14 9e 66 7b 28 50 04 9d ae e3 ef e0 61 45 00 8f 82 cd a1 67 7f 62 3e f4 9b 1e 73 16 6f c3 4b 7e 14 97 be 9d e0 42 2c 02 25 3c 0b 04 74 b2 e9 74 63 0e 3b a7 7a 91 64 d2 35 7a ea d1 82 d2 69 a0 a1 52 c5 5e 2f 98 Data Ascii: FEK>]31P$`2<m<D\|[g - tg" PtkL%x@bqyhqzQ[fX.;yPZ<s:K,JCFS>y1gf{(PaEgb>soK~B,%<ttc;zd5ziR^/
2024-01-25 00:27:20 UTC	16384	IN	Data Raw: c2 0c 5c dc ec e5 a4 66 2f 34 70 8d 1d 1f 1b e1 f6 2d 66 00 6b a4 41 ec da 69 0c bb 35 f8 79 e4 28 3a d9 ae a7 a6 b0 26 16 45 bb 5c c5 ee d6 4a ec 06 38 ca 63 ad 5a c9 e9 76 f1 72 01 3e ed d4 4a dc 5a bf 1c 6c 92 6e 95 bc 60 51 c0 4a 76 a7 56 aa 96 ec 55 a8 86 b6 66 07 ad 11 cc 87 a8 64 4f d6 4a e8 1d 0c 6f 14 15 69 ba 26 ce b5 96 d0 ad 21 76 e2 1e c8 4e 33 d0 02 c5 49 c0 97 89 30 bb 5d 7b b8 6b b7 ec 9d 4b f6 52 ad b4 b1 0d 6c 6f aa 86 64 88 46 b7 0c 0d 39 eb 62 ac 9b f4 c4 c7 39 97 7c e2 77 24 4a 76 3d 79 25 ce bb cf 38 d1 7a c9 5e 48 a6 c4 9d 49 4a f6 95 5a a9 1d 34 9c 76 f2 e2 32 80 28 39 b0 29 d9 f3 04 24 ec f4 5c ad c4 ed 31 64 ff 47 7d 3e 8a 9d 4e b7 64 9f c2 d8 cb 57 f7 50 a5 8f 90 d1 84 f6 7a f5 cb 9b e8 90 2b bd ba 9c 79 9e cf 3c af 57 d7 36 72 Data Ascii: \f/4p-fkAi5y(:&E\J8cZvr>JZln`QJvVUfdOJoi&!vN3I0]{kKRlodF9b9\|w$Jv=y%8z^HIJZ4v2(9)$\1dG}>NdWPz+y<W6r
2024-01-25 00:27:21 UTC	16384	IN	Data Raw: 77 ae bf 76 e7 3a 15 b8 91 19 c7 b3 77 6e 3c 7d e7 fa ab d2 50 7e a8 0c 25 67 2c fa e4 ff 7d e9 8f bf fc 47 ea eb 5b 69 d7 8f dc e0 96 17 e9 83 be 09 61 7e 11 ed bc f5 f1 e3 df fa d3 6b 2f 03 e8 69 cd a0 f6 b3 c5 96 22 d3 00 92 76 e8 eb df f3 21 e0 df b0 ea 6f df 79 e4 ba 18 e1 8d ff 75 e7 fa 77 ff f4 c4 eb 1f 3f f9 38 87 48 bf 31 e7 6c 47 ff f6 cf 4f 51 e3 df 49 3a cd 9b 83 68 75 be 01 58 f8 a7 d7 61 5e bf fd d3 bf 02 a2 3c a2 b5 0b 7d fc ee 4b 9f bc f9 73 04 c5 b7 bf f7 f1 bf 7e 1f e0 60 b6 06 7d f2 dc 23 1f df 7a 85 96 f7 c5 3b 37 6e dd b9 09 48 fe 0b fc 71 e3 37 30 b1 3f fd f2 b1 3b d7 9f 4c 30 bc c0 10 74 e7 fa 8f 10 2f a4 76 3e fe 97 7f fa f8 83 6f e3 ae b9 fe f6 c7 6f ff eb c7 bf 7d 4e ec 85 47 65 30 17 58 89 68 53 7c 40 43 fa a7 3b 37 bf 71 e7 e6 Data Ascii: wv:wn<}P~%g,}G[ia~k/i"v!oyuw?8H1lGOQI:huXa^<}Ks~`}#z;7nHq70?;L0t/v>oo}NGe0XhS\|@C;7q
2024-01-25 00:27:21 UTC	16384	IN	Data Raw: 05 9e a3 ef 07 1e f0 8d 33 4a a2 6c 98 2d 51 7a 35 be 9c 94 2a f3 48 e5 1c 2c f9 8a 62 bd 64 8d 6c 11 2b 9a 0d af d0 89 70 a5 8d f2 e1 d5 22 bf 8c 71 03 e4 fd 7e 3e fc 92 66 b3 fc 8b 48 c0 da cb 35 10 c9 6e 20 8e 46 6a dc 38 a8 a2 3a ee 5b e3 34 1c 29 22 89 f6 b9 bc 8b 84 52 1f 47 a4 42 6f 83 95 71 e3 3c 35 00 b6 bf 72 f6 ec f9 8b f3 97 3f fe f5 d5 bf fc eb 4f af df bc 7d f7 6f ef 3f 7c fc f4 ef 3f ff f2 1f 7f 8b 2f a7 a0 c9 5f 5d a7 bf ff 7d b1 cc f2 9b ff 2c ca 6a 75 fb e5 eb dd 1f ba 61 5a b6 e3 7a 7e 30 78 0a db 3a 7a 3a f9 5c 7d ce 3e cf 3f 17 bd 8b a7 57 a0 bb 81 b4 42 df fb 96 df 26 89 6a 1f 31 7b 3a f9 f5 b3 7e fc f9 eb cb 97 17 4f 49 21 46 e9 5b aa 0a 98 d8 3d 5a 16 dc 72 97 f8 4b 33 08 68 d6 93 fe d2 5e 73 e1 4a 0f 14 bf 32 9d 25 3d 40 71 05 ef Data Ascii: 3Jl-Qz5*H,bdl+p"q~>fH5n Fj8:[4)"RGBoq<5r?O}o?\|?/_]},juaZz~0x:z:\}>?WB&j1{:~OI!F[=ZrK3h^sJ2%=@q
2024-01-25 00:27:21 UTC	16384	IN	Data Raw: 28 fb 8e 67 b6 6a 6b b5 d8 96 a3 bb f0 dd 35 11 0e 81 6a 13 a2 44 79 f5 47 33 ab 2b fa a1 eb af af de 59 7f 73 aa be 24 4f ac 7c 9b fe a2 27 8e bd 26 ed ee 8c cd 59 56 ae 38 c3 46 39 9c 8a 4f e6 05 2b 46 cd d0 8d 7f 7f ad e2 84 19 95 70 c0 be cc 7c d5 f7 d7 9a 9e a4 42 b5 a7 b3 ab 15 3c d5 74 35 9c 94 27 53 d5 50 cb 6b e3 d9 c5 2e 6d 3a 6f a2 dc 1e ed 4a 83 1a 14 ef 63 53 2e 01 19 23 d6 72 09 df 9b 30 92 b4 a6 64 b6 94 6e 85 05 83 38 23 f6 a7 32 10 8b 78 37 35 02 a2 eb 24 8b 6c 24 6c eb 12 c5 24 94 d5 e6 ed 79 cf ec 01 10 5c 4f f7 00 49 78 4f 49 07 d6 be 36 de 32 ec b8 28 a9 74 b4 32 67 5f 5b ee 30 c3 8a 87 d1 2c 67 d9 69 5a cd 88 f1 63 7d 55 2a 79 8d e8 ad cd c1 f6 16 50 d1 90 7b 9d 21 31 e4 c7 4e 1b 64 73 03 c7 89 45 34 96 f9 bc 84 2e 2a dc 11 e2 9b 1b Data Ascii: (gjk5jDyG3+Ys$O\|'&YV8F9O+Fp\|B<t5'SPk.m:oJcS.#r0dn8#2x75$l$l$y\OIxOI62(t2g_[0,giZc}UyP{!1NdsE4.
2024-01-25 00:27:21 UTC	1654	IN	Data Raw: 2b aa 32 a1 b4 b2 92 17 65 1f 4c 54 40 20 6c ac 92 c0 90 60 4f 97 e2 dd 96 c3 a4 26 05 09 65 f9 53 32 c4 97 1f e1 62 e9 83 0b 1a 15 55 c4 50 d5 a5 39 6c ac 22 75 ac ab 0b cc 65 8f aa 94 3d 16 06 93 89 59 af a7 0c b8 63 33 50 db b4 cb 3c ea 31 fd 0e 23 72 ea 3c 94 3f 8f 85 bf 4e 6b b8 c6 8c ba b5 b3 72 b9 dc d5 d0 79 c7 d9 86 1b f4 c6 43 3b e8 6a cc bb b3 8b 26 df a2 a7 92 2f 8d 4b 1f fa ce 08 5f 95 df b8 51 93 3d 28 2f ef b5 3f 9e 1f b7 b7 3a e7 3b fb 27 9d ed ce 91 e9 f4 07 4e f8 64 91 c9 44 36 6d c7 f1 89 59 20 69 69 5a cc 22 50 43 d7 86 39 86 42 9a 66 56 4c 18 99 08 e2 09 35 d6 a2 e0 fe 21 a4 50 72 32 6c 28 fa cf 8c 3d e4 f3 47 ba cd 4c 2a 7a a3 c6 67 c6 3d 74 f8 ab 58 df a6 0a 6a 67 63 0f 81 87 2f a9 42 27 70 ed a1 fb dd 31 4b 3d 0e ad 52 e0 5c 3a 81 Data Ascii: +2eLT@ l`O&eS2bUP9l"ue=Yc3P<1#r<?NkryC;j&/K_Q=(/?:;'NdD6mY iiZ"PC9BfVL5!Pr2l(=GL*zg=tXjgc/B'p1K=R\:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49915	54.211.243.61	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:20 UTC	892	OUT	GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_mid=74531577018668379620070530052756004963&d_cb=Bootstrapper.aam_tnt_cb HTTP/1.1 Host: nab.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DST=; nab=69949952628053946071772149917135184323; demdex=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037\|139200-1-1706142428038
2024-01-25 00:27:20 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:20 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 474 Connection: close X-TID: GCL3aJcHSwI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v053-0df4d05c3.edge-va6.demdex.com 3 ms set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: nab=69949952628053946071772149917135184323; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:20 GMT; Path=/; Domain=.nab.demdex.net; Secure; SameSite=None
2024-01-25 00:27:20 UTC	474	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 61 61 6d 5f 74 6e 74 5f 63 62 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 74 6e 74 22 2c 22 63 76 22 3a 22 70 72 6f 66 69 6c 65 2e 6f 6d 6e 69 61 3d 63 3a 75 6e 6b 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 6e 61 62 2e 63 6f 6d 2e 61 75 22 7d 5d 2c 22 75 75 69 64 22 3a 22 37 34 32 34 39 37 39 39 39 35 32 36 37 36 34 37 38 38 31 30 30 34 34 36 36 34 35 37 36 31 36 36 33 39 35 34 32 34 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 47 43 4c 33 61 4a 63 48 53 77 49 3d 22 2c 22 74 72 61 69 74 73 22 3a 5b 32 35 32 37 38 32 30 2c 31 38 38 34 35 35 31 35 2c 31 32 36 35 31 35 38 30 2c 31 38 37 36 32 33 36 35 2c 31 33 38 32 37 30 38 30 2c 31 33 39 39 36 30 36 33 2c 32 Data Ascii: Bootstrapper.aam_tnt_cb({"stuff":[{"cn":"aam_tnt","cv":"profile.omnia=c:unk","ttl":30,"dmn":"nab.com.au"}],"uuid":"74249799952676478810044664576166395424","dcs_region":7,"tid":"GCL3aJcHSwI=","traits":[2527820,18845515,12651580,18762365,13827080,13996063,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49923	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:20 UTC	2912	OUT	GET /nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:1$_ss:1$_st:1706144228192$ses_id:1706142428192%3Bexp-session$_pn:1%3Bexp-session$dc_visit:1$dc_event:1%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
2024-01-25 00:27:20 UTC	487	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:20 GMT Content-Type: text/javascript Content-Length: 743 Connection: close Vary: Accept-Encoding Server: CloudFront Expires: Thu, 25 Jan 2024 00:27:19 GMT Cache-Control: no-cache Cache-Control: no-store X-Cache: Miss from cloudfront Via: 1.1 a37c6915c3c7316887c2daf616d0206c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: LN6l08H2bgJX-ckvSmGCuYKafq5zcN4x44o2riq2uJeURIIe0iGKNQ==
2024-01-25 00:27:20 UTC	743	IN	Data Raw: 0a 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 5f 73 65 72 76 65 72 54 69 6d 65 20 3d 20 27 32 30 32 34 2d 30 31 2d 32 35 20 30 30 3a 32 37 3a 32 30 27 3b 20 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 5f 63 6c 69 65 6e 74 49 50 20 3d 20 27 31 38 2e 31 31 38 2e 31 33 32 2e 34 30 27 3b 20 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 69 6e 73 65 72 74 50 61 67 65 46 69 6c 65 73 28 5b 27 68 74 74 70 73 3a 2f 2f 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 63 6f 64 65 2f 36 38 36 30 63 34 63 66 32 35 36 66 62 39 65 35 32 65 63 33 36 31 30 35 66 61 36 37 36 61 36 64 2e 6a 73 3f 63 6f 6e 64 69 74 69 6f 6e 49 64 30 3d 34 39 35 38 31 37 38 27 2c 27 68 74 74 70 73 3a 2f 2f 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 63 6f 64 Data Ascii: Bootstrapper._serverTime = '2024-01-25 00:27:20'; Bootstrapper._clientIP = '18.118.132.40'; Bootstrapper.insertPageFiles(['https://tms.nab.com.au/nab/prod/code/6860c4cf256fb9e52ec36105fa676a6d.js?conditionId0=4958178','https://tms.nab.com.au/nab/prod/cod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49924	54.153.169.192	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:21 UTC	636	OUT	GET /personalization/accounts/nab/profiles/main/visitors/018d3e036c1f0020cd3edad10e9a0506f001706700918 HTTP/1.1 Host: mps.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:21 UTC	811	IN	HTTP/1.1 204 No Content Date: Thu, 25 Jan 2024 00:27:21 GMT Content-Type: application/json;charset=utf-8 Connection: close Set-Cookie: AWSALB=Gj15rguiJogOiXRKAlAAMQ0wZ5CvyVFOVCZyFZCWCtsaEIFVlZWJEhwhmp7m/EHBOrRfD0a+aA4kiEXwzrai2+wdDCJQhH6W0zUCZgsvjqrNB5C1AuvNB4UcRcOk; Expires=Thu, 01 Feb 2024 00:27:21 GMT; Path=/ Set-Cookie: AWSALBCORS=Gj15rguiJogOiXRKAlAAMQ0wZ5CvyVFOVCZyFZCWCtsaEIFVlZWJEhwhmp7m/EHBOrRfD0a+aA4kiEXwzrai2+wdDCJQhH6W0zUCZgsvjqrNB5C1AuvNB4UcRcOk; Expires=Thu, 01 Feb 2024 00:27:21 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 Access-Control-Allow-Origin: https://www.nab.com.au Access-Control-Allow-Methods: GET X-NodeId: i-03b6e52945b1851a8 X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49930	64.233.177.155	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:21 UTC	1267	OUT	GET /pagead/viewthroughconversion/1040712916/?random=1706142440059&cv=9&fst=1706142440059&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&tiba=NAB%20help%20and%20support%20%7C%20Online%20help%20guides%20and%20FAQs%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkN2JxNRb5c3UrvjpeUWdF0h9WJAjlO4U0HnycaHxH5QRTWnr_AK8QOSAmYa1w
2024-01-25 00:27:21 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-25 00:27:21 UTC	549	IN	Data Raw: 39 61 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ab(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-01-25 00:27:21 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-01-25 00:27:21 UTC	681	IN	Data Raw: 33 64 31 37 30 36 31 34 32 34 34 30 30 35 39 5c 78 32 36 63 76 5c 78 33 64 39 5c 78 32 36 66 73 74 5c 78 33 64 31 37 30 36 31 34 30 38 30 30 30 30 30 5c 78 32 36 6e 75 6d 5c 78 33 64 31 5c 78 32 36 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 5c 78 33 64 41 55 44 5c 78 32 36 6c 61 62 65 6c 5c 78 33 64 2d 76 32 71 43 4a 76 33 79 47 41 51 31 49 6d 67 38 41 4d 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 65 69 64 5c 78 33 64 34 36 36 34 36 35 39 32 36 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 61 68 5c 78 33 64 39 38 34 5c 78 32 36 75 5f 61 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 63 64 5c 78 33 64 32 34 5c 78 32 36 75 5f 68 69 73 5c 78 33 64 31 5c 78 32 36 75 5f 74 7a 5c 78 33 64 36 30 Data Ascii: 3d1706142440059\x26cv\x3d9\x26fst\x3d1706140800000\x26num\x3d1\x26currency_code\x3dAUD\x26label\x3d-v2qCJv3yGAQ1Img8AM\x26guid\x3dON\x26eid\x3d466465926\x26u_h\x3d1024\x26u_w\x3d1280\x26u_ah\x3d984\x26u_aw\x3d1280\x26u_cd\x3d24\x26u_his\x3d1\x26u_tz\x3d60
2024-01-25 00:27:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49916	63.140.38.237	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:21 UTC	3867	OUT	GET /b/ss/nab-prd/10/JS-2.22.4/s62039120039136?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A20%204%20-60&d.&nsid=0&jsonv=1&.d&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Ahelp-support&g=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&c.&getTimeParting=6.3&.c&cc=AUD&ch=nab%3Ahelp-support&server=www.nab.com.au&events=event1&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=nab&v1=D%3Dc1&h1=D%3DpageName%2B%22%3Aindex%22&c2=D%3Dch&v2=D%3Dch&c5=1&v5=D%3Dc5&c9=D%3DpageName&v9=D%3DpageName&c11=D%3Dg&v11=D%3Dg&c13=New&v13=D%3Dc13&c23=profile.omnia%3Dc%3Aunk&c24=profile.omnia_all%3Dc%3Aunk&c31=D%3DpageName&v60=profile.omnia%3Dc%3Aunk&v61=profile.omnia_all%3Dc%3Aunk&c72=VisitorAPI%20Present&v73=Thursday%7C11%3A27%20AM&v74=D%3Dt&c75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v76=74249799952676478810044664576166395424&v77=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&v81=0.22848551443168175_1706142429071&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&AQE=1 HTTP/1.1 Host: smetrics.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; s_nr=1706142440380-New
2024-01-25 00:27:21 UTC	828	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 25 Jan 2024 00:27:21 GMT expires: Wed, 24 Jan 2024 00:27:21 GMT last-modified: Fri, 26 Jan 2024 00:27:21 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C74531577018668379620070530052756004963; Path=/; Domain=nab.com.au; Max-Age=63072000; Expires=Sat, 24 Jan 2026 00:27:27 GMT; etag: 3663912994930098176-4617817922904080463 vary: * x-aam-tid: qK1pzgWJRI0= dcs: dcs-prod-va6-2-v053-087bdf25e.edge-va6.demdex.com 4 ms content-type: application/x-javascript;charset=utf-8 content-length: 746 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-01-25 00:27:21 UTC	746	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 74 6e 74 22 2c 22 63 76 22 3a 22 70 72 6f 66 69 6c 65 2e 6f 6d 6e 69 61 3d 63 3a 75 6e 6b 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 6e 61 62 2e 63 6f 6d 2e 61 75 22 7d 5d 2c 22 75 75 69 64 22 3a 22 37 34 32 34 39 37 39 39 39 35 32 36 37 36 34 37 38 38 31 30 30 34 34 36 36 34 35 37 36 31 36 36 33 39 35 34 32 34 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 71 4b 31 70 7a 67 57 4a 52 49 30 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 33 35 38 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[{"cn":"aam_tnt","cv":"profile.omnia=c:unk","ttl":30,"dmn":"nab.com.au"}],"uuid":"74249799952676478810044664576166395424","dcs_region":7,"tid":"qK1pzgWJRI0=","ibs":[{"id":"358","ttl":10080,"tag":"img

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49933	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:21 UTC	881	OUT	GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142440133&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=04fc06&ler=empty&it=1706142440082&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:21 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Jan 2024 00:27:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49934	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:21 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:21 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:21 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-046667dd29f6cb721 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:21 GMT X-UUID: a31c506b-0967-4d00-85a8-b3946f3d3837 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:21 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:21 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49932	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:21 UTC	973	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142440133&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=04fc06&ler=empty&it=1706142440082&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:21 UTC	1977	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown" report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net .fbsbx.com .fb.com;font-src data: .gstatic.com .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com .tenor.co media.tenor.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net .giphy.com connect.facebook.net .carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com .whatsapp.net .fb.com .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com https://.giphy.com data:;frame-src .doubleclick.net .google.com .facebook.com www.googleadservices.com .fbsbx.com fbsbx.com data: www.instagram.com .fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: .facebook.com data:;block-all-mixed-content;upgrade-insecure-requests; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=()
2024-01-25 00:27:21 UTC	1084	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 65 74 65 63 74 69 6f 6e 3d 28 29 2c 20 6b 65 79 62 6f 61 72 64 2d 6d 61 70 3d 28 29 2c 20 6c 6f 63 61 6c 2d 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-f
2024-01-25 00:27:21 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49935	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:21 UTC	611	OUT	GET /nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:22 UTC	722	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 306 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Mon, 22 Jan 2024 17:48:12 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 25 Jan 2024 00:27:23 GMT Cache-Control: max-age=30 ETag: "bbb78b47bab713cab9e79d2ef1247f0b" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 9250ce61dbd138f5b6d747dd25e6029a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: 9MTgWmOPo2wTo-l1K4D-kMgS0wq2H31HMOOz97RX5pD4yE31DESksw==
2024-01-25 00:27:22 UTC	306	IN	Data Raw: 7b 22 77 69 64 67 65 74 48 61 73 68 22 3a 22 32 65 32 36 61 64 65 37 36 36 37 61 62 61 35 62 66 35 62 64 64 65 61 64 36 37 63 30 33 39 35 62 22 2c 22 64 69 73 70 6c 61 79 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 79 70 65 49 64 22 3a 22 42 48 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 2c 7b 22 74 79 70 65 49 64 22 3a 22 54 41 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 2c 7b 22 74 79 70 65 49 64 22 3a 22 4f 41 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 5d 2c 22 72 75 6c 65 44 69 73 70 6c 61 79 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 6f 70 65 6e 42 75 73 69 6e 65 73 73 48 6f 75 72 73 47 72 6f 75 70 73 22 3a 5b 5d 2c 22 63 6f 62 72 6f 77 73 65 43 6f 6e 66 69 67 22 3a 7b 22 65 6e 61 62 6c 65 64 Data Ascii: {"widgetHash":"2e26ade7667aba5bf5bddead67c0395b","displayConditions":[{"typeId":"BH1","satisfied":true},{"typeId":"TA1","satisfied":true},{"typeId":"OA1","satisfied":true}],"ruleDisplayConditions":[],"openBusinessHoursGroups":[],"cobrowseConfig":{"enabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49929	52.223.40.198	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	624	OUT	GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:22 UTC	137	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:22 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-01-25 00:27:22 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49926	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	2902	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142440038&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
2024-01-25 00:27:22 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-04feb7579ef5c792c X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:22 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49928	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	2910	OUT	POST /nab/main/2/i.gif HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive Content-Length: 8267 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryiGx5WV08nmtJMYNR Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144289\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387227; gpv_pN=nab%3Apersonal; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; s_nr=1706142429067-New; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
2024-01-25 00:27:22 UTC	8267	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 47 78 35 57 56 30 38 6e 6d 74 4a 4d 59 4e 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 64 61 74 61 22 0d 0a 0d 0a 7b 22 6c 6f 61 64 65 72 2e 63 66 67 22 3a 7b 22 35 22 3a 7b 22 6c 6f 61 64 22 3a 31 2c 22 73 65 6e 64 22 3a 31 2c 22 76 22 3a 32 30 32 33 31 30 32 34 30 31 34 30 2c 22 77 61 69 74 22 3a 31 2c 22 74 69 64 22 3a 32 30 30 36 34 2c 22 69 64 22 3a 22 35 22 2c 22 73 72 63 22 3a 22 2f 2f 74 61 67 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6d 61 69 6e 2f 70 72 6f 64 2f 75 74 61 67 2e 35 2e 6a 73 3f 75 74 76 3d 75 74 34 2e 34 39 2e 32 30 32 33 31 30 32 34 30 31 34 30 22 2c 22 65 78 65 63 75 74 65 64 22 3a Data Ascii: ------WebKitFormBoundaryiGx5WV08nmtJMYNRContent-Disposition: form-data; name="data"{"loader.cfg":{"5":{"load":1,"send":1,"v":202310240140,"wait":1,"tid":20064,"id":"5","src":"//tags.nab.com.au/main/prod/utag.5.js?utv=ut4.49.202310240140","executed":
2024-01-25 00:27:22 UTC	917	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: nab:main:2:datacloud X-did: 018d3e036c1f0020cd3edad10e9a0506f001706700918 X-Region: ap-southeast-2 Access-Control-Allow-Origin: https://www.nab.com.au X-ServerID: uconnect_i-05bdc5ac35b5626c7 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Access-Control-Expose-Headers: X-Region Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 018d3e036c1f0020cd3edad10e9a0506f001706700918 Access-Control-Allow-Credentials: true X-ULVer: 7148b0428db0ebbd7546f47133838a6c62277b79-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:22 GMT X-UUID: 9bc1ba91-88a2-4a97-b72e-4d0acd3d6a72 Set-Cookie: TAPID=; Path=/; Domain=.nab.com.au; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49937	172.253.124.105	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	1391	OUT	GET /pagead/1p-user-list/1040712916/?random=1706142440059&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&tiba=NAB%20help%20and%20support%20%7C%20Online%20help%20guides%20and%20FAQs%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_oBxe_NAKiJkhX5OD_t4LLbamdHn6AmclC07UxhcqY9d6PacI&random=1833326355&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:22 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49936	54.205.210.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	700	OUT	POST /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive Content-Length: 1357 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:22 UTC	1357	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 37 63 30 30 33 31 32 64 32 34 62 37 34 66 30 34 62 31 61 37 63 32 65 30 61 64 63 30 35 61 62 39 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 36 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 Data Ascii: {"requestId":"7c00312d24b74f04b1a7c2e0adc05ab9","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":60,"channel":"web","screen":{"width":1280,"heigh
2024-01-25 00:27:22 UTC	769	IN	HTTP/1.1 200 OK date: Thu, 25 Jan 2024 00:27:22 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.nab.com.au access-control-allow-credentials: true x-request-id: fafffaf04d27ad31f8ec6bc0a647d144 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-01-25 00:27:22 UTC	370	IN	Data Raw: 31 36 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 37 63 30 30 33 31 32 64 32 34 62 37 34 66 30 34 62 31 61 37 63 32 65 30 61 64 63 30 35 61 62 39 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6e 61 74 69 6f 6e 61 6c 61 75 73 74 72 61 6c 69 61 62 61 6e 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 62 62 30 38 64 33 33 33 39 34 38 63 34 32 62 33 38 36 37 63 30 63 38 39 38 62 30 66 30 30 31 63 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 37 34 35 33 31 35 37 37 30 31 38 36 36 38 33 37 39 36 32 30 30 37 30 35 33 30 30 35 32 37 35 36 30 30 34 39 36 33 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 Data Ascii: 16b{"status":200,"requestId":"7c00312d24b74f04b1a7c2e0adc05ab9","client":"nationalaustraliaban","id":{"tntId":"bb08d333948c42b3867c0c898b0f001c.34_0","marketingCloudVisitorId":"74531577018668379620070530052756004963"},"edgeHost":"mboxedge34.tt.omtrdc.ne
2024-01-25 00:27:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49940	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	647	OUT	GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142440133&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=04fc06&ler=empty&it=1706142440082&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:22 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Jan 2024 00:27:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49941	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	684	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=&if=false&ts=1706142440133&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=04fc06&ler=empty&it=1706142440082&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:22 UTC	1929	IN	HTTP/1.1 200 OK reporting-endpoints: default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown" report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net .fbsbx.com .fb.com;font-src data: .gstatic.com .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com .tenor.co media.tenor.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net .giphy.com connect.facebook.net .carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com .whatsapp.net .fb.com .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com https://.giphy.com data:;frame-src .doubleclick.net .google.com .facebook.com www.googleadservices.com .fbsbx.com fbsbx.com data: www.instagram.com .fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: .facebook.com data:;block-all-mixed-content;upgrade-insecure-requests; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=()
2024-01-25 00:27:22 UTC	1117	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 65 74 65 63 74 69 6f 6e 3d 28 29 2c 20 6b 65 79 62 6f 61 72 64 2d 6d 61 70 3d 28 29 2c 20 6c 6f 63 61 6c 2d 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49943	172.253.124.103	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	1157	OUT	GET /pagead/1p-user-list/1040712916/?random=1706142440059&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=466465926&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=0&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&tiba=NAB%20help%20and%20support%20%7C%20Online%20help%20guides%20and%20FAQs%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_oBxe_NAKiJkhX5OD_t4LLbamdHn6AmclC07UxhcqY9d6PacI&random=1833326355&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:22 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49944	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	607	OUT	GET /nab-prod/live/2e26ade7667aba5bf5bddead67c0395b.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:23 UTC	725	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 110341 Connection: close Date: Thu, 25 Jan 2024 00:27:24 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Thu, 18 Jan 2024 22:29:03 GMT ETag: "2e26ade7667aba5bf5bddead67c0395b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 aac34701788186dd84599aec4e884830.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: tEQZe8Ti4vGPFXa5JSKuJHMwOxRRj5SfZSCFjHa9pVZK-eL_G9lD0A==
2024-01-25 00:27:23 UTC	15652	IN	Data Raw: 7b 22 69 64 22 3a 22 34 66 63 35 35 32 35 38 2d 65 61 31 65 2d 34 37 30 66 2d 62 39 61 32 2d 39 33 61 61 65 36 63 30 61 30 38 63 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 75 6c 64 43 6f 6c 6c 65 63 74 49 50 41 64 64 72 65 73 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 57 65 62 48 69 73 74 6f 72 79 22 3a 66 61 6c 73 65 2c 22 6e 65 77 53 44 4b 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 70 70 49 64 22 3a 22 64 36 37 33 39 63 64 33 63 65 31 61 35 64 31 62 38 37 63 34 37 66 33 62 38 39 65 37 38 35 64 35 22 2c 22 72 75 6c 65 73 22 3a 5b 7b 22 69 64 22 3a 22 30 37 61 64 30 39 62 31 2d 32 32 63 38 2d 34 30 64 64 2d 61 38 31 61 2d 36 39 62 37 30 35 31 65 64 34 62 32 22 2c 22 6e 61 6d 65 22 3a 22 44 65 66 61 75 6c 74 20 28 47 72 65 65 6e Data Ascii: {"id":"4fc55258-ea1e-470f-b9a2-93aae6c0a08c","enabled":true,"shouldCollectIPAddress":true,"enableWebHistory":false,"newSDKEnabled":true,"appId":"d6739cd3ce1a5d1b87c47f3b89e785d5","rules":[{"id":"07ad09b1-22c8-40dd-a81a-69b7051ed4b2","name":"Default (Green
2024-01-25 00:27:23 UTC	16384	IN	Data Raw: 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 70 65 72 73 6f 6e 61 6c 2f 6c 69 66 65 2d 6d 6f 6d 65 6e 74 73 2f 6d 61 6e 61 67 65 2d 6d 6f 6e 65 79 2f 6d 61 6e 61 67 65 2d 64 65 62 74 2f 73 77 69 74 63 68 69 6e 67 2d 68 6f 6d 65 2d 6c 6f 61 6e 73 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 Data Ascii: IABLE_CONDITION","value":"/personal/life-moments/manage-money/manage-debt/switching-home-loans","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_H
2024-01-25 00:27:23 UTC	16384	IN	Data Raw: 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 4f 53 54 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 63 6f 6d 6d 6f 6e 2f 66 6f 72 6d 73 2f 68 6f 6d 65 2d 6c 6f 61 6e 2d 72 65 71 75 65 73 74 2d 61 2d 63 61 6c 6c 2d 62 61 63 6b 22 Data Ascii: :"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/common/forms/home-loan-request-a-call-back"
2024-01-25 00:27:23 UTC	2048	IN	Data Raw: 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 4f 53 54 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 63 6f 6d 6d 6f 6e 2f 66 6f 72 6d 73 2f 62 75 73 69 6e 65 73 73 2f 6e 61 62 2d 71 75 69 63 6b 62 69 7a 2d 6f 76 65 72 64 72 61 66 74 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 66 Data Ascii: mparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/common/forms/business/nab-quickbiz-overdraft-application-f
2024-01-25 00:27:23 UTC	16384	IN	Data Raw: 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 4f 53 54 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 61 62 6f 75 74 2d 75 73 2f 73 75 73 74 61 69 6e 61 62 69 6c 69 74 79 2f 63 75 73 74 6f 6d 65 72 2d 63 6f 6d 6d 75 6e 69 74 79 2d 73 75 70 70 6f 72 74 2f 64 6f 6d 65 73 74 69 63 2d 66 61 6d 69 6c 79 2d 76 69 6f 6c 65 6e 63 65 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a Data Ascii: iteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/about-us/sustainability/customer-community-support/domestic-family-violence","variable":"URL_PATH","comparator":
2024-01-25 00:27:23 UTC	16384	IN	Data Raw: 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 70 65 72 73 6f 6e 61 6c 2f 6c 69 66 65 2d 6d 6f 6d 65 6e 74 73 2f 74 72 61 76 65 6c 2f 69 6e 73 75 72 65 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 6e 65 78 74 72 65 6c 2d 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c Data Ascii: arator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal/life-moments/travel/insure","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"nextrel-www.nab.com.au","variable":"URL
2024-01-25 00:27:23 UTC	16384	IN	Data Raw: 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 63 6f 6e 74 61 63 74 2d 75 73 2f 70 65 72 73 6f 6e 61 6c 2f 76 69 72 74 75 61 6c 2d 61 73 73 69 73 74 61 6e 74 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 6e 65 78 74 72 65 6c 2d 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c Data Ascii: ator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/contact-us/personal/virtual-assistant","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"nextrel-www.nab.com.au","variable":"URL
2024-01-25 00:27:23 UTC	10721	IN	Data Raw: 2d 73 61 66 65 74 79 2d 74 69 70 73 2d 62 75 73 69 6e 65 73 73 2f 70 61 79 6d 65 6e 74 2d 73 63 61 6d 73 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 6e 65 78 74 72 65 6c 2d 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 4f 53 54 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e Data Ascii: -safety-tips-business/payment-scams","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"nextrel-www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49945	23.20.189.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	449	OUT	GET /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:22 UTC	383	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 25 Jan 2024 00:27:22 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-01-25 00:27:22 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-01-25 00:27:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49946	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	409	OUT	GET /nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:23 UTC	518	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 306 Connection: close Date: Thu, 25 Jan 2024 00:27:24 GMT Last-Modified: Thu, 25 Jan 2024 00:27:22 GMT ETag: "bbb78b47bab713cab9e79d2ef1247f0b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 053d1439c2ff6651216ea3129c572d10.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: xKiDP0OK1pDUF-T7jH9er4zZgKqTVL-SLLyhNfTC0bWV_28REfBstg==
2024-01-25 00:27:23 UTC	306	IN	Data Raw: 7b 22 77 69 64 67 65 74 48 61 73 68 22 3a 22 32 65 32 36 61 64 65 37 36 36 37 61 62 61 35 62 66 35 62 64 64 65 61 64 36 37 63 30 33 39 35 62 22 2c 22 64 69 73 70 6c 61 79 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 79 70 65 49 64 22 3a 22 42 48 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 2c 7b 22 74 79 70 65 49 64 22 3a 22 54 41 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 2c 7b 22 74 79 70 65 49 64 22 3a 22 4f 41 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 5d 2c 22 72 75 6c 65 44 69 73 70 6c 61 79 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 6f 70 65 6e 42 75 73 69 6e 65 73 73 48 6f 75 72 73 47 72 6f 75 70 73 22 3a 5b 5d 2c 22 63 6f 62 72 6f 77 73 65 43 6f 6e 66 69 67 22 3a 7b 22 65 6e 61 62 6c 65 64 Data Ascii: {"widgetHash":"2e26ade7667aba5bf5bddead67c0395b","displayConditions":[{"typeId":"BH1","satisfied":true},{"typeId":"TA1","satisfied":true},{"typeId":"OA1","satisfied":true}],"ruleDisplayConditions":[],"openBusinessHoursGroups":[],"cobrowseConfig":{"enabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49942	35.71.131.137	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:22 UTC	390	OUT	GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:23 UTC	137	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:23 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-01-25 00:27:23 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49948	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:23 UTC	1070	OUT	GET /pageview?pid=51360&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142441&pn=2&dw=1263&dh=3350&ww=1280&wh=907&sw=1280&sh=1024&dr=&url=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&uc=1&la=en-US&cvars=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Ahelp-support%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22help-support%22%5D%7D&cvarp=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Ahelp-support%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22help-support%22%5D%7D&v=13.59.1&pvt=n&ex=&r=259234 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:23 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:23 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49949	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:23 UTC	778	OUT	GET /dvar?v=13.59.1&pid=51360&pn=2&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=381217 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:23 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:23 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49947	15.197.193.217	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:23 UTC	770	OUT	GET /track/up?adv=7uxlgqc&ref=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&upid=r2pjj86&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:23 UTC	136	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:23 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49951	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:23 UTC	405	OUT	GET /nab-prod/live/2e26ade7667aba5bf5bddead67c0395b.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:24 UTC	550	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 110341 Connection: close Date: Thu, 25 Jan 2024 00:27:25 GMT Last-Modified: Thu, 18 Jan 2024 22:29:03 GMT ETag: "2e26ade7667aba5bf5bddead67c0395b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 fee643092e4af2bd1352bdea36277218.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: 5bQQ2szJCpUhYintZOGCx-UYDX8n3Z9Ekc8PGZ7sJbZGorUshkAwAQ==
2024-01-25 00:27:24 UTC	15834	IN	Data Raw: 7b 22 69 64 22 3a 22 34 66 63 35 35 32 35 38 2d 65 61 31 65 2d 34 37 30 66 2d 62 39 61 32 2d 39 33 61 61 65 36 63 30 61 30 38 63 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 75 6c 64 43 6f 6c 6c 65 63 74 49 50 41 64 64 72 65 73 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 57 65 62 48 69 73 74 6f 72 79 22 3a 66 61 6c 73 65 2c 22 6e 65 77 53 44 4b 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 70 70 49 64 22 3a 22 64 36 37 33 39 63 64 33 63 65 31 61 35 64 31 62 38 37 63 34 37 66 33 62 38 39 65 37 38 35 64 35 22 2c 22 72 75 6c 65 73 22 3a 5b 7b 22 69 64 22 3a 22 30 37 61 64 30 39 62 31 2d 32 32 63 38 2d 34 30 64 64 2d 61 38 31 61 2d 36 39 62 37 30 35 31 65 64 34 62 32 22 2c 22 6e 61 6d 65 22 3a 22 44 65 66 61 75 6c 74 20 28 47 72 65 65 6e Data Ascii: {"id":"4fc55258-ea1e-470f-b9a2-93aae6c0a08c","enabled":true,"shouldCollectIPAddress":true,"enableWebHistory":false,"newSDKEnabled":true,"appId":"d6739cd3ce1a5d1b87c47f3b89e785d5","rules":[{"id":"07ad09b1-22c8-40dd-a81a-69b7051ed4b2","name":"Default (Green
2024-01-25 00:27:24 UTC	1137	IN	Data Raw: 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 4f 53 54 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 70 65 72 73 6f 6e 61 6c 2f 6c 69 66 65 2d 6d 6f 6d 65 6e 74 73 2f 6d 61 6e 61 67 65 2d 6d 6f 6e 65 79 2f 6d 61 6e 61 67 65 2d 64 65 62 74 2f 68 6f 6d 65 2d 6c 6f 61 6e 2d 66 75 6e 64 73 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 Data Ascii: :[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal/life-moments/manage-money/manage-debt/home-loan-funds","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPE
2024-01-25 00:27:24 UTC	16384	IN	Data Raw: 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 4f 53 54 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 70 65 72 73 6f 6e 61 6c 2f 6c 69 66 65 2d 6d 6f 6d 65 6e 74 73 2f 68 6f 6d 65 2d 70 72 6f 70 65 72 74 79 2f 70 61 79 2d 6f 66 66 2d 68 6f 6d 65 2d 6c 6f 61 6e 2f 6e 65 78 74 2d 73 74 65 70 73 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 Data Ascii: OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal/life-moments/home-property/pay-off-home-loan/next-steps","variable":"URL_PAT
2024-01-25 00:27:24 UTC	16384	IN	Data Raw: 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 63 6f 6d 6d 6f 6e 2f 66 6f 72 6d 73 2f 68 6f 6d 65 2d 6c 6f 61 6e 2d 6f 6e 6c 69 6e 65 2d 63 6f 6e 64 69 74 69 6f 6e 61 6c 2d 61 70 70 72 6f 76 61 6c 2d 6c 69 6d 69 74 2d 69 6e 63 72 65 61 73 65 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 4f 53 54 22 2c 22 63 6f 6d 70 61 72 61 74 Data Ascii: ION","value":"/common/forms/home-loan-online-conditional-approval-limit-increase","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variable":"URL_HOST","comparat
2024-01-25 00:27:24 UTC	12715	IN	Data Raw: 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 63 6f 6d 6d 6f 6e 2f 66 6f 72 6d 73 2f 62 75 73 69 6e 65 73 73 2f 6e 61 62 2d 6c 6f 77 2d 72 61 74 65 2d 62 75 73 69 6e 65 73 73 2d 63 61 72 64 2d 61 70 70 6c 69 63 61 74 69 6f 6e 2d 66 6f 72 6d 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c Data Ascii: "type":"VARIABLE_CONDITION","value":"/common/forms/business/nab-low-rate-business-card-application-form","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"www.nab.com.au","variabl
2024-01-25 00:27:24 UTC	16384	IN	Data Raw: 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 70 65 72 73 6f 6e 61 6c 2f 70 65 72 73 6f 6e 61 6c 2d 6c 6f 61 6e 73 2f 68 6f 6d 65 2d 72 65 6e 6f 76 61 74 69 6f 6e 2d 6c 6f 61 6e 73 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 6e 65 78 74 72 65 6c 2d 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 Data Ascii: ","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal/personal-loans/home-renovation-loans","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"nextrel-www.nab.com.au
2024-01-25 00:27:24 UTC	16384	IN	Data Raw: 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 6e 65 78 74 72 65 6c 2d 77 77 77 2e 6e 61 62 2e 63 6f 6d 2e 61 75 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 48 4f 53 54 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 2c 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 70 65 72 73 6f 6e 61 6c 2f 63 61 6c 63 75 6c 61 74 6f 72 73 2d 61 6e 64 2d 66 69 6e 61 6e 63 69 61 6c 2d 74 6f 6f 6c 73 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 Data Ascii: },{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"nextrel-www.nab.com.au","variable":"URL_HOST","comparator":"EQ"},{"type":"VARIABLE_CONDITION","value":"/personal/calculators-and-financial-tools","variable":"URL_PATH","c
2024-01-25 00:27:24 UTC	15119	IN	Data Raw: 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 2f 62 75 73 69 6e 65 73 73 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 6e 64 2d 66 6f 72 65 69 67 6e 2d 65 78 63 68 61 6e 67 65 2f 66 69 6e 61 6e 63 69 61 6c 2d 6d 61 72 6b 65 74 73 2f 65 78 63 68 61 6e 67 65 2d 72 61 74 65 2d 66 6f 72 65 63 61 73 74 22 2c 22 76 61 72 69 61 62 6c 65 22 3a 22 55 52 4c 5f 50 41 54 48 22 2c 22 63 6f 6d 70 61 72 61 74 6f 72 22 3a 22 45 51 22 7d 5d 7d 2c 7b 22 74 79 70 65 22 3a 22 4f 50 45 52 41 54 4f 52 22 2c 22 76 61 6c 75 65 22 3a 22 41 4e 44 22 2c 22 63 72 69 74 65 72 69 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 56 41 52 49 41 42 4c 45 5f 43 4f 4e 44 49 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 6e 65 78 74 72 65 6c 2d 77 77 77 2e 6e Data Ascii: VARIABLE_CONDITION","value":"/business/international-and-foreign-exchange/financial-markets/exchange-rate-forecast","variable":"URL_PATH","comparator":"EQ"}]},{"type":"OPERATOR","value":"AND","criteria":[{"type":"VARIABLE_CONDITION","value":"nextrel-www.n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49950	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:24 UTC	2906	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142442146&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; s_nr=1706142440380-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242
2024-01-25 00:27:24 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-079ad6b924a2de0e7 X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:24 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49952	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:24 UTC	627	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142442438 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:24 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 280c9d4266c690eca29338d5796c8f9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: 6jf83K3W5yUZGcZrNkAACLhmZl5MzBCIvQmoPqjLX18g9bx1GMU6jg==
2024-01-25 00:27:24 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49953	52.65.199.83	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:24 UTC	576	OUT	GET /geo/ip HTTP/1.1 Host: proactive-chat-server-ap.prod.aws.lcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:25 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:25 GMT Content-Type: application/json Content-Length: 805 Connection: close x-amzn-RequestId: 1a28d763-3bf5-49d6-bc3a-86e73bccf968 Access-Control-Allow-Origin: * x-amz-apigw-id: SEelHHa3SwMEagA= X-Amzn-Trace-Id: Root=1-65b1aaed-09e3f21b1dcb97ae31b3fbbd
2024-01-25 00:27:25 UTC	805	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 37 34 22 2c 22 67 65 6f 49 70 22 3a 7b 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 7b 22 63 6f 64 65 22 3a 22 45 55 22 2c 22 6e 61 6d 65 73 22 3a 7b 22 64 65 22 3a 22 45 75 72 6f 70 61 22 2c 22 72 75 22 3a 22 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b0 22 2c 22 70 74 2d 42 52 22 3a 22 45 75 72 6f 70 61 22 2c 22 6a 61 22 3a 22 e3 83 a8 e3 83 bc e3 83 ad e3 83 83 e3 83 91 22 2c 22 65 6e 22 3a 22 45 75 72 6f 70 65 22 2c 22 66 72 22 3a 22 45 75 72 6f 70 65 22 2c 22 7a 68 2d 43 4e 22 3a 22 e6 ac a7 e6 b4 b2 22 2c 22 65 73 22 3a 22 45 75 72 6f 70 61 22 7d 2c 22 67 65 6f 6e 61 6d 65 5f 69 64 22 3a 36 32 35 35 31 34 38 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 7b 22 69 73 5f 69 6e 5f 65 75 72 6f 70 65 61 6e 5f 75 6e 69 6f 6e 22 3a 74 Data Ascii: {"ip":"81.181.57.74","geoIp":{"continent":{"code":"EU","names":{"de":"Europa","ru":"","pt-BR":"Europa","ja":"","en":"Europe","fr":"Europe","zh-CN":"","es":"Europa"},"geoname_id":6255148},"country":{"is_in_european_union":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49954	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:25 UTC	639	OUT	GET /nab-prod/live/01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:25 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 6776 Connection: close Date: Thu, 25 Jan 2024 00:27:26 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "f1becce0de848d615f3ea15685794ecd" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 d2820253420febdf7911a2eca8959d80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: 5XUxAOxDKjwHoCgwriS4I2cC97JacEImLLlKNmAY5Lg_cwkT1q83Vg==
2024-01-25 00:27:25 UTC	6776	IN	Data Raw: 7b 22 69 64 22 3a 22 61 37 36 36 36 62 65 35 2d 33 36 34 65 2d 34 32 33 34 2d 39 35 39 30 2d 34 62 33 32 62 30 32 39 33 33 64 35 22 2c 22 62 72 61 6e 64 43 6f 6c 6f 72 22 3a 22 23 43 32 30 30 30 30 22 2c 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 43 6f 6c 6f 72 22 3a 22 23 30 30 30 30 30 30 22 2c 22 61 63 74 69 6f 6e 43 6f 6c 6f 72 22 3a 22 23 43 32 30 30 30 30 22 2c 22 64 69 73 70 6c 61 79 53 74 79 6c 65 22 3a 22 62 75 74 74 6f 6e 22 2c 22 68 65 61 64 65 72 54 65 78 74 22 3a 22 4e 41 42 20 4d 65 73 73 61 67 69 6e 67 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 54 65 78 74 22 3a 22 4d 65 73 73 61 67 65 20 75 73 20 32 34 2f 37 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 55 72 6c 22 3a 6e 75 6c 6c 2c 22 62 75 74 74 6f 6e 49 63 6f 6e 55 72 6c 22 3a 22 Data Ascii: {"id":"a7666be5-364e-4234-9590-4b32b02933d5","brandColor":"#C20000","conversationColor":"#000000","actionColor":"#C20000","displayStyle":"button","headerText":"NAB Messaging","introductionText":"Message us 24/7","backgroundImageUrl":null,"buttonIconUrl":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49955	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:25 UTC	425	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142442438 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:25 UTC	517	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:26 GMT Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a482940a2cf06eb5d2ed41088b95c672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: UW80a9xLRSIvVYVc8lZBqHC1narR_IVqqahK_EErUwnZzBjiUVWAag==
2024-01-25 00:27:25 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49956	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:25 UTC	759	OUT	POST /v2/events?v=13.59.1&pn=2&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142441&pid=51360&str=1197&di=2306&dc=3761&fl=3810&sr=27&mdh=3350&ct=0 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive Content-Length: 259 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:25 UTC	259	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 30 2c 22 74 73 22 3a 32 34 2c 22 78 22 3a 31 32 38 30 2c 22 79 22 3a 39 30 37 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 76 61 6c 22 3a 32 30 30 35 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 2c 22 74 73 22 3a 33 34 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 76 61 6c 22 3a 32 32 31 32 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 2c 22 74 73 22 3a 33 35 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 76 61 6c 22 3a 31 35 38 32 2e 35 2c 22 74 73 22 3a 33 36 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 43 4c 53 22 2c 22 76 61 6c 22 3a 30 2e 30 34 32 31 39 35 30 32 30 39 33 39 38 32 33 36 34 2c 22 74 73 22 3a Data Ascii: [{"type":0,"ts":24,"x":1280,"y":907},{"type":19,"name":"FCP","val":2005.1999999999825,"ts":34},{"type":19,"name":"LCP","val":2212.1999999999825,"ts":35},{"type":19,"name":"TTFB","val":1582.5,"ts":36},{"type":19,"name":"CLS","val":0.04219502093982364,"ts":
2024-01-25 00:27:25 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:25 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49959	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:26 UTC	437	OUT	GET /nab-prod/live/01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:26 UTC	559	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 6776 Connection: close Date: Wed, 24 Jan 2024 06:09:02 GMT Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "f1becce0de848d615f3ea15685794ecd" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ee71fcaa8d3fdbddee74740dbbf20dc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: lp2sRudx4jy7eeN9RnRwr7XK8hNnE1kIXcnTDPFM7f8DM96Kda46vw== Age: 65905
2024-01-25 00:27:26 UTC	6776	IN	Data Raw: 7b 22 69 64 22 3a 22 61 37 36 36 36 62 65 35 2d 33 36 34 65 2d 34 32 33 34 2d 39 35 39 30 2d 34 62 33 32 62 30 32 39 33 33 64 35 22 2c 22 62 72 61 6e 64 43 6f 6c 6f 72 22 3a 22 23 43 32 30 30 30 30 22 2c 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 43 6f 6c 6f 72 22 3a 22 23 30 30 30 30 30 30 22 2c 22 61 63 74 69 6f 6e 43 6f 6c 6f 72 22 3a 22 23 43 32 30 30 30 30 22 2c 22 64 69 73 70 6c 61 79 53 74 79 6c 65 22 3a 22 62 75 74 74 6f 6e 22 2c 22 68 65 61 64 65 72 54 65 78 74 22 3a 22 4e 41 42 20 4d 65 73 73 61 67 69 6e 67 22 2c 22 69 6e 74 72 6f 64 75 63 74 69 6f 6e 54 65 78 74 22 3a 22 4d 65 73 73 61 67 65 20 75 73 20 32 34 2f 37 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 55 72 6c 22 3a 6e 75 6c 6c 2c 22 62 75 74 74 6f 6e 49 63 6f 6e 55 72 6c 22 3a 22 Data Ascii: {"id":"a7666be5-364e-4234-9590-4b32b02933d5","brandColor":"#C20000","conversationColor":"#000000","actionColor":"#C20000","displayStyle":"button","headerText":"NAB Messaging","introductionText":"Message us 24/7","backgroundImageUrl":null,"buttonIconUrl":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49958	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:26 UTC	2906	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142444238&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; s_nr=1706142440380-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242
2024-01-25 00:27:27 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:26 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-0eba77d3b278e2a83 X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:27 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49962	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:26 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:26 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:26 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-022e1eb1044b4bcaf Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:26 GMT X-UUID: a9247a16-c45d-49bc-8f1f-71c1081422e5 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:26 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:26 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49963	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:26 UTC	571	OUT	GET /branches/brand-messenger-v1.935.0/webSdk.js HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:27 UTC	549	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 650550 Connection: close Date: Thu, 25 Jan 2024 00:27:28 GMT Last-Modified: Tue, 23 Jan 2024 17:31:23 GMT ETag: "beeac5455fc4cb817f59266f55b80946" x-amz-server-side-encryption: AES256 Cache-Control: max-age=2630000 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 9250ce61dbd138f5b6d747dd25e6029a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: 64sg94aaN-rOe9blV9sF5OfVOCOKV_64HmXoH2JVJzmzRjEYcZscQw==
2024-01-25 00:27:27 UTC	15815	IN	Data Raw: 1f 8b 08 08 d2 f7 af 65 00 03 77 65 62 53 64 6b 2e 6a 73 00 ec 5b 6b 73 db 46 96 fd be bf 02 c6 07 0f 10 37 31 78 3f c8 60 55 8a 22 8f bd 45 3b bb f1 8c 67 cb 2a 8d 0a 22 5b 22 22 10 50 01 20 25 45 c2 7f df 73 bb 01 10 14 29 3b 72 32 3b 9b ad 48 56 13 e8 c7 ed fb 3c f7 76 33 f9 f3 37 2f 94 d7 45 a9 64 e9 8c e7 15 57 d2 fc a2 28 97 49 9d 16 b9 72 9d f1 04 5d 15 e7 ca 0d 3f ff 30 bf 32 7e aa 8c e9 db a3 e3 f7 1f 8e 8d fa b6 56 be f9 f3 bf 69 17 ab 7c 46 b3 35 fd 7e 9d 94 ca d9 19 a6 5e 27 b3 ab b3 65 31 5f 65 bc 3a 3b 8b ef dd c0 36 83 71 3f 93 b3 9a e5 fa bd ba 22 e2 75 99 ce 6a 75 92 1b 73 ad 66 f7 57 b3 f1 80 60 c9 eb 55 99 2b e7 0d fb f0 97 3d fd 77 0d fb f4 5f 7b fa 8f 1a 56 07 7b fa 6f 1a 96 fe c7 9e fe ab 86 55 e7 7b fa d7 0d 4b de ef e9 3f 6b d8 e2 Data Ascii: ewebSdk.js[ksF71x?`U"E;g*"[""P %Es);r2;HV<v37/EdW(Ir]?02~Vi\|F5~^'e1_e:;6q?"ujusfW`U+=w_{V{oU{K?k
2024-01-25 00:27:27 UTC	16384	IN	Data Raw: cd 03 75 73 4a d2 0d db 66 2d a7 3b 45 5a bb ba 95 96 90 16 85 69 24 d2 b5 6b 1b 2f 44 52 9b c4 8e 8a 74 c4 88 6c c3 e4 05 a6 75 41 ae 48 c7 0c b2 a5 8d 2d 0a 48 ab 5c 2b d2 c5 40 ac 13 8e 05 e0 f5 45 5b 2d 13 46 d0 dc 72 dc 3e 84 6f 6f 17 98 55 83 6e 86 23 30 64 0c e5 f9 94 2c 46 13 0d 76 42 44 8f 22 5d 63 7b 29 52 56 89 9e 78 c0 90 16 65 e2 77 51 40 db ae c2 cf 52 b2 6e 34 f9 4d a4 6b 85 c2 1f 3b 45 da 30 6a 53 af 5f 56 90 15 0b 61 cf 04 48 47 fe 0f 41 7e fe 6d 7a ce a0 40 af 80 3c 67 88 6e aa 3c 67 36 de b2 49 31 11 a0 b6 f6 97 16 c9 34 d3 6d 99 b3 8c 04 82 a7 af 2d 90 53 40 4e f4 7a cf cf 60 95 d6 d0 ed 8a 12 f4 9d e6 6c 47 24 b5 ac 2d 5d 82 dc 29 a9 3d ba b7 8f ac ba 06 1b 83 dc 84 f4 20 5d 8b e3 4c a4 77 af ee 1c 0a 84 72 64 59 ba 48 b4 6b d7 07 94 Data Ascii: usJf-;EZi$k/DRtluAH-H\+@E[-Fr>ooUn#0d,FvBD"]c{)RVxewQ@Rn4Mk;E0jS_VaHGA~mz@<gn<g6I14m-S@Nz`lG$-])= ]LwrdYHk
2024-01-25 00:27:27 UTC	1024	IN	Data Raw: 5d 6d 0b 4b df 0b 31 09 c7 76 e3 17 2a 20 c6 60 68 72 fa f8 d4 42 69 59 42 65 0b 28 b1 f2 84 e3 77 2c 20 35 f8 41 4e 86 8e 30 99 a1 43 b0 3e 99 c6 34 95 c4 54 d6 13 50 28 29 90 0a 75 a4 c6 40 8e ef aa eb 91 68 88 28 3c 5b 9d 63 a8 72 8c 95 48 c6 27 25 16 72 90 79 a7 12 83 f2 9f 07 74 85 33 84 a0 fd f4 a9 98 07 75 06 6c fe 26 a3 05 85 2a 70 2f b0 47 23 2e 30 88 35 d1 6a 15 83 f8 16 84 93 c5 76 ea 6f 8a da 71 c7 b2 4a a7 67 dc c6 7d ee 8a 0b e6 9f 97 f6 64 ad bd b8 50 61 47 8d 48 bf 21 93 81 26 5d 50 52 4e 42 26 19 72 4e c2 7b e0 71 a2 1b 17 17 c8 09 80 ca 65 56 22 c5 bd 28 c4 fc d9 dd 3b 3c 45 2e 6b de 58 98 b4 d3 ac 90 8f d3 8b b8 98 72 87 92 f3 a7 b4 2f 83 ed 19 8f 78 4c 6e a1 a2 f6 73 ca a7 a4 41 64 bc 71 d5 c5 6c eb a2 ec 9f 6b 5e d5 4f ed ab 66 51 ba Data Ascii: ]mK1v* `hrBiYBe(w, 5AN0C>4TP()u@h(<[crH'%ryt3ul&*p/G#.05jvoqJg}dPaGH!&]PRNB&rN{qeV"(;<E.kXr/xLnsAdqlk^OfQ
2024-01-25 00:27:27 UTC	16384	IN	Data Raw: fd 05 28 ef af 30 3d 4a 89 2d 75 0d a4 4c 1b 08 c2 02 4c d2 cf 05 2f c7 61 50 65 80 8b 52 77 66 81 bf 40 2b b3 48 33 8d 16 58 5e 1e f3 c8 e7 43 26 a8 43 54 7f c9 8b c3 c7 5b 5d 5c 4d 0d aa 45 7c a2 51 4b 94 f8 4a 4c 84 c9 6a b9 f4 30 a1 9d c5 59 37 52 d6 58 54 ba 9a 7a 8b bf 75 f8 d8 2d 6f 89 07 e1 49 e1 48 cc 79 89 a2 4d ec af 01 fd 8f 68 1a a9 5b a8 e3 5a 92 6a 10 a6 6a e0 9f 72 62 5c af d6 d8 81 24 4e 29 8a bc 86 35 05 9d ea 0c 7c bb a6 02 1e 8c f4 75 aa 53 40 83 ef 78 2f b2 73 45 72 09 73 ae 30 31 83 4a 6c c4 3f 43 6b f9 2a 7f ac f5 9c 95 f3 ea 86 7f c3 75 d3 74 4f 15 55 0c 44 a9 05 1f d0 bc aa e5 34 8e e7 c8 82 52 d3 99 0d 45 05 b1 b7 87 0a 65 cf 70 4e bc e2 04 2f 22 29 29 20 5e 8a 3a c8 2b e9 18 20 4a ec 15 ff 24 35 93 f9 2d 96 a2 28 85 56 2c c6 29 Data Ascii: (0=J-uLL/aPeRwf@+H3X^C&CT[]\ME\|QKJLj0Y7RXTzu-oIHyMh[Zjjrb\$N)5\|uS@x/sErs01Jl?Ck*utOUD4REepN/")) ^:+ J$5-(V,)
2024-01-25 00:27:27 UTC	3824	IN	Data Raw: c8 f9 d7 c1 a0 b7 15 f7 3e 1f de 6e 4c c6 36 b2 46 11 2f 0a 4c 7c 95 4e be 55 f1 60 32 f6 ca 93 a3 f1 69 95 f9 71 f4 c1 f3 7a 68 ed 43 ff b0 fb 43 74 20 3e 54 87 5d 94 5a 9b 7c a8 3a 1f 56 3a f4 6b 72 3f d0 ae 38 49 c5 15 75 f9 5f de 7f b4 9b 7b 2b a9 45 58 67 cd d7 6e 2a 14 ad f7 ac 09 6f 61 a3 88 1d 3a af ff 2f 98 1d 0a 2c 53 24 cc ed 10 2a 10 f7 79 dd 7c 15 39 13 3a 7e d6 10 10 d8 6a 97 0d 11 0f ac be f2 e4 fb aa 2a 0b 63 c6 df 4f dd 7d a1 29 6a fa 4e 68 84 5d 35 da d8 92 15 66 c1 92 55 7f a5 f5 29 0b a9 eb ef bc 1a c2 ce f2 c5 ef ce 7e 2d a5 62 ed 12 f5 52 ea e3 b0 55 ca 0d 7e 80 93 b3 10 cd 61 58 d2 06 85 2e db 5e a3 b1 c6 ed 41 72 e8 4c 9c 47 28 86 e8 5d 37 25 66 0d 1e 37 85 a8 9f 98 1d db 5b 03 9e c8 c9 6e 7c 3c 30 27 de 34 21 4f e2 ea fa ba 2f 7e Data Ascii: >nL6F/L\|NU`2iqzhCCt >T]Z\|:V:kr?8Iu_{+EXgnoa:/,S$y\|9:~j*cO})jNh]5fU)~-bRU~aX.^ArLG(]7%f7[n\|<0'4!O/~
2024-01-25 00:27:27 UTC	16384	IN	Data Raw: 24 c3 81 b4 fe 4b 0f e2 c3 9d b0 a6 e6 63 bf ec 86 75 b6 dd eb 59 c9 53 09 bd 00 14 f1 57 bc 94 e5 24 32 86 fe 9b 30 c9 68 77 b8 c3 68 76 43 e8 45 2f d8 cd fa 73 a4 d1 e9 26 75 97 6a 30 4b d1 8e 2c 06 34 cb fa b6 7a 96 ea ed ba 17 7a 3f 55 2a 1f 7a 87 a9 a3 02 4c 8c 05 f7 1f a0 52 13 15 c1 6c c7 b0 e6 67 a1 12 f4 bf a8 eb 51 71 5b 10 34 49 c5 dd 55 9a 8d 9f b0 c1 51 8c 20 21 de 1d 44 79 08 ee ba 98 b0 ad b5 e7 68 75 ee 0e 93 de c3 e5 e5 6e b7 d9 19 5a 9d d3 42 ca c8 ca ae 5a 0f d6 4a 06 25 c6 1b b8 cc c2 5b 38 30 8e cb e0 a4 62 86 fd 45 1e 9c eb d0 eb a6 0e 2e 65 04 c1 8f 95 80 83 6b 2a 71 a4 43 48 be 91 11 04 f7 2a 7e 24 97 4a 5c e9 10 92 9f c9 08 82 67 95 80 74 fb 38 bd c0 71 7d 5d 29 73 01 aa f1 d4 86 51 10 8c 3c f4 2e 20 9b 19 f6 9e 54 f4 b3 da a1 73 Data Ascii: $KcuYSW$20hwhvCE/s&uj0K,4zz?UzLRlgQq[4IUQ !DyhunZBZJ%[80bE.ekqCH*~$J\gt8q}])sQ<. Ts
2024-01-25 00:27:27 UTC	16384	IN	Data Raw: ca 8e e1 e9 61 67 1f 6a 79 05 b8 80 c6 e0 93 9e 82 d9 53 5e ab 4f 39 4a 4e 5c e3 c1 d6 16 d7 8b 9d b8 6b 1a 72 97 7a dd fc 09 ab 9a 51 ff 92 99 2b d8 18 6d 32 9d 23 9c 4e d8 ff 08 f8 95 91 98 a0 a1 39 c1 fd 9c 03 c5 80 a8 31 11 bd 6f c0 36 3b 8a af 0b 87 91 3a 5b 6f d5 09 e9 85 4c 9c 8f 65 7f 09 04 6a 2f 5a 92 f9 0b ea ef a0 3b c0 73 4c fc d6 ee e4 db d3 fe ee 64 7b db 1d 02 4c e2 26 8e 56 ec c7 3e 67 7d 05 d9 7a bb dc ed af b3 b8 24 9c f6 24 c8 04 81 88 aa 42 1d a9 0d 66 e4 1c 89 9a 98 8b 6c 39 75 6a 0c e4 5c c4 fd b8 52 9a 90 81 94 4e c9 a3 3f 40 3b 54 64 80 a4 bd 29 45 cb 58 89 78 ae 68 01 d0 6a 96 5d 75 a0 39 d7 2b b3 60 32 ce 99 ca 43 b6 9a 95 45 3d 23 ec 08 19 78 48 06 a9 c2 08 b3 52 1e eb 99 e7 97 36 15 30 68 3a 05 69 c4 4c 95 fa e3 59 76 04 6b 84 Data Ascii: agjyS^O9JN\krzQ+m2#N91o6;:[oLej/Z;sLd{L&V>g}z$$Bfl9uj\RN?@;Td)EXxhj]u9+`2CE=#xHR60h:iLYvk
2024-01-25 00:27:27 UTC	16384	IN	Data Raw: 5b 52 04 40 7b 61 3d 2f 2c be 23 16 22 26 b9 4e b2 e6 4c a3 83 5a ae 56 26 00 e2 76 cd f1 a8 a5 23 4e 0f b5 b0 8e bd 84 33 20 8c bd a4 d4 c9 83 a1 09 96 a5 4e 28 1a d4 84 91 80 c3 48 b2 24 d1 c4 38 89 55 6b 03 b6 92 cc 18 63 18 f4 d3 a1 ed 8c 68 13 ac 93 00 cd 5d 33 f4 38 20 ca d6 a2 8e bb ec f8 bf 8e 54 15 c2 49 0a 08 07 d1 2b f4 96 63 57 de 5f 3b 54 ae b3 d3 6a 7e f5 28 0d 27 0e c5 cc 2d 20 5d 3b db 14 47 ba 3d 44 ac 88 b2 4e 87 42 13 d2 6f be 79 85 6e 8d 80 56 67 9d 69 33 1b 47 bd 10 8a 67 1c 83 72 e9 da 6c 6b 6b 2a 63 d4 a1 38 6d 28 63 fc 02 15 3d 09 4c 73 67 1d cd 13 25 61 13 60 56 23 0a 90 cb 83 b0 b7 00 e9 a3 46 c4 e3 8a 11 66 0c 56 06 52 4e 79 82 e9 69 66 ce 84 db 49 01 8a f5 01 83 b9 57 0d 92 d4 84 8d 9c 55 2d d5 ad aa 6e 4b 16 2a 44 73 b9 8a 46 Data Ascii: [R@{a=/,#"&NLZV&v#N3 N(H$8Ukch]38 TI+cW_;Tj~('- ];G=DNBoynVgi3Ggrlkkc8m(c=Lsg%a`V#FfVRNyifIWU-nKDsF
2024-01-25 00:27:27 UTC	16384	IN	Data Raw: d3 a8 87 f1 87 8b 05 3f 7e 90 71 98 ec 09 c9 e5 55 b7 4a d2 79 da 24 4f 37 95 16 03 96 28 89 e6 9f 1d 6a 8d 33 4f fb 69 78 06 27 a6 75 ff 6d 51 5e 5e 15 21 e2 4d 78 71 19 e5 2f 44 87 4f 7a 00 86 63 52 a1 e5 c9 0c cd ff d4 50 3c 2b 76 28 0f 09 14 60 bc 50 61 04 28 2b be d3 81 46 80 e3 7a 63 79 80 72 49 fb bb 0f b7 2b a8 30 c0 3f 35 b2 31 7f 80 43 06 2c 40 0a e0 b1 6e 01 3e 22 b5 30 ad 04 5f 2e b2 60 16 39 9a 4d 45 54 2c 2a ad 5e 49 e1 ef 22 b2 10 ff f4 01 fa 08 1d 5d b6 14 b5 20 4f 84 a6 9e 20 ef e7 43 8b 2c bc 33 8e ba e1 e0 1f 4c 69 d7 e3 18 c9 05 c9 1c 1b 2f 4c 54 a5 5b 71 71 82 72 88 54 39 97 bf fd 48 83 92 cd 7a 98 a3 bb 94 e8 5f 68 f7 2f e6 0f 45 37 3e fb 73 bb 71 91 f4 e7 2b bb 81 0f 45 37 7e f8 73 bb 31 48 92 7c 65 37 f0 a1 e8 46 38 ff 10 4d a4 40 Data Ascii: ?~qUJy$O7(j3Oix'umQ^^!Mxq/DOzcRP<+v(`Pa(+FzcyrI+0?51C,@n>"0_.`9MET,*^I"] O C,3Li/LT[qqrT9Hz_h/E7>sq+E7~s1H\|e7F8M@
2024-01-25 00:27:27 UTC	16384	IN	Data Raw: bb 0d 67 27 bb 33 5f 1d 1d 1f 9c 1c 1c bd 3c ef 1f bd 3c 79 7c f0 72 b0 7f fe e4 bd 89 95 ba 78 e4 bc 67 b2 5b df 39 d6 da 87 69 ea 92 12 b4 99 16 2b 80 63 3b 75 04 eb b9 69 f4 07 0d 58 97 d8 cc a6 06 7d 3c 9b 35 be 3d cd a9 77 6d e3 db 5d 7f f7 5b e3 cc f2 83 b8 71 fa ed ee 2f 97 bb df da 29 f7 77 66 7e 8b 6e a7 e8 56 4a 75 ed 81 6b dc b0 c3 2a ac 28 c9 7d 33 56 3f b9 9d 51 dc a4 bf bc 2a 1a a2 b1 7a fa 86 c4 9d 1d 51 eb 32 77 bf d9 91 70 f0 d7 6b 38 a8 47 d9 11 68 55 1b fa b4 cd 72 0e ac 5a 82 77 44 2a 96 cb 68 24 68 f1 97 0c 8a bf b3 d3 ec 08 7a c9 6f f5 1a ea 88 af d7 c0 1a 6b e7 9c 5c c2 ad b4 e9 66 3b 59 43 c4 9a 36 e6 55 19 78 e9 c1 c3 01 86 df 81 68 2d 1c 30 2c 91 3c 00 b3 43 72 e7 89 f4 06 fa 43 c0 56 74 b4 5b 1e 39 ee a7 d7 ce e9 14 f8 b9 33 32 Data Ascii: g'3_<<y\|rxg[9i+c;uiX}<5=wm][q/)wf~nVJuk(}3V?QzQ2wpk8GhUrZwD*h$hzok\f;YC6Uxh-0,<CrCVt[932

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49968	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:26 UTC	758	OUT	POST /v2/events?v=13.59.1&pn=2&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142441&pid=51360&str=1197&di=2306&dc=3761&fl=3810&sr=27&mdh=3350&ct=0 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive Content-Length: 75 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:26 UTC	75	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 32 2c 22 74 73 22 3a 32 32 33 39 2c 22 78 22 3a 36 34 37 2c 22 79 22 3a 34 34 32 7d 2c 7b 22 74 79 70 65 22 3a 32 2c 22 74 73 22 3a 32 38 31 34 2c 22 78 22 3a 36 34 30 2c 22 79 22 3a 34 33 35 7d 5d Data Ascii: [{"type":2,"ts":2239,"x":647,"y":442},{"type":2,"ts":2814,"x":640,"y":435}]
2024-01-25 00:27:27 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:27 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49961	54.206.194.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:26 UTC	374	OUT	GET /geo/ip HTTP/1.1 Host: proactive-chat-server-ap.prod.aws.lcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:27 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:27 GMT Content-Type: application/json Content-Length: 805 Connection: close x-amzn-RequestId: 9a009506-bfa7-4737-96b4-37f9256bbe17 Access-Control-Allow-Origin: * x-amz-apigw-id: SEelbErSSwMEd5A= X-Amzn-Trace-Id: Root=1-65b1aaef-2b9de92061ca517838d25dbc
2024-01-25 00:27:27 UTC	805	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 37 34 22 2c 22 67 65 6f 49 70 22 3a 7b 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 7b 22 63 6f 64 65 22 3a 22 45 55 22 2c 22 6e 61 6d 65 73 22 3a 7b 22 64 65 22 3a 22 45 75 72 6f 70 61 22 2c 22 72 75 22 3a 22 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b0 22 2c 22 70 74 2d 42 52 22 3a 22 45 75 72 6f 70 61 22 2c 22 6a 61 22 3a 22 e3 83 a8 e3 83 bc e3 83 ad e3 83 83 e3 83 91 22 2c 22 65 6e 22 3a 22 45 75 72 6f 70 65 22 2c 22 66 72 22 3a 22 45 75 72 6f 70 65 22 2c 22 7a 68 2d 43 4e 22 3a 22 e6 ac a7 e6 b4 b2 22 2c 22 65 73 22 3a 22 45 75 72 6f 70 61 22 7d 2c 22 67 65 6f 6e 61 6d 65 5f 69 64 22 3a 36 32 35 35 31 34 38 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 7b 22 69 73 5f 69 6e 5f 65 75 72 6f 70 65 61 6e 5f 75 6e 69 6f 6e 22 3a 74 Data Ascii: {"ip":"81.181.57.74","geoIp":{"continent":{"code":"EU","names":{"de":"Europa","ru":"","pt-BR":"Europa","ja":"","en":"Europe","fr":"Europe","zh-CN":"","es":"Europa"},"geoname_id":6255148},"country":{"is_in_european_union":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49969	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:27 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:27 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:27 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-046667dd29f6cb721 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:27 GMT X-UUID: d46770e8-19fe-4b7c-a9a3-82e0685404c6 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:27 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:27 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49970	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:27 UTC	560	OUT	GET /bundle/loader.js?v=1706142445525 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:28 UTC	540	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 261 Connection: close Date: Thu, 25 Jan 2024 00:27:29 GMT Last-Modified: Tue, 23 Jan 2024 17:31:24 GMT ETag: "203466a85e12bce0b869df3d13cf52ee" x-amz-server-side-encryption: AES256 Cache-Control: max-age=5 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 5d3cacf6f215960ea8001f24e2e30e66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: ASiegsLooqbbzzOQ4B3L1ckpBwSkRSDBrJvLfkrqNDBuaP_ccVoIUA==
2024-01-25 00:27:28 UTC	261	IN	Data Raw: 1f 8b 08 08 eb f7 af 65 00 03 6c 6f 61 64 65 72 2e 6a 73 00 6d 90 cd 4e c3 30 10 84 ef 7d 0a 73 8a 73 88 03 42 48 fc a8 97 56 1c 7a e0 04 2f e0 7a 37 b1 21 b1 2d ff 54 42 a8 ef 8e 6d e2 80 50 7d 5a 69 67 76 be 31 1d a2 16 41 19 4d 5b f2 b5 21 e9 9d b8 23 80 10 2d 1e 80 6c 49 73 74 5c c3 0b 7a 8f 7a 44 b7 8b 1a 26 7c 15 4e d9 d0 3c 15 83 1a 08 bd 02 23 e2 8c 3a b0 11 c3 f3 84 79 dc 7d 1e 80 d6 4b 6d 3d 5f 23 a2 9b f2 75 19 82 f5 8f 7d 5f 52 ba b9 c6 30 6e 2d fb 90 c6 19 cf 84 99 cb 5a 48 f4 ff 75 dd e9 86 3d dc de b1 eb fe 58 c0 d8 bb 5f a8 6a 8e 2f a8 6f 7c 4c 69 2b a4 70 c8 03 2e 9c b4 f9 d1 34 ed af 73 75 31 ef 44 72 26 da 4b 4b 95 7f a8 56 bc 24 10 92 3b 8f 21 37 8d 61 e8 ee ff c0 ad 30 12 39 e4 be a8 61 2f d5 04 74 b5 2f 40 e7 cd b9 a5 69 fe 06 ec db Data Ascii: eloader.jsmN0}ssBHVz/z7!-TBmP}Zigv1AM[!#-lIst\zzD&\|N<#:y}Km=_#u}_R0n-ZHu=X_j/o\|Li+p.4su1Dr&KKV$;!7a09a/t/@i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49974	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:28 UTC	627	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447359 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:29 UTC	706	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 ecc551e9b6a993eae7896f034e6177cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: SSUXPOud9bmQIqaTEFGhkcddtRqATAjfRltuVnRXXjfPiQ3oDo0qOg== Age: 5
2024-01-25 00:27:29 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49976	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	627	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447489 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:29 UTC	706	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 ae77ff90d6837f5ad73a77c09e1ae242.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: Ip22NvTjTnSZu0gse3l08_0bAmUGc70SySJm1pkzIMClavSdN9NxcQ== Age: 5
2024-01-25 00:27:29 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49973	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	2906	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142447047&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142429036%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142429037%27%5D%5D; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; s_nr=1706142440380-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242
2024-01-25 00:27:29 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:29 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-079ad6b924a2de0e7 X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:29 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49977	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	758	OUT	POST /v2/events?v=13.59.1&pn=2&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142441&pid=51360&str=1197&di=2306&dc=3761&fl=3810&sr=27&mdh=3350&ct=0 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:29 UTC	38	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 32 2c 22 74 73 22 3a 35 39 35 38 2c 22 78 22 3a 36 34 30 2c 22 79 22 3a 34 33 35 7d 5d Data Ascii: [{"type":2,"ts":5958,"x":640,"y":435}]
2024-01-25 00:27:29 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:29 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49975	52.65.199.83	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	576	OUT	GET /geo/ip HTTP/1.1 Host: proactive-chat-server-ap.prod.aws.lcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:29 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:29 GMT Content-Type: application/json Content-Length: 805 Connection: close x-amzn-RequestId: 48817367-d8d2-4aef-a726-1ad6af73f3c1 Access-Control-Allow-Origin: * x-amz-apigw-id: SEel0F8EywMEdNA= X-Amzn-Trace-Id: Root=1-65b1aaf1-37f93c025f0bace029cbfd5d
2024-01-25 00:27:29 UTC	805	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 37 34 22 2c 22 67 65 6f 49 70 22 3a 7b 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 7b 22 63 6f 64 65 22 3a 22 45 55 22 2c 22 6e 61 6d 65 73 22 3a 7b 22 64 65 22 3a 22 45 75 72 6f 70 61 22 2c 22 72 75 22 3a 22 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b0 22 2c 22 70 74 2d 42 52 22 3a 22 45 75 72 6f 70 61 22 2c 22 6a 61 22 3a 22 e3 83 a8 e3 83 bc e3 83 ad e3 83 83 e3 83 91 22 2c 22 65 6e 22 3a 22 45 75 72 6f 70 65 22 2c 22 66 72 22 3a 22 45 75 72 6f 70 65 22 2c 22 7a 68 2d 43 4e 22 3a 22 e6 ac a7 e6 b4 b2 22 2c 22 65 73 22 3a 22 45 75 72 6f 70 61 22 7d 2c 22 67 65 6f 6e 61 6d 65 5f 69 64 22 3a 36 32 35 35 31 34 38 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 7b 22 69 73 5f 69 6e 5f 65 75 72 6f 70 65 61 6e 5f 75 6e 69 6f 6e 22 3a 74 Data Ascii: {"ip":"81.181.57.74","geoIp":{"continent":{"code":"EU","names":{"de":"Europa","ru":"","pt-BR":"Europa","ja":"","en":"Europe","fr":"Europe","zh-CN":"","es":"Europa"},"geoname_id":6255148},"country":{"is_in_european_union":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49978	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	425	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447359 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:29 UTC	524	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:26 GMT Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 053d1439c2ff6651216ea3129c572d10.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: XF_zrqG16yjo_LUtLnX0I1aVhLkO2kg3pmhjIlHMsDoYYS_2yVSFYw== Age: 4
2024-01-25 00:27:29 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49979	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	425	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142447489 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:29 UTC	524	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:26 GMT Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ed5ac6e128ec4c4f9d03c2e31f620e88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: 0RfCwkIsOiYyoyDhkz9oMRl1-wrkkrO45yErr7E1Gx-9oLPLHEMUaQ== Age: 4
2024-01-25 00:27:29 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49981	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	656	OUT	GET /images/nab-prod/businessIconUrl-1fdf30c1-054d-4b41-9116-d0d57f9d5b59 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:30 UTC	495	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 7409 Connection: close Date: Thu, 25 Jan 2024 00:27:31 GMT Last-Modified: Mon, 26 Sep 2022 03:11:00 GMT ETag: "05d2b2f5eb34ab2afc6a106c573a47b2" Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 cca05e6d076711b721c87632d74f25f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: HK5Kr4E-kIN80P-jMfXQl2i2DfBjgpYouMwuIgwdZih62_AwBs83MQ==
2024-01-25 00:27:30 UTC	7409	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 1c 86 49 44 41 54 78 01 ed 5d 6b d0 25 45 79 7e 66 cd 0f 93 88 bb 54 14 21 15 61 80 c2 b2 22 04 0c fc b0 62 22 87 98 54 14 22 8b 55 89 e5 25 e8 6a 48 44 45 40 e2 a5 22 26 fb 21 8a 08 54 58 13 52 6a 8a b0 bb 65 28 a4 30 41 b6 34 fe 48 25 fb ad 25 5e 2a 1a a0 82 f2 43 e3 77 b8 48 88 60 2d 60 41 92 1f d9 49 3f 67 ba e7 bc d3 d3 33 67 ce 65 e6 4c cf f4 53 f5 6e cf f4 5c ce f9 f6 f4 33 ef b5 7b 22 04 34 85 58 c9 0e 25 67 e8 f6 04 dd 9a fe 1d fa 3c b9 6d e3 49 2d c4 58 b4 ec 7b 50 6c df 2b ce 0b 58 21 22 04 2c Data Ascii: PNGIHDRXpHYssRGBgAMAaIDATx]k%Ey~fT!a"b"T"U%jHDE@"&!TXRje(0A4H%%^*CwH`-`AI?g3geLSn\3{"4X%g<mI-X{Pl+X!",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49980	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	654	OUT	GET /images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:30 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 2328 Connection: close Date: Thu, 25 Jan 2024 00:27:31 GMT Last-Modified: Mon, 26 Sep 2022 03:15:33 GMT ETag: "9476dfa6c88d21a19ee1bbc885cb0d0d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 113cae4eca0cb2c022ca203b946b243c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: N_2cjXuHZ_0ImuIe__kb_uxTIW4tRUnkPEfDXHr4JAygvvVtd9H57A==
2024-01-25 00:27:30 UTC	2328	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ca 00 00 00 ca 08 06 00 00 00 e4 65 df a8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 ad 49 44 41 54 78 01 ed dd fd 75 db b6 1a c7 f1 c7 f7 dc ff eb 0d 2e 37 48 ee 04 51 27 68 3a 41 dc 09 9a 4e 60 77 82 a4 13 c8 99 a0 e9 04 52 26 b0 3b 01 95 09 9a 4e f0 2b 10 d0 8d e2 e8 e5 01 49 c9 04 f8 fd 9c 83 43 f7 98 56 a5 08 0f f1 0e 98 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 f4 2e 0c 67 27 e9 32 5c 9a 2e 5d 6e a5 5d 3e 75 69 13 af 17 17 17 f7 86 b3 23 50 4e 2c 04 45 Data Ascii: PNGIHDRepHYssRGBgAMAaIDATxu.7HQ'h:AN`wR&;N+ICV.g'2\.]n]>ui#PN,E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49982	63.140.38.237	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	3363	OUT	GET /b/ss/nab-prd/10/JS-2.22.4/s67314964867477?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A28%204%20-60&d.&nsid=0&jsonv=1&.d&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Apersonal&g=https%3A%2F%2Fwww.nab.com.au%2F&cc=AUD&events=event22&c9=D%3Dv9&v9=nab%3Apersonal&c11=D%3Dg&v11=D%3Dg&c22=D%3Dv22&v22=6fb99a8b-1dba-452a-8453-66e78b5a2ed5&c65=chatwidget-available%3AChatbot&v65=D%3Dc65&v72=v47%20set%20via%20response%20token%20%3A%20null&pe=lnk_o&pev2=virtual-assistant-offered&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&lrt=754&AQE=1 HTTP/1.1 Host: smetrics.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142448371-New
2024-01-25 00:27:30 UTC	828	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 25 Jan 2024 00:27:30 GMT expires: Wed, 24 Jan 2024 00:27:30 GMT last-modified: Fri, 26 Jan 2024 00:27:30 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C74531577018668379620070530052756004963; Path=/; Domain=nab.com.au; Max-Age=63072000; Expires=Sat, 24 Jan 2026 00:27:27 GMT; etag: 3663913013016231936-4617519370037307474 vary: * x-aam-tid: 45S0HfmTS94= dcs: dcs-prod-va6-2-v053-03f885568.edge-va6.demdex.com 5 ms content-type: application/x-javascript;charset=utf-8 content-length: 746 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-01-25 00:27:30 UTC	746	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 74 6e 74 22 2c 22 63 76 22 3a 22 70 72 6f 66 69 6c 65 2e 6f 6d 6e 69 61 3d 63 3a 75 6e 6b 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 6e 61 62 2e 63 6f 6d 2e 61 75 22 7d 5d 2c 22 75 75 69 64 22 3a 22 37 34 32 34 39 37 39 39 39 35 32 36 37 36 34 37 38 38 31 30 30 34 34 36 36 34 35 37 36 31 36 36 33 39 35 34 32 34 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 34 35 53 30 48 66 6d 54 53 39 34 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 33 35 38 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[{"cn":"aam_tnt","cv":"profile.omnia=c:unk","ttl":30,"dmn":"nab.com.au"}],"uuid":"74249799952676478810044664576166395424","dcs_region":7,"tid":"45S0HfmTS94=","ibs":[{"id":"358","ttl":10080,"tag":"img

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49983	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:29 UTC	778	OUT	GET /dvar?v=13.59.1&pid=51360&pn=1&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=194594 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:30 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:30 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49986	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:30 UTC	627	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142448712 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:30 UTC	706	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 fee643092e4af2bd1352bdea36277218.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: lXzddUMlVOj-B4GdJRtwjS1CXIk9lZ7rZhGBqxi_xW2g4lvII04pfg== Age: 6
2024-01-25 00:27:30 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49985	54.206.194.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:30 UTC	374	OUT	GET /geo/ip HTTP/1.1 Host: proactive-chat-server-ap.prod.aws.lcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:31 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:30 GMT Content-Type: application/json Content-Length: 805 Connection: close x-amzn-RequestId: 46fb6a98-38c5-4942-a87d-6e029d776935 Access-Control-Allow-Origin: * x-amz-apigw-id: SEemAHQZSwMEDrQ= X-Amzn-Trace-Id: Root=1-65b1aaf2-3420d65d0ee605c84c7101d0
2024-01-25 00:27:31 UTC	805	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 37 34 22 2c 22 67 65 6f 49 70 22 3a 7b 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 7b 22 63 6f 64 65 22 3a 22 45 55 22 2c 22 6e 61 6d 65 73 22 3a 7b 22 64 65 22 3a 22 45 75 72 6f 70 61 22 2c 22 72 75 22 3a 22 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b0 22 2c 22 70 74 2d 42 52 22 3a 22 45 75 72 6f 70 61 22 2c 22 6a 61 22 3a 22 e3 83 a8 e3 83 bc e3 83 ad e3 83 83 e3 83 91 22 2c 22 65 6e 22 3a 22 45 75 72 6f 70 65 22 2c 22 66 72 22 3a 22 45 75 72 6f 70 65 22 2c 22 7a 68 2d 43 4e 22 3a 22 e6 ac a7 e6 b4 b2 22 2c 22 65 73 22 3a 22 45 75 72 6f 70 61 22 7d 2c 22 67 65 6f 6e 61 6d 65 5f 69 64 22 3a 36 32 35 35 31 34 38 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 7b 22 69 73 5f 69 6e 5f 65 75 72 6f 70 65 61 6e 5f 75 6e 69 6f 6e 22 3a 74 Data Ascii: {"ip":"81.181.57.74","geoIp":{"continent":{"code":"EU","names":{"de":"Europa","ru":"","pt-BR":"Europa","ja":"","en":"Europe","fr":"Europe","zh-CN":"","es":"Europa"},"geoname_id":6255148},"country":{"is_in_european_union":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49987	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:30 UTC	759	OUT	POST /v2/events?v=13.59.1&pn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142432&pid=51360&str=194&di=6059&dc=10206&fl=10246&sr=21&mdh=4308&ct=0 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive Content-Length: 39 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:30 UTC	39	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 32 2c 22 74 73 22 3a 31 36 35 30 38 2c 22 78 22 3a 35 37 35 2c 22 79 22 3a 34 37 37 7d 5d Data Ascii: [{"type":2,"ts":16508,"x":575,"y":477}]
2024-01-25 00:27:30 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:30 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49988	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:30 UTC	422	OUT	GET /images/nab-prod/businessIconUrl-1fdf30c1-054d-4b41-9116-d0d57f9d5b59 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:30 UTC	494	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 7409 Connection: close Date: Thu, 25 Jan 2024 00:27:31 GMT Last-Modified: Mon, 26 Sep 2022 03:11:00 GMT ETag: "05d2b2f5eb34ab2afc6a106c573a47b2" Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 06ea45bb5683bd29972da02346cce480.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: d1t8zjtaGrEl7pIYIfEqhMMxWSQD2Sr6aFjEzzn5H-wgd1ZkdVp5pw==
2024-01-25 00:27:30 UTC	7409	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 1c 86 49 44 41 54 78 01 ed 5d 6b d0 25 45 79 7e 66 cd 0f 93 88 bb 54 14 21 15 61 80 c2 b2 22 04 0c fc b0 62 22 87 98 54 14 22 8b 55 89 e5 25 e8 6a 48 44 45 40 e2 a5 22 26 fb 21 8a 08 54 58 13 52 6a 8a b0 bb 65 28 a4 30 41 b6 34 fe 48 25 fb ad 25 5e 2a 1a a0 82 f2 43 e3 77 b8 48 88 60 2d 60 41 92 1f d9 49 3f 67 ba e7 bc d3 d3 33 67 ce 65 e6 4c cf f4 53 f5 6e cf f4 5c ce f9 f6 f4 33 ef b5 7b 22 04 34 85 58 c9 0e 25 67 e8 f6 04 dd 9a fe 1d fa 3c b9 6d e3 49 2d c4 58 b4 ec 7b 50 6c df 2b ce 0b 58 21 22 04 2c Data Ascii: PNGIHDRXpHYssRGBgAMAaIDATx]k%Ey~fT!a"b"T"U%jHDE@"&!TXRje(0A4H%%^*CwH`-`AI?g3geLSn\3{"4X%g<mI-X{Pl+X!",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49989	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:30 UTC	420	OUT	GET /images/nab-prod/buttonIconUrl-fec0321b-e188-4f2e-8652-4484a837d57b HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:30 UTC	532	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 2328 Connection: close Date: Thu, 25 Jan 2024 00:27:31 GMT Last-Modified: Mon, 26 Sep 2022 03:15:33 GMT ETag: "9476dfa6c88d21a19ee1bbc885cb0d0d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 fee643092e4af2bd1352bdea36277218.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: VCLHbwB0ouER_O72EIBU42xkhdXL_KrCeTK2sl0Il9Ce51_k1Cg2-w==
2024-01-25 00:27:30 UTC	2328	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ca 00 00 00 ca 08 06 00 00 00 e4 65 df a8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 ad 49 44 41 54 78 01 ed dd fd 75 db b6 1a c7 f1 c7 f7 dc ff eb 0d 2e 37 48 ee 04 51 27 68 3a 41 dc 09 9a 4e 60 77 82 a4 13 c8 99 a0 e9 04 52 26 b0 3b 01 95 09 9a 4e f0 2b 10 d0 8d e2 e8 e5 01 49 c9 04 f8 fd 9c 83 43 f7 98 56 a5 08 0f f1 0e 98 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 f4 2e 0c 67 27 e9 32 5c 9a 2e 5d 6e a5 5d 3e 75 69 13 af 17 17 17 f7 86 b3 23 50 4e 2c 04 45 Data Ascii: PNGIHDRepHYssRGBgAMAaIDATxu.7HQ'h:AN`wR&;N+ICV.g'2\.]n]>ui#PN,E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49990	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:30 UTC	425	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142448712 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:30 UTC	524	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:26 GMT Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 113cae4eca0cb2c022ca203b946b243c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: TetxwW4ZsP81BH65GWD76EsMVDDhhJ1gp_y54v9k3wkiA4XCRP6FYw== Age: 5
2024-01-25 00:27:30 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49992	63.140.38.237	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:30 UTC	3401	OUT	GET /b/ss/nab-prd/10/JS-2.22.4/s65980185759898?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A29%204%20-60&d.&nsid=0&jsonv=1&.d&sdid=25FABC59907D0206-4402823AEA43BBBA&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Ahelp-support&g=https%3A%2F%2Fwww.nab.com.au%2Fhelp-support&cc=AUD&events=event22&c9=D%3Dv9&v9=nab%3Ahelp-support&c11=D%3Dg&v11=D%3Dg&c22=D%3Dv22&v22=66677161-7331-4103-a8e8-a0b9c6a5cfd4&c65=chatwidget-available%3AChatbot&v65=D%3Dc65&v72=widget%20type%3A%20Chatbot&pe=lnk_o&pev2=virtual-assistant-offered&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&lrt=166&AQE=1 HTTP/1.1 Host: smetrics.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New
2024-01-25 00:27:31 UTC	828	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 25 Jan 2024 00:27:31 GMT expires: Wed, 24 Jan 2024 00:27:31 GMT last-modified: Fri, 26 Jan 2024 00:27:31 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C74531577018668379620070530052756004963; Path=/; Domain=nab.com.au; Max-Age=63072000; Expires=Sat, 24 Jan 2026 00:27:27 GMT; etag: 3663913016644468736-4617904404751402231 vary: * x-aam-tid: OUUiF/zPRQY= dcs: dcs-prod-va6-2-v053-01d8071db.edge-va6.demdex.com 4 ms content-type: application/x-javascript;charset=utf-8 content-length: 746 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-01-25 00:27:31 UTC	746	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 74 6e 74 22 2c 22 63 76 22 3a 22 70 72 6f 66 69 6c 65 2e 6f 6d 6e 69 61 3d 63 3a 75 6e 6b 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 6e 61 62 2e 63 6f 6d 2e 61 75 22 7d 5d 2c 22 75 75 69 64 22 3a 22 37 34 32 34 39 37 39 39 39 35 32 36 37 36 34 37 38 38 31 30 30 34 34 36 36 34 35 37 36 31 36 36 33 39 35 34 32 34 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 4f 55 55 69 46 2f 7a 50 52 51 59 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 33 35 38 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[{"cn":"aam_tnt","cv":"profile.omnia=c:unk","ttl":30,"dmn":"nab.com.au"}],"uuid":"74249799952676478810044664576166395424","dcs_region":7,"tid":"OUUiF/zPRQY=","ibs":[{"id":"358","ttl":10080,"tag":"img

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49993	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:30 UTC	778	OUT	GET /dvar?v=13.59.1&pid=51360&pn=2&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=967397 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:31 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:31 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49991	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:31 UTC	651	OUT	POST /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 26230 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:31 UTC	16384	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 31 37 2e 32 38 39 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 32 39 31 31 33 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 36 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 31 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 31 36 36 38 2c 22 44 44 54 22 3a 39 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 31 36 37 37 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 70 6f 73 74 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 30 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f Data Ascii: {"vr":"4.5.17.2890","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4/5","ts":1706142429113,"mg":"0","au":"0://6/","at":0,"pp":1,"mx":{"PLC":1,"FBT":1668,"DDT":9,"DPT":0,"PLT":1677,"ARE":0},"md":"post","xs":200,"si":0},{"eg":"2","et":2,"eu":"0://
2024-01-25 00:27:31 UTC	9846	OUT	Data Raw: 22 3a 31 31 36 37 33 2c 22 6d 22 3a 5b 30 2c 30 2c 31 36 33 39 5d 2c 22 65 22 3a 30 2c 22 64 22 3a 30 2c 22 73 22 3a 30 2c 22 70 22 3a 22 22 7d 2c 7b 22 75 22 3a 22 30 3a 2f 2f 32 33 39 2f 32 34 33 3f 32 34 34 22 2c 22 69 22 3a 34 2c 22 72 22 3a 31 2c 22 66 22 3a 31 2c 22 6f 22 3a 31 31 39 35 37 2c 22 6d 22 3a 5b 30 2c 2d 31 2c 2d 31 2c 30 2c 34 31 38 2c 34 31 38 2c 34 31 38 2c 34 32 30 2c 36 38 38 2c 36 38 38 2c 39 34 37 2c 39 34 39 5d 2c 22 65 22 3a 30 2c 22 64 22 3a 30 2c 22 73 22 3a 33 30 30 2c 22 70 22 3a 22 68 74 74 70 2f 31 2e 31 22 7d 2c 7b 22 75 22 3a 22 30 3a 2f 2f 36 2f 31 36 2f 31 37 2f 32 2f 31 38 2f 31 39 2f 32 33 22 2c 22 69 22 3a 38 2c 22 72 22 3a 31 2c 22 66 22 3a 31 2c 22 6f 22 3a 31 32 34 32 30 2c 22 6d 22 3a 5b 30 2c 2d 31 2c 2d 31 2c Data Ascii: ":11673,"m":[0,0,1639],"e":0,"d":0,"s":0,"p":""},{"u":"0://239/243?244","i":4,"r":1,"f":1,"o":11957,"m":[0,-1,-1,0,418,418,418,420,688,688,947,949],"e":0,"d":0,"s":300,"p":"http/1.1"},{"u":"0://6/16/17/2/18/19/23","i":8,"r":1,"f":1,"o":12420,"m":[0,-1,-1,
2024-01-25 00:27:31 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:23\|g:a4962439-6c9d-48a4-a23c-e4b0c78186f7; Path=/; Expires=Thu, 25-Jan-2024 00:28:01 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:23\|g:a4962439-6c9d-48a4-a23c-e4b0c78186f7\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:01 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:01 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49994	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:31 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:31 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:31 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-0313cc711c1e8e638 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 7148b0428db0ebbd7546f47133838a6c62277b79-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:31 GMT X-UUID: 490fd332-a5c1-4c2c-84e5-62b3b1b5ca3d Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:31 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:31 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49995	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:32 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:32 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:32 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-03608899aedf4fa61 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 7148b0428db0ebbd7546f47133838a6c62277b79-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:32 GMT X-UUID: eb6748dd-e4c7-4415-9044-139da527ef1f Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:32 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:32 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49996	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:33 UTC	399	OUT	GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:33 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:b1f11799-0014-4d2c-b179-c663b4c6ca13; Path=/; Expires=Thu, 25-Jan-2024 00:28:03 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:0\|g:b1f11799-0014-4d2c-b179-c663b4c6ca13\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:03 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:03 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:03 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:03 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:0\|d:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:03 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50015	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:35 UTC	558	OUT	GET /bundle/loader.js?v1706142453947 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:36 UTC	540	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 261 Connection: close Date: Thu, 25 Jan 2024 00:27:36 GMT Last-Modified: Tue, 23 Jan 2024 17:31:24 GMT ETag: "203466a85e12bce0b869df3d13cf52ee" x-amz-server-side-encryption: AES256 Cache-Control: max-age=5 Content-Encoding: gzip Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 0878f88c5343da8d67032ec6de2d7e04.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: 3_XxYmVsbQoVOhUrsAKLkbgiUw1Artkhlv8LCDJBtyI5NeuVOybR9Q==
2024-01-25 00:27:36 UTC	261	IN	Data Raw: 1f 8b 08 08 eb f7 af 65 00 03 6c 6f 61 64 65 72 2e 6a 73 00 6d 90 cd 4e c3 30 10 84 ef 7d 0a 73 8a 73 88 03 42 48 fc a8 97 56 1c 7a e0 04 2f e0 7a 37 b1 21 b1 2d ff 54 42 a8 ef 8e 6d e2 80 50 7d 5a 69 67 76 be 31 1d a2 16 41 19 4d 5b f2 b5 21 e9 9d b8 23 80 10 2d 1e 80 6c 49 73 74 5c c3 0b 7a 8f 7a 44 b7 8b 1a 26 7c 15 4e d9 d0 3c 15 83 1a 08 bd 02 23 e2 8c 3a b0 11 c3 f3 84 79 dc 7d 1e 80 d6 4b 6d 3d 5f 23 a2 9b f2 75 19 82 f5 8f 7d 5f 52 ba b9 c6 30 6e 2d fb 90 c6 19 cf 84 99 cb 5a 48 f4 ff 75 dd e9 86 3d dc de b1 eb fe 58 c0 d8 bb 5f a8 6a 8e 2f a8 6f 7c 4c 69 2b a4 70 c8 03 2e 9c b4 f9 d1 34 ed af 73 75 31 ef 44 72 26 da 4b 4b 95 7f a8 56 bc 24 10 92 3b 8f 21 37 8d 61 e8 ee ff c0 ad 30 12 39 e4 be a8 61 2f d5 04 74 b5 2f 40 e7 cd b9 a5 69 fe 06 ec db Data Ascii: eloader.jsmN0}ssBHVz/z7!-TBmP}Zigv1AM[!#-lIst\zzD&\|N<#:y}Km=_#u}_R0n-ZHu=X_j/o\|Li+p.4su1Dr&KKV$;!7a09a/t/@i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50022	52.71.237.94	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:35 UTC	572	OUT	OPTIONS /events/diagnostic/59c45122922f080adde50ec0 HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-launchdarkly-user-agent Origin: https://ib.nab.com.au User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:35 UTC	507	IN	HTTP/1.1 204 No Content Date: Thu, 25 Jan 2024 00:27:35 GMT Content-Type: application/json Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50027	52.71.237.94	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:36 UTC	687	OUT	POST /events/diagnostic/59c45122922f080adde50ec0 HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Content-Length: 771 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-LaunchDarkly-User-Agent: JSClient/2.19.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:36 UTC	771	OUT	Data Raw: 7b 22 6b 69 6e 64 22 3a 22 64 69 61 67 6e 6f 73 74 69 63 2d 63 6f 6d 62 69 6e 65 64 22 2c 22 69 64 22 3a 7b 22 64 69 61 67 6e 6f 73 74 69 63 49 64 22 3a 22 38 38 38 61 32 63 37 30 2d 62 62 31 38 2d 31 31 65 65 2d 38 38 37 32 2d 34 31 34 30 33 64 62 63 37 61 65 62 22 2c 22 73 64 6b 4b 65 79 53 75 66 66 69 78 22 3a 22 65 35 30 65 63 30 22 7d 2c 22 63 72 65 61 74 69 6f 6e 44 61 74 65 22 3a 31 37 30 36 31 34 32 34 35 33 39 35 32 2c 22 64 61 74 61 53 69 6e 63 65 44 61 74 65 22 3a 31 37 30 36 31 34 32 34 35 33 39 34 33 2c 22 64 72 6f 70 70 65 64 45 76 65 6e 74 73 22 3a 30 2c 22 65 76 65 6e 74 73 49 6e 4c 61 73 74 42 61 74 63 68 22 3a 30 2c 22 73 74 72 65 61 6d 49 6e 69 74 73 22 3a 5b 5d 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 6a 73 2d 63 6c 69 65 6e 74 Data Ascii: {"kind":"diagnostic-combined","id":{"diagnosticId":"888a2c70-bb18-11ee-8872-41403dbc7aeb","sdkKeySuffix":"e50ec0"},"creationDate":1706142453952,"dataSinceDate":1706142453943,"droppedEvents":0,"eventsInLastBatch":0,"streamInits":[],"sdk":{"name":"js-client
2024-01-25 00:27:36 UTC	524	IN	HTTP/1.1 202 Accepted Date: Thu, 25 Jan 2024 00:27:36 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50034	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:36 UTC	609	OUT	GET /nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:37 UTC	700	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 306 Connection: close Date: Thu, 25 Jan 2024 00:27:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Thu, 25 Jan 2024 00:27:32 GMT ETag: "6d97ffcab76ab3c807d9ccac7e6b1c81" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 5e7abe54c49858ee91819565c70d6162.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: DhE89GgjkjP159n9WiQ9gExNPa5SfukilFJHUJfq0LcBEOsXV2MeEw==
2024-01-25 00:27:37 UTC	306	IN	Data Raw: 7b 22 77 69 64 67 65 74 48 61 73 68 22 3a 22 39 35 31 36 34 64 34 39 39 36 37 32 33 39 65 35 63 39 32 39 38 36 66 39 34 62 62 39 64 31 37 36 22 2c 22 64 69 73 70 6c 61 79 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 79 70 65 49 64 22 3a 22 42 48 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 2c 7b 22 74 79 70 65 49 64 22 3a 22 54 41 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 2c 7b 22 74 79 70 65 49 64 22 3a 22 4f 41 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 5d 2c 22 72 75 6c 65 44 69 73 70 6c 61 79 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 6f 70 65 6e 42 75 73 69 6e 65 73 73 48 6f 75 72 73 47 72 6f 75 70 73 22 3a 5b 5d 2c 22 63 6f 62 72 6f 77 73 65 43 6f 6e 66 69 67 22 3a 7b 22 65 6e 61 62 6c 65 64 Data Ascii: {"widgetHash":"95164d49967239e5c92986f94bb9d176","displayConditions":[{"typeId":"BH1","satisfied":true},{"typeId":"TA1","satisfied":true},{"typeId":"OA1","satisfied":true}],"ruleDisplayConditions":[],"openBusinessHoursGroups":[],"cobrowseConfig":{"enabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50031	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:36 UTC	509	OUT	OPTIONS /api/fl/idgib-w-nab-ib HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-cfids Origin: https://ib.nab.com.au User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:37 UTC	443	IN	HTTP/1.1 200 OK access-control-allow-origin: https://ib.nab.com.au access-control-allow-credentials: true access-control-allow-methods: POST,GET,OPTIONS access-control-allow-headers: Accept,DNT,Keep-Alive,User-Agent,If-Modified-Since,Cache-Control,Content-Type,Origin,ETag,If-None-Match,X-Cfids,Authorization access-control-max-age: 86400 date: Thu, 25 Jan 2024 00:27:37 GMT server: istio-envoy connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50037	159.69.19.197	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:37 UTC	654	OUT	GET /AnyDesk.exe HTTP/1.1 Host: download.anydesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:37 UTC	313	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 25 Jan 2024 00:27:37 GMT Content-Type: application/octet-stream Content-Length: 5525576 Last-Modified: Thu, 18 Jan 2024 15:17:20 GMT Connection: close ETag: "65a94100-545048" Expires: Thu, 25 Jan 2024 00:27:36 GMT Cache-Control: no-cache Accept-Ranges: bytes
2024-01-25 00:27:37 UTC	16071	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 e9 1c e7 68 ad 7d 89 3b ad 7d 89 3b ad 7d 89 3b c2 0b 22 3b a5 7d 89 3b c2 0b 23 3b ae 7d 89 3b b6 e0 13 3b ac 7d 89 3b c2 0b 14 3b ac 7d 89 3b 52 69 63 68 ad 7d 89 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 ba 8e 4c 65 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0a 00 00 2a 00 00 00 e0 53 00 00 b8 28 01 e5 1c 00 00 00 10 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$h};};};";};#;};;};;};Rich};PELLe"*S(
2024-01-25 00:27:37 UTC	16384	IN	Data Raw: 49 7b 5e 11 8e 3a b4 b9 e4 b1 62 34 25 63 1e 50 db 34 ea 10 14 bd 07 bc 99 51 a3 14 22 85 80 32 2e df 56 12 9f 0d 10 14 a0 f6 50 76 d1 6d d6 bc 1b 85 b5 2a 5c 46 e6 f4 f8 2a af 8e b7 c9 09 e4 2b fd ff de 47 f5 fb a9 a2 0e 11 ac bf 7e df ec c8 c3 f2 7c ea 9c 86 bd bd 9b 05 33 24 1a e5 e4 37 54 33 bc 3b bc 81 13 75 29 21 8f 01 c3 e9 da 68 02 d6 72 69 1f 69 c8 be 26 5b 9a a3 26 43 61 ba c3 5a 85 12 57 18 3e 80 7d 32 c1 04 f7 d0 89 7c 6a 1c a7 24 e1 47 20 55 05 4a 72 ba d4 76 24 39 1d 8a 7b 62 f2 5e fd 6e 10 0e 20 9c 36 b4 4e 68 d8 69 4d 1e 9a d7 2b 12 e5 12 ba 37 2b e9 c9 4b db 36 cf 29 78 13 46 46 bb 93 ce d6 19 74 df d0 ad 55 dc a8 a0 b3 58 28 3e db a8 cd 7b 7d 87 d6 0a cd 5b 7a 15 53 90 3d 49 70 2b 7b 42 ef 11 4d 9f 55 8f ff 14 a4 f7 ea 5c 9b e7 2f 7e 5b Data Ascii: I{^:b4%cP4Q"2.VPvm\F+G~\|3$7T3;u)!hrii&[&CaZW>}2\|j$G UJrv$9{b^n 6NhiM+7+K6)xFFtUX(>{}[zS=Ip+{BMU\/~[
2024-01-25 00:27:37 UTC	16384	IN	Data Raw: 51 20 31 54 67 0a df fc c1 29 e4 14 40 cc 39 76 0e 7b a4 ff ab a3 41 e2 6e c4 ce e1 d4 3e a0 8f 43 fb 9b fe e3 8f 85 f3 80 cd 8b 3a 69 45 63 a3 cd 4e 53 30 ac b7 7c 87 cf 15 a1 46 9e dd bb 51 05 a7 16 da 0d d1 32 50 b8 74 88 5b 65 72 c7 82 85 87 bd 46 c0 70 4d 88 37 93 fc fc e8 43 5b c1 fc b7 89 39 ce 89 69 23 25 a8 84 f2 f0 b1 0b 35 45 c6 d5 28 4f 56 e1 0a 09 68 a8 f1 e2 8f 20 84 36 34 3c e0 86 75 3b d2 dc 1d 0d dc 69 67 52 87 5e 9c 4b 97 32 8c 87 1a be a3 94 7f 5c 09 06 71 55 9e b6 10 d2 0b 25 dc c7 be b7 2d 5f 9b be 51 38 f6 83 fd d5 96 25 36 72 07 68 f7 4f e5 69 4d d0 60 69 4f a5 5d e6 d8 ec 9f 93 b9 69 c4 5d e2 b1 eb a7 3e d5 98 9e 8b 25 25 56 ed 5d 1e d5 0f 13 d9 e2 c8 0d d2 17 a9 34 f9 d3 70 d1 39 ff c2 8b 69 00 6f ca ac 7d f1 8e f2 08 d6 9f 88 22 Data Ascii: Q 1Tg)@9v{An>C:iEcNS0\|FQ2Pt[erFpM7C[9i#%5E(OVh 64<u;igR^K2\qU%-_Q8%6rhOiM`iO]i]>%%V]4p9io}"
2024-01-25 00:27:37 UTC	16384	IN	Data Raw: 78 36 a2 a9 aa 81 28 e5 6b 45 8f 30 c8 bf 92 11 41 25 11 b5 c5 4e ef bb 73 4d d5 c7 00 23 ca 8b fc 0e 0d 28 93 28 a1 88 99 d0 dd e8 7e 75 28 20 f4 75 db 80 18 29 ca 6d 75 0b 94 c1 8d b5 e0 30 2d 63 12 d5 c4 32 6a 96 e8 eb 20 44 e4 f9 63 56 9c cf a8 89 de 8f 4b f1 d9 60 0d fa e7 a7 99 e8 33 94 6c b7 f7 20 c8 43 a0 c3 b9 c1 37 59 2c b2 26 aa b2 80 33 54 4c 01 dc 47 2b f3 2d f3 83 c9 6d 5d 80 9d 46 97 a5 cf d1 97 97 bc ba 07 2d b1 69 c3 dc e7 9b 48 d8 88 63 c8 b7 76 1d d1 94 3f 0b 5c 10 78 b5 52 4c 68 1d 68 06 f3 5d 2c 3e 23 be 4a c6 f5 a5 ab f3 92 4b 7c 5c 6d d5 37 8e ca 43 f5 ec a6 2f 64 8c 34 b7 b3 c9 94 bd 79 a3 ac 17 2c 52 8e 8f 99 95 05 67 e2 61 02 d0 1d a5 35 18 f2 50 f0 7e 33 1b 5d 70 2e 7e 5d c0 0a 87 51 c7 b0 72 96 92 b7 4c 03 e0 d4 c3 80 c7 af e9 Data Ascii: x6(kE0A%NsM#((~u( u)mu0-c2j DcVK`3l C7Y,&3TLG+-m]F-iHcv?\xRLhh],>#JK\|\m7C/d4y,Rga5P~3]p.~]QrL
2024-01-25 00:27:37 UTC	16384	IN	Data Raw: 29 59 df 59 69 2b 10 36 97 74 0c f1 49 c3 65 89 48 82 91 a4 90 48 c6 8f 8a 4c 01 20 ae 3a f7 79 85 dc ce 6d 1b 28 c8 23 a4 0e 5f e9 41 ef 6a 5b 8d 55 e0 68 c0 29 78 78 84 e9 98 c5 e8 d1 4a 64 fd f4 b9 68 79 91 f6 03 b7 2c 0b 98 35 71 c7 e5 66 f3 8f 85 45 8c c0 0a 10 58 81 8d e3 b8 09 02 4b 97 2d 78 db f5 6d 71 0d 00 79 fd a5 34 cb ca c3 1c 1e d9 0d 68 a7 cf 25 7a 0a 4b 5c 8f d4 f4 bd d8 c5 1e 75 22 79 ce db 07 5b 96 54 3b 2f 9e 29 98 8f 01 a7 84 34 27 97 15 b2 eb 0d a4 57 fd ea 77 fe 1c e6 9b 20 a6 87 b7 9c f7 d1 a5 b8 27 5b ea c0 0f 1f 46 05 51 ba 2e 82 a0 51 cf 47 96 79 78 b1 8a 9b bf 63 67 d4 26 a9 90 29 64 36 fe 4e 61 ac 2d d6 de 81 4f e5 d5 99 e4 e9 5a 5d 90 fc c5 2d 5f f7 90 34 ce 15 75 b2 01 39 cf c0 10 8d 49 1d cd 39 37 2f 36 76 1b e4 66 aa 3a 67 Data Ascii: )YYi+6tIeHHL :ym(#_Aj[Uh)xxJdhy,5qfEXK-xmqy4h%zK\u"y[T;/)4'Ww '[FQ.QGyxcg&)d6Na-OZ]-_4u9I97/6vf:g
2024-01-25 00:27:37 UTC	16384	IN	Data Raw: 59 77 4e b1 cd cb 61 69 e5 3d fa a0 42 bc ce 11 2c 92 46 4f bd 61 f0 cd 94 21 6e c9 e7 4a 04 73 98 ef d5 f0 0d ed 41 84 9b 06 bb 81 05 59 2a 94 64 bc 32 03 84 ca 8e e4 17 9a 03 53 46 47 97 1a f2 fb b7 d1 44 5a 44 b1 f0 42 6b 6c c8 69 af e2 0d 53 96 4e 78 00 63 34 60 da 4f b3 cb da 64 95 16 20 3a 98 af f3 fa 5e fb d2 4c 0b 6a e6 4a db e0 d3 17 4b aa e6 7c 3b ff 29 08 86 0f d8 f9 9c a1 be f6 75 f0 b6 87 18 bc e0 ab 84 ad b3 02 a7 d9 98 8d 92 bf ea 92 b7 88 1e ca 69 96 58 cb a8 55 5d 9d 79 f9 61 1a 1a 15 24 35 ab 01 28 cc 9f a0 4b 2f b9 c7 93 66 cb 3b 7b 2e af b0 4b ea 37 cb 22 23 b1 3c 70 12 ba 47 9f d7 77 bd ee 69 f8 21 1d 07 e3 d8 bd db b4 f6 98 5d 23 1b 5b a7 17 17 97 90 9a 3d b6 5b 49 3b c1 be ce ef 46 26 fb 8b e2 a0 40 01 a5 79 20 18 ea 40 42 cb 9e 8c Data Ascii: YwNai=B,FOa!nJsAY*d2SFGDZDBkliSNxc4`Od :^LjJK\|;)uiXU]ya$5(K/f;{.K7"#<pGwi!]#[=[I;F&@y @B
2024-01-25 00:27:38 UTC	16384	IN	Data Raw: e9 da e2 e6 cd e2 3d 16 08 ab 87 f7 45 96 79 bb 9b 01 10 48 0c a7 10 1b 83 48 7a 6b c4 b6 ab eb c2 8e 96 db 81 0a 09 25 a0 3e 81 99 94 96 0d 24 c0 71 2c 21 4b 74 a4 3a 4b ad ee c0 ef af f0 55 01 9f 46 5e 6a 93 c0 20 8e 67 aa e6 17 a9 43 1e c3 88 f0 8b 00 17 58 44 15 1a 08 42 72 5b a2 f7 d3 dc e0 d6 3f b3 25 2f 12 5e 47 bf ff 5c c4 ec d8 11 f1 43 c5 29 f1 0f 9a f4 ad 96 01 3c 83 ec 58 e8 e7 91 69 a2 51 1c e3 f3 27 32 48 66 75 06 1a 63 1e eb 89 2a 89 c6 22 4e 24 12 dc 60 f1 fd 6a 73 31 de be 4b 15 de 20 33 68 f9 ab ed 67 fc 62 99 00 56 66 a0 68 c3 db dc 14 12 5b 37 05 51 71 20 6f ec 52 20 9b 7d 38 50 b9 d6 87 43 6c 51 70 b3 31 dc 73 c1 12 4b b1 e0 fa 4b 98 60 6c 96 d8 d5 38 f7 37 87 82 b3 c1 ca 2a 6c 0b ca 43 47 f3 fc ae 65 bd 7f 49 06 fa c7 0b a5 78 93 fc Data Ascii: =EyHHzk%>$q,!Kt:KUF^j gCXDBr[?%/^G\C)<XiQ'2Hfuc"N$`js1K 3hgbVfh[7Qq oR }8PClQp1sKK`l87lCGeIx
2024-01-25 00:27:38 UTC	16384	IN	Data Raw: 11 6e 7d 29 c8 9a 2b 66 e9 be fb af 00 39 dd a7 c5 02 b5 3b 3b 41 32 3a 1a 26 16 a8 3b c9 10 7d 31 d6 a8 58 d7 d1 af fb 4d db 29 d4 36 56 c5 1f d6 b3 95 12 90 73 64 56 d8 7d 71 af b1 9b 61 3b ec 5d 20 d9 c1 11 49 64 cc c2 65 38 1d b6 1b e4 22 28 ce 03 18 6b bd 57 a6 cf 46 ac 37 bf ce 29 c7 9f eb 34 c1 48 3b 8b 1b fe 0d a2 79 4d e8 7f 22 7b 83 b6 10 87 76 1a f3 de 60 a3 f6 f2 34 64 1d 1a a5 2e 12 01 80 98 2a cd 7c e5 5e 25 db 03 ed fe 08 bf c1 f6 0c 92 4e 77 3a 4b 09 62 e7 c7 50 e5 77 62 23 f3 f1 3b 5e 66 ff 0f c5 e7 85 b5 55 6e 7d e1 a6 5d 80 46 47 b9 e1 57 12 ae ba 5e 15 99 bb aa ad 0a ea 0c 7a 9d af d9 98 78 3b 60 6a aa d3 e5 25 2a 86 ac 2e a6 c1 aa 2a b9 d3 5d a9 c8 20 fc 3c ac fc f2 fe fa 78 a5 e3 43 f4 44 15 90 d4 33 14 71 be 32 d4 7e a2 91 44 21 14 Data Ascii: n})+f9;;A2:&;}1XM)6VsdV}qa;] Ide8"(kWF7)4H;yM"{v`4d.\|^%Nw:KbPwb#;^fUn}]FGW^zx;`j%.*] <xCD3q2~D!
2024-01-25 00:27:38 UTC	16384	IN	Data Raw: e7 82 8b 60 fb 2a cf d0 46 51 c0 f9 3e 8e b6 d4 28 8c de e8 7f f7 de 4e 01 12 ae e2 ad 99 93 eb a9 29 14 80 29 b4 b8 31 df 28 aa 43 26 28 96 d4 bc 3d 9f 27 5b 0f 86 d5 c1 b0 df bb 93 a5 ac 91 50 25 64 dc 44 ae b7 2b 10 0b ba df e5 2d 1d 8c cd cb c4 5c ec 81 81 07 c5 91 cf 9f 4a 6c 1c 33 56 9c ba bc 9a 72 36 da b8 9b 77 65 2d e5 bb 3e c4 7a 0b c5 84 54 37 ea 66 86 81 dd 91 1c aa 29 88 25 cd 10 00 3e 3b 68 47 71 6e 3a db a7 36 f5 2d d7 ae 08 36 c2 b2 6b c5 10 b7 c4 77 78 03 7f e4 5d c7 9b 31 c5 f6 f4 1b ce 69 d9 01 84 47 83 6c a7 67 58 3d cd f7 e0 ee 58 bd e4 ce c5 7d 5f b2 06 36 26 d9 9b 9c 11 0c ed e5 38 d7 92 2b 08 34 58 f1 35 c1 89 91 8f 0a c2 d2 2f 6c 59 31 45 64 4d fe 0f 24 eb b7 8c 88 5e cd 28 af 39 52 c3 43 b5 b6 cc ba 2e 37 f9 ab b7 46 45 1f f4 a4 Data Ascii: `*FQ>(N))1(C&(='[P%dD+-\Jl3Vr6we->zT7f)%>;hGqn:6-6kwx]1iGlgX=X}_6&8+4X5/lY1EdM$^(9RC.7FE
2024-01-25 00:27:38 UTC	16384	IN	Data Raw: 8b f5 aa 21 97 ce 51 15 be ed 3b be 26 d9 50 71 e9 1d cc 1c 42 ea 08 d9 9e 90 cb 52 da ce 7a fe ec b7 b1 ea ab ea 45 5e a8 8c c3 f5 cc 82 71 d2 08 7a 43 ef 4e dd 87 c8 4c a8 d7 d5 29 cc 92 79 24 ed 70 f7 93 8c 41 ac b2 97 3b cf 9f bc 2b 48 08 46 55 1d d7 f1 ba 4d a1 b8 9f 97 a3 1d b0 44 b5 26 2a f0 fe ee a7 10 6f 3d e8 d7 65 cf a4 36 e2 dc 0c 4d 04 5c 18 1a 18 81 43 c5 08 fd 8a 9b ca 3e a0 4e c6 41 b9 05 eb 66 f0 68 51 3d 55 b2 cb 38 4a aa a7 15 8e 74 6a ac c9 8e 13 35 51 ea 58 a8 5a 90 97 e8 5e 10 0d a3 de 3a e9 7a bf 93 c9 b6 14 e8 58 be 73 76 d5 9c 7e aa bd 55 df 61 96 dd 80 26 c6 60 6e 23 fd 78 ea 91 d8 ab c4 06 f9 2e d9 12 50 0e b5 e9 b7 3a db 38 03 6e be fb bc 0b 02 b3 01 23 dd 3d ce 7f 94 92 42 87 44 c0 d2 a8 2f ee 56 a5 49 21 1c c8 ae 91 70 5d a7 Data Ascii: !Q;&PqBRzE^qzCNL)y$pA;+HFUMD&*o=e6M\C>NAfhQ=U8Jtj5QXZ^:zXsv~Ua&`n#x.P:8n#=BD/VI!p]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50036	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:37 UTC	481	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 172 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:37 UTC	172	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 6e 75 6c 6c 2c 22 63 73 69 64 22 3a 6e 75 6c 6c 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 30 2c 22 63 22 3a 22 6a 73 22 2c 22 73 74 73 22 3a 6e 75 6c 6c 2c 22 73 74 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"ds":"js","cdsnum":null,"csid":null,"psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"","requestId":0,"c":"js","sts":null,"std":null}
2024-01-25 00:27:37 UTC	382	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1298 Connection: close date: Thu, 25 Jan 2024 00:27:37 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 166bb40d-3fab-44f8-88f8-85858c8343c2 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:37 UTC	1298	IN	Data Raw: 7b 22 77 75 70 73 53 65 6e 64 52 61 74 65 22 3a 35 30 30 30 2c 22 69 73 55 73 69 6e 67 43 73 69 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 65 78 74 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 22 7b 5c 22 74 72 69 67 67 65 72 73 5c 22 3a 5b 5d 2c 5c 22 6d 61 70 70 69 6e 67 73 5c 22 3a 5b 5d 7d 22 2c 22 72 65 73 65 74 53 65 73 73 69 6f 6e 43 6f 6e 66 69 67 22 3a 22 5b 5d 22 2c 22 63 72 6f 73 73 44 6f 6d 61 69 6e 73 54 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 67 65 74 41 64 64 72 4c 69 73 74 22 3a 22 5b 68 74 74 70 73 3a 2f 2f 63 66 72 2e 61 75 2e 76 32 2e 77 65 2d 73 74 61 74 73 2e 63 6f 6d 2f 61 70 69 2f 76 31 2f 63 72 2e 70 6e 67 5d 22 2c 22 63 72 6f 73 73 44 6f 6d 61 69 6e 73 4c 69 73 74 22 3a 22 5b 5c 22 68 74 74 70 73 3a 2f 2f 31 2e 61 37 39 61 62 39 35 Data Ascii: {"wupsSendRate":5000,"isUsingCsid":true,"contextConfiguration":"{\"triggers\":[],\"mappings\":[]}","resetSessionConfig":"[]","crossDomainsTimeout":5000,"getAddrList":"[https://cfr.au.v2.we-stats.com/api/v1/cr.png]","crossDomainsList":"[\"https://1.a79ab95

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50035	76.223.31.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:37 UTC	757	OUT	GET /eval/59c45122922f080adde50ec0/eyJrZXkiOiJkNDFkOGNkOThmMDBiMjA0ZTk4MDA5OThlY2Y4NDI3ZSIsImFub255bW91cyI6ZmFsc2UsImN1c3RvbSI6eyJvcmciOiJOQUIiLCJ0eXBlIjoiY3VzdG9tZXIifX0 HTTP/1.1 Host: clientstream.launchdarkly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/event-stream Cache-Control: no-cache sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:37 UTC	578	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:37 GMT Content-Type: text/event-stream; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-Ranges: bytes Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Cache-Control,X-Requested-With,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 Cache-Control: no-cache, no-store, must-revalidate Ld-Region: eu-west-1 Strict-Transport-Security: max-age=31536000 X-Content-Length:
2024-01-25 00:27:37 UTC	597	IN	Data Raw: 32 34 65 0d 0a 65 76 65 6e 74 3a 70 75 74 0a 64 61 74 61 3a 7b 22 49 42 5f 52 45 53 45 54 5f 50 41 53 53 57 4f 52 44 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 36 37 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 73 70 65 6e 64 69 6e 67 2d 6d 61 69 6e 70 61 67 65 2d 74 72 61 6e 73 61 63 74 69 6f 6e 2d 74 61 62 6c 65 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 36 37 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 37 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 6c 6f 67 69 6e 2d 74 69 70 73 2d 69 66 72 61 Data Ascii: 24eevent:putdata:{"IB_RESET_PASSWORD":{"version":467,"flagVersion":2,"value":false,"variation":1,"trackEvents":false},"spending-mainpage-transaction-table":{"version":467,"flagVersion":7,"value":false,"variation":1,"trackEvents":false},"login-tips-ifra
2024-01-25 00:27:37 UTC	5793	IN	Data Raw: 31 36 39 39 0d 0a 67 56 65 72 73 69 6f 6e 22 3a 31 31 2c 22 76 61 6c 75 65 22 3a 7b 22 6d 65 73 73 61 67 65 22 3a 22 59 6f 75 20 6d 61 79 20 68 61 76 65 20 6e 6f 74 69 63 65 64 20 74 68 61 74 20 73 6f 6d 65 20 6f 66 20 79 6f 75 72 20 72 65 2d 63 61 74 65 67 6f 72 69 73 65 64 20 74 72 61 6e 73 61 63 74 69 6f 6e 73 20 6d 61 79 20 73 68 6f 77 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 61 74 65 67 6f 72 79 2e 20 54 68 69 73 20 69 73 20 64 75 65 20 74 6f 20 61 6e 20 75 70 64 61 74 65 20 74 68 61 74 20 68 61 73 20 74 61 6b 65 6e 20 70 6c 61 63 65 20 66 6f 72 20 53 70 65 6e 64 69 6e 67 20 77 68 69 63 68 20 77 69 6c 6c 20 61 6c 73 6f 20 65 6e 61 62 6c 65 20 69 74 20 6f 6e 20 74 68 65 20 6d 6f 62 69 6c 65 20 61 70 70 2e 20 57 65 20 61 70 6f 6c 6f 67 69 73 65 20 Data Ascii: 1699gVersion":11,"value":{"message":"You may have noticed that some of your re-categorised transactions may show the original category. This is due to an update that has taken place for Spending which will also enable it on the mobile app. We apologise
2024-01-25 00:27:37 UTC	7	IN	Data Raw: 32 0d 0a 3a 0a 0d 0a Data Ascii: 2:
2024-01-25 00:27:37 UTC	7	IN	Data Raw: 32 0d 0a 3a 0a 0d 0a Data Ascii: 2:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50045	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:37 UTC	605	OUT	GET /nab-prod/live/95164d49967239e5c92986f94bb9d176.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 3828 Connection: close Date: Thu, 25 Jan 2024 00:27:38 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Thu, 18 Jan 2024 22:29:11 GMT ETag: "95164d49967239e5c92986f94bb9d176" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 1ad4f21710c30c86f0c2c6495ab30228.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: GmWJTIBfAH11LaC9RPKPgLYqPgZAZNNkU6ADnM3XbwskGCDxwHahWw==
2024-01-25 00:27:38 UTC	3828	IN	Data Raw: 7b 22 69 64 22 3a 22 38 31 31 32 37 32 38 61 2d 39 37 65 34 2d 34 62 38 35 2d 38 66 36 32 2d 38 35 31 61 34 33 38 64 37 65 39 35 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 75 6c 64 43 6f 6c 6c 65 63 74 49 50 41 64 64 72 65 73 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 57 65 62 48 69 73 74 6f 72 79 22 3a 66 61 6c 73 65 2c 22 6e 65 77 53 44 4b 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 70 70 49 64 22 3a 22 64 36 37 33 39 63 64 33 63 65 31 61 35 64 31 62 38 37 63 34 37 66 33 62 38 39 65 37 38 35 64 35 22 2c 22 72 75 6c 65 73 22 3a 5b 7b 22 69 64 22 3a 22 39 37 32 65 34 63 64 65 2d 33 37 31 33 2d 34 31 32 31 2d 38 66 33 32 2d 66 32 31 35 63 38 62 38 38 66 38 66 22 2c 22 6e 61 6d 65 22 3a 22 44 65 66 61 75 6c 74 22 2c 22 63 72 69 74 Data Ascii: {"id":"8112728a-97e4-4b85-8f62-851a438d7e95","enabled":true,"shouldCollectIPAddress":true,"enableWebHistory":false,"newSDKEnabled":true,"appId":"d6739cd3ce1a5d1b87c47f3b89e785d5","rules":[{"id":"972e4cde-3713-4121-8f32-f215c8b88f8f","name":"Default","crit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50044	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:37 UTC	409	OUT	GET /nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	518	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 306 Connection: close Date: Thu, 25 Jan 2024 00:27:39 GMT Last-Modified: Thu, 25 Jan 2024 00:27:38 GMT ETag: "6d97ffcab76ab3c807d9ccac7e6b1c81" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 280c9d4266c690eca29338d5796c8f9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: jrHRiUc6SJhZc7gT88dVB7-BlS-4aPoWznswNyCjJ2V6bhoE3Ngc1Q==
2024-01-25 00:27:38 UTC	306	IN	Data Raw: 7b 22 77 69 64 67 65 74 48 61 73 68 22 3a 22 39 35 31 36 34 64 34 39 39 36 37 32 33 39 65 35 63 39 32 39 38 36 66 39 34 62 62 39 64 31 37 36 22 2c 22 64 69 73 70 6c 61 79 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 79 70 65 49 64 22 3a 22 42 48 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 2c 7b 22 74 79 70 65 49 64 22 3a 22 54 41 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 2c 7b 22 74 79 70 65 49 64 22 3a 22 4f 41 31 22 2c 22 73 61 74 69 73 66 69 65 64 22 3a 74 72 75 65 7d 5d 2c 22 72 75 6c 65 44 69 73 70 6c 61 79 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 6f 70 65 6e 42 75 73 69 6e 65 73 73 48 6f 75 72 73 47 72 6f 75 70 73 22 3a 5b 5d 2c 22 63 6f 62 72 6f 77 73 65 43 6f 6e 66 69 67 22 3a 7b 22 65 6e 61 62 6c 65 64 Data Ascii: {"widgetHash":"95164d49967239e5c92986f94bb9d176","displayConditions":[{"typeId":"BH1","satisfied":true},{"typeId":"TA1","satisfied":true},{"typeId":"OA1","satisfied":true}],"ruleDisplayConditions":[],"openBusinessHoursGroups":[],"cobrowseConfig":{"enabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50046	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:37 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:37 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:37 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-09637bf96120150ba Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 7148b0428db0ebbd7546f47133838a6c62277b79-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:37 GMT X-UUID: 2901479c-44b9-494e-9063-87589e518577 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:37 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:37 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50049	52.71.237.94	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:37 UTC	620	OUT	OPTIONS /events/bulk/59c45122922f080adde50ec0 HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-launchdarkly-event-schema,x-launchdarkly-payload-id,x-launchdarkly-user-agent Origin: https://ib.nab.com.au User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	507	IN	HTTP/1.1 204 No Content Date: Thu, 25 Jan 2024 00:27:37 GMT Content-Type: application/json Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50048	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	2872	OUT	GET /api/fl/idgib-w-nab-ib HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-cfids: - Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2
2024-01-25 00:27:38 UTC	725	IN	HTTP/1.1 200 OK cache-control: no-cache content-type: application/json; charset=utf-8 etag: W/"+bmkfru+OVMEZ7kXWH8rjWoXBxnoC38YJjRed2TjT+dSnTM95VPpGzo6dEKkEzikTvo/RCx7JXcnVmf06a9yOD+BDXZKVgqNR5F0v1A5Mm+bDEH9nRYKrq9euNwW5dbl3ux5gaSGA179xcweXRBiEx3A" set-cookie: cfidsgib-w-nab-ib=+bmkfru+OVMEZ7kXWH8rjWoXBxnoC38YJjRed2TjT+dSnTM95VPpGzo6dEKkEzikTvo/RCx7JXcnVmf06a9yOD+BDXZKVgqNR5F0v1A5Mm+bDEH9nRYKrq9euNwW5dbl3ux5gaSGA179xcweXRBiEx3A; Path=/; Expires=Fri, 24 Jan 2025 00:27:38 GMT; SameSite=None date: Thu, 25 Jan 2024 00:27:38 GMT content-length: 205 x-envoy-upstream-service-time: 1 access-control-allow-origin: https://ib.nab.com.au access-control-allow-credentials: true server: istio-envoy connection: close
2024-01-25 00:27:38 UTC	205	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 7b 22 63 66 69 64 73 22 3a 22 2b 62 6d 6b 66 72 75 2b 4f 56 4d 45 5a 37 6b 58 57 48 38 72 6a 57 6f 58 42 78 6e 6f 43 33 38 59 4a 6a 52 65 64 32 54 6a 54 2b 64 53 6e 54 4d 39 35 56 50 70 47 7a 6f 36 64 45 4b 6b 45 7a 69 6b 54 76 6f 2f 52 43 78 37 4a 58 63 6e 56 6d 66 30 36 61 39 79 4f 44 2b 42 44 58 5a 4b 56 67 71 4e 52 35 46 30 76 31 41 35 4d 6d 2b 62 44 45 48 39 6e 52 59 4b 72 71 39 65 75 4e 77 57 35 64 62 6c 33 75 78 35 67 61 53 47 41 31 37 39 78 63 77 65 58 52 42 69 45 78 33 41 22 7d 7d Data Ascii: {"status":"success","error":null,"data":{"cfids":"+bmkfru+OVMEZ7kXWH8rjWoXBxnoC38YJjRed2TjT+dSnTM95VPpGzo6dEKkEzikTvo/RCx7JXcnVmf06a9yOD+BDXZKVgqNR5F0v1A5Mm+bDEH9nRYKrq9euNwW5dbl3ux5gaSGA179xcweXRBiEx3A"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50047	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	648	OUT	POST /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 2250 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	2250	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 32 2e 31 33 32 36 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 34 35 32 37 30 2c 22 6d 63 22 3a 7b 22 50 4c 54 22 3a 38 33 30 37 2c 22 46 42 54 22 3a 37 39 30 34 2c 22 46 45 54 22 3a 34 30 33 2c 22 44 52 54 22 3a 34 30 31 2c 22 50 52 54 22 3a 32 2c 22 44 4f 4d 22 3a 38 33 30 35 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 34 35 32 37 30 2c 22 50 4c 43 22 3a 31 7d 2c 22 6d 78 22 3a 7b 22 50 4c 54 22 3a 37 32 39 36 2c 22 46 42 54 22 3a 35 38 33 33 2c 22 53 43 54 22 3a 31 38 30 32 2c 22 53 48 54 22 3a 34 35 30 2c 22 44 4c 54 22 3a 32 39 35 2c 22 54 43 50 22 3a 34 Data Ascii: {"vr":"4.5.2.1326","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/2","ts":1706142445270,"mc":{"PLT":8307,"FBT":7904,"FET":403,"DRT":401,"PRT":2,"DOM":8305,"ts":1706142445270,"PLC":1},"mx":{"PLT":7296,"FBT":5833,"SCT":1802,"SHT":450,"DLT":295,"TCP":4
2024-01-25 00:27:38 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:22\|g:3b2be0a7-1e56-4c82-a71b-b3b493b26eac; Path=/; Expires=Thu, 25-Jan-2024 00:28:08 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:22\|g:3b2be0a7-1e56-4c82-a71b-b3b493b26eac\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:08 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:08 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50052	52.71.237.94	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	778	OUT	POST /events/bulk/59c45122922f080adde50ec0 HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Content-Length: 483 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-LaunchDarkly-Payload-ID: 89e9bc70-bb18-11ee-8872-41403dbc7aeb X-LaunchDarkly-Event-Schema: 3 X-LaunchDarkly-User-Agent: JSClient/2.19.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	483	OUT	Data Raw: 5b 7b 22 6b 69 6e 64 22 3a 22 69 64 65 6e 74 69 66 79 22 2c 22 6b 65 79 22 3a 22 64 34 31 64 38 63 64 39 38 66 30 30 62 32 30 34 65 39 38 30 30 39 39 38 65 63 66 38 34 32 37 65 22 2c 22 75 73 65 72 22 3a 7b 22 6b 65 79 22 3a 22 64 34 31 64 38 63 64 39 38 66 30 30 62 32 30 34 65 39 38 30 30 39 39 38 65 63 66 38 34 32 37 65 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 3a 66 61 6c 73 65 2c 22 63 75 73 74 6f 6d 22 3a 7b 22 6f 72 67 22 3a 22 4e 41 42 22 2c 22 74 79 70 65 22 3a 22 63 75 73 74 6f 6d 65 72 22 7d 7d 2c 22 63 72 65 61 74 69 6f 6e 44 61 74 65 22 3a 31 37 30 36 31 34 32 34 35 33 39 35 31 7d 2c 7b 22 73 74 61 72 74 44 61 74 65 22 3a 31 37 30 36 31 34 32 34 35 35 31 33 34 2c 22 65 6e 64 44 61 74 65 22 3a 31 37 30 36 31 34 32 34 35 35 31 33 34 2c 22 66 65 61 Data Ascii: [{"kind":"identify","key":"d41d8cd98f00b204e9800998ecf8427e","user":{"key":"d41d8cd98f00b204e9800998ecf8427e","anonymous":false,"custom":{"org":"NAB","type":"customer"}},"creationDate":1706142453951},{"startDate":1706142455134,"endDate":1706142455134,"fea
2024-01-25 00:27:38 UTC	524	IN	HTTP/1.1 202 Accepted Date: Thu, 25 Jan 2024 00:27:38 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50053	18.160.78.31	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	748	OUT	GET /scripts/prod/crossdomain.html HTTP/1.1 Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	481	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 221 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Jan 2024 12:00:39 GMT ETag: "21e34cf6a03f570df49e212018a567d0" X-Cache: Hit from cloudfront Via: 1.1 6065fa4dfa87d92a6009e7fe74c3def0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: BSQccVezkolXXT86__S-OdO72bynOU4Z_TUxa0Po_8GQ_mAp1JfGnQ== Age: 44820
2024-01-25 00:27:38 UTC	221	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 63 72 6f 73 73 64 6f 6d 61 69 6e 32 2e 31 32 2e 30 2e 35 32 37 33 2e 62 39 36 63 33 35 63 63 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 76 61 72 20 63 63 41 70 70 20 3d 20 20 74 79 70 65 6f 66 20 63 64 77 70 62 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 6e 65 77 20 63 64 77 70 62 2e 64 65 66 61 75 6c 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 28 29 20 3a 20 7b 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><head></head><body><script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script><script> var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50054	18.64.174.94	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	748	OUT	GET /scripts/prod/crossdomain.html HTTP/1.1 Host: 1.c81358859121583b7adf2ace89cb39f44.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	480	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 221 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Jan 2024 17:09:27 GMT ETag: "21e34cf6a03f570df49e212018a567d0" X-Cache: Hit from cloudfront Via: 1.1 6895284e395204317ac1aa2c7b0a3d0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P4 X-Amz-Cf-Id: i1mBaqXUCPKMMrOiSDzNlgL9DTQ0Z0QsHmkP0Nzmw1nU0mM4b0dpnw== Age: 26292
2024-01-25 00:27:38 UTC	221	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 63 72 6f 73 73 64 6f 6d 61 69 6e 32 2e 31 32 2e 30 2e 35 32 37 33 2e 62 39 36 63 33 35 63 63 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 76 61 72 20 63 63 41 70 70 20 3d 20 20 74 79 70 65 6f 66 20 63 64 77 70 62 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 6e 65 77 20 63 64 77 70 62 2e 64 65 66 61 75 6c 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 28 29 20 3a 20 7b 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><head></head><body><script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script><script> var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50055	18.66.255.60	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	748	OUT	GET /scripts/prod/crossdomain.html HTTP/1.1 Host: 1.b406929acabac9b095f124c81bdfcf57f.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	480	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 221 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Jan 2024 11:29:13 GMT ETag: "21e34cf6a03f570df49e212018a567d0" X-Cache: Hit from cloudfront Via: 1.1 0f13fb72f91a5dc49705fa2bbcebbc66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P1 X-Amz-Cf-Id: Eq4ArRlQVB549i-Mch24DF6RGXchDvw2Eb5rs1S0REhJG_W3hjJcUA== Age: 46705
2024-01-25 00:27:38 UTC	221	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 63 72 6f 73 73 64 6f 6d 61 69 6e 32 2e 31 32 2e 30 2e 35 32 37 33 2e 62 39 36 63 33 35 63 63 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 76 61 72 20 63 63 41 70 70 20 3d 20 20 74 79 70 65 6f 66 20 63 64 77 70 62 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 6e 65 77 20 63 64 77 70 62 2e 64 65 66 61 75 6c 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 28 29 20 3a 20 7b 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><head></head><body><script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script><script> var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50057	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	625	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142456988 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:39 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 a482940a2cf06eb5d2ed41088b95c672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: Z0VWaK0O7PgQbZmN5MYijpU0EzoefbjGtKBJAYl7AWw4RhbPwQA1QA==
2024-01-25 00:27:39 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50051	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	481	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 981 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:38 UTC	981	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 31 2c 22 64 22 3a 5b 22 54 63 73 39 43 73 49 77 47 49 42 68 76 49 76 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"","requestId":1,"d":["Tcs9CsIwGIBhvIv
2024-01-25 00:27:39 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:27:38 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: d5d5171d-d036-438d-9bb1-ab8f0baeef54 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:39 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 72 37 74 41 5f 6b 58 2d 46 52 38 55 46 33 2d 36 6e 4b 47 45 41 39 68 43 50 6a 34 67 4f 49 41 6b 76 36 52 65 6a 6f 48 49 6b 53 6a 77 42 77 45 30 70 47 47 4e 32 6a 4d 72 6b 67 47 57 44 41 79 58 4d 63 57 31 46 61 37 66 43 30 4a 2d 62 6b 50 38 38 63 51 2d 44 6a 6d 71 41 6e 54 2d 43 74 79 36 70 4f 77 42 54 31 55 33 6f 2d 76 70 56 6d 64 37 51 63 45 68 6b 76 45 39 65 72 57 69 36 73 56 62 34 6a 6e 55 72 76 4a 41 67 7a 6c 72 59 32 30 44 34 50 72 76 4a 55 42 7a 6e 49 43 41 55 6c 64 78 56 78 35 45 4e 34 42 54 77 6a 64 54 47 62 79 66 4f 73 6d 50 57 74 6f 30 79 6a 5a 52 38 79 52 41 7a 30 46 50 6e 59 71 7a 47 33 57 79 74 39 55 59 5f 44 4e 77 78 68 6f 51 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsar7tA_kX-FR8UF3-6nKGEA9hCPj4gOIAkv6RejoHIkSjwBwE0pGGN2jMrkgGWDAyXMcW1Fa7fC0J-bkP88cQ-DjmqAnT-Cty6pOwBT1U3o-vpVmd7QcEhkvE9erWi6sVb4jnUrvJAgzlrY20D4PrvJUBznICAUldxVx5EN4BTwjdTGbyfOsmPWto0yjZR8yRAz0FPnYqzG3Wyt9UY_DNwxhoQ==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50056	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	2755	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:39 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:27:38 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 8328e329-013f-43ba-8e49-b0cd8e846741 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:39 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50058	52.65.199.83	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	574	OUT	GET /geo/ip HTTP/1.1 Host: proactive-chat-server-ap.prod.aws.lcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:39 GMT Content-Type: application/json Content-Length: 805 Connection: close x-amzn-RequestId: 4ac860d5-731e-4404-b9d8-61a8f2d49731 Access-Control-Allow-Origin: * x-amz-apigw-id: SEenUE1tywMEoWg= X-Amzn-Trace-Id: Root=1-65b1aafb-183fd1d239eb8bf917799a4b
2024-01-25 00:27:39 UTC	805	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 37 34 22 2c 22 67 65 6f 49 70 22 3a 7b 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 7b 22 63 6f 64 65 22 3a 22 45 55 22 2c 22 6e 61 6d 65 73 22 3a 7b 22 64 65 22 3a 22 45 75 72 6f 70 61 22 2c 22 72 75 22 3a 22 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b0 22 2c 22 70 74 2d 42 52 22 3a 22 45 75 72 6f 70 61 22 2c 22 6a 61 22 3a 22 e3 83 a8 e3 83 bc e3 83 ad e3 83 83 e3 83 91 22 2c 22 65 6e 22 3a 22 45 75 72 6f 70 65 22 2c 22 66 72 22 3a 22 45 75 72 6f 70 65 22 2c 22 7a 68 2d 43 4e 22 3a 22 e6 ac a7 e6 b4 b2 22 2c 22 65 73 22 3a 22 45 75 72 6f 70 61 22 7d 2c 22 67 65 6f 6e 61 6d 65 5f 69 64 22 3a 36 32 35 35 31 34 38 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 7b 22 69 73 5f 69 6e 5f 65 75 72 6f 70 65 61 6e 5f 75 6e 69 6f 6e 22 3a 74 Data Ascii: {"ip":"81.181.57.74","geoIp":{"continent":{"code":"EU","names":{"de":"Europa","ru":"","pt-BR":"Europa","ja":"","en":"Europe","fr":"Europe","zh-CN":"","es":"Europa"},"geoname_id":6255148},"country":{"is_in_european_union":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50061	18.160.78.31	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	643	OUT	GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	495	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3227 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Jan 2024 12:52:17 GMT ETag: "9ee48a4da9c402e8a23ad085fb71f28f" X-Cache: Hit from cloudfront Via: 1.1 3ec7e9c692b1d4a7242f8470f755efa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: jwh2pGuuMtQSSlhW54R00vsI665tzAv6aRnVA3lH6CeW8KC6C-7XPg== Age: 41723
2024-01-25 00:27:39 UTC	3227	IN	Data Raw: 76 61 72 20 63 64 77 70 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 69 66 28 61 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 61 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 74 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 61 Data Ascii: var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50063	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:38 UTC	405	OUT	GET /nab-prod/live/95164d49967239e5c92986f94bb9d176.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	548	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 3828 Connection: close Date: Thu, 25 Jan 2024 00:27:40 GMT Last-Modified: Thu, 18 Jan 2024 22:29:11 GMT ETag: "95164d49967239e5c92986f94bb9d176" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 71092193ad2b78575d72d153155a9c70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: CO8duqg8GkCo7IlLRnoACPZyWNuaic1Hep-1VhlXXo7DkKyCXoONgg==
2024-01-25 00:27:39 UTC	3828	IN	Data Raw: 7b 22 69 64 22 3a 22 38 31 31 32 37 32 38 61 2d 39 37 65 34 2d 34 62 38 35 2d 38 66 36 32 2d 38 35 31 61 34 33 38 64 37 65 39 35 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 68 6f 75 6c 64 43 6f 6c 6c 65 63 74 49 50 41 64 64 72 65 73 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 57 65 62 48 69 73 74 6f 72 79 22 3a 66 61 6c 73 65 2c 22 6e 65 77 53 44 4b 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 70 70 49 64 22 3a 22 64 36 37 33 39 63 64 33 63 65 31 61 35 64 31 62 38 37 63 34 37 66 33 62 38 39 65 37 38 35 64 35 22 2c 22 72 75 6c 65 73 22 3a 5b 7b 22 69 64 22 3a 22 39 37 32 65 34 63 64 65 2d 33 37 31 33 2d 34 31 32 31 2d 38 66 33 32 2d 66 32 31 35 63 38 62 38 38 66 38 66 22 2c 22 6e 61 6d 65 22 3a 22 44 65 66 61 75 6c 74 22 2c 22 63 72 69 74 Data Ascii: {"id":"8112728a-97e4-4b85-8f62-851a438d7e95","enabled":true,"shouldCollectIPAddress":true,"enableWebHistory":false,"newSDKEnabled":true,"appId":"d6739cd3ce1a5d1b87c47f3b89e785d5","rules":[{"id":"972e4cde-3713-4121-8f32-f215c8b88f8f","name":"Default","crit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50065	18.64.174.94	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	643	OUT	GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 Host: 1.c81358859121583b7adf2ace89cb39f44.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	494	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3227 Connection: close Date: Wed, 24 Jan 2024 13:13:56 GMT Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT ETag: "9ee48a4da9c402e8a23ad085fb71f28f" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d178845d60baf589ab6db5ec371a50a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P4 X-Amz-Cf-Id: z0XbIoaZcvCCeGdEnV98Xy1jKrYf98jXCSnE4YO9e0uB1KNwi4w-QQ== Age: 40424
2024-01-25 00:27:39 UTC	3227	IN	Data Raw: 76 61 72 20 63 64 77 70 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 69 66 28 61 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 61 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 74 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 61 Data Ascii: var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50066	18.66.255.60	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	643	OUT	GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 Host: 1.b406929acabac9b095f124c81bdfcf57f.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	494	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3227 Connection: close Date: Wed, 24 Jan 2024 13:13:56 GMT Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT ETag: "9ee48a4da9c402e8a23ad085fb71f28f" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7eed26bf556f98f973db7d0e444fa804.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P1 X-Amz-Cf-Id: XfXMVAkBqHXW3QYzLjy_FufdXveXUiTh1JBxaJ8VF99FZ3EJ0hH5BQ== Age: 40424
2024-01-25 00:27:39 UTC	3227	IN	Data Raw: 76 61 72 20 63 64 77 70 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 69 66 28 61 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 61 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 74 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 61 Data Ascii: var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50064	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	3179	OUT	POST /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=%2Bbmkfru%2BOVMEZ7kXWH8rjWoXBxnoC38YJjRed2TjT%2BdSnTM95VPpGzo6dEKkEzikTvo%2FRCx7JXcnVmf06a9yOD%2BBDXZKVgqNR5F0v1A5Mm%2BbDEH9nRYKrq9euNwW5dbl3ux5gaSGA179xcweXRBiEx3A HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive Content-Length: 3324 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:39 UTC	3324	OUT	Data Raw: 4d 44 41 30 64 43 30 77 5a 69 70 67 48 31 55 4b 52 31 64 4d 46 31 39 47 51 54 5a 63 46 6b 56 31 5a 53 39 42 61 33 4d 6e 50 46 63 5a 55 58 73 53 59 33 52 48 56 30 77 58 57 30 59 31 4b 47 55 5a 50 45 31 4e 52 7a 4e 66 62 78 74 37 48 6c 51 63 4f 57 4e 71 4e 52 55 58 4e 6c 73 4c 47 32 6b 72 5a 78 74 48 54 6d 55 38 51 43 34 74 4a 33 6b 65 54 31 31 36 49 46 78 42 44 68 70 34 59 56 68 49 4f 44 45 56 53 33 46 44 49 67 67 4e 4d 79 78 6d 63 46 63 6e 55 51 67 54 48 51 6b 4f 66 33 64 59 57 45 35 31 4a 47 68 42 56 48 39 4e 63 58 6f 34 4f 32 56 73 4e 67 39 70 47 6b 74 58 65 42 59 4d 4f 57 6b 4c 47 33 68 72 4a 56 4e 37 64 53 70 32 64 54 6b 7a 47 30 56 6d 48 32 64 48 56 52 46 32 48 42 46 41 5a 79 31 47 50 7a 64 62 51 52 45 4e 58 7a 6b 7a 4a 6b 46 61 64 43 6b 35 48 48 30 Data Ascii: MDA0dC0wZipgH1UKR1dMF19GQTZcFkV1ZS9Ba3MnPFcZUXsSY3RHV0wXW0Y1KGUZPE1NRzNfbxt7HlQcOWNqNRUXNlsLG2krZxtHTmU8QC4tJ3keT116IFxBDhp4YVhIODEVS3FDIggNMyxmcFcnUQgTHQkOf3dYWE51JGhBVH9NcXo4O2VsNg9pGktXeBYMOWkLG3hrJVN7dSp2dTkzG0VmH2dHVRF2HBFAZy1GPzdbQRENXzkzJkFadCk5HH0
2024-01-25 00:27:39 UTC	573	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 set-cookie: cfidsgib-w-nab-ib=oW6l9yHBMIy+OeVXaQCNVp+7E/Rz5TOj//7PTOOJfW6ts21vFbFGOdnnejUF7HUacW0/3Ek2DqcKPVv4Pnw5CTSN1AMdz6Qmiu48WpSuY/sCGG6VLmeJ0gqTJgRbKBPZ4COvZuAJBTGYYN1/M36Sg8GYlmM9uCjYvMMC; Path=/; Expires=Fri, 24 Jan 2025 00:27:39 GMT; SameSite=None date: Thu, 25 Jan 2024 00:27:39 GMT content-length: 399 x-envoy-upstream-service-time: 1 access-control-allow-origin: https://ib.nab.com.au access-control-allow-credentials: true server: istio-envoy connection: close
2024-01-25 00:27:39 UTC	399	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 7b 22 63 66 69 64 73 22 3a 22 6f 57 36 6c 39 79 48 42 4d 49 79 2b 4f 65 56 58 61 51 43 4e 56 70 2b 37 45 2f 52 7a 35 54 4f 6a 2f 2f 37 50 54 4f 4f 4a 66 57 36 74 73 32 31 76 46 62 46 47 4f 64 6e 6e 65 6a 55 46 37 48 55 61 63 57 30 2f 33 45 6b 32 44 71 63 4b 50 56 76 34 50 6e 77 35 43 54 53 4e 31 41 4d 64 7a 36 51 6d 69 75 34 38 57 70 53 75 59 2f 73 43 47 47 36 56 4c 6d 65 4a 30 67 71 54 4a 67 52 62 4b 42 50 5a 34 43 4f 76 5a 75 41 4a 42 54 47 59 59 4e 31 2f 4d 33 36 53 67 38 47 59 6c 6d 4d 39 75 43 6a 59 76 4d 4d 43 22 2c 22 63 73 22 3a 7b 22 63 66 69 64 73 22 3a 22 6f 57 36 6c 39 79 48 42 4d 49 79 2b 4f 65 56 58 61 51 43 4e 56 70 2b 37 Data Ascii: {"status":"success","error":null,"data":{"cfids":"oW6l9yHBMIy+OeVXaQCNVp+7E/Rz5TOj//7PTOOJfW6ts21vFbFGOdnnejUF7HUacW0/3Ek2DqcKPVv4Pnw5CTSN1AMdz6Qmiu48WpSuY/sCGG6VLmeJ0gqTJgRbKBPZ4COvZuAJBTGYYN1/M36Sg8GYlmM9uCjYvMMC","cs":{"cfids":"oW6l9yHBMIy+OeVXaQCNVp+7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50069	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	688	OUT	GET /nab-prod/live/01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "f1becce0de848d615f3ea15685794ecd"
2024-01-25 00:27:39 UTC	619	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Jan 2024 00:27:40 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "f1becce0de848d615f3ea15685794ecd" Cache-Control: max-age=31536000 Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 4d0e04b960b272af4d629d0e1444fa72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: SPmTn2j3f-6Nl6621gtViwSvfV4GSUlNElitisMSBMFO3F2_UxvUtQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50070	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	425	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142456988 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	525	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:26 GMT Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 5d3cacf6f215960ea8001f24e2e30e66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: KVRhVUUIl-K6PCiFwH1DtnkFAo6IYd8JAOQFv0jfQsi8MCT6SLKdlQ== Age: 14
2024-01-25 00:27:39 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50067	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	556	OUT	GET /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:b1f11799-0014-4d2c-b179-c663b4c6ca13\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; SameSite=None; ADRUM_BT1=R:0\|i:139\|e:0\|d:0
2024-01-25 00:27:40 UTC	1466	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:b1f11799-0014-4d2c-b179-c663b4c6ca13\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:139\|e:0\|d:0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:8241a326-c399-460c-97e4-79a5cfa44231; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:8241a326-c399-460c-97e4-79a5cfa44231\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:19; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:19\|d:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50060	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	651	OUT	POST /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 20965 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	16384	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 31 37 2e 32 38 39 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 34 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 34 30 34 32 37 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 32 22 2c 22 61 74 22 3a 30 2c 22 64 6d 22 3a 22 5b 66 61 69 6c 5d 20 54 65 61 6c 69 75 6d 20 50 65 72 73 6f 6e 61 4c 69 66 74 20 41 50 49 3a 20 5b 22 2c 22 73 69 22 3a 37 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 33 2f 34 2f 35 2f 36 3f 37 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 34 30 34 32 31 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 32 22 Data Ascii: {"vr":"4.5.17.2890","dt":"R","rg":"0","es":[{"eg":"1","et":4,"eu":"0://1/2","ts":1706142440427,"mg":"0","au":"0://1/2","at":0,"dm":"[fail] Tealium PersonaLift API: [","si":7},{"eg":"2","et":2,"eu":"0://3/4/5/6?7","ts":1706142440421,"mg":"0","au":"0://1/2"
2024-01-25 00:27:39 UTC	4581	OUT	Data Raw: 70 61 63 65 3d 42 6f 6f 74 73 74 72 61 70 70 65 72 26 73 74 61 74 69 63 4a 73 50 61 74 68 3d 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 2e 2e 2e 22 2c 22 61 70 70 64 79 6e 61 6d 69 63 73 22 2c 22 61 64 72 75 6d 22 2c 22 61 64 72 75 6d 2d 34 2e 35 2e 31 37 2e 32 38 39 30 2e 6a 73 22 2c 22 63 6c 69 65 6e 74 6c 69 62 2d 67 65 6e 65 72 61 74 65 64 2d 6e 6f 74 69 66 69 63 61 74 69 2e 2e 2e 63 33 61 34 64 64 39 33 62 37 39 32 35 32 37 33 63 39 61 32 63 62 35 38 30 63 63 2e 63 73 73 22 2c 22 63 6f 6e 74 65 6e 74 22 2c 22 64 61 6d 22 2c 22 69 6d 61 67 65 73 22 2c 22 74 79 70 65 73 22 2c 22 6c 6f 67 6f 73 22 2c 22 6e 61 62 2d 61 70 70 2d 6c 6f 67 6f 2d 32 38 33 78 32 38 33 2e 70 6e 67 22 2c 22 63 6c 69 65 6e 74 6c 69 62 2d 67 65 6e 65 Data Ascii: pace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/...","appdynamics","adrum","adrum-4.5.17.2890.js","clientlib-generated-notificati...c3a4dd93b7925273c9a2cb580cc.css","content","dam","images","types","logos","nab-app-logo-283x283.png","clientlib-gene
2024-01-25 00:27:40 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:23\|g:8becb55e-47b6-4f09-b81d-7bee08a10420; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:23\|g:8becb55e-47b6-4f09-b81d-7bee08a10420\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:09 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50068	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	2731	OUT	GET /api/fl/idgib-w-nab-ib HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:40 UTC	222	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 date: Thu, 25 Jan 2024 00:27:39 GMT content-length: 53 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-01-25 00:27:40 UTC	53	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 7b 22 63 66 69 64 73 22 3a 22 22 7d 7d Data Ascii: {"status":"success","error":null,"data":{"cfids":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50071	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:39 UTC	482	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 3018 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:39 UTC	3018	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 32 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"LOGIN","requestId":2,"sts":"gAAAAABls
2024-01-25 00:27:40 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:27:39 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: cadc7b64-508d-485f-bc95-25288d785c9d Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:40 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 72 38 50 43 2d 4b 4e 6d 59 44 59 4e 68 35 43 54 50 74 66 6e 33 75 30 79 71 4f 6b 45 33 67 64 42 45 74 43 65 35 53 7a 66 33 50 79 44 54 5f 32 6f 6e 34 67 59 5a 70 63 45 68 43 4b 67 35 50 45 56 48 55 41 6d 6a 49 66 65 2d 4b 61 73 48 79 52 36 42 39 46 30 61 31 76 65 49 65 68 49 59 55 5f 36 6e 48 7a 61 57 61 66 64 32 58 58 37 36 4e 52 44 6b 2d 59 55 75 67 48 6a 48 59 35 45 44 57 45 71 5a 57 7a 6f 6c 31 4a 34 49 64 36 48 6c 49 54 38 56 47 52 61 47 31 5a 71 77 57 6d 58 43 39 6e 58 4e 36 4a 41 73 6e 55 48 4b 75 70 50 5f 5f 42 56 51 46 67 55 5f 68 73 4d 58 75 7a 4e 50 52 42 38 63 44 41 44 4d 37 4b 49 53 73 6d 69 79 48 5a 61 6b 42 75 37 57 68 73 77 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsar8PC-KNmYDYNh5CTPtfn3u0yqOkE3gdBEtCe5Szf3PyDT_2on4gYZpcEhCKg5PEVHUAmjIfe-KasHyR6B9F0a1veIehIYU_6nHzaWafd2XX76NRDk-YUugHjHY5EDWEqZWzol1J4Id6HlIT8VGRaG1ZqwWmXC9nXN6JAsnUHKupP__BVQFgU_hsMXuzNPRB8cDADM7KISsmiyHZakBu7Whsw==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50077	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	2755	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:40 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:27:40 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 2926847b-2c71-4f58-a828-18b2742d1ece Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:40 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50078	54.206.194.51	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	374	OUT	GET /geo/ip HTTP/1.1 Host: proactive-chat-server-ap.prod.aws.lcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:40 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:40 GMT Content-Type: application/json Content-Length: 805 Connection: close x-amzn-RequestId: 789624f0-59a6-4962-8c13-8d2a07e882e2 Access-Control-Allow-Origin: * x-amz-apigw-id: SEengHtkSwMEDqw= X-Amzn-Trace-Id: Root=1-65b1aafc-190adbad55af5be04fd49053
2024-01-25 00:27:40 UTC	805	IN	Data Raw: 7b 22 69 70 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 37 34 22 2c 22 67 65 6f 49 70 22 3a 7b 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 7b 22 63 6f 64 65 22 3a 22 45 55 22 2c 22 6e 61 6d 65 73 22 3a 7b 22 64 65 22 3a 22 45 75 72 6f 70 61 22 2c 22 72 75 22 3a 22 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b0 22 2c 22 70 74 2d 42 52 22 3a 22 45 75 72 6f 70 61 22 2c 22 6a 61 22 3a 22 e3 83 a8 e3 83 bc e3 83 ad e3 83 83 e3 83 91 22 2c 22 65 6e 22 3a 22 45 75 72 6f 70 65 22 2c 22 66 72 22 3a 22 45 75 72 6f 70 65 22 2c 22 7a 68 2d 43 4e 22 3a 22 e6 ac a7 e6 b4 b2 22 2c 22 65 73 22 3a 22 45 75 72 6f 70 61 22 7d 2c 22 67 65 6f 6e 61 6d 65 5f 69 64 22 3a 36 32 35 35 31 34 38 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 7b 22 69 73 5f 69 6e 5f 65 75 72 6f 70 65 61 6e 5f 75 6e 69 6f 6e 22 3a 74 Data Ascii: {"ip":"81.181.57.74","geoIp":{"continent":{"code":"EU","names":{"de":"Europa","ru":"","pt-BR":"Europa","ja":"","en":"Europe","fr":"Europe","zh-CN":"","es":"Europa"},"geoname_id":6255148},"country":{"is_in_european_union":t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50089	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	625	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142458936 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:40 UTC	706	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:39 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 fee643092e4af2bd1352bdea36277218.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: BRghj6tKMzxM7xnWM5tKo9edpux-Kd0upGGpsh8hDNP3I4w5nbcOlQ== Age: 1
2024-01-25 00:27:40 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50081	76.223.31.44	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	757	OUT	GET /eval/59c45122922f080adde50ec0/eyJrZXkiOiJkNDFkOGNkOThmMDBiMjA0ZTk4MDA5OThlY2Y4NDI3ZSIsImFub255bW91cyI6ZmFsc2UsImN1c3RvbSI6eyJvcmciOiJOQUIiLCJ0eXBlIjoiY3VzdG9tZXIifX0 HTTP/1.1 Host: clientstream.launchdarkly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/event-stream Cache-Control: no-cache sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:40 UTC	578	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:40 GMT Content-Type: text/event-stream; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-Ranges: bytes Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Cache-Control,X-Requested-With,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 Cache-Control: no-cache, no-store, must-revalidate Ld-Region: eu-west-1 Strict-Transport-Security: max-age=31536000 X-Content-Length:
2024-01-25 00:27:40 UTC	597	IN	Data Raw: 32 34 65 0d 0a 65 76 65 6e 74 3a 70 75 74 0a 64 61 74 61 3a 7b 22 73 70 65 6e 64 69 6e 67 2d 73 74 69 63 6b 79 2d 68 65 61 64 65 72 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 36 37 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 49 42 5f 52 45 53 45 54 5f 50 41 53 53 57 4f 52 44 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 36 37 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 63 61 72 64 73 43 43 44 75 65 44 61 74 65 45 6e 61 62 6c 65 64 22 3a 7b 22 76 65 72 Data Ascii: 24eevent:putdata:{"spending-sticky-header":{"version":467,"flagVersion":2,"value":false,"variation":1,"trackEvents":false},"IB_RESET_PASSWORD":{"version":467,"flagVersion":2,"value":false,"variation":1,"trackEvents":false},"cardsCCDueDateEnabled":{"ver
2024-01-25 00:27:40 UTC	5793	IN	Data Raw: 31 36 39 39 0d 0a 73 69 6f 6e 22 3a 34 36 37 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 33 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 69 62 2d 72 65 73 65 74 2d 70 61 73 73 77 6f 72 64 2d 73 65 63 75 72 69 74 79 2d 65 6e 68 61 6e 63 65 6d 65 6e 74 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 36 37 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 33 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 73 70 65 6e 64 69 6e 67 2d 6d 61 69 6e 70 61 67 65 2d 74 72 61 6e 73 61 63 74 69 6f 6e 2d 74 61 62 6c 65 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 36 37 2c 22 Data Ascii: 1699sion":467,"flagVersion":3,"value":true,"variation":0,"trackEvents":false},"ib-reset-password-security-enhancement":{"version":467,"flagVersion":3,"value":false,"variation":1,"trackEvents":false},"spending-mainpage-transaction-table":{"version":467,"
2024-01-25 00:27:40 UTC	7	IN	Data Raw: 32 0d 0a 3a 0a 0d 0a Data Ascii: 2:
2024-01-25 00:27:40 UTC	7	IN	Data Raw: 32 0d 0a 3a 0a 0d 0a Data Ascii: 2:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50086	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	3195	OUT	POST /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=oW6l9yHBMIy%2BOeVXaQCNVp%2B7E%2FRz5TOj%2F%2F7PTOOJfW6ts21vFbFGOdnnejUF7HUacW0%2F3Ek2DqcKPVv4Pnw5CTSN1AMdz6Qmiu48WpSuY%2FsCGG6VLmeJ0gqTJgRbKBPZ4COvZuAJBTGYYN1%2FM36Sg8GYlmM9uCjYvMMC HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive Content-Length: 9420 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:40 UTC	9420	OUT	Data Raw: 4d 44 41 30 64 43 30 69 58 79 6b 4f 49 78 46 4e 4b 44 39 48 57 6c 74 55 4f 44 4a 68 51 52 46 31 57 7a 74 42 61 33 51 62 4e 31 64 52 47 42 4d 53 45 55 30 49 49 47 74 59 57 46 59 39 4e 31 67 5a 63 52 56 69 51 6a 31 66 51 47 6c 76 48 6d 45 63 65 30 73 70 52 46 78 4e 66 79 59 64 45 33 74 77 4b 56 59 4b 44 56 63 76 64 44 63 77 57 6e 38 69 55 56 46 52 57 69 5a 44 57 30 35 39 4a 78 30 57 66 47 77 71 56 58 74 31 4a 32 35 34 58 33 30 62 62 69 78 63 49 67 67 57 51 68 51 62 43 41 74 65 56 30 70 44 58 52 39 42 52 45 41 6d 43 48 49 73 4d 42 74 46 56 31 49 70 45 53 42 68 54 52 41 55 51 47 42 53 52 69 49 38 59 51 6f 52 55 68 52 2f 66 79 34 35 59 43 74 77 44 51 73 59 49 56 52 59 48 78 64 41 5a 79 4e 35 45 69 52 68 46 55 5a 50 53 33 39 32 4a 69 38 5a 65 79 39 63 4a 33 77 Data Ascii: MDA0dC0iXykOIxFNKD9HWltUODJhQRF1WztBa3QbN1dRGBMSEU0IIGtYWFY9N1gZcRViQj1fQGlvHmEce0spRFxNfyYdE3twKVYKDVcvdDcwWn8iUVFRWiZDW059Jx0WfGwqVXt1J254X30bbixcIggWQhQbCAteV0pDXR9BREAmCHIsMBtFV1IpESBhTRAUQGBSRiI8YQoRUhR/fy45YCtwDQsYIVRYHxdAZyN5EiRhFUZPS392Ji8Zey9cJ3w
2024-01-25 00:27:41 UTC	573	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 set-cookie: cfidsgib-w-nab-ib=2DBd0CzWXSifCa1FZT580qCD1jSpkGIfa8uPVHTppbrbETalsrbjyVeNvoScnSFMzQMcWXHZcHJemN1+Jb1j5A1SOB77l9JZMN8kAa3WMS5OrSurWH40cdDCGOEfZJVnNfSacodCBIysDXI/vDE8Z83Xq/Bj/ktRQixY; Path=/; Expires=Fri, 24 Jan 2025 00:27:41 GMT; SameSite=None date: Thu, 25 Jan 2024 00:27:41 GMT content-length: 399 x-envoy-upstream-service-time: 1 access-control-allow-origin: https://ib.nab.com.au access-control-allow-credentials: true server: istio-envoy connection: close
2024-01-25 00:27:41 UTC	399	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 7b 22 63 66 69 64 73 22 3a 22 32 44 42 64 30 43 7a 57 58 53 69 66 43 61 31 46 5a 54 35 38 30 71 43 44 31 6a 53 70 6b 47 49 66 61 38 75 50 56 48 54 70 70 62 72 62 45 54 61 6c 73 72 62 6a 79 56 65 4e 76 6f 53 63 6e 53 46 4d 7a 51 4d 63 57 58 48 5a 63 48 4a 65 6d 4e 31 2b 4a 62 31 6a 35 41 31 53 4f 42 37 37 6c 39 4a 5a 4d 4e 38 6b 41 61 33 57 4d 53 35 4f 72 53 75 72 57 48 34 30 63 64 44 43 47 4f 45 66 5a 4a 56 6e 4e 66 53 61 63 6f 64 43 42 49 79 73 44 58 49 2f 76 44 45 38 5a 38 33 58 71 2f 42 6a 2f 6b 74 52 51 69 78 59 22 2c 22 63 73 22 3a 7b 22 63 66 69 64 73 22 3a 22 32 44 42 64 30 43 7a 57 58 53 69 66 43 61 31 46 5a 54 35 38 30 71 43 44 Data Ascii: {"status":"success","error":null,"data":{"cfids":"2DBd0CzWXSifCa1FZT580qCD1jSpkGIfa8uPVHTppbrbETalsrbjyVeNvoScnSFMzQMcWXHZcHJemN1+Jb1j5A1SOB77l9JZMN8kAa3WMS5OrSurWH40cdDCGOEfZJVnNfSacodCBIysDXI/vDE8Z83Xq/Bj/ktRQixY","cs":{"cfids":"2DBd0CzWXSifCa1FZT580qCD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50087	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	2917	OUT	GET /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=%2Bbmkfru%2BOVMEZ7kXWH8rjWoXBxnoC38YJjRed2TjT%2BdSnTM95VPpGzo6dEKkEzikTvo%2FRCx7JXcnVmf06a9yOD%2BBDXZKVgqNR5F0v1A5Mm%2BbDEH9nRYKrq9euNwW5dbl3ux5gaSGA179xcweXRBiEx3A HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:41 UTC	222	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 date: Thu, 25 Jan 2024 00:27:41 GMT content-length: 45 x-envoy-upstream-service-time: 4 server: istio-envoy connection: close
2024-01-25 00:27:41 UTC	45	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 75 6e 6b 6e 6f 77 6e 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 6e 75 6c 6c 7d Data Ascii: {"status":"unknown","error":null,"data":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49967	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	3000	OUT	GET /nab/Bootstrap.js HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4 If-None-Match: "88e14e475ed3fd8df6efc3eb91cd64f5" If-Modified-Since: Tue, 23 Jan 2024 00:26:30 GMT
2024-01-25 00:27:40 UTC	617	IN	HTTP/1.1 304 Not Modified Date: Thu, 25 Jan 2024 00:27:40 GMT Content-Type: application/javascript; charset=utf-8 Connection: close x-amz-replication-status: COMPLETED ETag: "88e14e475ed3fd8df6efc3eb91cd64f5" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: oSXFHXIjN_8U3WpPWhKCEIf0pIxChvwg Server: CloudFront Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 02a2bd1a95c9e133cb6af71565738388.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: G7kXnH-5DnKXzCl-2kSLrTncwfS40xvlc_Fsr7ZCt_B62pRFvBMa6A== Age: 171685

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50088	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	557	OUT	GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:8241a326-c399-460c-97e4-79a5cfa44231\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:19\|d:0
2024-01-25 00:27:41 UTC	1465	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:8241a326-c399-460c-97e4-79a5cfa44231\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:139\|e:19\|d:0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:b46170ed-b8fb-4a07-96ee-b7ba68ab26ea; Path=/; Expires=Thu, 25-Jan-2024 00:28:11 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:b46170ed-b8fb-4a07-96ee-b7ba68ab26ea\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:11 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:11 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:11 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:11 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:0\|d:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:11 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49966	54.211.243.61	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:40 UTC	804	OUT	GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_mid=74531577018668379620070530052756004963&d_cb=Bootstrapper.aam_tnt_cb HTTP/1.1 Host: nab.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: DST=; nab=69949952628053946071772149917135184323; demdex=74249799952676478810044664576166395424; dextp=358-1-1706142426061\|903-1-1706142427037\|139200-1-1706142428038
2024-01-25 00:27:40 UTC	884	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:40 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 510 Connection: close X-TID: ToELcxZoT1g= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v053-076a89a35.edge-va6.demdex.com 4 ms set-cookie: demdex=74249799952676478810044664576166395424; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: nab=69949952628053946071772149917135184323; Max-Age=15552000; Expires=Tue, 23 Jul 2024 00:27:40 GMT; Path=/; Domain=.nab.demdex.net; Secure; SameSite=None
2024-01-25 00:27:40 UTC	510	IN	Data Raw: 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 61 61 6d 5f 74 6e 74 5f 63 62 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 74 6e 74 22 2c 22 63 76 22 3a 22 70 72 6f 66 69 6c 65 2e 6f 6d 6e 69 61 3d 63 3a 75 6e 6b 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 6e 61 62 2e 63 6f 6d 2e 61 75 22 7d 5d 2c 22 75 75 69 64 22 3a 22 37 34 32 34 39 37 39 39 39 35 32 36 37 36 34 37 38 38 31 30 30 34 34 36 36 34 35 37 36 31 36 36 33 39 35 34 32 34 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 54 6f 45 4c 63 78 5a 6f 54 31 67 3d 22 2c 22 74 72 61 69 74 73 22 3a 5b 32 35 32 37 38 32 30 2c 31 38 38 34 35 35 31 35 2c 31 32 36 35 31 35 38 30 2c 31 38 37 36 32 33 36 35 2c 31 33 38 32 37 30 38 30 2c 31 38 38 34 35 35 31 37 2c 31 Data Ascii: Bootstrapper.aam_tnt_cb({"stuff":[{"cn":"aam_tnt","cv":"profile.omnia=c:unk","ttl":30,"dmn":"nab.com.au"}],"uuid":"74249799952676478810044664576166395424","dcs_region":7,"tid":"ToELcxZoT1g=","traits":[2527820,18845515,12651580,18762365,13827080,18845517,1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50090	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	482	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 1406 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:41 UTC	1406	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 33 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"LOGIN","requestId":3,"sts":"gAAAAABls
2024-01-25 00:27:41 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:27:40 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: c12d9a64-39bc-4332-ba30-ec6ae996e06a Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:41 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 72 39 77 5a 49 51 38 44 74 4e 6b 66 31 75 77 71 55 58 4d 6e 6e 65 41 6b 4b 47 56 76 43 30 6c 49 62 50 72 5a 58 36 73 66 38 53 77 4a 46 57 5f 38 4d 78 67 62 39 4f 32 34 51 7a 72 35 58 62 76 43 73 5f 4f 78 63 65 62 52 48 30 6b 4e 61 69 6e 53 63 52 65 68 32 4c 6b 7a 4e 33 64 70 58 5f 55 36 50 61 74 74 4b 48 53 57 32 62 67 49 39 44 36 7a 43 7a 59 4e 72 56 44 4c 47 49 2d 5a 58 53 30 75 67 79 34 47 50 31 4e 6b 45 7a 37 53 38 6f 6a 33 34 42 39 65 42 44 35 37 35 65 50 30 4c 74 49 44 6e 47 43 68 54 58 46 4a 52 38 71 64 6d 31 66 53 52 49 56 59 41 39 69 7a 55 79 6a 4f 6e 32 42 36 68 7a 68 36 4c 79 34 4f 4f 72 47 4b 64 37 62 74 6e 31 58 6a 38 75 5f 67 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsar9wZIQ8DtNkf1uwqUXMnneAkKGVvC0lIbPrZX6sf8SwJFW_8Mxgb9O24Qzr5XbvCs_OxcebRH0kNainScReh2LkzN3dpX_U6PattKHSW2bgI9D6zCzYNrVDLGI-ZXS0ugy4GP1NkEz7S8oj34B9eBD575eP0LtIDnGChTXFJR8qdm1fSRIVYA9izUyjOn2B6hzh6Ly4OOrGKd7btn1Xj8u_g==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50094	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	425	OUT	GET /nab-prod/live/a7666be5-364e-4234-9590-4b32b02933d5.json?v=1706142458936 HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:41 UTC	525	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 85 Connection: close Date: Thu, 25 Jan 2024 00:27:26 GMT Last-Modified: Tue, 10 Oct 2023 22:53:35 GMT ETag: "df763c70f54036c3e400525c9a7aa45e" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 cdf91f5114ee3da047db49a3868eccf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: yiCIsURQ6eAjFnSiOuQwkWdUoCctCRufWCqBuoPuNAZ2SfHBFVDSzA== Age: 16
2024-01-25 00:27:41 UTC	85	IN	Data Raw: 7b 22 62 72 61 6e 64 53 74 79 6c 65 48 61 73 68 22 3a 22 30 31 66 34 30 65 33 32 36 34 38 33 33 66 61 64 64 35 62 66 39 34 63 64 34 31 39 62 36 33 62 61 30 66 34 63 33 61 65 36 32 39 63 64 34 61 30 34 30 66 62 31 37 64 65 32 31 37 65 38 66 35 34 66 22 7d Data Ascii: {"brandStyleHash":"01f40e3264833fadd5bf94cd419b63ba0f4c3ae629cd4a040fb17de217e8f54f"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50091	20.53.196.14	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	621	OUT	POST /api/v1/sendLogs?cid=nightcrawler&cdsnum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4&csid=c2edb76a-9cf1-4d21-ae76-4084354cd368&ds=js&sdkVer=2.25.0.1138.4a8959e HTTP/1.1 Host: log-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 104 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:41 UTC	104	OUT	Data Raw: 6d 39 79 38 4a 4c 38 6f 4d 33 31 4a 62 6d 4a 6d 33 70 4b 38 78 4e 7a 55 62 53 56 36 4a 5a 6d 35 71 53 47 5a 4f 54 6e 42 71 55 56 6c 71 55 58 4f 2b 58 6c 70 6d 65 6d 4c 79 78 4a 7a 54 6a 74 4d 6c 7a 68 7a 35 73 78 5a 42 6e 51 39 6d 78 42 36 41 68 4c 54 55 33 33 79 45 31 4e 41 36 73 2f 4b 4e 42 43 76 45 67 41 3d Data Ascii: m9y8JL8oM31JbmJm3pK8xNzUbSV6JZm5qSGZOTnBqUVlqUXO+XlpmemLyxJzTjtMlzhz5sxZBnQ9mxB6AhLTU33yE1NA6s/KNBCvEgA=
2024-01-25 00:27:41 UTC	234	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Date: Thu, 25 Jan 2024 00:27:41 GMT access-control-allow-origin: * access-control-allow-credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50096	3.133.211.247	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	3147	OUT	GET /nab/prod/serverComponent.php?namespace=Bootstrapper&staticJsPath=tms.nab.com.au/nab/prod/code/&publishedOn=Tue%20Jan%2023%2000:26:27%20GMT%202024&ClientID=1169&PageID=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner HTTP/1.1 Host: tms.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:41 UTC	487	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:41 GMT Content-Type: text/javascript Content-Length: 741 Connection: close Vary: Accept-Encoding Server: CloudFront Expires: Thu, 25 Jan 2024 00:27:40 GMT Cache-Control: no-cache Cache-Control: no-store X-Cache: Miss from cloudfront Via: 1.1 d6eccaed6bcab76e8b9ccd6b59f866ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CMH68-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _BbXEfiT6zapXnwwMPIN5dXGhl4FUKPzhARPcpq2OcxTnWRDM0ko1w==
2024-01-25 00:27:41 UTC	741	IN	Data Raw: 0a 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 5f 73 65 72 76 65 72 54 69 6d 65 20 3d 20 27 32 30 32 34 2d 30 31 2d 32 35 20 30 30 3a 32 37 3a 34 31 27 3b 20 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 5f 63 6c 69 65 6e 74 49 50 20 3d 20 27 33 2e 31 39 2e 36 31 2e 31 34 37 27 3b 20 42 6f 6f 74 73 74 72 61 70 70 65 72 2e 69 6e 73 65 72 74 50 61 67 65 46 69 6c 65 73 28 5b 27 68 74 74 70 73 3a 2f 2f 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 63 6f 64 65 2f 36 38 36 30 63 34 63 66 32 35 36 66 62 39 65 35 32 65 63 33 36 31 30 35 66 61 36 37 36 61 36 64 2e 6a 73 3f 63 6f 6e 64 69 74 69 6f 6e 49 64 30 3d 34 39 35 38 31 37 38 27 2c 27 68 74 74 70 73 3a 2f 2f 74 6d 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6e 61 62 2f 70 72 6f 64 2f 63 6f 64 65 2f Data Ascii: Bootstrapper._serverTime = '2024-01-25 00:27:41'; Bootstrapper._clientIP = '3.19.61.147'; Bootstrapper.insertPageFiles(['https://tms.nab.com.au/nab/prod/code/6860c4cf256fb9e52ec36105fa676a6d.js?conditionId0=4958178','https://tms.nab.com.au/nab/prod/code/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50093	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	2755	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:41 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:27:41 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 03dcdab7-632e-451e-a3a3-d5130442153b Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:41 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50095	54.153.169.192	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	636	OUT	GET /personalization/accounts/nab/profiles/main/visitors/018d3e036c1f0020cd3edad10e9a0506f001706700918 HTTP/1.1 Host: mps.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:42 UTC	811	IN	HTTP/1.1 204 No Content Date: Thu, 25 Jan 2024 00:27:41 GMT Content-Type: application/json;charset=utf-8 Connection: close Set-Cookie: AWSALB=PdspJfrYbfYt7gXj5ExXgO8VQwokBgPb8aBbtmpaENBzzHV5q+ZvGzRyxQCM1erNZei6gdSw1107UBtKqNUrCKo2qnXAt2zY5JWPn6cK3/vcTCcMbM3vxkOGwfAJ; Expires=Thu, 01 Feb 2024 00:27:41 GMT; Path=/ Set-Cookie: AWSALBCORS=PdspJfrYbfYt7gXj5ExXgO8VQwokBgPb8aBbtmpaENBzzHV5q+ZvGzRyxQCM1erNZei6gdSw1107UBtKqNUrCKo2qnXAt2zY5JWPn6cK3/vcTCcMbM3vxkOGwfAJ; Expires=Thu, 01 Feb 2024 00:27:41 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 Access-Control-Allow-Origin: https://www.nab.com.au Access-Control-Allow-Methods: GET X-NodeId: i-0bc3e58d170fc7e16 X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50099	52.71.237.94	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	778	OUT	POST /events/bulk/59c45122922f080adde50ec0 HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Content-Length: 685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-LaunchDarkly-Payload-ID: 8c3aff70-bb18-11ee-9d62-996c0ba45961 X-LaunchDarkly-Event-Schema: 3 X-LaunchDarkly-User-Agent: JSClient/2.19.2 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:41 UTC	685	OUT	Data Raw: 5b 7b 22 6b 69 6e 64 22 3a 22 69 64 65 6e 74 69 66 79 22 2c 22 6b 65 79 22 3a 22 64 34 31 64 38 63 64 39 38 66 30 30 62 32 30 34 65 39 38 30 30 39 39 38 65 63 66 38 34 32 37 65 22 2c 22 75 73 65 72 22 3a 7b 22 6b 65 79 22 3a 22 64 34 31 64 38 63 64 39 38 66 30 30 62 32 30 34 65 39 38 30 30 39 39 38 65 63 66 38 34 32 37 65 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 22 3a 66 61 6c 73 65 2c 22 63 75 73 74 6f 6d 22 3a 7b 22 6f 72 67 22 3a 22 4e 41 42 22 2c 22 74 79 70 65 22 3a 22 63 75 73 74 6f 6d 65 72 22 7d 7d 2c 22 63 72 65 61 74 69 6f 6e 44 61 74 65 22 3a 31 37 30 36 31 34 32 34 35 38 30 38 32 7d 2c 7b 22 73 74 61 72 74 44 61 74 65 22 3a 31 37 30 36 31 34 32 34 35 38 35 35 31 2c 22 65 6e 64 44 61 74 65 22 3a 31 37 30 36 31 34 32 34 35 38 35 35 32 2c 22 66 65 61 Data Ascii: [{"kind":"identify","key":"d41d8cd98f00b204e9800998ecf8427e","user":{"key":"d41d8cd98f00b204e9800998ecf8427e","anonymous":false,"custom":{"org":"NAB","type":"customer"}},"creationDate":1706142458082},{"startDate":1706142458551,"endDate":1706142458552,"fea
2024-01-25 00:27:42 UTC	524	IN	HTTP/1.1 202 Accepted Date: Thu, 25 Jan 2024 00:27:42 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50097	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	3187	OUT	POST /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=2DBd0CzWXSifCa1FZT580qCD1jSpkGIfa8uPVHTppbrbETalsrbjyVeNvoScnSFMzQMcWXHZcHJemN1%2BJb1j5A1SOB77l9JZMN8kAa3WMS5OrSurWH40cdDCGOEfZJVnNfSacodCBIysDXI%2FvDE8Z83Xq%2FBj%2FktRQixY HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive Content-Length: 6580 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:41 UTC	6580	OUT	Data Raw: 4d 44 41 30 64 43 30 69 58 79 6b 4f 49 78 46 4e 4b 44 39 48 57 6c 74 55 4f 44 4a 68 51 52 46 31 57 7a 74 42 61 33 51 62 4e 31 64 52 47 42 4d 53 45 55 30 49 49 47 74 59 57 46 59 39 4e 31 67 5a 63 52 56 64 51 54 31 66 51 47 6c 76 48 6d 45 63 65 30 73 70 52 46 78 4e 66 79 59 64 45 33 74 77 4b 31 67 4c 45 6c 63 76 64 44 63 77 57 6e 38 69 55 56 46 52 57 69 5a 44 57 30 35 39 4a 78 30 57 66 6e 51 6b 57 48 74 31 4a 32 35 34 58 33 30 62 62 69 78 63 49 67 67 57 51 68 51 62 43 41 74 65 56 30 70 44 58 52 39 42 52 45 41 6d 43 48 49 73 4d 42 74 46 56 31 49 70 45 53 42 68 54 52 41 55 51 47 42 53 52 69 49 38 59 51 6f 52 55 68 52 2f 66 79 34 35 59 43 74 77 44 51 73 59 49 56 52 59 48 78 64 41 5a 79 4e 35 45 69 52 68 46 55 5a 50 53 33 39 32 4a 69 38 5a 65 79 39 63 4a 33 77 Data Ascii: MDA0dC0iXykOIxFNKD9HWltUODJhQRF1WztBa3QbN1dRGBMSEU0IIGtYWFY9N1gZcRVdQT1fQGlvHmEce0spRFxNfyYdE3twK1gLElcvdDcwWn8iUVFRWiZDW059Jx0WfnQkWHt1J254X30bbixcIggWQhQbCAteV0pDXR9BREAmCHIsMBtFV1IpESBhTRAUQGBSRiI8YQoRUhR/fy45YCtwDQsYIVRYHxdAZyN5EiRhFUZPS392Ji8Zey9cJ3w
2024-01-25 00:27:42 UTC	573	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 set-cookie: cfidsgib-w-nab-ib=hG/f3Q0sRFPS5OhDAudxHchIyjQvj+AR5nUVy70s2TkTqPYcTu8GV/1ZTMt0VEyYKCBSRR3EPc4CNEnybP0dgtX2O9bpoESdEUelc1VWiKMVP7UDXIlvl8sjq+Z/J/u4vokNHNl1FJgrXrHV50aaSmo4fqrQO3+oqcVj; Path=/; Expires=Fri, 24 Jan 2025 00:27:42 GMT; SameSite=None date: Thu, 25 Jan 2024 00:27:42 GMT content-length: 399 x-envoy-upstream-service-time: 0 access-control-allow-origin: https://ib.nab.com.au access-control-allow-credentials: true server: istio-envoy connection: close
2024-01-25 00:27:42 UTC	399	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 7b 22 63 66 69 64 73 22 3a 22 68 47 2f 66 33 51 30 73 52 46 50 53 35 4f 68 44 41 75 64 78 48 63 68 49 79 6a 51 76 6a 2b 41 52 35 6e 55 56 79 37 30 73 32 54 6b 54 71 50 59 63 54 75 38 47 56 2f 31 5a 54 4d 74 30 56 45 79 59 4b 43 42 53 52 52 33 45 50 63 34 43 4e 45 6e 79 62 50 30 64 67 74 58 32 4f 39 62 70 6f 45 53 64 45 55 65 6c 63 31 56 57 69 4b 4d 56 50 37 55 44 58 49 6c 76 6c 38 73 6a 71 2b 5a 2f 4a 2f 75 34 76 6f 6b 4e 48 4e 6c 31 46 4a 67 72 58 72 48 56 35 30 61 61 53 6d 6f 34 66 71 72 51 4f 33 2b 6f 71 63 56 6a 22 2c 22 63 73 22 3a 7b 22 63 66 69 64 73 22 3a 22 68 47 2f 66 33 51 30 73 52 46 50 53 35 4f 68 44 41 75 64 78 48 63 68 49 Data Ascii: {"status":"success","error":null,"data":{"cfids":"hG/f3Q0sRFPS5OhDAudxHchIyjQvj+AR5nUVy70s2TkTqPYcTu8GV/1ZTMt0VEyYKCBSRR3EPc4CNEnybP0dgtX2O9bpoESdEUelc1VWiKMVP7UDXIlvl8sjq+Z/J/u4vokNHNl1FJgrXrHV50aaSmo4fqrQO3+oqcVj","cs":{"cfids":"hG/f3Q0sRFPS5OhDAudxHchI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50101	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:42 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:41 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-0a7d2b32d5bd7938f Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:41 GMT X-UUID: 42bef390-0273-4814-952d-211f16298216 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:41 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:42 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50098	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:41 UTC	2933	OUT	GET /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=oW6l9yHBMIy%2BOeVXaQCNVp%2B7E%2FRz5TOj%2F%2F7PTOOJfW6ts21vFbFGOdnnejUF7HUacW0%2F3Ek2DqcKPVv4Pnw5CTSN1AMdz6Qmiu48WpSuY%2FsCGG6VLmeJ0gqTJgRbKBPZ4COvZuAJBTGYYN1%2FM36Sg8GYlmM9uCjYvMMC HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:2$_ss:0$_st:1706144239738$ses_id:1706142428192%3Bexp-session$_pn:2%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4
2024-01-25 00:27:42 UTC	222	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 date: Thu, 25 Jan 2024 00:27:42 GMT content-length: 45 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-01-25 00:27:42 UTC	45	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 75 6e 6b 6e 6f 77 6e 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 6e 75 6c 6c 7d Data Ascii: {"status":"unknown","error":null,"data":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50104	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	1289	OUT	GET /pageview?pid=51360&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142460&pn=3&dw=1184&dh=367&ww=1184&wh=150&sw=1280&sh=1024&dr=https%3A%2F%2Fib.nab.com.au%2F&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&uc=1&la=en-US&cvars=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Aib-platform%3Alogin%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%2C%223%22%3A%5B%22Site%20Subsection%22%2C%22online-banking%22%5D%7D&cvarp=%7B%221%22%3A%5B%22Page%20Name%22%2C%22nab%3Aib-platform%3Alogin%22%5D%2C%222%22%3A%5B%22Site%20Section%22%2C%22personal%22%5D%2C%223%22%3A%5B%22Site%20Subsection%22%2C%22online-banking%22%5D%7D&v=13.59.1&pvt=n&ex=&r=857918 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:42 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:42 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50105	54.205.210.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	700	OUT	POST /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive Content-Length: 1523 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:42 UTC	1523	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 39 65 30 39 30 64 33 30 33 62 63 34 63 39 33 39 62 66 33 38 32 32 38 62 36 37 37 37 65 30 34 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 36 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 Data Ascii: {"requestId":"e9e090d303bc4c939bf38228b6777e04","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":60,"channel":"web","screen":{"width":1280,"heigh
2024-01-25 00:27:42 UTC	769	IN	HTTP/1.1 200 OK date: Thu, 25 Jan 2024 00:27:42 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.nab.com.au access-control-allow-credentials: true x-request-id: 03b20604221a01df0f9ded2d08927868 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-01-25 00:27:42 UTC	370	IN	Data Raw: 31 36 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 39 65 30 39 30 64 33 30 33 62 63 34 63 39 33 39 62 66 33 38 32 32 38 62 36 37 37 37 65 30 34 22 2c 22 63 6c 69 65 6e 74 22 3a 22 6e 61 74 69 6f 6e 61 6c 61 75 73 74 72 61 6c 69 61 62 61 6e 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 62 62 30 38 64 33 33 33 39 34 38 63 34 32 62 33 38 36 37 63 30 63 38 39 38 62 30 66 30 30 31 63 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 37 34 35 33 31 35 37 37 30 31 38 36 36 38 33 37 39 36 32 30 30 37 30 35 33 30 30 35 32 37 35 36 30 30 34 39 36 33 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 Data Ascii: 16b{"status":200,"requestId":"e9e090d303bc4c939bf38228b6777e04","client":"nationalaustraliaban","id":{"tntId":"bb08d333948c42b3867c0c898b0f001c.34_0","marketingCloudVisitorId":"74531577018668379620070530052756004963"},"edgeHost":"mboxedge34.tt.omtrdc.ne
2024-01-25 00:27:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50106	31.13.88.13	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	1261	OUT	GET /signals/config/1349572601822987?v=2.9.142&r=stable&domain=ib.nab.com.au&hme=e82209ddce2f5ef9f00773b102465283e977acad712d554991b839c35823b905&ex_m=62%2C103%2C91%2C95%2C53%2C3%2C87%2C61%2C14%2C85%2C78%2C44%2C46%2C145%2C148%2C159%2C155%2C156%2C158%2C25%2C88%2C45%2C68%2C157%2C140%2C143%2C152%2C153%2C160%2C112%2C13%2C43%2C164%2C163%2C114%2C16%2C29%2C32%2C1%2C36%2C57%2C58%2C59%2C63%2C82%2C15%2C12%2C84%2C81%2C80%2C92%2C94%2C31%2C93%2C26%2C22%2C141%2C144%2C121%2C24%2C9%2C10%2C11%2C5%2C6%2C21%2C19%2C20%2C49%2C54%2C56%2C66%2C89%2C23%2C67%2C8%2C7%2C71%2C41%2C18%2C17%2C4%2C73%2C79%2C72%2C77%2C33%2C35%2C76%2C48%2C74%2C28%2C37%2C65%2C0%2C83%2C75%2C2%2C30%2C55%2C34%2C90%2C38%2C70%2C60%2C40%2C39%2C96%2C52%2C51%2C27%2C86%2C50%2C47%2C42%2C69%2C64%2C97 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:42 UTC	1813	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin-allow-popups Pragma: public Cache-Control: public, max-age=1200 Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains X-FB-Debug: QzA6X72KLSLB57gc/dQHrF5NRP+CGr7rtB9YDgVqF1S55h9HPB9Zv3GY6INGr5Yo325/0TBQLWYjgI5RHlOz2A== Date: Thu, 25 Jan 2024 00:27:42 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 131185
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 Data Ascii: urn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d Data Ascii: ;b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsM
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 63 2e 67 65 74 43 6c 69 63 6b 49 44 46 72 6f 6d 42 72 6f 77 73 65 72 50 72 6f 70 65 72 74 69 65 73 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 43 6f 6f 6b 69 65 22 29 3b 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 6b 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 6c 3d 6b 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 2c 6d 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 6f 75 6c 64 4e 6f 74 44 Data Ascii: c.getClickIDFromBrowserProperties;f.getFbeventsModules("SignalsFBEventsPixelCookie");c=f.getFbeventsModules("SignalsFBEventsPlugin");var k=f.getFbeventsModules("SignalsFBEventsURLUtil"),l=k.getURLParameter,m=f.getFbeventsModules("signalsFBEventsShouldNotD
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 65 29 3b 64 26 26 28 62 5b 73 5d 3d 64 2e 70 61 63 6b 28 29 29 3b 64 3d 79 28 29 3b 64 26 26 28 62 5b 75 5d 3d 64 2e 70 61 63 6b 28 29 29 3b 72 65 74 75 72 6e 20 62 7d 29 7d 62 28 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6f 6f 6b 69 65 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6f 6f 6b 69 65 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e Data Ascii: a.location.href,e);d&&(b[s]=d.pack());d=y();d&&(b[u]=d.pack());return b})}b()})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.cookie");f.registerPlugin&&f.registerPlugin("fbevents.plugins.cookie",e.exports);f.en
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 67 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 3b 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 69 3d 68 2e 66 69 6c 74 65 72 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 68 61 32 35 36 5f 77 69 74 68 5f 64 65 70 65 6e 64 65 6e 63 69 65 73 5f 6e 65 77 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 63 28 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 64 2e 6c 69 73 74 65 6e 28 66 75 Data Ascii: g=f.getFbeventsModules("SignalsFBEventsLogging");c=f.getFbeventsModules("SignalsFBEventsPlugin");var h=f.getFbeventsModules("SignalsFBEventsUtils"),i=h.filter,j=f.getFbeventsModules("sha256_with_dependencies_new");e.exports=new c(function(c,e){d.listen(fu
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 Data Ascii: ules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegister
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 61 6d 73 3d 6c 3b 6e 2e 72 65 73 74 72 69 63 74 65 64 50 61 72 61 6d 73 3d 6d 3b 6b 26 26 28 67 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 28 7b 74 79 70 65 3a 22 55 4e 57 41 4e 54 45 44 5f 43 55 53 54 4f 4d 5f 44 41 54 41 22 7d 29 2c 63 2e 5f 66 69 6c 74 65 72 65 64 50 61 72 61 6d 73 3d 6e 29 3b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 61 2e 73 65 61 72 63 68 29 2c 65 3d 5b 5d 2c 66 3d 5b 5d 3b 61 3d 7b 7d 3b 69 66 28 62 2e 62 6c 61 63 6b 6c 69 73 74 65 64 5f 6b 65 79 73 21 3d 6e Data Ascii: ams=l;n.restrictedParams=m;k&&(g.logUserError({type:"UNWANTED_CUSTOM_DATA"}),c._filteredParams=n);a.performanceMark("fbevents:end:unwantedDataProcessing",b.id)});function h(a,b,c){var d=new URLSearchParams(a.search),e=[],f=[];a={};if(b.blacklisted_keys!=n
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 61 2e 66 62 71 3b 66 2e 65 78 65 63 53 74 61 72 74 3d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(
2024-01-25 00:27:42 UTC	1500	IN	Data Raw: 26 61 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3d 3d 3d 22 4c 44 55 22 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 74 72 79 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 6c 73 65 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 3b 69 66 28 62 2e 63 6f 6e 76 65 72 73 69 6f 6e 42 69 74 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 63 6f 6e 76 65 72 73 69 6f 6e 42 69 74 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 62 2e 70 72 69 6f 72 69 74 79 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 70 72 69 6f 72 69 74 79 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 62 2e 65 74 6c 64 4f 6e 65 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 2e 65 74 6c 64 4f 6e 65 3d Data Ascii: &a.toUpperCase()==="LDU"}function m(a){try{if(a==null\|\|typeof a!=="string")return null;else{var b=JSON.parse(a);if(b.conversionBit!=null&&typeof b.conversionBit==="number"&&b.priority!=null&&typeof b.priority==="number"&&b.etldOne!=null&&typeof b.etldOne=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50102	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	2755	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; gpv_pN=nab%3Ahelp-support; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144302\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:2%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
2024-01-25 00:27:43 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:27:42 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 0af16aa7-ceaa-4e25-b140-2ed05c338505 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:43 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50112	64.233.177.155	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	1352	OUT	GET /pagead/viewthroughconversion/1040712916/?random=1706142461008&cv=9&fst=1706142461008&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&resp=GooglemKTybQhCsO&eid=376635470%2C466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=2&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&ref=https%3A%2F%2Fib.nab.com.au%2F&top=https%3A%2F%2Fib.nab.com.au%2F&tiba=IB%20login%20banner%20-%20NAB&hn=www.googleadservices.com&async=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkN2JxNRb5c3UrvjpeUWdF0h9WJAjlO4U0HnycaHxH5QRTWnr_AK8QOSAmYa1w
2024-01-25 00:27:42 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-25 00:27:42 UTC	549	IN	Data Raw: 39 65 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9e3(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-01-25 00:27:42 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-01-25 00:27:42 UTC	737	IN	Data Raw: 33 64 31 37 30 36 31 34 32 34 36 31 30 30 38 5c 78 32 36 63 76 5c 78 33 64 39 5c 78 32 36 66 73 74 5c 78 33 64 31 37 30 36 31 34 30 38 30 30 30 30 30 5c 78 32 36 6e 75 6d 5c 78 33 64 31 5c 78 32 36 63 75 72 72 65 6e 63 79 5f 63 6f 64 65 5c 78 33 64 41 55 44 5c 78 32 36 6c 61 62 65 6c 5c 78 33 64 2d 76 32 71 43 4a 76 33 79 47 41 51 31 49 6d 67 38 41 4d 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 65 69 64 5c 78 33 64 33 37 36 36 33 35 34 37 30 25 32 43 34 36 36 34 36 35 39 32 35 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 61 68 5c 78 33 64 39 38 34 5c 78 32 36 75 5f 61 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 63 64 5c 78 33 64 32 34 5c 78 32 36 75 5f 68 69 73 5c 78 33 64 31 5c 78 Data Ascii: 3d1706142461008\x26cv\x3d9\x26fst\x3d1706140800000\x26num\x3d1\x26currency_code\x3dAUD\x26label\x3d-v2qCJv3yGAQ1Img8AM\x26guid\x3dON\x26eid\x3d376635470%2C466465925\x26u_h\x3d1024\x26u_w\x3d1280\x26u_ah\x3d984\x26u_aw\x3d1280\x26u_cd\x3d24\x26u_his\x3d1\x
2024-01-25 00:27:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50114	63.140.38.237	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	4300	OUT	GET /b/ss/nab-prd/10/JS-2.22.4/s63861017841327?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=25%2F0%2F2024%201%3A27%3A41%204%20-60&d.&nsid=0&jsonv=1&.d&sdid=5D01C152375B1892-720C2D1ED90D6236&mid=74531577018668379620070530052756004963&aamlh=7&ce=UTF-8&ns=nab&cdp=3&pageName=nab%3Aib-platform%3Alogin&g=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&r=https%3A%2F%2Fib.nab.com.au%2F&c.&getTimeParting=6.3&.c&cc=AUD&ch=nab%3Aib-platform&server=www.nab.com.au&events=event19%2Cevent1&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=nab&v1=D%3Dc1&h1=D%3DpageName%2B%22%3Aindex%22&l1=22110-PIBC&c2=D%3Dch&v2=D%3Dch&c3=nab%3Aib-platform%3Alogin&v3=D%3Dc3&c5=1&v5=D%3Dc5&c9=D%3DpageName&v9=D%3DpageName&c11=D%3Dg&v11=D%3Dg&c13=New&v13=D%3Dc13&c23=profile.omnia%3Dc%3Aunk&c24=profile.omnia_all%3Dc%3Aunk&c31=D%3DpageName&v60=profile.omnia%3Dc%3Aunk&v61=profile.omnia_all%3Dc%3Aunk&c72=VisitorAPI%20Present&v73=Thursday%7C11%3A27%20AM&v74=D%3Dt&c75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v75=2.12%20-%20Ensighten%20-%20App%20Measurement%20FEB%202022&v76=74249799952676478810044664576166395424&v77=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&v81=0.22848551443168175_1706142429071&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1111&bh=343&mcorgid=4986658252DDA4900A490D4D%40AdobeOrg&AQE=1 HTTP/1.1 Host: smetrics.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144321\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New
2024-01-25 00:27:43 UTC	828	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 25 Jan 2024 00:27:43 GMT expires: Wed, 24 Jan 2024 00:27:43 GMT last-modified: Fri, 26 Jan 2024 00:27:43 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C74531577018668379620070530052756004963; Path=/; Domain=nab.com.au; Max-Age=63072000; Expires=Sat, 24 Jan 2026 00:27:27 GMT; etag: 3663913041290199040-4617818568757454264 vary: * x-aam-tid: h/dVWrvkRs8= dcs: dcs-prod-va6-2-v053-04d1637b9.edge-va6.demdex.com 4 ms content-type: application/x-javascript;charset=utf-8 content-length: 746 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-01-25 00:27:43 UTC	746	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 7b 22 63 6e 22 3a 22 61 61 6d 5f 74 6e 74 22 2c 22 63 76 22 3a 22 70 72 6f 66 69 6c 65 2e 6f 6d 6e 69 61 3d 63 3a 75 6e 6b 22 2c 22 74 74 6c 22 3a 33 30 2c 22 64 6d 6e 22 3a 22 6e 61 62 2e 63 6f 6d 2e 61 75 22 7d 5d 2c 22 75 75 69 64 22 3a 22 37 34 32 34 39 37 39 39 39 35 32 36 37 36 34 37 38 38 31 30 30 34 34 36 36 34 35 37 36 31 36 36 33 39 35 34 32 34 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 68 2f 64 56 57 72 76 6b 52 73 38 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 33 35 38 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[{"cn":"aam_tnt","cv":"profile.omnia=c:unk","ttl":30,"dmn":"nab.com.au"}],"uuid":"74249799952676478810044664576166395424","dcs_region":7,"tid":"h/dVWrvkRs8=","ibs":[{"id":"358","ttl":10080,"tag":"img

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50115	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	778	OUT	GET /dvar?v=13.59.1&pid=51360&pn=3&sn=1&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&dv=H4sIAAAAAAAAA6tWSi72TSxJzsjMS%2FdOrVSyUjLQMzKyMLEwNTU0MTE2NLMwNDeNNzQ3MDM0MTIxsjQwN1SqBQDSaWtRNQAAAA%3D%3D&ct=2&r=514734 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:43 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:43 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50116	23.20.189.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	449	OUT	GET /rest/v1/delivery?client=nationalaustraliaban&sessionId=bb08d333948c42b3867c0c898b0f001c&version=2.7.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:43 UTC	383	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 25 Jan 2024 00:27:43 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-01-25 00:27:43 UTC	72	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50117	172.253.124.105	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:42 UTC	1441	OUT	GET /pagead/1p-user-list/1040712916/?random=1706142461008&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=376635470%2C466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=2&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&ref=https%3A%2F%2Fib.nab.com.au%2F&tiba=IB%20login%20banner%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_EmcDFzOUrvO06W5HF_cnm66oZeCZVzriQYEYxf47aTgnPSfS&random=2201551351&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:43 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50113	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	2925	OUT	GET /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=2DBd0CzWXSifCa1FZT580qCD1jSpkGIfa8uPVHTppbrbETalsrbjyVeNvoScnSFMzQMcWXHZcHJemN1%2BJb1j5A1SOB77l9JZMN8kAa3WMS5OrSurWH40cdDCGOEfZJVnNfSacodCBIysDXI%2FvDE8Z83Xq%2FBj%2FktRQixY HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; gpv_pN=nab%3Ahelp-support; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144321\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
2024-01-25 00:27:43 UTC	222	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 date: Thu, 25 Jan 2024 00:27:43 GMT content-length: 45 x-envoy-upstream-service-time: 5 server: istio-envoy connection: close
2024-01-25 00:27:43 UTC	45	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 75 6e 6b 6e 6f 77 6e 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 6e 75 6c 6c 7d Data Ascii: {"status":"unknown","error":null,"data":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50109	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	3083	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142461000&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; gpv_pN=nab%3Ahelp-support; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144321\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
2024-01-25 00:27:43 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-0fc06d1877990b2cc X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:43 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50107	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	3091	OUT	POST /nab/main/2/i.gif HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive Content-Length: 7011 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryMqJbR2Dy4mqUKgB4 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; gpv_pN=nab%3Ahelp-support; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; s_nr=1706142449373-New; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144321\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387242; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session
2024-01-25 00:27:43 UTC	7011	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4d 71 4a 62 52 32 44 79 34 6d 71 55 4b 67 42 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 64 61 74 61 22 0d 0a 0d 0a 7b 22 6c 6f 61 64 65 72 2e 63 66 67 22 3a 7b 22 35 22 3a 7b 22 6c 6f 61 64 22 3a 31 2c 22 73 65 6e 64 22 3a 31 2c 22 76 22 3a 32 30 32 33 31 30 32 34 30 31 34 30 2c 22 77 61 69 74 22 3a 31 2c 22 74 69 64 22 3a 32 30 30 36 34 2c 22 69 64 22 3a 22 35 22 2c 22 73 72 63 22 3a 22 2f 2f 74 61 67 73 2e 6e 61 62 2e 63 6f 6d 2e 61 75 2f 6d 61 69 6e 2f 70 72 6f 64 2f 75 74 61 67 2e 35 2e 6a 73 3f 75 74 76 3d 75 74 34 2e 34 39 2e 32 30 32 33 31 30 32 34 30 31 34 30 22 2c 22 65 78 65 63 75 74 65 64 22 3a Data Ascii: ------WebKitFormBoundaryMqJbR2Dy4mqUKgB4Content-Disposition: form-data; name="data"{"loader.cfg":{"5":{"load":1,"send":1,"v":202310240140,"wait":1,"tid":20064,"id":"5","src":"//tags.nab.com.au/main/prod/utag.5.js?utv=ut4.49.202310240140","executed":
2024-01-25 00:27:43 UTC	917	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-acc: nab:main:2:datacloud X-did: 018d3e036c1f0020cd3edad10e9a0506f001706700918 X-Region: ap-southeast-2 Access-Control-Allow-Origin: https://www.nab.com.au X-ServerID: uconnect_i-01d0711cc8fe9831e Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Access-Control-Expose-Headers: X-Region Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: 018d3e036c1f0020cd3edad10e9a0506f001706700918 Access-Control-Allow-Credentials: true X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:43 GMT X-UUID: 92fa9b5b-b8cd-4694-8643-8adad858d7c8 Set-Cookie: TAPID=; Path=/; Domain=.nab.com.au; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50111	52.223.40.198	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	624	OUT	GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:43 UTC	137	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:43 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-01-25 00:27:43 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50108	15.197.193.217	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	757	OUT	GET /track/up?adv=7uxlgqc&ref=https%3A%2F%2Fib.nab.com.au%2F&upid=r2pjj86&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:43 UTC	136	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:43 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50121	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	907	OUT	GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=https%3A%2F%2Fib.nab.com.au&if=true&ts=1706142461834&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=18ec4a&ler=other&it=1706142460969&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:43 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Jan 2024 00:27:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50120	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	999	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=https%3A%2F%2Fib.nab.com.au&if=true&ts=1706142461834&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=18ec4a&ler=other&it=1706142460969&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:43 UTC	1977	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown" report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net .fbsbx.com .fb.com;font-src data: .gstatic.com .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com .tenor.co media.tenor.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net .giphy.com connect.facebook.net .carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com .whatsapp.net .fb.com .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com https://.giphy.com data:;frame-src .doubleclick.net .google.com .facebook.com www.googleadservices.com .fbsbx.com fbsbx.com data: www.instagram.com .fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: .facebook.com data:;block-all-mixed-content;upgrade-insecure-requests; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=()
2024-01-25 00:27:43 UTC	1084	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 65 74 65 63 74 69 6f 6e 3d 28 29 2c 20 6b 65 79 62 6f 61 72 64 2d 6d 61 70 3d 28 29 2c 20 6c 6f 63 61 6c 2d 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-f
2024-01-25 00:27:43 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50122	172.253.124.103	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	1207	OUT	GET /pagead/1p-user-list/1040712916/?random=1706142461008&cv=9&fst=1706140800000&num=1&currency_code=AUD&label=-v2qCJv3yGAQ1Img8AM&guid=ON&eid=376635470%2C466465925&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=60&u_java=false&u_nplug=5&u_nmime=2&sendb=1&frm=2&url=https%3A%2F%2Fwww.nab.com.au%2Fpersonal%2Fonline-banking%2Fnab-internet-banking%2Fib-login-banner&ref=https%3A%2F%2Fib.nab.com.au%2F&tiba=IB%20login%20banner%20-%20NAB&async=1&fmt=3&is_vtc=1&cid=CAQSKQAvHhf_EmcDFzOUrvO06W5HF_cnm66oZeCZVzriQYEYxf47aTgnPSfS&random=2201551351&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-01-25 00:27:43 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Jan 2024 00:27:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:27:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50119	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:43 UTC	648	OUT	POST /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 3823 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:43 UTC	3823	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 32 2e 31 33 32 36 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 35 33 39 35 39 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 35 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 37 32 39 2c 22 44 44 54 22 3a 31 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 37 33 30 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 31 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 36 2f 37 2f 38 Data Ascii: {"vr":"4.5.2.1326","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4","ts":1706142453959,"mg":"0","au":"0://1/5","at":0,"pp":3,"mx":{"PLC":1,"FBT":729,"DDT":1,"DPT":0,"PLT":730,"ARE":0},"md":"GET","xs":200,"si":1},{"eg":"2","et":2,"eu":"0://6/7/8
2024-01-25 00:27:44 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:44 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:22\|g:da7e96cf-0855-4811-bba4-49d5eaf07d5c; Path=/; Expires=Thu, 25-Jan-2024 00:28:14 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:22\|g:da7e96cf-0855-4811-bba4-49d5eaf07d5c\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:14 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:14 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50126	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:44 UTC	710	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=https%3A%2F%2Fib.nab.com.au&if=true&ts=1706142461834&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=18ec4a&ler=other&it=1706142460969&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:44 UTC	1929	IN	HTTP/1.1 200 OK reporting-endpoints: default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown" report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]} content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com .fbcdn.net data: .facebook.com 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net .fbsbx.com .fb.com;font-src data: .gstatic.com .facebook.com .fbcdn.net .fbsbx.com;img-src .fbcdn.net .facebook.com data: https://.fbsbx.com .tenor.co media.tenor.com facebook.com .cdninstagram.com fbsbx.com fbcdn.net .giphy.com connect.facebook.net .carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com .whatsapp.net .fb.com .oculuscdn.com;media-src .cdninstagram.com blob: .fbcdn.net .fbsbx.com www.facebook.com .facebook.com https://.giphy.com data:;frame-src .doubleclick.net .google.com .facebook.com www.googleadservices.com .fbsbx.com fbsbx.com data: www.instagram.com .fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: .facebook.com data:;block-all-mixed-content;upgrade-insecure-requests; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=()
2024-01-25 00:27:44 UTC	1117	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 65 74 65 63 74 69 6f 6e 3d 28 29 2c 20 6b 65 79 62 6f 61 72 64 2d 6d 61 70 3d 28 29 2c 20 6c 6f 63 61 6c 2d 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50125	31.13.66.35	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:44 UTC	673	OUT	GET /tr/?id=1349572601822987&ev=PageView&dl=https%3A%2F%2Fwww.nab.com.au&rl=https%3A%2F%2Fib.nab.com.au&if=true&ts=1706142461834&sw=1280&sh=1024&v=2.9.142&r=stable&a=tmensighten&ec=0&o=4125&fbp=fb.2.1706142431132.216380010&pm=1&hrl=18ec4a&ler=other&it=1706142460969&coo=false&cs_cc=1&cas=6669898593086112%2C6190579051010763&exp=d3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:44 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 25 Jan 2024 00:27:44 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50123	35.71.131.137	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:44 UTC	390	OUT	GET /track/cmf/generic?ttd_pid=tealium&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:44 UTC	137	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:44 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-01-25 00:27:44 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50128	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:44 UTC	758	OUT	POST /v2/events?v=13.59.1&pn=3&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142460&pid=51360&str=345&di=1159&dc=1747&fl=1767&sr=100&mdh=367&ct=0 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive Content-Length: 336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:44 UTC	336	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 30 2c 22 74 73 22 3a 35 36 2c 22 78 22 3a 31 31 31 31 2c 22 79 22 3a 33 36 37 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 54 54 46 42 22 2c 22 76 61 6c 22 3a 37 32 34 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 74 73 22 3a 36 35 7d 2c 7b 22 74 79 70 65 22 3a 30 2c 22 74 73 22 3a 32 33 30 2c 22 78 22 3a 31 31 31 31 2c 22 79 22 3a 33 36 37 2c 22 64 22 3a 31 36 39 7d 2c 7b 22 74 79 70 65 22 3a 30 2c 22 74 73 22 3a 34 30 38 2c 22 78 22 3a 31 31 31 31 2c 22 79 22 3a 33 34 33 2c 22 64 22 3a 31 37 36 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 46 43 50 22 2c 22 76 61 6c 22 3a 32 38 31 33 2c 22 74 73 22 3a 36 33 39 7d 2c 7b 22 74 79 70 65 22 3a 31 39 2c 22 6e 61 6d 65 22 3a 22 4c 43 50 22 2c 22 Data Ascii: [{"type":0,"ts":56,"x":1111,"y":367},{"type":19,"name":"TTFB","val":724.8000000000175,"ts":65},{"type":0,"ts":230,"x":1111,"y":367,"d":169},{"type":0,"ts":408,"x":1111,"y":343,"d":176},{"type":19,"name":"FCP","val":2813,"ts":639},{"type":19,"name":"LCP","
2024-01-25 00:27:45 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:45 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50127	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:45 UTC	3090	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142463104&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:27:45 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:45 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-04199716d89b9f28f X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:45 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50129	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:45 UTC	556	OUT	GET /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:b46170ed-b8fb-4a07-96ee-b7ba68ab26ea\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:0\|d:0
2024-01-25 00:27:45 UTC	1464	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:b46170ed-b8fb-4a07-96ee-b7ba68ab26ea\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:139\|e:0\|d:0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:16ec8de3-324e-482f-91e5-bf9c8af8c77b; Path=/; Expires=Thu, 25-Jan-2024 00:28:15 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:16ec8de3-324e-482f-91e5-bf9c8af8c77b\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:15 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:15 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:15 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4; Path=/; Expires=Thu, 25-Jan-2024 00:28:15 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4\|d:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:15 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50130	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:46 UTC	482	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 2362 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:46 UTC	2362	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 34 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"LOGIN","requestId":4,"sts":"gAAAAABls
2024-01-25 00:27:46 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:27:45 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 1b3df217-bad8-4654-997f-be8c0453128b Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:46 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 73 43 6d 45 6c 6a 55 71 5f 2d 54 6d 4f 31 54 4f 51 30 76 5a 41 70 52 39 68 6b 79 48 57 47 6e 66 45 6f 72 39 57 31 43 34 6d 71 4f 35 33 37 65 55 32 73 74 67 50 57 48 72 53 4a 50 73 62 6d 37 45 2d 57 45 78 78 72 66 48 71 67 43 4a 71 55 58 31 51 39 79 5f 4e 75 67 38 69 48 63 65 32 4f 76 68 66 46 43 72 38 50 55 52 37 36 70 45 65 47 45 34 46 51 50 35 30 31 2d 6f 52 62 41 68 6a 33 48 52 74 45 4b 79 58 4e 70 59 49 4b 44 33 52 6d 49 74 4a 49 6e 5f 6b 56 64 38 73 4c 6d 76 6e 76 4c 4a 69 75 69 45 43 4d 48 30 76 6c 6b 4b 6b 6b 77 4d 4b 75 49 55 69 45 79 48 37 65 6c 50 63 6d 48 45 50 63 45 68 44 53 75 45 35 62 79 4c 52 77 43 62 4c 5a 59 52 43 74 33 41 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsasCmEljUq_-TmO1TOQ0vZApR9hkyHWGnfEor9W1C4mqO537eU2stgPWHrSJPsbm7E-WExxrfHqgCJqUX1Q9y_Nug8iHce2OvhfFCr8PUR76pEeGE4FQP501-oRbAhj3HRtEKyXNpYIKD3RmItJIn_kVd8sLmvnvLJiuiECMH0vlkKkkwMKuIUiEyH7elPcmHEPcEhDSuE5byLRwCbLZYRCt3A==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50131	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:46 UTC	648	OUT	POST /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 9337 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:46 UTC	9337	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 32 2e 31 33 32 36 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 33 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 36 31 31 33 31 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 32 22 2c 22 61 74 22 3a 30 2c 22 6d 78 22 3a 7b 22 50 4c 54 22 3a 37 31 37 38 2c 22 50 4c 43 22 3a 31 7d 2c 22 72 74 22 3a 7b 22 76 22 3a 32 2c 22 69 63 22 3a 7b 22 6f 74 68 65 72 22 3a 31 2c 22 63 73 73 22 3a 35 2c 22 78 6d 6c 68 74 74 70 72 65 71 75 65 73 74 22 3a 32 33 2c 22 69 66 72 61 6d 65 22 3a 35 2c 22 73 63 72 69 70 74 22 3a 32 7d 2c 22 69 74 22 3a 7b 22 6f 74 68 65 72 22 3a 31 2c 22 63 73 73 22 3a 32 2c 22 Data Ascii: {"vr":"4.5.2.1326","dt":"R","rg":"0","es":[{"eg":"1","et":3,"eu":"0://1/2","ts":1706142461131,"mg":"0","au":"0://1/2","at":0,"mx":{"PLT":7178,"PLC":1},"rt":{"v":2,"ic":{"other":1,"css":5,"xmlhttprequest":23,"iframe":5,"script":2},"it":{"other":1,"css":2,"
2024-01-25 00:27:47 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:22\|g:d5468fa3-e481-40ce-a38f-daf5c3092e30; Path=/; Expires=Thu, 25-Jan-2024 00:28:16 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:22\|g:d5468fa3-e481-40ce-a38f-daf5c3092e30\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:16 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:16 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50133	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:47 UTC	3090	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142465200&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:27:47 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:47 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-0bad74752eb307abc X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:47 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50134	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:47 UTC	2762	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:27:47 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:27:47 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 7c52fafd-8180-4839-99fc-44efe95b2b46 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:47 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50136	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:47 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:47 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:47 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-022e1eb1044b4bcaf Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:47 GMT X-UUID: 3cca3ff6-e86d-4b33-8eaf-8d6844c0bec3 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:47 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:47 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50135	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:47 UTC	556	OUT	GET /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:16ec8de3-324e-482f-91e5-bf9c8af8c77b\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:4\|d:0
2024-01-25 00:27:48 UTC	1464	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:16ec8de3-324e-482f-91e5-bf9c8af8c77b\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4\|d:0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:dc1e4e19-604f-4dfd-8483-54060b5ead7d; Path=/; Expires=Thu, 25-Jan-2024 00:28:18 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:dc1e4e19-604f-4dfd-8483-54060b5ead7d\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:18 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:18 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:18 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4; Path=/; Expires=Thu, 25-Jan-2024 00:28:18 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4\|d:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:18 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50137	15.197.224.21	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:49 UTC	3090	OUT	GET /nab/main/018d3e036c1f0020cd3edad10e9a0506f001706700918?callback=utag.ut%5B%22writevamain%22%5D&rnd=1706142467304&tealium_cookie_domain=.nab.com.au HTTP/1.1 Host: collect.nab.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; TAPID=nab/main>c0cac752f06243b49502f930237cd639\|; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:27:49 UTC	332	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:49 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 666 Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains X-Region: ap-southeast-2 X-NodeId: i-0bad74752eb307abc X-Version: 5cfc54aa5dc41ad353edc5428330ec04de5221f0-SNAPSHOT
2024-01-25 00:27:49 UTC	666	IN	Data Raw: 75 74 61 67 2e 75 74 5b 22 77 72 69 74 65 76 61 6d 61 69 6e 22 5d 28 7b 22 6d 65 74 72 69 63 73 22 3a 7b 22 32 32 22 3a 31 2e 30 2c 22 35 30 31 30 22 3a 31 2e 30 2c 22 35 35 35 30 22 3a 30 2c 22 31 35 22 3a 31 2e 30 2c 22 35 31 32 33 22 3a 30 2c 22 35 31 30 31 22 3a 30 2c 22 32 38 22 3a 31 2e 30 2c 22 35 35 35 34 22 3a 30 2c 22 32 39 22 3a 31 2e 30 2c 22 35 31 30 35 22 3a 30 2c 22 32 31 22 3a 31 2e 30 7d 2c 22 64 61 74 65 73 22 3a 7b 22 32 33 22 3a 31 37 30 36 31 34 32 34 33 34 34 30 38 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 72 6f 66 69 6c 65 22 3a 22 6d 61 69 6e 22 2c 22 61 63 63 6f 75 6e 74 22 3a 22 6e 61 62 22 7d 2c 22 66 6c 61 67 73 22 3a 7b 22 35 32 37 33 22 3a 74 72 75 65 2c 22 35 31 39 37 22 3a 66 61 6c 73 65 7d 2c 22 63 75 72 72 65 Data Ascii: utag.ut["writevamain"]({"metrics":{"22":1.0,"5010":1.0,"5550":0,"15":1.0,"5123":0,"5101":0,"28":1.0,"5554":0,"29":1.0,"5105":0,"21":1.0},"dates":{"23":1706142434408},"properties":{"profile":"main","account":"nab"},"flags":{"5273":true,"5197":false},"curre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50138	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:51 UTC	482	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 1090 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:51 UTC	1090	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 35 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"LOGIN","requestId":5,"sts":"gAAAAABls
2024-01-25 00:27:51 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:27:50 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: ccdc8244-5b34-4520-88ae-26891df9ee82 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:51 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 73 48 37 61 6e 44 57 4c 78 77 59 33 65 73 32 58 4b 44 66 5f 38 48 66 39 44 35 36 5a 35 55 6a 6f 66 4a 5a 4c 31 58 33 42 74 42 4c 46 43 31 4b 56 77 68 62 4c 75 46 32 73 35 34 71 4f 33 4f 37 6c 35 79 54 59 6f 2d 48 6a 52 67 62 34 76 61 4f 39 44 36 54 6b 37 47 63 47 6b 6b 73 6d 6d 67 75 33 5f 38 56 69 7a 57 46 32 30 59 41 79 72 38 41 70 6c 78 71 2d 53 67 77 47 47 66 62 75 55 33 57 5f 38 34 71 4f 4e 79 76 53 6e 4f 6e 32 79 63 50 6c 30 78 49 35 58 71 58 6b 38 4e 6a 6a 65 66 68 77 4d 6e 64 63 48 52 75 6e 64 41 37 76 52 68 38 4a 5f 54 38 55 62 68 52 45 43 5a 68 75 79 53 76 78 62 49 55 6a 6b 6c 74 52 4b 7a 6e 2d 51 53 76 4c 43 66 65 4a 79 62 37 51 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsasH7anDWLxwY3es2XKDf_8Hf9D56Z5UjofJZL1X3BtBLFC1KVwhbLuF2s54qO3O7l5yTYo-HjRgb4vaO9D6Tk7GcGkksmmgu3_8VizWF20YAyr8Aplxq-SgwGGfbuU3W_84qONyvSnOn2ycPl0xI5XqXk8NjjefhwMndcHRundA7vRh8J_T8UbhRECZhuySvxbIUjkltRKzn-QSvLCfeJyb7Q==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50139	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:52 UTC	2762	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:27:52 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:27:52 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 7fd34231-783e-4215-9b0c-3d84c90de836 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:52 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50140	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:52 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:52 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:52 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-0a7d2b32d5bd7938f Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:52 GMT X-UUID: cf73529a-e068-496e-961b-7050732d42f5 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:52 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:52 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50141	20.96.87.156	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:53 UTC	758	OUT	POST /v2/events?v=13.59.1&pn=2&uu=3becc05e-fdc5-aa72-e4c9-841bc59822a7&sn=1&hd=1706142441&pid=51360&str=1197&di=2306&dc=3761&fl=3810&sr=27&mdh=3350&ct=0 HTTP/1.1 Host: c.az.contentsquare.net Connection: keep-alive Content-Length: 39 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:53 UTC	39	OUT	Data Raw: 5b 7b 22 74 79 70 65 22 3a 32 2c 22 74 73 22 3a 33 30 36 34 32 2c 22 78 22 3a 36 34 38 2c 22 79 22 3a 34 34 33 7d 5d Data Ascii: [{"type":2,"ts":30642,"x":648,"y":443}]
2024-01-25 00:27:54 UTC	469	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Access-Control-Expose-Headers, Content-Type, Content-Compression, X-Requested-With Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 Content-Disposition: inline Date: Thu, 25 Jan 2024 00:27:54 GMT Expires: Sun, 24 Oct 1982 23:00:00 GMT Pragma: no-cache Timing-Allow-Origin: * Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50142	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:54 UTC	712	OUT	GET /nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbb78b47bab713cab9e79d2ef1247f0b" If-Modified-Since: Mon, 22 Jan 2024 17:48:12 GMT
2024-01-25 00:27:55 UTC	619	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Jan 2024 00:27:55 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Thu, 25 Jan 2024 00:27:54 GMT Cache-Control: max-age=30 Server: AmazonS3 ETag: "bbb78b47bab713cab9e79d2ef1247f0b" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 aec195bf1d855e18a833703ccd5e90ea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: -TE-Xlmry2LLyyekCV_1FHdEqw3wgRDztFTz7ymmqUZYvohXc2bFQQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50143	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:55 UTC	510	OUT	GET /nab-prod/live/4fc55258-ea1e-470f-b9a2-93aae6c0a08c.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbb78b47bab713cab9e79d2ef1247f0b" If-Modified-Since: Thu, 25 Jan 2024 00:27:22 GMT
2024-01-25 00:27:55 UTC	444	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Jan 2024 00:27:56 GMT Last-Modified: Thu, 25 Jan 2024 00:27:54 GMT Cache-Control: max-age=30 Server: AmazonS3 ETag: "bbb78b47bab713cab9e79d2ef1247f0b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ecc551e9b6a993eae7896f034e6177cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: 0_u6HZXarxuujlFcwruOl34MA41QoXesBvRijwihPxNBCn_VAJJtkQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50144	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:55 UTC	482	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 1158 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:55 UTC	1158	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 36 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"LOGIN","requestId":6,"sts":"gAAAAABls
2024-01-25 00:27:56 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:27:55 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 42dc5827-af70-4477-8d9d-220885d4d578 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:56 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 73 4d 69 65 4c 64 42 69 66 6d 42 30 63 79 39 6c 4e 75 53 4a 4e 49 43 78 4e 49 76 43 44 52 7a 45 46 6b 58 65 66 36 4e 4c 6b 32 33 46 41 54 68 62 63 6f 69 49 69 6e 35 7a 4b 31 50 58 78 69 63 64 6f 62 58 6e 34 55 48 35 68 4e 49 53 55 44 6f 35 33 6e 54 77 41 73 52 37 69 48 4c 45 49 6f 79 5f 65 67 30 45 53 7a 41 4f 69 78 5f 5f 39 34 37 43 5a 39 34 42 47 74 5a 36 64 76 58 4d 39 5f 58 4f 36 30 4c 70 5f 37 57 41 45 54 79 7a 66 42 76 65 36 6a 61 56 4a 79 72 4f 4a 44 53 4a 69 4c 49 34 45 72 4f 4a 53 71 61 4e 36 7a 34 6a 78 44 2d 6c 71 5f 46 6c 71 58 75 7a 50 49 43 32 46 4f 68 65 4a 31 44 64 69 4d 67 38 6b 38 54 6f 6c 56 77 59 69 51 70 6f 65 65 4b 77 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsasMieLdBifmB0cy9lNuSJNICxNIvCDRzEFkXef6NLk23FAThbcoiIin5zK1PXxicdobXn4UH5hNISUDo53nTwAsR7iHLEIoy_eg0ESzAOix__947CZ94BGtZ6dvXM9_XO60Lp_7WAETyzfBve6jaVJyrOJDSJiLI4ErOJSqaN6z4jxD-lq_FlqXuzPIC2FOheJ1DdiMg8k8TolVwYiQpoeeKw==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50146	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:57 UTC	2762	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:27:57 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:27:57 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: d67affa8-621a-46d9-99bf-e6c79e06539c Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:27:57 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50147	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:57 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:27:57 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:57 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-02610c3466f89b757 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:27:57 GMT X-UUID: 66d63c0b-f269-4884-bb57-8386cef1c761 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:27:57 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:27:57 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50145	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:57 UTC	651	OUT	POST /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 12356 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:27:57 UTC	12356	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 31 37 2e 32 38 39 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 34 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 36 30 38 34 35 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 2f 35 22 2c 22 61 74 22 3a 31 2c 22 64 6d 22 3a 22 5b 66 61 69 6c 5d 20 54 65 61 6c 69 75 6d 20 50 65 72 73 6f 6e 61 4c 69 66 74 20 41 50 49 3a 20 5b 22 2c 22 73 69 22 3a 32 35 7d 2c 7b 22 65 67 22 3a 22 32 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 36 2f 37 2f 38 2f 39 3f 31 30 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 36 30 38 33 31 2c 22 6d 67 22 3a 22 30 22 2c Data Ascii: {"vr":"4.5.17.2890","dt":"R","rg":"0","es":[{"eg":"1","et":4,"eu":"0://1/2/3/4/5","ts":1706142460845,"mg":"0","au":"0://1/2/3/4/5","at":1,"dm":"[fail] Tealium PersonaLift API: [","si":25},{"eg":"2","et":2,"eu":"0://6/7/8/9?10","ts":1706142460831,"mg":"0",
2024-01-25 00:27:58 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:23\|g:c7df0285-112a-42c6-9596-21b440241b96; Path=/; Expires=Thu, 25-Jan-2024 00:28:27 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:23\|g:c7df0285-112a-42c6-9596-21b440241b96\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:27 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:27 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50148	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:27:58 UTC	556	OUT	GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:dc1e4e19-604f-4dfd-8483-54060b5ead7d\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:4\|d:0
2024-01-25 00:27:59 UTC	1464	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:27:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:dc1e4e19-604f-4dfd-8483-54060b5ead7d\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4\|d:0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:fdf5cce6-2755-4032-ad63-4ccbb5bf69f7; Path=/; Expires=Thu, 25-Jan-2024 00:28:29 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:fdf5cce6-2755-4032-ad63-4ccbb5bf69f7\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:29 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:29 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:29 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4; Path=/; Expires=Thu, 25-Jan-2024 00:28:29 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4\|d:1; Path=/; Expires=Thu, 25-Jan-2024 00:28:29 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:27:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50150	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:01 UTC	482	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 1042 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:28:01 UTC	1042	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 37 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"LOGIN","requestId":7,"sts":"gAAAAABls
2024-01-25 00:28:01 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:28:00 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: bd887487-36d6-4ddc-8a15-d6cc248665a3 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:28:01 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 73 52 69 6d 6d 68 56 4b 56 75 58 58 57 65 42 75 52 54 58 76 43 78 49 42 4a 69 43 4e 70 72 47 42 43 31 31 72 4b 66 54 6e 63 69 69 50 5a 61 79 6e 64 71 50 6f 53 6e 35 49 68 41 75 50 50 5f 46 4e 71 5a 6d 4c 58 7a 64 68 72 36 47 69 2d 79 7a 65 5f 69 43 53 63 75 37 34 46 68 46 62 32 34 72 2d 30 51 4d 36 31 63 53 70 69 44 72 6f 49 46 59 56 33 62 2d 6e 74 6f 4f 5f 46 75 63 76 43 34 39 48 4a 35 47 54 67 31 7a 4a 74 4f 4f 74 48 57 33 47 72 42 55 70 30 54 79 4a 70 78 32 49 63 33 34 4e 37 4f 50 69 53 5a 44 6d 67 48 55 46 49 31 7a 78 50 30 6e 57 39 55 30 31 31 6f 5f 5f 32 66 53 65 61 5a 58 45 6a 38 71 67 54 43 72 51 6f 6b 61 56 2d 50 70 54 4f 78 30 77 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsasRimmhVKVuXXWeBuRTXvCxIBJiCNprGBC11rKfTnciiPZayndqPoSn5IhAuPP_FNqZmLXzdhr6Gi-yze_iCScu74FhFb24r-0QM61cSpiDroIFYV3b-ntoO_FucvC49HJ5GTg1zJtOOtHW3GrBUp0TyJpx2Ic34N7OPiSZDmgHUFI1zxP0nW9U011o__2fSeaZXEj8qgTCrQokaV-PpTOx0w==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50149	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:01 UTC	649	OUT	POST /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 481 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:28:01 UTC	481	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 31 37 2e 32 38 39 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 37 33 30 35 33 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 35 2f 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 38 30 36 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 38 30 36 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 32 37 7d 5d 2c 22 61 69 22 3a 22 65 32 61 34 62 65 37 65 5f 63 30 39 65 5f 63 62 34 38 5f 33 39 33 64 5f Data Ascii: {"vr":"4.5.17.2890","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4","ts":1706142473053,"mg":"0","au":"0://5/","at":0,"pp":3,"mx":{"PLC":1,"FBT":806,"DDT":0,"DPT":0,"PLT":806,"ARE":0},"md":"GET","xs":200,"si":27}],"ai":"e2a4be7e_c09e_cb48_393d_
2024-01-25 00:28:01 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:28:01 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:23\|g:c7998b91-0038-4deb-9ffb-5dd8ed894341; Path=/; Expires=Thu, 25-Jan-2024 00:28:31 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:23\|g:c7998b91-0038-4deb-9ffb-5dd8ed894341\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:31 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:31 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:28:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50151	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:02 UTC	2762	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:28:02 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:28:02 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 0483dedc-9058-4a74-8e8b-dc8e2450f525 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:28:02 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50152	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:02 UTC	556	OUT	GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:fdf5cce6-2755-4032-ad63-4ccbb5bf69f7\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:4\|d:1
2024-01-25 00:28:02 UTC	1464	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:28:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:fdf5cce6-2755-4032-ad63-4ccbb5bf69f7\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:139\|e:4\|d:1; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:a4355f14-edc2-43ac-8f92-36cf3ee84891; Path=/; Expires=Thu, 25-Jan-2024 00:28:32 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:a4355f14-edc2-43ac-8f92-36cf3ee84891\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:32 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:32 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:32 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:6; Path=/; Expires=Thu, 25-Jan-2024 00:28:32 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:6\|d:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:32 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:28:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50153	3.226.226.33	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:02 UTC	644	OUT	GET /tealium_ttd/main/16/i.js?jsonp=utag.ut.tealium_pass_ttdid HTTP/1.1 Host: datacloud.tealiumiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|
2024-01-25 00:28:02 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:28:02 GMT Content-Type: application/javascript Content-Length: 39 Connection: close X-acc: tealium_ttd:main:16:datacloud X-Region: us-east-1 X-ServerID: uconnect_i-0225ee7d596b0e163 Pragma: no-cache P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID CUR ADM DEV OUR BUS" Cache-Control: no-transform,private,no-cache,no-store,max-age=0,s-maxage=0 X-tid: b97bf1094d064e56b7e27bae11f1b4bc X-ULVer: 561372926e4c5bbf82a4ddd57ec35ee6f95c163c-SNAPSHOT Vary: Origin Expires: Thu, 25 Jan 2024 00:28:02 GMT X-UUID: a9e25d3c-dbf0-49c0-a024-68cc7ee06198 Set-Cookie: TAPID=tealium_ttd/main>b97bf1094d064e56b7e27bae11f1b4bc\|; Path=/; Domain=.tealiumiq.com; Expires=Fri, 24-Jan-2025 00:28:02 GMT; Max-Age=31536000; Secure; HttpOnly; SameSite=None
2024-01-25 00:28:02 UTC	39	IN	Data Raw: 75 74 61 67 2e 75 74 2e 74 65 61 6c 69 75 6d 5f 70 61 73 73 5f 74 74 64 69 64 28 7b 22 74 76 74 22 3a 5b 5d 7d 29 3b Data Ascii: utag.ut.tealium_pass_ttdid({"tvt":[]});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50155	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:06 UTC	482	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 1198 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:28:06 UTC	1198	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 38 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"LOGIN","requestId":8,"sts":"gAAAAABls
2024-01-25 00:28:06 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:28:06 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: cbe67f57-9cc7-48f8-8837-163d2c55c5bf Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:28:06 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 73 57 6e 43 37 5f 59 70 54 4e 57 37 61 48 59 79 70 55 4f 6a 39 58 38 4e 7a 74 4e 67 6c 54 66 49 68 68 35 6c 45 6a 55 78 54 59 65 4d 4b 41 65 38 38 4b 58 74 61 43 72 69 61 76 4c 71 51 34 73 58 35 38 32 6c 52 72 62 78 56 4a 44 75 4e 2d 4c 79 5f 55 38 74 70 30 73 6b 51 63 68 31 47 6c 51 51 7a 72 51 78 7a 31 62 7a 63 53 35 54 6f 43 63 51 45 72 32 48 61 41 43 6c 73 77 4c 31 4e 69 69 50 6e 61 7a 67 2d 58 6d 32 32 6f 45 50 42 4b 54 64 50 33 63 41 5f 4e 77 67 73 6d 4b 46 4d 77 56 6c 4a 6d 39 66 73 6a 67 57 4b 4c 78 34 52 6f 2d 34 4c 58 4d 78 6d 56 5f 66 51 36 79 39 43 78 77 63 35 39 58 4e 70 31 64 63 71 53 56 52 5f 71 5a 5f 44 34 4b 39 79 31 4b 41 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsasWnC7_YpTNW7aHYypUOj9X8NztNglTfIhh5lEjUxTYeMKAe88KXtaCriavLqQ4sX582lRrbxVJDuN-Ly_U8tp0skQch1GlQQzrQxz1bzcS5ToCcQEr2HaAClswL1NiiPnazg-Xm22oEPBKTdP3cA_NwgsmKFMwVlJm9fsjgWKLx4Ro-4LXMxmV_fQ6y9Cxwc59XNp1dcqSVR_qZ_D4K9y1KA==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50154	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:06 UTC	649	OUT	POST /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 513 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://www.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:28:06 UTC	513	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 31 37 2e 32 38 39 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 37 38 30 37 31 2c 22 6d 67 22 3a 22 30 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 35 2f 36 22 2c 22 61 74 22 3a 30 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 34 2c 22 44 44 54 22 3a 30 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 34 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 61 6e 22 3a 22 48 65 6c 70 20 53 75 70 70 6f 72 74 22 2c 22 73 69 22 3a 32 39 7d 5d 2c 22 61 69 22 3a 22 65 32 61 34 62 65 37 Data Ascii: {"vr":"4.5.17.2890","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4","ts":1706142478071,"mg":"0","au":"0://5/6","at":0,"pp":3,"mx":{"PLC":1,"FBT":4,"DDT":0,"DPT":0,"PLT":4,"ARE":0},"md":"GET","xs":200,"an":"Help Support","si":29}],"ai":"e2a4be7
2024-01-25 00:28:06 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:28:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:23\|g:92af059f-0b75-4930-b8c4-f3f2299a68b4; Path=/; Expires=Thu, 25-Jan-2024 00:28:36 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:23\|g:92af059f-0b75-4930-b8c4-f3f2299a68b4\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:36 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:36 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:28:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50156	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:07 UTC	2762	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:28:07 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:28:07 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: d8ce6920-0e72-4f57-9152-46702f15e3ed Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:28:07 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50157	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:07 UTC	556	OUT	GET /eumcollector/beacons/browser/v1/SY-AAB-AYC/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:a4355f14-edc2-43ac-8f92-36cf3ee84891\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:6\|d:0
2024-01-25 00:28:07 UTC	1464	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:28:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:a4355f14-edc2-43ac-8f92-36cf3ee84891\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:139\|e:6\|d:0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:ede9c693-e3ad-4533-8766-f324a12c8b83; Path=/; Expires=Thu, 25-Jan-2024 00:28:37 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:ede9c693-e3ad-4533-8766-f324a12c8b83\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:37 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:37 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:37 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:3; Path=/; Expires=Thu, 25-Jan-2024 00:28:37 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:3\|d:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:37 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:28:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50158	18.160.172.81	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:08 UTC	710	OUT	GET /nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6d97ffcab76ab3c807d9ccac7e6b1c81" If-Modified-Since: Thu, 25 Jan 2024 00:27:32 GMT
2024-01-25 00:28:09 UTC	619	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Jan 2024 00:28:10 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 31556952 Last-Modified: Thu, 25 Jan 2024 00:28:05 GMT Cache-Control: max-age=30 Server: AmazonS3 ETag: "6d97ffcab76ab3c807d9ccac7e6b1c81" Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: RefreshHit from cloudfront Via: 1.1 5d3cacf6f215960ea8001f24e2e30e66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: lW1dVV4CRjKC2SymQynsv2fLT1C1-s0IkLctip1vKzSADVXRnfv_9w==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50159	18.160.172.54	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:10 UTC	510	OUT	GET /nab-prod/live/8112728a-97e4-4b85-8f62-851a438d7e95.json HTTP/1.1 Host: brand-messenger.app.khoros.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6d97ffcab76ab3c807d9ccac7e6b1c81" If-Modified-Since: Thu, 25 Jan 2024 00:27:38 GMT
2024-01-25 00:28:10 UTC	444	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 25 Jan 2024 00:28:11 GMT Last-Modified: Thu, 25 Jan 2024 00:28:05 GMT Cache-Control: max-age=30 Server: AmazonS3 ETag: "6d97ffcab76ab3c807d9ccac7e6b1c81" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 0661cb2dd8ff3b37987d908bc79bf1ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAH50-P2 X-Amz-Cf-Id: u_Y-CV13KeiptQhRG2qg5-ZnIs8xtNSyxwlXOX5kkasYoITtp2OytQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50160	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:11 UTC	482	OUT	POST /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive Content-Length: 1122 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:28:11 UTC	1122	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 30 36 31 34 32 34 35 37 36 39 33 2d 73 6a 6e 30 30 30 30 36 39 31 2d 34 39 33 63 31 61 63 32 2d 37 38 34 36 2d 34 63 36 38 2d 39 30 34 62 2d 66 65 38 33 64 31 39 31 63 36 65 34 22 2c 22 63 73 69 64 22 3a 22 63 32 65 64 62 37 36 61 2d 39 63 66 31 2d 34 64 32 31 2d 61 65 37 36 2d 34 30 38 34 33 35 34 63 64 33 36 38 22 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 30 36 31 34 32 34 35 35 31 36 37 2d 41 37 31 37 43 45 43 36 2d 46 45 36 35 2d 34 39 46 44 2d 38 38 46 37 2d 32 34 39 43 32 43 42 46 31 41 37 42 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 39 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 Data Ascii: {"ds":"js","cdsnum":"1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4","csid":"c2edb76a-9cf1-4d21-ae76-4084354cd368","psid":null,"muid":"1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B","context_name":"LOGIN","requestId":9,"sts":"gAAAAABls
2024-01-25 00:28:11 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 690 Connection: close date: Thu, 25 Jan 2024 00:28:11 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 67cced2b-8bfe-48f9-8a1c-d5087a5aecfb Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:28:11 UTC	690	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 73 61 73 62 75 63 46 4d 4d 51 49 4c 4c 51 67 63 44 45 73 39 31 64 32 54 7a 41 62 74 57 53 34 67 70 72 31 5a 43 6b 4d 33 55 34 44 63 55 37 2d 32 68 54 50 33 68 58 73 34 7a 48 6a 77 42 46 4f 68 51 49 37 6d 39 5a 63 4a 46 72 58 30 31 48 51 71 56 62 56 34 5f 65 4f 77 5f 54 45 74 78 65 4f 59 77 47 78 37 73 48 6d 77 6d 30 4e 33 71 42 55 2d 6a 75 6b 55 39 72 4d 42 49 49 59 42 6f 35 45 77 6d 53 34 42 33 39 46 42 73 64 62 48 5a 41 66 57 4f 34 70 69 73 42 6b 66 58 5f 49 4d 68 5f 45 65 63 6b 69 6f 7a 4b 5f 31 31 5f 56 6e 63 53 6d 55 49 48 61 71 57 38 43 58 56 34 64 39 77 69 56 63 70 6b 4d 79 46 56 5f 4b 6b 45 61 5f 75 38 4c 47 56 4f 69 4c 4f 58 4b 31 52 77 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 73 61 Data Ascii: {"std":"gAAAAABlsasbucFMMQILLQgcDEs91d2TzAbtWS4gpr1ZCkM3U4DcU7-2hTP3hXs4zHjwBFOhQI7m9ZcJFrX01HQqVbV4_eOw_TEtxeOYwGx7sHmwm0N3qBU-jukU9rMBIIYBo5EwmS4B39FBsdbHZAfWO4pisBkfX_IMh_EeckiozK_11_VncSmUIHaqW8CXV4d9wiVcpkMyFV_KkEa_u8LGVOiLOXK1Rw==","sts":"gAAAAABlsa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50161	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:11 UTC	3200	OUT	POST /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=hG%2Ff3Q0sRFPS5OhDAudxHchIyjQvj%2BAR5nUVy70s2TkTqPYcTu8GV%2F1ZTMt0VEyYKCBSRR3EPc4CNEnybP0dgtX2O9bpoESdEUelc1VWiKMVP7UDXIlvl8sjq%2BZ%2FJ%2Fu4vokNHNl1FJgrXrHV50aaSmo4fqrQO3%2BoqcVj HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive Content-Length: 9476 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:28:11 UTC	9476	OUT	Data Raw: 4d 44 41 30 64 43 30 69 58 79 6b 4f 49 78 46 4e 4b 44 39 48 57 6c 74 55 4f 44 4a 68 51 52 46 31 57 7a 74 42 61 33 51 62 4e 31 64 52 47 42 4d 53 45 55 30 49 49 47 74 59 57 46 59 39 4e 31 67 5a 63 52 56 6a 4f 54 4d 36 4f 31 31 73 4d 56 49 62 4f 57 4d 67 53 6c 56 54 65 69 6b 62 46 58 39 78 4b 56 4d 4c 66 30 31 77 43 79 6f 73 62 58 41 68 44 32 6c 49 59 42 39 4a 56 6c 46 37 4b 52 38 52 66 32 34 70 53 33 46 50 46 48 51 7a 64 32 56 63 65 69 78 59 49 48 78 38 61 41 6b 51 56 7a 70 6a 55 6c 56 70 5a 78 55 55 50 45 34 6d 62 6e 67 71 5a 54 4d 74 49 6c 38 70 44 69 4d 70 64 68 77 55 50 46 35 4f 4e 45 67 78 56 6c 6c 4f 50 43 56 37 65 6a 4d 79 47 55 5a 56 51 54 41 50 46 6a 51 4e 48 78 52 44 4c 77 6b 6b 4d 44 46 68 46 6b 74 7a 4a 58 4a 79 4b 57 4e 70 66 53 78 64 48 42 45 Data Ascii: MDA0dC0iXykOIxFNKD9HWltUODJhQRF1WztBa3QbN1dRGBMSEU0IIGtYWFY9N1gZcRVjOTM6O11sMVIbOWMgSlVTeikbFX9xKVMLf01wCyosbXAhD2lIYB9JVlF7KR8Rf24pS3FPFHQzd2VceixYIHx8aAkQVzpjUlVpZxUUPE4mbngqZTMtIl8pDiMpdhwUPF5ONEgxVllOPCV7ejMyGUZVQTAPFjQNHxRDLwkkMDFhFktzJXJyKWNpfSxdHBE
2024-01-25 00:28:12 UTC	573	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 set-cookie: cfidsgib-w-nab-ib=PaoPchznQD4mZmL67Dcq3tv4aX5mo63HcMmUZv0iDXwVzR/JKMjAF5yLpKa3L+xAP6yVkUXMHtte+hvGlYQ5wtndDTq0s/1e4NjyXnNU5+amDkXD4Hi9drVIaBJPD11Fixp9Y0vERCMjaX4nQX65ouQN2St694A+9jOS; Path=/; Expires=Fri, 24 Jan 2025 00:28:12 GMT; SameSite=None date: Thu, 25 Jan 2024 00:28:12 GMT content-length: 399 x-envoy-upstream-service-time: 0 access-control-allow-origin: https://ib.nab.com.au access-control-allow-credentials: true server: istio-envoy connection: close
2024-01-25 00:28:12 UTC	399	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 7b 22 63 66 69 64 73 22 3a 22 50 61 6f 50 63 68 7a 6e 51 44 34 6d 5a 6d 4c 36 37 44 63 71 33 74 76 34 61 58 35 6d 6f 36 33 48 63 4d 6d 55 5a 76 30 69 44 58 77 56 7a 52 2f 4a 4b 4d 6a 41 46 35 79 4c 70 4b 61 33 4c 2b 78 41 50 36 79 56 6b 55 58 4d 48 74 74 65 2b 68 76 47 6c 59 51 35 77 74 6e 64 44 54 71 30 73 2f 31 65 34 4e 6a 79 58 6e 4e 55 35 2b 61 6d 44 6b 58 44 34 48 69 39 64 72 56 49 61 42 4a 50 44 31 31 46 69 78 70 39 59 30 76 45 52 43 4d 6a 61 58 34 6e 51 58 36 35 6f 75 51 4e 32 53 74 36 39 34 41 2b 39 6a 4f 53 22 2c 22 63 73 22 3a 7b 22 63 66 69 64 73 22 3a 22 50 61 6f 50 63 68 7a 6e 51 44 34 6d 5a 6d 4c 36 37 44 63 71 33 74 76 34 Data Ascii: {"status":"success","error":null,"data":{"cfids":"PaoPchznQD4mZmL67Dcq3tv4aX5mo63HcMmUZv0iDXwVzR/JKMjAF5yLpKa3L+xAP6yVkUXMHtte+hvGlYQ5wtndDTq0s/1e4NjyXnNU5+amDkXD4Hi9drVIaBJPD11Fixp9Y0vERCMjaX4nQX65ouQN2St694A+9jOS","cs":{"cfids":"PaoPchznQD4mZmL67Dcq3tv4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50163	20.53.176.113	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:12 UTC	2762	OUT	GET /client/v3.1/web/wup?cid=nightcrawler HTTP/1.1 Host: wup-24f7f3c7.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:28:13 UTC	337	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 25 Jan 2024 00:28:12 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: de2f8c6d-9dc6-47b8-bde6-ee51ce1bd1a5 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-01-25 00:28:13 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50166	64.233.176.138	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:13 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=000000000000000000000000000000000000000081209BB250 HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-01-25 00:28:13 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-Z9z8k2eraO3B_lmsIx-Plg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-DFIywJ9UqF2HpfMZs92mtQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Thu, 25 Jan 2024 00:28:13 GMT Expires: Thu, 25 Jan 2024 00:28:13 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-25 00:28:13 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 34 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 34 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 34 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 34 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 34 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 34 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 64 36 39 64 62 32 35 38 0a Data Ascii: rlzC1: 1C1ONGR_enUS1094rlzC2: 1C2ONGR_enUS1094rlzC7: 1C7ONGR_enUS1094dcc: set_dcc: C1:1C1ONGR_enUS1094,C2:1C2ONGR_enUS1094,C7:1C7ONGR_enUS1094events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: d69db258

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50165	52.65.11.116	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:13 UTC	2938	OUT	GET /api/fl?u=d5fb140109&mv=2&cfidsgib-w-nab-ib=hG%2Ff3Q0sRFPS5OhDAudxHchIyjQvj%2BAR5nUVy70s2TkTqPYcTu8GV%2F1ZTMt0VEyYKCBSRR3EPc4CNEnybP0dgtX2O9bpoESdEUelc1VWiKMVP7UDXIlvl8sjq%2BZ%2FJ%2Fu4vokNHNl1FJgrXrHV50aaSmo4fqrQO3%2BoqcVj HTTP/1.1 Host: fhp.nab.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=8E8FE8F0DE397C7721A81E21D496F920~YAAQDyXRF7BR2zONAQAApVkDPhZo4oexxGIMQp5XBngOMNjtVu8Dz6NfpIZB506QQL/ViJUkKwGQ6akAUUHmD7jbM/osceBSNiJzOZ8aq96dVPwBIaBBBWz9HG9k7d9bCbvENl9bpTESNfgAHtnksPXZTsPbFsOAKSK+WBssEkM2g/4cI7oHWm6xMAfe+Bya3cA0jFZUIhfJ+1DcuBoEI9hjIYlFAoPDNois0HFTZt0IrgB0n7WhmWzAqNuC/iaJha8kG7uGswqVlEbVF5y0t60lG18+g+rZ1iW++Kl/SJen2YIyvt95Otlzl0gWT9B0j38lRtL0A9zSk2oYow==~4403269~3421233; at_check=true; AMCVS_4986658252DDA4900A490D4D%40AdobeOrg=1; s_ecid=MCMID%7C74531577018668379620070530052756004963; AMCV_4986658252DDA4900A490D4D%40AdobeOrg=1585540135%7CMCIDTS%7C19748%7CMCMID%7C74531577018668379620070530052756004963%7CMCAAMLH-1706747225%7C7%7CMCAAMB-1706747225%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1706149625s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19755%7CvVersion%7C4.4.0; mboxEdgeCluster=34; s_vnum=1706742000031%26vn%3D1; s_invisit=true; dl=1; sync_scv=sync; _cs_mk_aa=0.22848551443168175_1706142429071; s_cc=true; _gcl_au=1.1.31574219.1706142429; aam_tnt=profile.omnia%3Dc%3Aunk; aam_uuid=74249799952676478810044664576166395424; _fbp=fb.2.1706142431132.216380010; _abck=4532B2FB87B7771BD4B9C6087273DA12~0~YAAQDyXRF9FS2zONAQAA8X0DPgsWcz2S75Q5wCc8vi82tnHcQl4P39FKZK6s2ZZV+/BWjYKhNbSIw3HgD7xEGfbXNruONST7ednPvtISkdYw9KCMtwC3vhdEJbgV5zkj725X5SJQRwU0S0HdscrNQoHOe4KLfjY8LuNENo09DDuunBCa5kW4XEsRk+HaICB01yu7uERguiKAdoR1JOL1bGi/kSMGZMkebA747CKOveEEeKyDqx+3PM6uVSJpjR82pwktgMcXS8/0lZG9VKQKcqUHK/YbegOi6SkceZeA5XomQ43y4FDhmJf1E727aK+fGevxUOmrjfVcZOPO0wcCOwKqoHLXOq6p1ojxR1DWP90Tfp0neA2Mv39ixScB4lqdOaiMy/5qOrw3jjCtEBVR1k7BhoEo7/U6~-1~-1~-1; s_atx=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_cid=%5B%5B%27Typed%2FBookmarked%27%2C%271706142448369%27%5D%5D; s_kywd=%5B%5B%27n%2Fa%27%2C%271706142448370%27%5D%5D; cview3=10k7q90q6-60.lrsh5z2g.984; bmuid=1706142455167-A717CEC6-FE65-49FD-88F7-249C2CBF1A7B; cdContextId=2; cdSNum=1706142457693-sjn0000691-493c1ac2-7846-4c68-904b-fe83d191c6e4; utag_main=v_id:018d3e036c1f0020cd3edad10e9a0506f001706700918$_sn:1$_se:3$_ss:0$_st:1706144260382$ses_id:1706142428192%3Bexp-session$_pn:3%3Bexp-session$dc_visit:1$dc_event:3%3Bexp-session$dc_region:ap-southeast-2%3Bexp-session$dleUpToDate:true%3Bexp-session; gpv_pN=nab%3Aib-platform%3Alogin; s_nr=1706142461340-New; mbox=session#bb08d333948c42b3867c0c898b0f001c#1706144322\|PC#bb08d333948c42b3867c0c898b0f001c.34_0#1769387262
2024-01-25 00:28:14 UTC	222	IN	HTTP/1.1 200 OK cache-control: no-store content-type: application/json; charset=utf-8 date: Thu, 25 Jan 2024 00:28:13 GMT content-length: 45 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-01-25 00:28:14 UTC	45	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 75 6e 6b 6e 6f 77 6e 22 2c 22 65 72 72 6f 72 22 3a 6e 75 6c 6c 2c 22 64 61 74 61 22 3a 6e 75 6c 6c 7d Data Ascii: {"status":"unknown","error":null,"data":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50169	52.63.8.134	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:16 UTC	648	OUT	POST /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive Content-Length: 1001 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://ib.nab.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ib.nab.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-25 00:28:16 UTC	1001	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 35 2e 32 2e 31 33 32 36 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 31 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 32 2f 33 2f 34 22 2c 22 74 73 22 3a 31 37 30 36 31 34 32 34 38 36 39 39 30 2c 22 6d 67 22 3a 22 32 22 2c 22 61 75 22 3a 22 30 3a 2f 2f 35 2f 36 22 2c 22 61 74 22 3a 33 2c 22 70 70 22 3a 33 2c 22 6d 78 22 3a 7b 22 50 4c 43 22 3a 31 2c 22 46 42 54 22 3a 31 38 32 32 2c 22 44 44 54 22 3a 32 2c 22 44 50 54 22 3a 30 2c 22 50 4c 54 22 3a 31 38 32 34 2c 22 41 52 45 22 3a 30 7d 2c 22 6d 64 22 3a 22 47 45 54 22 2c 22 78 73 22 3a 32 30 30 2c 22 73 69 22 3a 32 36 7d 2c 7b 22 65 67 22 3a 22 33 22 2c 22 65 74 22 3a 32 2c 22 65 75 22 3a 22 30 3a 2f 2f 37 2f Data Ascii: {"vr":"4.5.2.1326","dt":"R","rg":"0","es":[{"eg":"1","et":2,"eu":"0://1/2/3/4","ts":1706142486990,"mg":"2","au":"0://5/6","at":3,"pp":3,"mx":{"PLC":1,"FBT":1822,"DDT":2,"DPT":0,"PLT":1824,"ARE":0},"md":"GET","xs":200,"si":26},{"eg":"3","et":2,"eu":"0://7/
2024-01-25 00:28:16 UTC	904	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:28:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:22\|g:a69b1d1f-7eab-4202-93cd-7dc96d9b57f3; Path=/; Expires=Thu, 25-Jan-2024 00:28:46 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:22\|g:a69b1d1f-7eab-4202-93cd-7dc96d9b57f3\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:46 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:46 GMT; Max-Age=30; Secure cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2024-01-25 00:28:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50170	3.24.11.8	443	5740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-25 00:28:17 UTC	556	OUT	GET /eumcollector/beacons/browser/v2/SY-AAB-AYH/adrum HTTP/1.1 Host: syd-col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:ede9c693-e3ad-4533-8766-f324a12c8b83\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; ADRUM_BT1=R:0\|i:139\|e:3\|d:0
2024-01-25 00:28:18 UTC	1466	IN	HTTP/1.1 200 OK Date: Thu, 25 Jan 2024 00:28:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:ede9c693-e3ad-4533-8766-f324a12c8b83\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:139\|e:3\|d:0; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:ddf717d5-2808-4e05-b439-4a7e43068ab2; Path=/; Expires=Thu, 25-Jan-2024 00:28:47 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:ddf717d5-2808-4e05-b439-4a7e43068ab2\|n:appdynamics_475884e8-78d7-4fa2-9105-5c49b0ee2df0; Path=/; Expires=Thu, 25-Jan-2024 00:28:47 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 25-Jan-2024 00:28:47 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:139; Path=/; Expires=Thu, 25-Jan-2024 00:28:47 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:22; Path=/; Expires=Thu, 25-Jan-2024 00:28:47 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:139\|e:22\|d:0; Path=/; Expires=Thu, 25-Jan-2024 00:28:47 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 1 server: envoy
2024-01-25 00:28:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	01:26:37
Start date:	25/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:26:41
Start date:	25/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:26:44
Start date:	25/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sub.nabprotect-livechat.com/
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:27:24
Start date:	25/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7136 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	01:27:34
Start date:	25/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6592 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	01:27:36
Start date:	25/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7380 --field-trial-handle=1988,i,12470564252639809735,12100273971558153961,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	01:28:04
Start date:	25/01/2024
Path:	C:\Users\user\Downloads\AnyDesk.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Downloads\AnyDesk.exe
Imagebase:	0x5c0000
File size:	5'525'576 bytes
MD5 hash:	75EECC3A8B215C465F541643E9C4F484
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	01:28:06
Start date:	25/01/2024
Path:	C:\Users\user\Downloads\AnyDesk.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\AnyDesk.exe" --local-service
Imagebase:	0x5c0000
File size:	5'525'576 bytes
MD5 hash:	75EECC3A8B215C465F541643E9C4F484
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	01:28:06
Start date:	25/01/2024
Path:	C:\Users\user\Downloads\AnyDesk.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\AnyDesk.exe" --local-control
Imagebase:	0x5c0000
File size:	5'525'576 bytes
MD5 hash:	75EECC3A8B215C465F541643E9C4F484
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://sub.nabprotect-livechat.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\AnyDesk\ad.trace

C:\Users\user\AppData\Roaming\AnyDesk\service.conf

C:\Users\user\AppData\Roaming\AnyDesk\system.conf

C:\Users\user\AppData\Roaming\AnyDesk\user.conf

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\75fdacd8330bac18.customDestinations-ms (copy)

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\IV3TIDWB1IAMI9MYJDS6.temp

C:\Users\user\Downloads\AnyDesk.exe (copy)

C:\Users\user\Downloads\Unconfirmed 55236.crdownload

C:\Users\user\Downloads\d9c3f5c6-b028-46a8-b2cf-054c63dabc6e.tmp

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Windows Analysis Report
http://sub.nabprotect-livechat.com/